This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa
File: 323830343a316265383a3a2f33322d3332203d3e203631373536.roa (raw, json)
Hash identifier: gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=
Subject key identifier: 7B:02:9D:2C:EA:96:69:25:C8:1A:FC:F5:1B:46:3F:AC:2D:C8:5A:7A
Certificate issuer: /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial: 0AD82D902D1C642C1FF70B63DAFE164EBD7C3B25
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa
Signing time: Thu 12 Jun 2025 20:44:40 +0000
ROA not before: Thu 12 Jun 2025 20:39:40 +0000
ROA not after: Thu 11 Jun 2026 20:44:40 +0000
asID: 61756
IP address blocks: 2804:1be8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d8:2d:90:2d:1c:64:2c:1f:f7:0b:63:da:fe:16:4e:bd:7c:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Validity
Not Before: Jun 12 20:39:40 2025 GMT
Not After : Jun 11 20:44:40 2026 GMT
Subject: CN=7B029D2CEA966925C81AFCF51B463FAC2DC85A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:5d:f2:24:78:bb:13:12:6d:0d:4c:47:cd:
64:52:1b:cb:ac:89:c8:7c:ec:86:6f:66:45:19:34:
a3:b6:a8:23:61:22:7b:e4:8d:dc:f0:99:15:02:a3:
be:68:fb:61:73:cf:61:af:f2:c7:02:e5:34:81:7a:
e7:c3:fd:5b:57:82:70:61:51:be:37:08:16:87:90:
69:d8:89:c5:99:ba:e1:24:8d:70:12:d4:98:c9:be:
4e:56:b2:a8:10:c9:bf:ad:7a:d2:6e:c0:86:f4:e3:
1b:51:6d:45:ac:54:8e:37:27:5e:3a:60:97:3e:10:
dc:67:9c:a4:ac:53:05:48:49:e2:13:30:04:8f:c4:
43:64:7b:dc:5f:ac:97:e4:ff:74:7b:10:db:7d:59:
ea:47:84:71:d7:38:ed:46:8e:7a:f6:0a:6a:87:14:
50:25:24:12:13:ec:eb:d5:f2:dc:d0:3c:bd:7f:52:
5d:1c:d9:1b:0d:fc:b3:c8:75:be:0a:66:02:4d:4d:
fd:2d:f6:2c:71:d9:e3:d4:8e:5f:e0:d2:1d:34:15:
d9:9d:87:56:ac:07:5a:f8:9e:14:6f:6a:61:91:9e:
fa:bb:6b:4d:24:91:1e:6f:b1:7f:4d:ae:fc:bf:8c:
a1:f7:98:1c:18:cf:77:90:e4:1d:d9:b0:a2:83:e2:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:9D:2C:EA:96:69:25:C8:1A:FC:F5:1B:46:3F:AC:2D:C8:5A:7A
X509v3 Authority Key Identifier:
keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d3332203d3e203631373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1be8::/32
Signature Algorithm: sha256WithRSAEncryption
4f:05:4e:0a:81:23:99:9d:a1:ab:90:38:56:7d:95:07:7c:53:
1d:f8:76:2b:94:41:0d:f9:d8:d2:15:63:7e:28:72:32:8d:49:
24:51:e6:e4:1a:1a:18:a8:91:72:43:dc:b8:8b:b7:26:8c:d7:
7d:07:6b:41:00:35:f0:3c:c1:0a:d8:19:24:1a:92:52:a1:d7:
97:8b:70:6d:d0:3b:7b:42:75:e0:3b:ba:4e:d0:3b:73:96:f3:
f7:0c:57:fd:36:80:23:90:90:d8:1a:c9:20:20:ef:e2:e3:76:
02:b0:b2:86:cd:24:e0:27:f3:ef:28:71:39:76:b1:22:93:14:
3a:34:a7:c5:dc:4a:28:cb:41:62:e7:af:1b:fe:9b:30:4f:b0:
13:35:14:26:65:93:b2:e3:03:d7:f8:7c:63:a9:45:ff:0e:ae:
cf:7f:ca:fd:06:ba:c0:27:b7:ef:94:d1:7b:dc:d2:0b:c4:9b:
1b:bc:08:ab:71:c6:fc:72:99:e3:33:19:d3:23:39:db:79:a2:
ef:75:54:be:be:2e:fe:c1:d6:01:bf:07:78:f2:b1:9d:d1:cf:
53:d1:63:3f:8b:48:4f:08:1d:f7:26:6c:49:41:a5:80:bf:7b:
b9:2a:ef:53:d4:aa:a8:21:9d:a4:ef:f5:d2:af:f4:a1:ac:40:
7a:b3:d6:2a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCtgtkC0cZCwf9wtj2v4WTr18OyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDQjg4NDlENkYzMzQzMUFGMjI5RDRDMDE0RTFFOERF
MDY4RDlGOTAeFw0yNTA2MTIyMDM5NDBaFw0yNjA2MTEyMDQ0NDBaMDMxMTAvBgNV
BAMTKDdCMDI5RDJDRUE5NjY5MjVDODFBRkNGNTFCNDYzRkFDMkRDODVBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGF3yJHi7ExJtDUxHzWRSG8us
ich87IZvZkUZNKO2qCNhInvkjdzwmRUCo75o+2Fzz2Gv8scC5TSBeufD/VtXgnBh
Ub43CBaHkGnYicWZuuEkjXAS1JjJvk5WsqgQyb+tetJuwIb04xtRbUWsVI43J146
YJc+ENxnnKSsUwVISeITMASPxENke9xfrJfk/3R7ENt9WepHhHHXOO1Gjnr2CmqH
FFAlJBIT7OvV8tzQPL1/Ul0c2RsN/LPIdb4KZgJNTf0t9ixx2ePUjl/g0h00Fdmd
h1asB1r4nhRvamGRnvq7a00kkR5vsX9Nrvy/jKH3mBwYz3eQ5B3ZsKKD4oInAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUewKdLOqWaSXIGvz1G0Y/rC3IWnowHwYDVR0j
BBgwFoAUBsuISdbzNDGvIp1MAU4ejeBo2fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNkNCODg0OUQ2RjMzNDMxQUYyMjlENEMwMTRFMUU4REUwNjhEOUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2Q0I4ODQ5RDZGMzM0MzFB
RjIyOUQ0QzAxNEUxRThERTA2OEQ5RjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRWHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAv
MzIzODMwMzQzYTMxNjI2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG+gwDQYJKoZIhvcNAQELBQADggEBAE8FTgqBI5md
oauQOFZ9lQd8Ux34diuUQQ352NIVY34ocjKNSSRR5uQaGhiokXJD3LiLtyaM130H
a0EANfA8wQrYGSQaklKh15eLcG3QO3tCdeA7uk7QO3OW8/cMV/02gCOQkNgaySAg
7+LjdgKwsobNJOAn8+8ocTl2sSKTFDo0p8XcSijLQWLnrxv+mzBPsBM1FCZlk7Lj
A9f4fGOpRf8Ors9/yv0GusAnt++U0Xvc0gvEmxu8CKtxxvxymeMzGdMjOdt5ou91
VL6+Lv7B1gG/B3jysZ3Rz1PRYz+LSE8IHfcmbElBpYC/e7kq71PUqqghnaTv9dKv
9KGsQHqz1io=
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:09:03 2025 by rpki-client