This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/323830343a316561383a3a2f33322d3438203d3e20323634343432.roa
File: 323830343a316561383a3a2f33322d3438203d3e20323634343432.roa (raw, json)
Hash identifier: z2qms52zuyfQPu19OeufE5QSvcoZ8pGx3X0LBRap/24=
Subject key identifier: 8B:0B:77:0E:93:00:0A:42:F2:3F:05:18:88:09:94:D8:CD:98:10:91
Certificate issuer: /CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
Certificate serial: 4795509181C53507115A714FA7B52213849CB0CF
Authority key identifier: D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/323830343a316561383a3a2f33322d3438203d3e20323634343432.roa
Signing time: Mon 15 Dec 2025 17:58:40 +0000
ROA not before: Mon 15 Dec 2025 17:53:40 +0000
ROA not after: Mon 14 Dec 2026 17:58:40 +0000
asID: 264442
IP address blocks: 2804:1ea8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl
rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:95:50:91:81:c5:35:07:11:5a:71:4f:a7:b5:22:13:84:9c:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F
Validity
Not Before: Dec 15 17:53:40 2025 GMT
Not After : Dec 14 17:58:40 2026 GMT
Subject: CN=8B0B770E93000A42F23F0518880994D8CD981091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:90:5e:11:26:66:fd:9f:9f:19:3c:9d:35:
07:44:49:e8:43:25:c8:44:ea:cd:4d:fa:30:72:39:
9c:6a:80:99:02:c8:ac:d8:1b:38:e0:fa:9e:8b:34:
07:fb:05:fb:6c:a4:06:3d:27:aa:dc:11:8c:ae:95:
8d:df:60:b2:e6:7f:ac:bc:18:58:2a:1e:d7:45:63:
a5:cc:0b:cd:8f:bb:d9:18:01:6e:9e:30:74:6e:4e:
dd:f2:d4:3a:86:0b:25:4d:fc:3e:e2:3d:79:52:bc:
d8:38:50:e7:92:9f:7f:8f:13:22:65:9c:10:f7:7a:
7c:ac:15:f7:a5:da:bc:b3:2d:b2:d1:20:79:08:7f:
ac:0b:29:f4:83:31:f8:f2:65:98:59:d8:43:93:4b:
93:bd:fd:73:09:eb:c8:e7:7b:e2:aa:b0:1c:b4:e5:
4d:7c:1f:96:1e:a4:2c:dc:3e:85:e7:85:c5:43:3b:
33:9a:d6:4b:92:ad:02:fe:de:32:00:e3:5f:25:08:
fa:73:fc:ac:97:f2:47:73:47:a3:00:b9:bc:7c:1d:
99:13:3d:81:fc:f3:7f:15:46:46:38:8a:8a:09:e3:
c9:fb:1c:75:c0:cc:71:a2:6c:0d:42:46:34:f0:3b:
d0:9e:87:8a:9d:a0:50:7b:8d:2f:47:b8:4c:b7:d0:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:77:0E:93:00:0A:42:F2:3F:05:18:88:09:94:D8:CD:98:10:91
X509v3 Authority Key Identifier:
keyid:D8:1F:02:E2:B6:85:54:1F:B8:BD:2F:B5:B6:52:E0:C2:BF:DB:02:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81F02E2B685541FB8BD2FB5B652E0C2BFDB020F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/323830343a316561383a3a2f33322d3438203d3e20323634343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ea8::/32
Signature Algorithm: sha256WithRSAEncryption
84:f1:ad:2f:6d:c1:ba:72:42:4d:e6:62:22:6b:68:ad:60:68:
ac:15:41:b2:0a:17:c0:58:2a:c1:ea:90:81:e1:d2:ac:2c:1f:
b1:10:d3:3e:b9:95:9f:ad:9b:7c:a1:d9:ad:2c:89:30:96:20:
a2:92:99:f2:b6:a6:99:98:40:26:4c:b4:51:e3:dc:e7:f4:3d:
fe:7a:0b:75:30:07:a9:23:ae:05:ac:ce:d2:48:e8:af:96:b4:
b1:f1:7f:67:03:c0:93:e0:62:81:8f:ca:e3:54:a8:8e:e3:9a:
f4:1f:88:39:9a:74:d5:b9:7e:11:96:e7:4e:92:00:ad:33:b1:
0f:fe:d7:fa:34:1d:ca:18:f9:cc:11:f8:06:b7:1d:70:5e:a1:
d5:fc:25:19:04:a9:6c:5c:8e:fe:9a:03:11:6b:11:b2:b3:94:
15:ca:d1:45:60:d0:78:ac:17:7b:7a:0e:eb:a6:20:7f:89:64:
e8:e2:c1:04:50:f0:65:9e:db:fa:76:f2:f2:7f:b8:2e:51:96:
6b:69:2e:e7:bd:fa:79:ca:79:60:fb:1c:99:9c:25:81:f9:fa:
0b:67:03:a9:f6:12:f7:87:75:b4:a4:f9:59:ee:df:85:dc:25:
ab:60:5c:b0:d5:c7:95:64:0d:5b:f9:14:a1:d8:1d:b2:b8:ce:
16:3c:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:17:25 2025 by rpki-client