This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33332d3333203d3e20323639323833.roa
File: 323830343a363233383a3a2f33332d3333203d3e20323639323833.roa (raw, json)
Hash identifier: 1Ie7PsaX9f9d+JUR179BfyfvtOOnBjKpol+9lfpHQ8E=
Subject key identifier: CD:3A:D3:67:DC:B5:B7:2E:8B:F0:11:28:70:C5:61:16:E0:3A:F1:C1
Certificate issuer: /CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Certificate serial: 7DB28086EB9BBF1944C7125558FCE8FAE56671F8
Authority key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33332d3333203d3e20323639323833.roa
Signing time: Mon 15 Dec 2025 23:22:16 +0000
ROA not before: Mon 15 Dec 2025 23:17:16 +0000
ROA not after: Mon 14 Dec 2026 23:22:16 +0000
asID: 269283
IP address blocks: 2804:6238::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 15:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b2:80:86:eb:9b:bf:19:44:c7:12:55:58:fc:e8:fa:e5:66:71:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Validity
Not Before: Dec 15 23:17:16 2025 GMT
Not After : Dec 14 23:22:16 2026 GMT
Subject: CN=CD3AD367DCB5B72E8BF0112870C56116E03AF1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:69:5a:f9:6c:55:3e:cb:fc:9d:ad:e6:47:
01:59:da:e3:a2:31:8c:0d:6c:be:ce:6f:e5:8b:03:
79:a6:f6:17:02:36:be:0e:5a:c5:db:68:b2:66:d4:
83:d6:44:c7:a5:93:89:04:2c:1c:62:b4:d2:be:a3:
04:e3:3d:b7:a4:9b:31:b3:2f:29:c5:67:1e:18:09:
6e:31:82:ea:82:4d:12:05:ef:a4:55:23:3c:25:0f:
e2:40:5f:92:e4:cd:7b:ab:35:96:da:4f:30:c7:ad:
db:e7:16:a4:68:3d:21:00:9c:8f:5c:01:c3:d9:b3:
24:c7:52:95:6f:30:3f:82:83:24:66:2d:ad:e9:cc:
f1:5b:bd:a2:e8:62:1b:59:d5:96:a4:71:36:7d:31:
dc:29:ef:c7:f8:42:05:0e:94:fd:8f:82:a6:d1:8f:
5d:c8:81:e7:08:a4:5d:86:76:49:13:e2:9f:52:c3:
12:72:38:10:31:2b:3a:11:b5:4e:b9:a7:7d:82:a3:
f5:ac:99:97:41:33:24:36:db:90:27:af:3e:77:b2:
f1:74:7f:2a:b6:a9:b3:85:ef:af:ce:f9:19:6c:20:
c8:c1:08:07:d5:84:5d:91:6c:93:b7:af:28:8e:95:
e0:20:da:09:a7:71:1b:29:43:4e:df:e9:bf:8f:5e:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:D3:67:DC:B5:B7:2E:8B:F0:11:28:70:C5:61:16:E0:3A:F1:C1
X509v3 Authority Key Identifier:
keyid:DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/323830343a363233383a3a2f33332d3333203d3e20323639323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6238::/33
Signature Algorithm: sha256WithRSAEncryption
6e:a6:2d:b3:38:ef:e6:0e:95:f3:5e:0d:7f:d2:df:79:43:a4:
b0:10:a9:51:22:4a:57:73:26:41:f3:7c:d3:eb:74:2b:34:ba:
00:c0:88:53:3c:7c:c1:d0:5b:a8:60:4c:ea:b0:4b:57:d7:0e:
3c:d2:7f:a0:a6:5c:fe:6f:fc:c7:28:75:9a:c9:fe:48:0e:4a:
24:34:07:81:79:34:15:b1:7b:a3:68:b8:8c:93:a9:1f:c6:b4:
0b:17:e5:98:a5:13:b6:5c:47:b5:94:fc:78:5b:1d:f4:1a:3c:
19:6d:a0:da:21:bc:4d:f7:9c:5c:03:79:f9:36:a8:d6:af:cc:
f0:d5:ff:fc:b9:8e:93:63:67:ac:f8:14:59:a7:17:cb:46:c1:
d6:00:e8:1a:93:f0:bb:42:bf:f7:22:2a:11:ec:d6:5c:67:b6:
29:cb:26:d7:60:2b:df:bf:0c:d1:9c:06:e1:c9:f1:91:21:6f:
73:79:64:10:c4:b5:08:ab:b8:ee:20:d9:95:94:8c:c6:99:9d:
28:4a:56:66:8d:a1:e3:3d:f2:c2:9a:15:8f:41:6e:33:5d:43:
51:9e:e5:d6:bd:65:1e:d0:13:37:04:ec:63:21:4c:b5:45:25:
53:ba:f6:05:6f:d5:3f:fc:a0:24:09:d8:b0:e7:91:6d:27:7e:
74:75:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:04:41 2025 by rpki-client