This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa
File: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (raw, json)
Hash identifier: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=
Subject key identifier: DF:92:71:A4:B7:CA:FE:8D:EA:D8:4A:A9:C9:5E:5E:B1:13:CD:57:DB
Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial: 11D85971E98AFC4B641D1282D4B52D3EBA0EF90C
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa
Signing time: Thu 11 Dec 2025 15:43:49 +0000
ROA not before: Thu 11 Dec 2025 15:38:49 +0000
ROA not after: Thu 10 Dec 2026 15:43:49 +0000
asID: 263444
IP address blocks: 2804:11dc:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d8:59:71:e9:8a:fc:4b:64:1d:12:82:d4:b5:2d:3e:ba:0e:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Validity
Not Before: Dec 11 15:38:49 2025 GMT
Not After : Dec 10 15:43:49 2026 GMT
Subject: CN=DF9271A4B7CAFE8DEAD84AA9C95E5EB113CD57DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:c1:cd:73:19:ec:d7:c5:2c:1d:ae:53:ae:
3b:04:dc:81:0b:2d:76:db:ba:57:ac:24:64:a4:2a:
c2:7c:90:cd:73:ec:40:9e:39:9e:53:ee:f8:bd:ac:
25:27:b6:15:2b:74:17:0f:a7:e7:94:b8:cd:11:09:
c0:be:de:7f:5a:f4:7c:00:30:7d:6e:5b:55:d0:bc:
f2:30:14:12:2a:ef:f4:b8:28:37:ad:bc:0f:a4:a4:
ca:0f:46:83:1b:42:10:29:99:2d:e3:0e:7e:90:40:
84:ef:22:b2:4f:f8:64:cb:fe:ae:06:a6:71:ed:15:
55:97:61:60:af:61:c4:45:05:44:41:f9:63:f1:6c:
79:a2:9c:e3:13:cd:c0:88:a2:ef:20:d2:22:41:0e:
09:e8:90:25:6c:c7:90:31:ab:d9:b4:78:0a:37:f3:
4c:58:77:e1:8d:2a:f5:b4:a4:a4:4e:b1:93:fd:f0:
8f:ff:df:66:0b:08:d4:d7:e5:57:37:c5:24:1d:74:
76:6f:3c:60:d3:ad:8d:3c:e9:de:ef:1a:4d:1b:57:
f0:7c:38:a2:a7:5a:9c:c5:05:00:cc:cd:2f:f1:78:
95:a7:89:1c:ce:45:a8:fd:67:21:b4:5d:77:bd:88:
67:23:5c:c2:c9:b2:e4:cf:c8:1a:0f:35:56:54:fd:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:71:A4:B7:CA:FE:8D:EA:D8:4A:A9:C9:5E:5E:B1:13:CD:57:DB
X509v3 Authority Key Identifier:
keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:11dc:2000::/36
Signature Algorithm: sha256WithRSAEncryption
63:01:66:45:53:09:98:41:9e:5c:d6:6e:d4:39:a0:61:8b:5e:
9f:aa:ec:7e:da:66:02:fc:51:05:ec:8e:bc:fe:b4:ec:e0:30:
6e:13:1c:4c:01:3d:7c:2a:f8:61:3c:51:03:c4:91:68:2f:54:
74:31:e4:f3:d2:15:f2:b4:70:71:e2:4f:8e:7f:0b:c5:a9:27:
35:0e:59:10:89:89:62:22:24:aa:fe:5f:2a:43:4d:72:11:04:
21:5e:47:1d:59:5a:b3:32:9c:2e:2d:eb:84:f9:82:e5:bc:a7:
03:a1:c2:af:49:9d:cb:e4:9d:28:17:f9:95:29:36:c8:d8:36:
1e:5e:93:a8:05:1c:9d:32:b3:bf:34:29:4a:03:3c:d3:c2:87:
b5:3a:bd:fe:d4:2d:c0:93:7e:43:47:21:77:90:28:81:f5:aa:
c5:b8:c3:a9:c3:09:f4:1d:75:55:ed:b4:d0:b0:ab:df:8d:cf:
21:2e:ff:c0:e8:a8:a4:1a:b3:02:f6:11:f3:72:e8:d7:68:48:
79:f4:46:b9:c2:16:9b:43:be:4e:c8:38:98:ec:e8:62:d3:12:
a9:9c:30:17:d3:af:9a:a9:b1:3c:ed:9b:86:8d:bb:8d:d6:bc:
db:0e:af:23:ef:9a:b8:d3:ec:db:0b:e3:40:39:b2:83:8a:df:
b0:7a:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:33:42 2025 by rpki-client