This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d313238203d3e20323634343533.roa
File: 323830343a316565383a3a2f33322d313238203d3e20323634343533.roa (raw, json)
Hash identifier: ZI3HEg3L5rkuRc2cJ2QH0th9MdtuBMaKGJP8baxslgQ=
Subject key identifier: 67:72:70:70:FD:48:CD:1A:CF:0A:26:EB:6B:1D:80:15:24:8A:1C:02
Certificate issuer: /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial: 68015A2304103629FFF18A1767B35A2A4801A5AD
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d313238203d3e20323634343533.roa
Signing time: Mon 15 Dec 2025 20:45:27 +0000
ROA not before: Mon 15 Dec 2025 20:40:27 +0000
ROA not after: Mon 14 Dec 2026 20:45:27 +0000
asID: 264453
IP address blocks: 2804:1ee8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl
rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 17:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:01:5a:23:04:10:36:29:ff:f1:8a:17:67:b3:5a:2a:48:01:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Validity
Not Before: Dec 15 20:40:27 2025 GMT
Not After : Dec 14 20:45:27 2026 GMT
Subject: CN=67727070FD48CD1ACF0A26EB6B1D8015248A1C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:55:69:6b:ea:74:f3:7b:d2:3a:68:50:91:
b2:cf:75:95:28:36:6e:d0:9d:df:04:c2:be:83:17:
fd:19:0a:b2:70:62:df:d8:87:d1:df:59:3f:2e:d7:
a2:2c:74:90:99:17:85:5a:df:3f:30:72:7d:07:f1:
67:a1:88:29:26:3b:9b:b0:02:4e:0a:43:bc:bf:92:
d4:62:b1:3c:37:62:40:e0:e0:57:92:1e:2b:02:08:
23:0a:3b:76:91:a0:a0:fa:b8:b8:08:e8:86:81:cf:
51:98:1f:d4:82:04:be:95:e8:7d:62:13:34:6e:80:
a3:02:ae:47:d8:77:8e:6d:93:0a:6e:b4:df:2f:d6:
cc:4b:68:35:74:e7:f1:04:c4:22:6c:ec:d5:fe:a6:
6c:4e:19:43:8c:02:ef:4c:cc:b6:b9:13:69:c0:6d:
7a:9e:a3:df:5c:96:76:f3:89:a0:28:83:dd:3d:e4:
69:33:c2:5d:4f:6d:9b:ca:42:5e:72:95:51:8a:f1:
e4:9c:d7:dd:96:aa:b4:3f:e0:02:89:d7:dd:07:2d:
8c:18:0d:da:7f:8a:77:17:00:04:1b:8b:e3:7d:b6:
d0:5d:73:67:e2:1a:2b:bd:ad:38:66:07:d9:91:3f:
dd:37:61:a0:7c:24:c1:1b:b3:28:b6:44:54:92:0c:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:70:70:FD:48:CD:1A:CF:0A:26:EB:6B:1D:80:15:24:8A:1C:02
X509v3 Authority Key Identifier:
keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/323830343a316565383a3a2f33322d313238203d3e20323634343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ee8::/32
Signature Algorithm: sha256WithRSAEncryption
a3:bd:e5:e9:7c:25:90:72:83:df:a0:c1:9a:48:dc:17:07:08:
b1:88:b0:96:92:02:da:98:09:2a:65:10:03:af:f3:5e:af:24:
9a:ec:5c:6e:8f:19:c7:5f:3b:e2:67:eb:dd:de:8e:28:82:c3:
b2:35:5c:ff:51:a8:c1:bd:0b:16:47:d5:8a:f2:7d:13:2f:63:
e6:83:82:2a:8f:61:84:d2:cb:b2:28:9e:3f:5f:e8:72:e8:5e:
93:29:25:19:c1:08:95:de:e5:dd:30:f3:7c:d7:0f:6d:fc:05:
36:06:88:8d:ce:42:a5:46:8e:0e:13:c8:a8:f3:8e:1a:ca:5a:
42:aa:09:dd:ce:ac:fa:ce:53:98:56:10:20:0d:d9:b0:af:3e:
c7:94:c5:f0:b1:6f:b4:3f:4b:70:5a:6d:33:ff:97:ea:22:ad:
d6:3e:0c:f8:10:ed:f1:41:e1:41:f3:9d:ae:fd:98:3b:2c:74:
6e:25:92:2d:56:7d:72:64:f0:b2:2f:33:43:8e:d6:bf:30:86:
fd:50:48:46:6f:94:68:dc:8d:dd:f2:4f:ef:0e:bc:43:d2:a4:
81:99:0b:83:df:ac:3f:0f:1e:8a:24:ff:1d:ff:ee:7b:fe:c1:
e9:16:3c:10:2c:49:d2:66:40:7b:5b:9e:f0:43:20:8b:d6:66:
5e:45:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:37:15 2025 by rpki-client