This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
File: 323830343a336461383a3a2f33322d313238203d3e20323636353435.roa (raw, json)
Hash identifier: e7z4XHQVCQoa8UmP3uzUD4UQFr1cllUd493JvNrsIEU=
Subject key identifier: 50:CD:84:59:E5:DB:0D:E1:22:70:E9:13:FF:4B:E7:28:85:DC:DA:B8
Certificate issuer: /CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
Certificate serial: 6098752CBEF8F0A725E14A1810BE706418DFF5ED
Authority key identifier: 24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
Signing time: Tue 23 Dec 2025 22:38:05 +0000
ROA not before: Tue 23 Dec 2025 22:33:05 +0000
ROA not after: Tue 22 Dec 2026 22:38:05 +0000
asID: 266545
IP address blocks: 2804:3da8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl
rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:98:75:2c:be:f8:f0:a7:25:e1:4a:18:10:be:70:64:18:df:f5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
Validity
Not Before: Dec 23 22:33:05 2025 GMT
Not After : Dec 22 22:38:05 2026 GMT
Subject: CN=50CD8459E5DB0DE12270E913FF4BE72885DCDAB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:01:4a:51:b5:a2:77:b3:55:f3:35:b9:7e:
24:da:47:6c:fd:d5:21:f8:f8:2e:a2:40:b8:4f:a6:
57:7f:e3:d7:ce:9c:15:8a:da:96:a2:9e:6b:1f:2a:
0e:f4:f2:4e:c1:97:94:c6:67:93:a0:dd:3f:2b:3b:
82:70:e5:ec:63:c6:07:1f:3a:be:42:09:59:4a:a2:
6d:a1:03:56:d8:8f:97:27:ad:4f:23:cc:97:62:52:
78:17:11:8e:03:3c:0c:95:89:45:6a:d2:54:fd:f3:
d1:b8:0d:41:14:6b:55:00:8f:54:a7:50:2e:3b:a9:
50:86:52:e0:52:f7:10:20:42:b9:52:d6:69:7e:be:
59:be:50:0b:d2:4b:2d:ae:d0:61:23:75:e6:cc:d7:
56:93:69:ae:77:58:9a:bc:c8:fd:6e:d1:06:1e:b4:
a9:51:5a:5b:08:24:13:2f:d2:c9:45:c1:08:a2:3e:
57:63:6b:be:96:3f:2f:5d:8e:b3:dd:19:08:79:8c:
9d:8c:15:13:dc:4f:f4:e7:9b:96:b4:ca:31:23:d2:
db:c3:68:01:0d:00:1f:b1:1d:42:77:e6:04:f1:d1:
9d:71:d0:82:79:12:e5:ad:c7:c6:15:ea:08:b9:63:
cf:73:4e:fc:ef:05:92:3b:f1:9b:69:d6:f9:58:3d:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CD:84:59:E5:DB:0D:E1:22:70:E9:13:FF:4B:E7:28:85:DC:DA:B8
X509v3 Authority Key Identifier:
keyid:24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3da8::/32
Signature Algorithm: sha256WithRSAEncryption
51:ea:4d:3f:06:8d:70:ee:a6:db:9d:b1:03:06:94:bc:22:fc:
a2:d9:40:90:b5:c0:16:95:28:98:53:c3:69:0c:c0:3e:96:7a:
86:9d:0a:f7:e9:1a:e5:fa:8f:60:48:84:32:e4:7d:2f:72:e4:
31:58:92:f0:93:5d:84:1f:14:6a:08:b7:cd:d4:41:60:71:7a:
9c:75:3c:8b:ac:65:56:05:f7:e2:e5:90:4e:52:0e:46:b8:57:
92:58:e5:71:61:ac:70:50:79:f8:fb:04:c5:85:02:80:b1:27:
13:94:70:96:f3:35:04:7b:10:76:83:6f:f2:97:9a:4a:50:9a:
3b:2d:bb:c0:70:8c:83:54:71:9d:58:7c:9b:3e:7f:17:31:95:
6e:86:19:11:50:b6:c4:f3:e0:0b:14:7f:ea:ca:00:f8:18:45:
0e:f4:1e:35:73:92:fd:3c:71:34:23:fd:74:78:ab:0d:06:37:
e4:93:be:63:86:0b:62:9f:81:01:09:22:a6:2c:1f:e7:2f:4a:
b3:6b:b7:60:d4:8c:a5:6f:c6:7e:9a:99:40:33:2e:b0:88:11:
a2:89:31:9f:53:d2:55:33:03:66:bd:9e:c0:67:8c:f3:f6:d5:
cc:9b:2c:0b:2c:20:57:6d:0f:9a:fd:80:47:6a:43:5e:51:d3:
9d:91:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:58 2025 by rpki-client