This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa
File: 323830343a353230383a3a2f33332d3333203d3e203238353934.roa (raw, json)
Hash identifier: awHxq4Mk5i27Pxo6B/PCN/ZZwBaM5uyiaUrGjPtqFzc=
Subject key identifier: 2B:D1:0A:34:1C:E1:92:8C:12:F2:B0:69:00:D0:D8:36:7C:52:B7:C5
Certificate issuer: /CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Certificate serial: 4F00F18B9DEE82CA80DD7899C88DCC612CBB5902
Authority key identifier: A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa
Signing time: Mon 08 Dec 2025 01:35:28 +0000
ROA not before: Mon 08 Dec 2025 01:30:28 +0000
ROA not after: Mon 07 Dec 2026 01:35:28 +0000
asID: 28594
IP address blocks: 2804:5208::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 07:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:00:f1:8b:9d:ee:82:ca:80:dd:78:99:c8:8d:cc:61:2c:bb:59:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D
Validity
Not Before: Dec 8 01:30:28 2025 GMT
Not After : Dec 7 01:35:28 2026 GMT
Subject: CN=2BD10A341CE1928C12F2B06900D0D8367C52B7C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:8b:07:76:ca:52:f1:4b:4a:48:2e:ae:61:
c1:5b:68:f0:05:a3:aa:7b:0c:a3:bf:0e:84:95:92:
20:09:b3:ee:20:42:7d:4a:23:95:8b:0f:9b:74:22:
cf:8a:ac:ac:2f:82:c8:9c:bf:5e:72:ed:6c:45:36:
fe:c4:16:de:dd:f6:2c:83:e3:6c:93:0e:0c:ce:ba:
a3:30:c0:f6:e6:80:39:95:6f:e8:cf:64:a9:fc:93:
c6:8a:c1:24:c0:78:d0:21:2c:57:90:d5:1f:1b:41:
56:ad:1c:47:a0:5f:f7:19:78:cb:a9:47:9a:c7:4c:
d9:c7:28:eb:e3:4c:13:91:f7:5f:21:8d:0f:04:53:
b1:39:1b:9c:14:1a:cb:00:63:eb:e8:c4:9a:2d:e9:
f3:5e:eb:ae:f6:2e:7c:4d:10:c9:5b:ff:88:e0:fa:
2b:25:57:4d:b8:e0:a0:25:81:9f:29:d5:a9:18:58:
50:7a:7a:00:ef:dd:c6:41:9d:ca:49:e0:e7:10:6c:
89:35:0a:90:96:db:77:f2:ad:81:2b:48:77:21:ac:
97:a4:18:ac:54:2b:71:d5:74:c6:42:ec:26:7a:92:
62:06:ae:13:80:cc:f8:a5:ec:fa:61:10:3f:40:f0:
86:87:c4:37:d6:00:7c:c3:07:fc:36:20:35:92:9d:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D1:0A:34:1C:E1:92:8C:12:F2:B0:69:00:D0:D8:36:7C:52:B7:C5
X509v3 Authority Key Identifier:
keyid:A2:9D:2A:6A:09:B8:2E:24:F6:EC:6B:DB:6F:EC:2E:EC:EB:55:CE:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A29D2A6A09B82E24F6EC6BDB6FEC2EECEB55CE5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/323830343a353230383a3a2f33332d3333203d3e203238353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5208::/33
Signature Algorithm: sha256WithRSAEncryption
74:89:58:ba:61:1c:c5:54:32:53:cb:2e:58:2f:5f:da:50:9e:
b0:f9:ae:a3:de:66:16:c5:57:e9:26:8e:1a:a5:49:2e:c2:6e:
42:9b:d8:32:86:06:fe:83:f5:18:81:3b:cc:ee:7d:d6:fe:32:
88:9f:e6:a9:77:07:05:00:8e:27:11:d0:ae:ba:2e:7d:33:d6:
b5:56:8f:bc:0b:ad:c7:45:25:05:79:b4:ab:2a:ce:7e:70:ec:
e1:5f:66:ab:a5:bd:35:27:29:ea:d3:ea:cd:c0:60:ab:b6:1e:
ee:80:a2:95:93:07:8b:63:f6:19:41:79:ec:42:ec:da:ac:bc:
5a:48:59:ab:2f:0e:80:5f:33:7d:59:22:d4:56:f0:a3:44:18:
a4:b2:b6:c4:a9:81:22:86:a3:35:63:25:36:b7:3c:71:a4:9f:
30:62:d7:21:dc:e1:ac:4f:df:96:d1:49:9a:a6:2a:ee:9f:61:
9b:11:c1:4f:0c:ab:7c:6e:34:eb:8e:87:d9:dc:bf:ca:d1:7a:
f6:9b:4b:f2:e6:ed:48:53:fb:8c:0c:61:6a:62:10:cc:0c:26:
53:e1:79:b8:22:41:c5:40:35:b4:1e:89:e1:ee:fe:7e:84:51:
68:80:b0:65:56:72:89:6d:4a:58:02:32:49:d2:db:08:26:ca:
7b:00:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:23:19 2025 by rpki-client