This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d3332203d3e20323639323833.roa
File: 323830343a363233383a3a2f33322d3332203d3e20323639323833.roa (raw, json)
Hash identifier: gPXnvx8boxcSWz+4w0YMFtxUS/kyXpVfT9E7aAAgP54=
Subject key identifier: 2F:4F:95:56:B0:23:3A:47:3C:FF:87:1E:51:91:F1:DD:12:B0:A4:01
Certificate issuer: /CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Certificate serial: 0381A8521E6DD54B22C88F2F1D0990E21F6500C7
Authority key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d3332203d3e20323639323833.roa
Signing time: Thu 18 Dec 2025 13:37:01 +0000
ROA not before: Thu 18 Dec 2025 13:32:01 +0000
ROA not after: Thu 17 Dec 2026 13:37:01 +0000
asID: 269283
IP address blocks: 2804:6238::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 15:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:81:a8:52:1e:6d:d5:4b:22:c8:8f:2f:1d:09:90:e2:1f:65:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Validity
Not Before: Dec 18 13:32:01 2025 GMT
Not After : Dec 17 13:37:01 2026 GMT
Subject: CN=2F4F9556B0233A473CFF871E5191F1DD12B0A401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:bf:c3:e4:ec:13:47:8f:66:b5:9d:62:fb:
be:3c:0f:b5:78:f5:db:da:34:43:99:8f:ae:1f:7a:
cf:19:a2:98:a6:49:05:45:c3:9e:95:3f:c0:6b:00:
5c:df:c4:49:cf:b1:7c:dc:45:21:08:a3:23:2a:31:
f6:49:b3:74:b3:68:7b:39:ee:7d:89:4a:68:17:84:
a5:18:9b:31:49:69:7e:1c:4b:15:d9:10:2c:f0:29:
1f:07:e7:04:72:07:c2:29:b2:c7:3a:cd:8b:46:2c:
89:c5:13:db:92:ee:ab:90:d2:98:54:9e:cb:c0:1b:
a4:08:1c:44:9b:69:05:84:c8:e8:5d:09:0d:10:08:
d2:e6:13:3e:ed:8f:fb:6c:bd:f8:2d:5a:70:cf:15:
d5:6b:4f:56:48:65:86:41:8c:f7:7c:09:28:e2:59:
d1:0e:bc:d1:01:3a:38:87:00:96:df:9b:23:aa:0d:
a0:38:a9:1e:64:e1:e1:43:a9:81:b4:a0:8f:ed:21:
e2:fc:13:a3:45:32:1f:3f:d6:a3:e6:e2:69:7d:8f:
e7:00:ce:55:70:91:d1:4c:63:52:95:fc:c5:4f:f3:
f7:6f:1d:5a:5c:4f:b1:27:bb:e0:28:3d:a4:a7:37:
cd:62:4b:81:ef:fe:a9:48:a2:36:5e:52:66:c5:10:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:95:56:B0:23:3A:47:3C:FF:87:1E:51:91:F1:DD:12:B0:A4:01
X509v3 Authority Key Identifier:
keyid:DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33322d3332203d3e20323639323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6238::/32
Signature Algorithm: sha256WithRSAEncryption
ba:1b:13:60:6e:cd:90:79:9e:60:10:c9:41:97:ff:bd:c5:67:
4a:24:e8:d8:5c:e1:b7:ab:d2:89:a3:85:83:1f:1f:f2:54:91:
ec:00:82:ac:5f:08:62:f7:ce:57:74:ca:bc:b1:fb:76:78:ba:
a6:7b:34:90:9e:97:60:12:03:6d:1e:ef:93:b8:5f:2e:04:d7:
dd:4a:3c:6c:89:fc:dd:c3:ec:6a:cb:ee:b7:5a:91:6e:0b:17:
30:a1:22:c8:49:58:7d:9b:b5:78:98:2a:e6:f8:50:e5:ec:dd:
87:9d:77:43:79:e4:b5:7a:7b:14:8c:f7:f0:af:69:ca:61:13:
70:9b:66:de:6e:75:f9:d9:c5:c5:5a:99:77:57:52:98:5d:0b:
0b:5c:c0:c0:e8:91:00:b1:ba:87:c3:1f:72:9c:7a:34:5c:20:
13:6b:9a:d2:ab:cc:f1:36:9a:c8:7c:db:5a:9a:bc:26:25:3b:
9c:2f:24:1d:b1:12:4a:0e:d3:78:dc:7d:02:fe:1e:67:c4:79:
59:ae:08:6f:57:4f:c9:23:a8:b5:47:35:4b:dd:88:8c:d9:66:
23:f6:7a:a3:90:cf:a5:b1:5e:b3:95:8b:f2:5a:1f:a0:0c:00:
ce:59:86:93:8e:96:d7:c3:0b:81:57:b1:14:d7:90:f0:3e:a0:
59:d4:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:58:36 2025 by rpki-client