This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa
File: 323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa (raw, json)
Hash identifier: 4dvVEa3HfUt2awQvc6tHYwtcV1bQFJ28q+c40qHswEs=
Subject key identifier: A3:E8:68:E1:97:A4:2A:D3:2A:5F:08:5A:7F:F3:D5:87:50:43:B3:A4
Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial: 2C08612B9A6A79B9D7023DCAFFFF1EB94037FBBB
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa
Signing time: Mon 15 Dec 2025 18:59:16 +0000
ROA not before: Mon 15 Dec 2025 18:54:16 +0000
ROA not after: Mon 14 Dec 2026 18:59:16 +0000
asID: 268793
IP address blocks: 2804:5ac0:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 11:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:08:61:2b:9a:6a:79:b9:d7:02:3d:ca:ff:ff:1e:b9:40:37:fb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
Validity
Not Before: Dec 15 18:54:16 2025 GMT
Not After : Dec 14 18:59:16 2026 GMT
Subject: CN=A3E868E197A42AD32A5F085A7FF3D5875043B3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:9c:82:82:9e:c5:dc:4d:a5:1f:77:61:f2:
69:26:21:a9:94:86:50:55:a7:e4:25:06:39:0c:6e:
4c:39:79:af:00:42:9e:15:41:06:13:d1:d4:67:cd:
85:17:aa:d9:cb:00:69:e7:37:2f:10:eb:e0:db:92:
ca:0b:4e:4a:36:d1:ee:31:54:33:eb:fd:2d:a0:1c:
48:ec:8b:dd:79:69:42:9f:ed:16:ac:da:04:97:68:
21:84:ae:f7:8a:38:0c:81:23:3e:87:8c:98:53:c5:
9b:d3:e7:4d:f4:4c:3b:18:8c:d6:76:21:88:b1:51:
f3:6a:32:cc:a9:d6:4a:f8:7d:18:63:5d:2b:8f:f5:
ad:33:1b:a2:91:5b:a6:ab:9e:15:68:f6:db:c2:2d:
98:2c:b4:bc:3c:a8:05:26:11:8c:04:f6:ce:f2:6e:
14:2f:8c:65:f3:b4:87:d6:11:2d:33:36:ee:42:e3:
73:9b:75:46:da:39:75:7c:db:6c:8c:0d:54:c0:26:
9b:e9:f7:a2:08:e4:08:30:86:d0:61:39:8a:c9:c8:
bf:17:98:54:58:4f:e7:ac:7d:a4:cf:d9:40:15:d8:
7b:4a:b4:6e:1e:c3:29:73:b0:52:7a:07:c2:b4:0a:
16:34:18:60:68:08:71:77:17:8f:90:15:b2:3c:e5:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:68:E1:97:A4:2A:D3:2A:5F:08:5A:7F:F3:D5:87:50:43:B3:A4
X509v3 Authority Key Identifier:
keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a653030303a3a2f33352d3335203d3e20323638373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ac0:e000::/35
Signature Algorithm: sha256WithRSAEncryption
0d:6b:7c:0b:91:a4:f2:b9:97:7c:ce:2c:dd:69:72:f1:1a:93:
f8:3e:d4:ce:79:e7:6d:39:1b:e4:2f:67:65:49:63:dd:6c:9d:
ea:45:a2:7d:b2:0d:d4:0d:d4:23:68:b1:d9:b6:af:55:3f:0c:
43:31:a2:29:31:a7:43:d4:43:86:f2:cc:43:9b:c7:82:62:1a:
d8:da:c6:47:74:64:7f:1b:d2:a8:e5:cf:cd:1e:f7:bb:f5:b9:
5f:b8:01:09:cb:bd:a7:bd:62:2f:fd:c7:b1:c1:82:f7:44:da:
86:e6:5d:1e:55:3d:c9:9b:fe:8d:10:1a:4a:74:0e:25:27:54:
d3:29:6f:02:cf:d6:5a:d2:d7:5d:aa:8d:f3:2f:22:1a:4b:c7:
66:03:b3:e9:a6:f4:ec:9b:60:d2:ec:ca:b9:82:71:80:cd:49:
2a:f2:8e:f4:c5:b9:bf:8e:73:7c:76:03:b7:62:a4:19:a8:d9:
f2:4a:24:63:f5:16:36:bc:c9:27:d0:2a:43:f8:5f:d4:f3:a9:
33:96:eb:ea:47:a0:f1:fd:d7:25:3b:f7:7f:ea:0e:a5:42:64:
fc:3d:ae:13:23:f9:02:9d:3c:af:71:1d:49:3f:1c:22:57:78:
fc:a3:e2:b4:22:8b:cc:cc:f5:ee:de:46:74:33:7a:a6:b8:e6:
38:16:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:01:36 2025 by rpki-client