This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa
File: 323830343a323763633a3a2f33332d3438203d3e203533313235.roa (raw, json)
Hash identifier: nnYVYIqUJqUsIeVNwvCVNy0/j180TFH8z3Nm/nM5N0Q=
Subject key identifier: 49:A5:7D:40:0C:40:1D:A8:CB:AF:B1:91:80:F5:2B:97:6F:B2:30:D6
Certificate issuer: /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial: 3D019A9E31C2805D52AF3E4771E59561B2D40009
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa
Signing time: Thu 12 Jun 2025 11:59:38 +0000
ROA not before: Thu 12 Jun 2025 11:54:38 +0000
ROA not after: Thu 11 Jun 2026 11:59:38 +0000
asID: 53125
IP address blocks: 2804:27cc::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:01:9a:9e:31:c2:80:5d:52:af:3e:47:71:e5:95:61:b2:d4:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
Validity
Not Before: Jun 12 11:54:38 2025 GMT
Not After : Jun 11 11:59:38 2026 GMT
Subject: CN=49A57D400C401DA8CBAFB19180F52B976FB230D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:93:40:54:37:c1:9f:df:31:99:ef:d3:2f:
2a:9e:e8:02:07:ec:e3:b8:d2:19:9c:03:5b:f3:e2:
92:00:c1:28:4c:57:70:ac:cc:cb:81:ae:f1:87:40:
34:a4:7d:d5:56:8b:9b:7a:cf:f0:4f:e4:8f:2f:70:
e2:c9:88:24:82:35:af:1e:41:cf:c3:34:d7:66:0f:
38:31:30:62:0a:85:be:9d:5f:16:3d:c2:3a:d3:6e:
08:bd:42:f6:80:6b:5f:9e:59:d6:7b:dc:05:2d:1e:
85:5b:16:15:94:7e:ad:e9:20:aa:46:17:ba:89:05:
19:e3:7c:80:19:15:9b:70:0f:4e:80:f2:13:fc:dd:
8a:32:7a:c4:dd:d0:dd:b1:7f:9e:94:48:4b:a6:76:
87:39:1e:f4:c0:df:7a:a4:e5:3c:e8:13:3e:f0:ff:
4e:65:4d:e7:40:19:fa:e5:cf:61:7a:03:ef:59:f7:
1d:83:41:d1:d5:05:da:85:6a:9c:ae:6d:0f:13:0f:
c4:c1:40:ab:21:51:0f:2d:d3:eb:4b:11:a2:b4:ea:
6d:bf:75:59:91:18:e4:7b:4e:db:e3:6d:71:e3:dd:
cc:dd:fa:d4:81:a3:45:15:e0:f0:4b:42:f0:03:fb:
77:2d:b9:9e:2b:36:6d:29:ec:7d:2e:9d:49:9f:15:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:7D:40:0C:40:1D:A8:CB:AF:B1:91:80:F5:2B:97:6F:B2:30:D6
X509v3 Authority Key Identifier:
keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/323830343a323763633a3a2f33332d3438203d3e203533313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27cc::/33
Signature Algorithm: sha256WithRSAEncryption
a1:bb:13:13:75:e4:12:cf:61:b8:09:29:0f:12:a5:25:bc:9e:
d2:2b:1f:0c:71:2a:e1:f5:f7:69:4b:48:39:7b:fe:20:1f:75:
36:6b:3d:aa:57:50:7c:39:68:4e:88:00:b7:56:67:8b:7a:4c:
b6:f7:a0:76:d0:3c:71:db:36:c2:94:b5:21:c8:d3:b8:70:f3:
86:35:c0:bc:6b:96:9d:fc:13:40:85:74:4f:50:2d:6e:4c:b4:
46:36:82:9b:83:98:67:d4:a4:91:c2:e5:68:b9:76:94:09:76:
67:3f:14:93:b6:25:7d:75:f0:27:fa:6b:74:03:cf:af:de:30:
f2:b2:21:27:0f:e6:a6:c5:24:b3:fc:6d:47:90:0f:14:60:f8:
e9:04:c4:03:8d:ad:0a:7b:31:a3:44:d5:92:f7:0a:fe:c8:30:
60:e1:75:10:b8:2e:73:e5:73:35:46:fe:77:95:3a:96:c1:e3:
ee:cc:f4:7d:63:b7:5a:db:fb:64:bc:86:54:9f:c6:22:b8:30:
75:f5:1b:e3:c1:9d:72:71:29:74:b9:0a:98:36:e7:b0:74:41:
ca:8b:dd:84:6b:f4:04:b0:36:1c:dd:dd:41:e7:ee:2b:c7:39:
29:b3:26:44:a3:51:c7:ed:66:81:bd:56:86:ee:74:c2:b8:f5:
82:50:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:16:35 2025 by rpki-client