This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d313238203d3e20323634313737.roa
File: 323830343a323361633a3a2f33322d313238203d3e20323634313737.roa (raw, json)
Hash identifier: UUFxwz0tHYBSyB2ofYfZDb7ZeUE3wV6z8DYjPFS7TPo=
Subject key identifier: 0A:DD:9A:EC:41:47:01:8F:12:CE:81:04:7B:D8:17:C0:AE:CA:2B:79
Certificate issuer: /CN=C494F91B923201E47C2C51FA711C2E14EE4DBD75
Certificate serial: 6D882B380A0CF00E852B59D23EB60731C0C64136
Authority key identifier: C4:94:F9:1B:92:32:01:E4:7C:2C:51:FA:71:1C:2E:14:EE:4D:BD:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d313238203d3e20323634313737.roa
Signing time: Tue 09 Dec 2025 23:21:33 +0000
ROA not before: Tue 09 Dec 2025 23:16:33 +0000
ROA not after: Tue 08 Dec 2026 23:21:33 +0000
asID: 264177
IP address blocks: 2804:23ac::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.crl
rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 03:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:88:2b:38:0a:0c:f0:0e:85:2b:59:d2:3e:b6:07:31:c0:c6:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C494F91B923201E47C2C51FA711C2E14EE4DBD75
Validity
Not Before: Dec 9 23:16:33 2025 GMT
Not After : Dec 8 23:21:33 2026 GMT
Subject: CN=0ADD9AEC4147018F12CE81047BD817C0AECA2B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:81:ee:40:57:50:fb:46:bf:5d:3c:0f:17:
70:a0:bf:a9:b3:a7:11:92:3c:00:0e:2a:25:c9:32:
3c:9a:3d:64:d5:c1:4f:a2:45:4a:cc:73:a7:0c:f6:
3e:9f:91:49:c8:66:58:7d:15:20:55:f0:03:b8:fa:
b1:14:7d:85:be:2b:5e:b6:56:a4:98:a2:3c:d0:7b:
d0:64:f8:7c:64:08:74:5d:a5:c1:16:ba:03:d1:3a:
aa:c5:bd:6e:88:2c:3c:fc:4a:50:c9:49:d3:e4:19:
c4:92:99:84:53:d3:38:c8:1a:6f:be:75:34:4d:a5:
5c:d5:38:d7:e1:73:3e:47:4a:06:8b:49:72:4a:58:
0f:4f:28:05:39:49:5d:26:2f:d0:9c:2b:b2:1a:a5:
7b:59:c3:f4:e5:db:99:c3:3e:58:f4:dc:2f:c7:97:
34:53:27:b8:b3:b7:c8:c3:14:f7:4c:38:94:2c:16:
7a:d8:c4:4c:1e:2a:ae:75:08:4e:90:19:6e:22:33:
60:a6:ad:0d:93:6a:4c:bf:a2:fd:b5:e8:0c:06:d9:
fc:28:a2:1c:a6:cf:b7:98:77:da:13:04:e1:4a:50:
f2:f4:75:8f:4c:24:10:fb:98:6e:ac:f3:a3:f6:91:
be:93:16:54:33:a2:9f:ca:69:8b:a0:72:b4:72:a8:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:9A:EC:41:47:01:8F:12:CE:81:04:7B:D8:17:C0:AE:CA:2B:79
X509v3 Authority Key Identifier:
keyid:C4:94:F9:1B:92:32:01:E4:7C:2C:51:FA:71:1C:2E:14:EE:4D:BD:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/C494F91B923201E47C2C51FA711C2E14EE4DBD75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C494F91B923201E47C2C51FA711C2E14EE4DBD75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d313238203d3e20323634313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:23ac::/32
Signature Algorithm: sha256WithRSAEncryption
85:9f:d0:31:e6:19:0a:54:8d:b3:51:6f:14:95:a7:c5:68:eb:
43:e8:65:33:af:a0:14:b0:6a:9b:2c:88:2e:41:f1:b3:e2:2c:
06:c9:d9:f0:e2:10:84:ef:27:9e:e2:63:0c:74:79:c6:cb:8e:
ad:e3:bc:52:0f:a4:77:6d:31:3d:aa:11:78:c3:35:77:33:8c:
3b:e9:b9:07:2a:e7:f8:8e:b3:8f:b0:42:73:cc:f9:75:a5:9f:
35:f8:b7:5b:a2:27:fd:7a:bc:84:67:d0:e7:30:c1:41:df:66:
11:61:74:bd:7b:4d:dd:32:2c:72:6f:af:c8:5f:ee:72:34:ec:
95:0e:c1:e9:d1:b3:6c:45:30:d3:9f:66:9d:91:8b:ee:4c:ab:
cd:2f:ed:02:3c:24:96:13:0a:16:85:94:f7:5d:98:48:85:a1:
3d:72:40:05:1e:cc:c6:9d:74:b4:b3:da:b7:11:41:c8:91:6b:
a6:22:01:c4:a1:d3:1e:71:c3:25:62:05:77:5c:f6:96:7a:49:
e3:02:9c:3d:f8:87:55:fe:e1:a1:d6:db:35:5e:20:28:8c:99:
f4:47:53:52:80:36:32:16:a4:77:61:ad:04:f0:68:8a:ee:0f:
e2:5c:02:02:9b:15:bf:54:1f:e4:b0:7e:9e:17:eb:f7:52:9c:
df:9a:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:18:39 2025 by rpki-client