This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3438203d3e20323634323839.roa
File: 323830343a323539343a3a2f33322d3438203d3e20323634323839.roa (raw, json)
Hash identifier: UrpXTItirkhNRomsYbFjlyuLSaCugtMnQs2dqi72oBk=
Subject key identifier: F6:20:09:69:4D:3C:70:67:CC:11:30:53:8F:6A:82:59:A6:4B:1F:C7
Certificate issuer: /CN=E7329E63E0214569421168E4F9E51364D7C6D498
Certificate serial: 60CF75AD8A074278FA7BB1FAEB1B7A66C3840594
Authority key identifier: E7:32:9E:63:E0:21:45:69:42:11:68:E4:F9:E5:13:64:D7:C6:D4:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7329E63E0214569421168E4F9E51364D7C6D498.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3438203d3e20323634323839.roa
Signing time: Wed 24 Dec 2025 15:06:03 +0000
ROA not before: Wed 24 Dec 2025 15:01:03 +0000
ROA not after: Wed 23 Dec 2026 15:06:03 +0000
asID: 264289
IP address blocks: 2804:2594::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/E7329E63E0214569421168E4F9E51364D7C6D498.crl
rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/E7329E63E0214569421168E4F9E51364D7C6D498.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7329E63E0214569421168E4F9E51364D7C6D498.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 22:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cf:75:ad:8a:07:42:78:fa:7b:b1:fa:eb:1b:7a:66:c3:84:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7329E63E0214569421168E4F9E51364D7C6D498
Validity
Not Before: Dec 24 15:01:03 2025 GMT
Not After : Dec 23 15:06:03 2026 GMT
Subject: CN=F62009694D3C7067CC1130538F6A8259A64B1FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:fa:4f:c1:0a:3e:48:b4:3b:a9:3e:2a:3e:
a9:da:03:87:35:9c:dc:43:4d:b9:59:ec:13:5f:94:
f1:e9:30:e0:4a:da:d1:1f:33:39:0f:e4:d3:74:9f:
c1:f0:04:8b:3d:15:e3:35:be:fc:45:8a:f0:ce:e5:
c6:88:5c:67:bd:3b:2e:f0:90:74:b5:84:40:c5:64:
9b:c3:86:56:90:51:41:a8:8f:39:5a:c9:1a:67:16:
61:48:85:24:21:13:f2:14:55:5b:67:70:52:2f:9a:
49:20:6e:5f:d4:e8:13:10:81:2f:02:47:73:4b:07:
c7:37:f9:6d:f8:aa:02:4d:4d:74:82:b3:c3:4f:9d:
17:61:91:f4:ea:0a:db:c4:f6:ef:25:d4:61:d6:9e:
61:f4:94:21:af:68:23:e7:61:c6:fa:a8:6b:91:ac:
6e:a1:5b:ba:0c:f6:6a:4a:3b:4b:bc:23:a2:1a:ba:
2e:e1:4a:28:4c:b7:cb:19:f9:cd:2e:45:f5:f6:bb:
55:37:14:16:ad:a0:82:bd:a1:b9:31:0a:e6:31:a0:
c7:70:f0:5f:24:85:d8:af:57:57:ba:92:3c:75:6b:
7f:50:10:b5:ba:fd:e0:13:76:16:dd:08:dc:44:e5:
1a:10:7b:3c:2a:df:ce:0b:6a:68:b0:92:77:f2:db:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:09:69:4D:3C:70:67:CC:11:30:53:8F:6A:82:59:A6:4B:1F:C7
X509v3 Authority Key Identifier:
keyid:E7:32:9E:63:E0:21:45:69:42:11:68:E4:F9:E5:13:64:D7:C6:D4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/E7329E63E0214569421168E4F9E51364D7C6D498.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7329E63E0214569421168E4F9E51364D7C6D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3438203d3e20323634323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2594::/32
Signature Algorithm: sha256WithRSAEncryption
d4:19:65:0b:fd:92:6b:c5:3c:ba:41:c3:9c:f7:a2:3a:dc:f5:
bc:3e:ed:99:f0:ca:c1:84:eb:51:70:34:7e:26:65:d9:61:c5:
2c:fc:4c:31:60:52:22:cd:50:4f:1c:01:b8:0c:e0:81:ab:37:
06:81:f4:33:b8:de:28:5b:7b:83:96:fa:71:55:49:9f:ac:4a:
46:ea:92:f7:33:ab:37:46:ce:e0:e3:5c:69:90:76:08:63:c4:
79:43:11:e4:d4:ca:32:9e:1b:8d:d9:01:7c:99:7e:c8:16:09:
46:38:5e:f1:66:7b:85:0c:d8:3f:c3:70:b3:98:d0:e3:15:c7:
33:a9:b2:da:9e:02:28:17:4c:8c:7f:87:c1:fe:fc:c7:2a:83:
78:c1:4b:84:02:3b:cf:7e:8a:e7:d5:ed:d7:1b:2a:a8:6d:89:
22:7b:e0:d9:2f:89:10:a6:84:1d:50:b1:34:17:14:1e:e1:61:
49:48:be:0a:d5:41:87:07:05:5c:8c:16:0f:9f:71:29:f3:73:
6a:e2:db:9d:6a:e4:f9:cc:ca:dd:aa:a8:b7:a4:a2:7b:54:1a:
98:cf:aa:15:31:bb:8e:42:db:c9:c5:3b:0a:04:66:0e:3a:bb:
a2:8e:85:a3:85:ef:6f:8e:8e:fd:ab:0b:3b:1d:6a:d5:c3:15:
9e:b4:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:28:22 2026 by rpki-client