This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
File: 323830343a313036383a3a2f33322d3438203d3e20323633363334.roa (raw, json)
Hash identifier: Tfd55FcbD7zYhoZ6hN7WHlOewF6bRaGrKRCwwsf/pY4=
Subject key identifier: 87:7C:98:AD:A3:44:46:88:A4:0F:8D:0F:5F:7F:E3:C8:EC:24:8F:E0
Certificate issuer: /CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Certificate serial: 63B13E90DE6EC7A4BED1CBB52DF2311E10E651E5
Authority key identifier: B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
Signing time: Tue 23 Dec 2025 13:19:25 +0000
ROA not before: Tue 23 Dec 2025 13:14:25 +0000
ROA not after: Tue 22 Dec 2026 13:19:25 +0000
asID: 263634
IP address blocks: 2804:1068::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b1:3e:90:de:6e:c7:a4:be:d1:cb:b5:2d:f2:31:1e:10:e6:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B730100DDF15DAE1562B96701C5E30C4FC0A01DC
Validity
Not Before: Dec 23 13:14:25 2025 GMT
Not After : Dec 22 13:19:25 2026 GMT
Subject: CN=877C98ADA3444688A40F8D0F5F7FE3C8EC248FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:23:3f:ab:47:4f:98:61:0f:2b:ae:a3:c0:
42:80:c9:1d:04:22:d2:9c:bd:81:ad:04:11:be:04:
e2:8e:d9:12:74:fe:4c:82:7c:f8:7a:fd:a1:af:74:
88:1b:64:0e:3a:73:d0:16:86:8f:61:f7:cd:28:12:
4d:66:94:6f:6d:ce:c2:60:43:91:e0:00:fc:c9:25:
40:b1:1a:0e:42:23:d2:c2:b3:72:d9:e8:e4:50:97:
06:71:fb:b5:2a:dc:e4:23:af:29:79:77:97:84:9f:
18:99:f5:f5:29:eb:31:1d:e7:6b:a8:83:17:e5:a3:
9d:cf:69:e8:d2:40:58:d9:78:8d:f4:7a:f0:25:1e:
99:24:75:b3:78:d9:ec:a3:76:c1:89:15:b4:7f:42:
f2:98:d0:c1:e1:38:61:23:a2:d1:ec:11:71:ec:1d:
3a:a3:87:82:6d:07:3d:75:51:4d:3f:7f:07:12:cb:
00:d1:c7:14:f2:49:ea:48:28:15:2f:45:31:44:56:
1f:4b:5c:32:81:22:60:93:af:31:2e:7f:9a:dd:23:
d3:55:73:cf:15:87:5e:93:3b:4e:a6:c5:22:b4:d9:
80:57:9f:56:34:ae:30:37:6f:f6:79:3f:35:24:62:
61:fc:21:0b:00:9e:be:13:59:70:82:20:23:df:95:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:98:AD:A3:44:46:88:A4:0F:8D:0F:5F:7F:E3:C8:EC:24:8F:E0
X509v3 Authority Key Identifier:
keyid:B7:30:10:0D:DF:15:DA:E1:56:2B:96:70:1C:5E:30:C4:FC:0A:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B730100DDF15DAE1562B96701C5E30C4FC0A01DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/323830343a313036383a3a2f33322d3438203d3e20323633363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1068::/32
Signature Algorithm: sha256WithRSAEncryption
39:67:c7:51:dd:a2:c1:b9:dd:dd:d7:bc:f5:8a:50:a4:10:0f:
7f:4e:3f:e2:43:24:cd:58:4d:04:fb:36:8b:97:e5:9d:17:f3:
50:a5:4e:9a:a4:bf:ff:6c:85:7c:f8:33:d5:ab:3d:a3:36:b2:
0e:7b:9c:c7:e0:84:21:9b:6d:3d:2a:b4:cf:84:41:cc:41:15:
1f:3f:77:5d:1c:93:a1:d2:94:8a:48:14:48:bb:89:35:0a:2f:
f4:98:a7:0a:eb:bc:d8:a1:72:02:03:9b:a1:7f:0f:80:d7:85:
a5:c9:1c:7c:77:41:27:b7:3e:9a:c9:f5:63:4f:f2:d3:c2:7d:
21:f4:0b:b6:b0:88:fe:21:c5:cc:8b:52:82:96:40:7b:e8:eb:
58:38:07:ab:e4:69:75:b1:36:78:c9:e7:c1:c8:89:27:ec:43:
32:72:c3:7e:ba:00:9e:33:a6:66:e5:54:85:e4:71:55:b9:48:
b0:e4:bf:a9:51:ae:b8:16:15:42:9a:e5:01:a6:1e:e1:e1:55:
ca:ae:45:ed:bc:59:c4:6f:90:16:88:4c:98:78:d2:d9:ce:e8:
f5:73:31:95:7f:1a:f1:77:34:8b:68:10:01:49:25:c0:05:64:
b1:af:c3:e2:36:dd:5f:6c:9b:8d:1c:74:be:fd:db:29:78:49:
be:06:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:13:18 2025 by rpki-client