This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
File: 323830343a353230383a3a2f33322d3332203d3e203238353934.roa (raw, json)
Hash identifier: l3gv1KhxDZQbpO5uyInKPeyNIwa3atZutdpZyselL3Y=
Subject key identifier: DE:A0:F5:0B:1C:33:81:D3:35:C7:9A:A8:49:5C:E6:D4:DE:CA:B5:8A
Certificate issuer: /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial: 0C00A2AD95F75A984C458DCB92C8280FB7A20848
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
Signing time: Mon 08 Dec 2025 01:35:27 +0000
ROA not before: Mon 08 Dec 2025 01:30:27 +0000
ROA not after: Mon 07 Dec 2026 01:35:27 +0000
asID: 28594
IP address blocks: 2804:5208::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:00:a2:ad:95:f7:5a:98:4c:45:8d:cb:92:c8:28:0f:b7:a2:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Validity
Not Before: Dec 8 01:30:27 2025 GMT
Not After : Dec 7 01:35:27 2026 GMT
Subject: CN=DEA0F50B1C3381D335C79AA8495CE6D4DECAB58A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:c5:e7:10:79:98:83:3e:37:49:16:16:31:
2a:15:22:7e:7a:95:51:5d:6e:76:0f:58:51:74:1b:
86:c0:6a:b7:44:52:2a:57:0c:86:9a:eb:bb:78:bc:
2a:09:71:fd:03:11:df:e1:f5:f8:e4:33:58:96:ce:
d0:d4:d6:62:c1:76:f7:ff:50:ff:68:13:de:18:d5:
8a:42:e6:2f:8b:c7:12:96:69:2b:e2:c9:f0:a5:e6:
22:e2:73:eb:26:89:92:30:0c:d1:6c:dd:39:d1:9c:
16:0d:a1:0f:68:05:9f:28:f0:33:88:c3:79:f4:e6:
a8:a4:7f:fc:27:e0:03:6d:11:bd:fe:d3:9e:d7:29:
33:5e:4f:5f:d9:c4:5b:e6:2a:37:b5:bc:21:51:be:
25:0f:af:a1:bf:2f:ba:11:90:b6:b2:ed:fa:ac:e3:
f8:c8:1f:04:59:fd:fb:bc:78:41:7b:42:97:26:6d:
ad:a9:bc:2c:69:a6:aa:ab:16:e0:ae:65:f2:28:35:
05:1d:41:70:a4:12:b5:d0:61:45:49:7d:0e:5f:55:
94:36:fd:97:82:a1:56:dd:b8:e2:a3:06:64:60:e1:
23:1a:3b:ad:7e:68:ec:53:f6:86:8f:3f:92:65:72:
c2:f3:79:1f:5c:dc:9d:d3:cd:cc:d2:55:9c:bb:45:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:F5:0B:1C:33:81:D3:35:C7:9A:A8:49:5C:E6:D4:DE:CA:B5:8A
X509v3 Authority Key Identifier:
keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5208::/32
Signature Algorithm: sha256WithRSAEncryption
1b:13:bf:cd:0b:58:9a:e5:15:64:25:49:9d:db:74:8c:2e:33:
9b:24:0f:a5:f2:70:92:db:8c:75:0f:08:a9:da:e7:23:5d:0c:
85:84:14:e9:fc:a5:41:9d:9e:54:bc:58:a4:d9:2d:65:6f:2f:
b8:06:73:6e:ea:0c:ee:a4:dd:63:6f:1b:6a:38:3d:ae:5f:45:
40:0e:8e:2a:b4:05:14:0d:04:a6:6b:94:7c:bf:97:55:85:7b:
de:06:2c:7c:cf:9b:73:fd:c2:8e:1c:e4:de:12:a9:19:22:8d:
1f:78:03:52:c9:9e:ca:df:68:91:9d:47:60:60:e8:fa:70:3f:
07:26:98:1d:7f:bd:00:19:0a:61:bd:30:b9:b6:e5:85:6b:60:
1e:2d:68:8c:50:1c:a3:30:ff:11:65:64:11:93:c4:f9:a0:35:
3f:1f:22:7a:1d:7a:f3:1e:da:29:cd:ef:65:fe:aa:34:47:4e:
9f:c0:13:c6:b0:f8:b6:36:10:da:cb:e9:9e:c6:f7:8d:d2:11:
40:3f:57:6c:18:90:7b:f8:94:0b:59:79:6a:20:df:cd:90:7d:
ee:f8:66:22:2a:3f:8d:86:a5:4a:2f:ca:e4:51:32:bc:19:38:
64:34:b9:f9:43:e7:3f:f7:75:c3:fc:90:ff:ae:66:2c:1d:04:
ad:37:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:19 2025 by rpki-client