This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33332d3333203d3e203631373536.roa
File: 323830343a316265383a3a2f33332d3333203d3e203631373536.roa (raw, json)
Hash identifier: l78EKC9kkJuCz96yuwMWkw3iPI6l1+LN8zK/5aMvMYQ=
Subject key identifier: DC:67:28:2C:BE:3D:C3:4C:3A:B4:89:44:7F:67:D2:A7:4B:1A:95:D3
Certificate issuer: /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial: 7E52F6FFC61013546A2C59AADC56A5C25C6BD585
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33332d3333203d3e203631373536.roa
Signing time: Thu 12 Jun 2025 20:44:41 +0000
ROA not before: Thu 12 Jun 2025 20:39:41 +0000
ROA not after: Thu 11 Jun 2026 20:44:41 +0000
asID: 61756
IP address blocks: 2804:1be8::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:52:f6:ff:c6:10:13:54:6a:2c:59:aa:dc:56:a5:c2:5c:6b:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Validity
Not Before: Jun 12 20:39:41 2025 GMT
Not After : Jun 11 20:44:41 2026 GMT
Subject: CN=DC67282CBE3DC34C3AB489447F67D2A74B1A95D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:1a:72:ac:e3:cc:7d:03:4d:16:c5:31:ea:
87:40:94:89:e1:e4:dd:b0:cf:d0:0b:c7:62:bb:fe:
97:90:12:97:67:fa:b6:61:ea:e8:5c:ee:96:4c:48:
fd:36:28:f5:71:b6:19:5c:91:5a:36:36:c2:62:24:
94:0d:a5:83:19:71:67:1a:2d:b6:9c:bf:31:aa:12:
fa:61:b2:80:a2:b8:c6:0a:d7:4a:68:7b:53:60:fa:
b4:ab:d7:4c:70:24:3c:c8:82:ef:03:40:81:1b:72:
b9:a1:b5:37:3a:ed:d9:ea:3e:a9:c5:2a:71:59:78:
c8:b0:ca:97:dc:7f:e4:c1:68:7d:67:1c:51:a9:88:
b4:5a:c8:57:e5:62:a6:e0:37:54:a4:24:6a:52:a2:
d3:10:4f:b5:15:5c:95:ea:ad:3e:5a:95:c8:55:59:
7e:e5:bf:e1:54:1c:97:a0:31:a0:bf:ba:02:bb:cd:
2b:8b:1c:6e:94:84:24:da:bb:70:18:94:a6:82:42:
4b:d1:4e:07:e8:79:e4:0b:c9:10:ec:45:f8:37:64:
d0:a5:e5:0b:69:b6:8c:7d:d9:68:5d:7c:20:09:36:
d3:0c:42:30:44:6d:0e:0a:c7:57:f4:3e:85:8f:88:
df:53:0a:ea:cb:d4:5c:da:38:f6:94:a8:8b:b4:65:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:28:2C:BE:3D:C3:4C:3A:B4:89:44:7F:67:D2:A7:4B:1A:95:D3
X509v3 Authority Key Identifier:
keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33332d3333203d3e203631373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1be8::/33
Signature Algorithm: sha256WithRSAEncryption
87:17:b0:ef:00:39:d7:3b:ac:d5:dd:18:ee:f3:d8:aa:92:14:
c5:b2:20:64:5e:91:5a:00:32:89:3d:8a:17:48:67:2a:e0:7b:
67:8d:84:18:43:45:17:92:dc:ab:97:7b:f5:58:72:e0:29:34:
ac:e3:17:c5:4f:48:78:68:b0:32:a6:34:07:23:d9:32:7d:34:
d2:ad:95:da:1d:04:42:0b:42:5d:26:b4:cf:ff:db:1e:25:26:
ab:fe:16:e0:4b:d0:ff:c5:10:58:e0:a4:d0:f8:bf:9d:ce:55:
b1:49:67:d9:10:c1:41:b9:18:18:4f:10:23:37:55:ca:25:25:
b1:ab:ed:8f:cb:44:92:05:b2:ed:c1:1d:30:6b:6f:65:b8:59:
b0:48:de:bd:6f:cb:07:f0:fd:a8:ab:62:48:7a:fa:fe:71:81:
b9:54:ef:1b:ce:68:6d:e3:1d:48:fa:37:0b:54:b2:42:df:83:
ad:40:27:16:b2:78:b7:82:07:52:2b:0f:35:e0:e3:7a:1d:06:
d8:90:fb:98:04:79:6f:93:e2:01:7b:21:9b:95:80:99:37:e7:
ec:b6:54:06:2e:00:03:82:4f:d6:3f:69:cd:64:a4:20:85:27:
52:36:4a:47:5b:9e:4e:e0:89:af:a8:9f:3b:04:e6:07:40:67:
4a:2e:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:53:54 2025 by rpki-client