This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33342d3334203d3e203631373738.roa
File: 323830343a313933343a3a2f33342d3334203d3e203631373738.roa (raw, json)
Hash identifier: yqYR3CRB2HZMud/Bwou7Uxk5QGU6HlKKBP4PCoDCNfk=
Subject key identifier: 85:16:D4:70:39:E0:24:E4:DD:5C:F4:76:48:F6:23:C1:0E:DF:09:F7
Certificate issuer: /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial: 40CD505BA1FBD0D763F56651F3BC47ACE4990A32
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33342d3334203d3e203631373738.roa
Signing time: Wed 11 Jun 2025 17:00:00 +0000
ROA not before: Wed 11 Jun 2025 16:55:00 +0000
ROA not after: Wed 10 Jun 2026 17:00:00 +0000
asID: 61778
IP address blocks: 2804:1934::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cd:50:5b:a1:fb:d0:d7:63:f5:66:51:f3:bc:47:ac:e4:99:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3496860CED46E82860498DD946601D168147920B
Validity
Not Before: Jun 11 16:55:00 2025 GMT
Not After : Jun 10 17:00:00 2026 GMT
Subject: CN=8516D47039E024E4DD5CF47648F623C10EDF09F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:44:e2:f3:c7:c6:24:34:17:b9:e9:2c:93:
cb:50:7d:ab:36:d9:6f:0c:cd:12:af:dd:4c:f7:29:
f0:1e:ea:4c:ab:16:ca:8e:99:0f:f6:18:25:d6:d8:
f6:e0:cb:64:69:f7:a4:21:7f:0a:b5:c5:7d:be:ef:
43:b6:ba:4e:a4:93:67:48:0b:23:51:83:7f:23:26:
26:8d:b0:dd:5b:9c:84:f4:ef:80:fd:db:d3:cc:dd:
a8:ca:a2:2a:27:5a:ae:1a:ff:a3:cb:16:34:f8:27:
bc:b4:e7:49:7c:84:a2:1a:99:ba:7b:59:69:a7:71:
58:0c:7c:fe:d7:0f:41:7f:77:b5:e3:8b:61:eb:7e:
0d:47:07:2a:a6:21:5b:9f:a4:9b:d0:a4:f8:15:53:
dd:0f:f9:42:d8:c4:b6:a1:27:95:5a:d7:c8:79:3f:
17:d7:1a:1a:61:2f:ab:59:70:98:83:a8:11:82:e3:
40:55:d2:52:73:3e:44:71:04:68:b9:b1:60:5d:85:
7b:50:d2:e5:fa:75:da:bb:b3:bc:dd:d3:7f:d0:66:
52:9c:49:f8:5a:16:a3:b3:2d:52:0a:9a:ce:e3:dc:
69:ef:ed:67:40:b6:3f:25:e5:40:6f:e8:46:42:93:
fb:bd:6f:ab:59:2c:a1:c4:d5:51:ed:3f:cc:1c:bd:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:D4:70:39:E0:24:E4:DD:5C:F4:76:48:F6:23:C1:0E:DF:09:F7
X509v3 Authority Key Identifier:
keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33342d3334203d3e203631373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1934::/34
Signature Algorithm: sha256WithRSAEncryption
59:2b:6d:04:87:ed:f2:28:2d:8e:39:68:72:29:cb:7e:d6:b9:
5a:9e:4f:5e:79:23:38:6e:5f:7a:88:e4:2f:fe:5f:72:8b:66:
e6:40:9c:10:7a:86:02:5b:8d:9a:df:d8:19:42:0e:9a:48:65:
93:66:ad:36:1d:c4:59:e0:6a:f1:69:96:7e:44:6a:c3:bb:fc:
2f:35:7b:ca:f6:d5:8a:b7:f5:da:55:22:25:cb:3a:c3:02:df:
33:d1:8b:e3:84:e8:5a:81:5c:7b:5e:1e:c7:f1:9a:23:fc:28:
f9:b0:2b:d3:70:d7:88:27:6a:2a:cf:b6:bb:82:56:fe:80:5f:
c9:77:10:67:57:c5:d0:f3:98:5e:c4:57:12:11:15:43:b1:9f:
37:01:7b:82:2f:9b:21:b1:22:2c:3e:d8:1e:c4:b6:33:78:08:
56:fb:95:94:88:d5:b7:d7:29:90:0a:5f:6b:d5:3e:3e:90:e0:
62:8f:57:14:91:af:be:7a:ec:cf:84:00:60:dc:c8:92:66:51:
eb:56:01:10:c6:14:6d:7f:46:86:e5:17:c4:73:67:d8:5c:c4:
eb:56:c8:7d:f2:31:21:39:05:6e:b9:61:59:4c:f5:84:5e:54:
1d:5d:20:4d:67:1e:28:ab:79:d8:b4:c4:82:f3:a0:50:de:da:
53:d2:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:22:01 2025 by rpki-client