This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa
File: 323830343a373537633a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier: uYrbgYiMlRTo2ADQ0IQWOxubwjM7zswhLuxj3FYj380=
Subject key identifier: EF:5C:C6:32:F4:FB:7F:9E:C5:31:EA:BE:3A:74:A1:7D:A5:F6:39:E7
Certificate issuer: /CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
Certificate serial: 1097FA5F6F6DB2F2495EA06E6BFEF6C925DFAEC1
Authority key identifier: 1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa
Signing time: Mon 15 Dec 2025 14:17:11 +0000
ROA not before: Mon 15 Dec 2025 14:12:11 +0000
ROA not after: Mon 14 Dec 2026 14:17:11 +0000
asID: 271050
IP address blocks: 2804:757c::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl
rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 04:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:97:fa:5f:6f:6d:b2:f2:49:5e:a0:6e:6b:fe:f6:c9:25:df:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4
Validity
Not Before: Dec 15 14:12:11 2025 GMT
Not After : Dec 14 14:17:11 2026 GMT
Subject: CN=EF5CC632F4FB7F9EC531EABE3A74A17DA5F639E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:a5:77:ab:e2:3f:38:2e:74:43:1b:76:9c:
19:bc:b4:e8:61:c4:21:07:14:c7:a7:0e:69:a8:af:
6b:b0:23:f6:23:72:0a:65:8c:4c:32:d2:21:a2:13:
62:2e:8e:1f:e6:69:80:e8:fb:69:13:85:b3:a9:00:
22:17:e4:ef:13:85:fe:1f:f0:c1:16:5d:a9:ef:ed:
d7:7e:bc:52:17:1d:b7:83:bf:73:bf:3f:df:c8:b8:
93:b9:36:6a:3e:e7:e9:2d:7f:2d:85:18:87:ad:43:
5d:8a:23:af:fd:08:1b:eb:ca:1f:30:56:19:36:02:
02:5a:dd:ac:8b:3c:a6:ed:c2:b3:e5:6b:6e:01:62:
c8:52:e8:3c:09:42:99:4f:18:84:c8:c6:2f:1b:40:
0c:5a:82:15:c8:f3:8e:f7:ac:c4:a0:b2:2d:fb:9c:
61:9e:85:aa:35:6f:fd:ae:07:9a:d8:19:a7:5d:3a:
bb:c7:69:b6:8b:90:89:c2:33:75:2e:df:ee:2a:0d:
cf:88:a4:35:23:77:ae:84:a8:c2:cc:6d:f8:89:ba:
c8:b1:20:33:63:75:e7:95:d4:a9:a8:f5:ad:cf:b2:
1e:4e:a2:ce:62:2f:c9:82:b5:29:29:0b:e6:e0:eb:
a1:a8:aa:a2:37:f2:3a:db:89:1d:28:d6:e6:f3:52:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:C6:32:F4:FB:7F:9E:C5:31:EA:BE:3A:74:A1:7D:A5:F6:39:E7
X509v3 Authority Key Identifier:
keyid:1A:50:37:E7:59:D0:BF:A5:94:AD:13:E4:DD:55:F8:C4:B5:BF:3A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5037E759D0BFA594AD13E4DD55F8C4B5BF3AD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a3a2f33342d3334203d3e20323731303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:757c::/34
Signature Algorithm: sha256WithRSAEncryption
1c:f8:19:b0:dd:a6:54:4c:f6:b8:7d:89:9a:5f:97:29:73:8c:
83:20:b4:85:32:b4:b3:94:a4:a6:90:56:a3:ac:63:5e:35:95:
ff:43:83:8e:65:a9:5b:b9:0e:37:b5:08:66:46:e9:71:92:9e:
a4:64:1d:7e:65:04:06:90:5c:7d:21:9f:d6:ff:99:98:26:96:
d1:98:7a:ed:fe:d7:96:58:79:c4:91:88:27:6d:89:38:b8:5b:
93:85:46:f6:5e:c4:45:d1:02:69:3a:15:c2:3c:cf:e6:6e:61:
c9:8b:31:97:45:c0:b1:ab:90:98:63:28:38:20:ab:e1:21:49:
87:73:05:55:fa:89:20:1f:34:15:cb:9f:24:ff:dc:c0:47:4c:
f7:8f:6a:3d:d7:48:35:e0:5b:35:c9:db:71:00:7e:39:b6:e0:
6c:b6:46:58:c1:8b:49:51:34:f4:c3:66:a6:10:6c:e6:72:1e:
0b:3e:e6:dc:95:81:42:73:4b:71:5a:00:95:d9:94:2b:01:12:
2b:d7:ea:e5:28:66:6e:c8:2b:d2:55:91:91:4a:fb:61:12:5c:
1b:a0:78:af:a1:df:5e:49:ac:6a:23:aa:07:66:36:54:7f:26:
c9:5e:c0:15:8b:7d:f5:f4:d9:47:44:82:50:db:ed:d2:71:fa:
d4:66:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 08:03:24 2025 by rpki-client