This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa
File: 323830343a366561383a3a2f33322d3438203d3e20323730363131.roa (raw, json)
Hash identifier: wz8TGnxv2/qOskSYTn0i3OS+47RSWT4cKKWw2ATTDCs=
Subject key identifier: 0A:EB:A5:BB:3D:BD:D6:D3:09:C2:58:22:3D:96:78:2D:AA:83:69:25
Certificate issuer: /CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Certificate serial: 3677F143E4665A1B3B348EA5EB3C636BB43C992E
Authority key identifier: 0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa
Signing time: Mon 22 Dec 2025 13:11:47 +0000
ROA not before: Mon 22 Dec 2025 13:06:47 +0000
ROA not after: Mon 21 Dec 2026 13:11:47 +0000
asID: 270611
IP address blocks: 2804:6ea8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 13:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:77:f1:43:e4:66:5a:1b:3b:34:8e:a5:eb:3c:63:6b:b4:3c:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C
Validity
Not Before: Dec 22 13:06:47 2025 GMT
Not After : Dec 21 13:11:47 2026 GMT
Subject: CN=0AEBA5BB3DBDD6D309C258223D96782DAA836925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:c9:3d:14:1c:99:b3:e8:e0:2e:08:e3:05:
d9:d6:ba:1b:32:34:2d:9f:56:27:17:d7:a3:e3:88:
73:9f:ab:3c:3e:ff:f8:36:00:cf:b1:54:68:b0:95:
b6:cb:d8:c9:c0:5e:a9:aa:b9:fc:1e:9a:8e:82:74:
68:84:1a:dd:e8:56:61:a7:a9:3d:6e:55:36:d9:09:
ce:08:a0:fb:50:64:8b:92:21:b2:0c:46:77:9b:2d:
37:98:ca:5c:89:0e:f7:aa:bd:6b:79:57:10:7d:6a:
73:74:ee:6d:90:46:ae:39:27:df:74:87:f5:61:fb:
21:81:55:52:ce:01:f0:19:15:5c:62:1c:51:7c:33:
be:06:96:66:c2:53:10:d1:8e:44:57:a4:30:e9:a9:
c0:fc:ac:ee:64:83:29:de:54:bc:19:d0:0c:57:7b:
7f:50:71:7a:f4:99:ad:78:fc:71:7d:17:40:5c:ca:
2c:4d:79:f3:ee:60:ae:ea:4a:74:f0:1d:fe:42:59:
45:c8:59:58:90:98:ca:ad:9b:12:d6:94:32:e7:15:
0a:d9:a2:d7:3b:e4:93:8d:92:04:a4:9d:86:72:9b:
a9:a9:14:68:94:ec:25:f4:aa:d4:76:67:21:9c:df:
45:c1:29:6f:0f:2f:2e:c6:8f:0d:8c:6b:be:ef:3a:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:A5:BB:3D:BD:D6:D3:09:C2:58:22:3D:96:78:2D:AA:83:69:25
X509v3 Authority Key Identifier:
keyid:0B:1E:B5:21:DE:FE:79:C4:E0:C6:AC:4E:5A:91:6A:88:09:BF:28:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1EB521DEFE79C4E0C6AC4E5A916A8809BF289C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3438203d3e20323730363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ea8::/32
Signature Algorithm: sha256WithRSAEncryption
40:a8:14:07:57:72:78:df:1a:1d:a3:37:27:90:e4:17:c0:bd:
26:b7:e0:d8:7b:e2:f4:7e:e4:79:55:37:20:cb:c9:66:0e:a1:
ae:25:70:ff:eb:09:8b:c8:0f:bc:4d:e5:be:69:42:78:76:f9:
ad:f8:67:ff:32:cc:05:36:07:a4:c0:c4:b9:15:dc:e7:66:6f:
88:6f:0d:18:2f:3c:f3:ee:88:83:96:7b:5f:bd:2d:bc:af:10:
09:7c:42:fe:42:56:b6:3f:7c:79:a2:2b:8c:c5:2b:ae:88:f8:
c0:73:fa:4b:46:98:ec:eb:31:1c:82:d7:00:16:29:4a:03:60:
e1:5f:3a:4a:21:de:1e:c2:62:cb:57:a6:a9:34:d9:19:e5:79:
75:9f:f2:9f:9f:30:1b:b0:27:02:50:b1:dc:81:30:7e:dc:3f:
a6:09:4d:b6:7b:4b:07:75:ee:c5:d9:19:8b:f0:83:07:e1:e8:
dd:35:f3:11:7e:69:51:8d:c5:b1:53:ad:29:f9:8d:eb:20:ca:
a1:10:cc:a9:d5:0b:87:17:79:fc:fe:6d:fe:a8:c7:f0:bc:76:
d0:d7:2e:eb:ed:38:1d:e5:a4:37:3a:57:44:76:7b:c2:74:e9:
2d:b5:65:19:fe:48:2d:6d:e6:ec:b1:c7:dd:cc:0b:ba:8b:43:
6b:b9:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:49:21 2025 by rpki-client