This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa
File: 323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier: KtqiO5hD0XKZJeTohb/6okdbRPkCW1lk9PH/C6iyrps=
Subject key identifier: 4B:BC:67:7E:97:94:6A:87:2F:AF:E0:57:78:47:6F:BB:C3:74:D6:77
Certificate issuer: /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial: 0F899DA171D62D8A98F3626D95A228D1EBDDA63E
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa
Signing time: Mon 15 Dec 2025 19:10:00 +0000
ROA not before: Mon 15 Dec 2025 19:05:00 +0000
ROA not after: Mon 14 Dec 2026 19:10:00 +0000
asID: 268144
IP address blocks: 2804:58b0:12c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 03:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:89:9d:a1:71:d6:2d:8a:98:f3:62:6d:95:a2:28:d1:eb:dd:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Validity
Not Before: Dec 15 19:05:00 2025 GMT
Not After : Dec 14 19:10:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:b7:7c:e1:a8:9c:be:e6:5c:87:8e:0b:59:
96:a9:e0:5e:40:10:38:68:20:63:1d:fb:fc:61:cb:
62:f9:ed:44:21:8b:c0:2c:3b:dc:78:db:00:d6:2d:
22:5c:23:29:99:c5:b6:0f:fe:cb:67:ff:bb:92:7d:
e9:94:5a:ea:9e:1a:0e:0a:37:c9:22:5d:e9:db:4c:
dc:87:3c:d4:95:d6:be:31:e6:89:a7:82:8a:9d:f8:
a0:2a:a0:02:b3:ca:54:43:3d:5e:64:ba:64:9f:4f:
85:d1:f7:db:34:24:2d:6c:3c:2e:6a:4b:a6:b1:3f:
ac:c0:bf:47:b4:35:96:09:1c:31:fa:16:80:09:3f:
83:b3:ee:2e:1c:2c:ed:9f:21:1c:73:1b:94:84:4c:
c1:a3:72:6a:6c:91:4e:92:e2:fc:73:64:fa:b3:69:
28:32:a4:03:52:9e:7c:2c:43:e5:20:32:20:42:44:
0b:30:9c:73:b2:e7:43:61:c9:f9:38:83:d8:a3:0e:
d5:66:76:4c:0a:b8:99:90:74:56:53:2f:17:d0:30:
45:59:47:4e:25:42:71:1f:70:48:56:e3:db:c0:06:
ae:ff:ac:6c:b9:98:ac:22:6d:dc:da:ed:cb:33:c0:
c9:d7:a5:9b:fb:1b:7c:60:d2:7d:00:a9:6c:33:86:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:67:7E:97:94:6A:87:2F:AF:E0:57:78:47:6F:BB:C3:74:D6:77
X509v3 Authority Key Identifier:
keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:58b0:12c::/46
Signature Algorithm: sha256WithRSAEncryption
bb:58:31:1f:0b:07:47:5f:13:c0:ef:fc:30:4b:b3:79:85:a1:
b3:d9:da:41:ea:4f:0e:c9:2b:9f:9d:b3:c4:76:51:f1:b3:90:
04:57:77:71:b8:1c:49:c9:f2:66:c1:e0:f1:5b:be:ae:e5:ae:
fd:7e:fc:b4:2b:10:a8:06:1a:b4:77:89:e3:ab:4f:79:d1:c5:
d9:2d:a9:01:29:60:23:b2:2f:db:8a:80:a5:2d:ca:0b:31:78:
f9:ca:0b:55:0a:e0:07:d4:ed:22:96:43:40:9d:03:c2:9d:34:
2e:17:5f:e3:71:01:62:a5:ad:80:d9:28:89:57:72:e5:6a:fd:
ad:a2:1a:2a:0f:49:e3:03:82:3a:e3:0e:81:6b:92:f0:84:ed:
8b:26:ad:5d:9b:1d:27:c3:4d:d1:80:21:44:d4:4b:fb:2d:37:
9b:00:67:36:04:24:d6:84:91:88:0d:e6:f6:89:4b:f2:48:51:
e1:96:f0:5e:dc:d3:32:49:cc:21:0e:90:e0:fb:1c:ac:b9:cd:
a1:2b:b4:9f:7b:41:03:3d:31:48:09:c2:fa:16:8e:97:9f:c7:
1c:af:61:73:b4:0b:1e:db:75:28:b6:b8:b1:f8:49:7d:a9:0a:
54:79:b4:4d:7e:16:d7:20:9b:05:55:ce:5c:63:b3:e9:1d:c9:
69:15:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:28:59 2025 by rpki-client