This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
File: 323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json)
Hash identifier: 6tFLg8LXuU/5sGEXsKTAcag2oPjT5sewFCYfnbID+1A=
Subject key identifier: F0:C7:33:E8:A2:42:E5:1A:FB:C7:24:5B:78:52:D8:EC:83:FA:2D:6B
Certificate issuer: /CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Certificate serial: 2F3E30F50E08C19C04E240958FC4E26769F8950D
Authority key identifier: B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
Signing time: Fri 02 Jan 2026 21:33:38 +0000
ROA not before: Fri 02 Jan 2026 21:28:38 +0000
ROA not after: Fri 01 Jan 2027 21:33:38 +0000
asID: 263518
IP address blocks: 2804:1324::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3e:30:f5:0e:08:c1:9c:04:e2:40:95:8f:c4:e2:67:69:f8:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28928006D9ED28F7EC989174FC9C40EA44838C1
Validity
Not Before: Jan 2 21:28:38 2026 GMT
Not After : Jan 1 21:33:38 2027 GMT
Subject: CN=F0C733E8A242E51AFBC7245B7852D8EC83FA2D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:ae:d8:fb:a2:af:e6:31:2e:25:91:c3:cf:
af:76:2e:e1:ae:19:8c:92:bb:15:7e:57:16:5e:cd:
ae:d5:28:2c:48:7c:73:be:58:b6:60:cd:ff:46:fe:
3a:32:10:b6:b1:24:f5:60:37:7f:15:f7:f5:3d:5b:
15:7b:3b:70:10:00:a2:48:30:9e:39:ad:88:1d:18:
2a:6d:b7:db:de:47:82:41:0e:79:55:10:f1:b9:f6:
b3:32:15:82:1d:54:d7:79:68:e2:bc:fc:d9:10:dd:
33:41:ec:1d:07:4f:58:41:2a:49:cd:b0:7c:7d:52:
43:e3:c0:95:e4:d3:9c:8f:ac:f5:5f:75:b5:ab:00:
25:75:6c:92:7a:b9:73:52:e6:5e:1f:22:7d:b0:05:
b9:16:41:b7:7f:3f:02:b7:e2:4c:a9:2c:5f:af:1a:
87:9c:5b:01:c6:be:44:94:99:0e:99:33:ec:35:8e:
da:60:23:7b:9d:b9:f2:ce:75:b5:60:85:7c:0c:fa:
ac:00:fa:dd:62:fe:e2:38:89:31:2d:4b:71:c7:c0:
01:8d:5d:4d:6f:a2:18:36:61:c7:f1:8f:e5:34:85:
bf:bc:fc:38:bf:74:c7:99:02:08:7f:82:6f:24:f4:
d1:f8:20:a2:f5:8d:20:b8:21:fd:4d:7d:2a:6d:95:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:33:E8:A2:42:E5:1A:FB:C7:24:5B:78:52:D8:EC:83:FA:2D:6B
X509v3 Authority Key Identifier:
keyid:B2:89:28:00:6D:9E:D2:8F:7E:C9:89:17:4F:C9:C4:0E:A4:48:38:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/B28928006D9ED28F7EC989174FC9C40EA44838C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28928006D9ED28F7EC989174FC9C40EA44838C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1324::/32
Signature Algorithm: sha256WithRSAEncryption
c4:4a:ad:ff:84:d2:79:d2:55:25:80:5d:35:de:fb:57:0e:52:
cd:ce:be:9c:c3:0a:0d:05:ec:c5:90:26:3b:af:91:b2:e1:9f:
05:78:02:d1:95:a3:68:6a:cb:05:03:c4:3c:29:d0:14:f8:8e:
fc:51:1d:12:e0:70:99:37:66:aa:4a:21:c0:c8:2b:48:d6:9f:
ac:4f:89:83:1f:ec:3a:42:22:7c:6e:a8:19:29:10:dc:85:bf:
fb:d4:f7:c2:e9:a6:b1:3f:a0:c6:31:41:a8:1f:30:c7:95:eb:
6b:87:82:1b:f3:2f:6a:d3:ff:24:69:b8:c4:2f:c9:8a:05:f7:
43:29:07:15:a4:ad:29:7a:ed:b1:f8:64:ae:9c:cd:09:13:8e:
e2:18:dc:0e:07:e7:38:b2:a3:f3:9e:d4:02:bd:68:4a:c8:77:
62:0f:60:00:40:21:80:d5:bc:9f:51:27:cb:4b:0e:b9:d1:5a:
fb:8f:a2:6d:e1:9c:e0:94:99:8b:c5:16:ff:70:70:83:6c:76:
a6:3d:5b:55:07:12:f1:4b:93:93:1a:1a:ab:04:68:b0:61:d9:
f9:90:d7:93:f4:97:07:57:c7:3b:30:80:46:6f:cc:bc:23:98:
4a:60:95:ae:d5:41:e2:d8:be:44:84:1e:07:64:39:17:0d:57:
d6:69:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:29 2026 by rpki-client