This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: +oQZX1OF0xLvSYm/1d7Sl7iyopCfC+jsNeqeRN+LZxQ=
Subject key identifier: 1D:04:75:CD:1A:B2:4D:91:FC:03:E7:EB:FE:AB:B6:2E:96:F5:CE:36
Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial: 0EA6346C4FDCAEC09D732BEE08DD3E87E624E4CE
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Tue 09 Dec 2025 23:47:02 +0000
ROA not before: Tue 09 Dec 2025 23:42:02 +0000
ROA not after: Tue 08 Dec 2026 23:47:02 +0000
asID: 267991
IP address blocks: 2804:5654:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 04:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a6:34:6c:4f:dc:ae:c0:9d:73:2b:ee:08:dd:3e:87:e6:24:e4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Validity
Not Before: Dec 9 23:42:02 2025 GMT
Not After : Dec 8 23:47:02 2026 GMT
Subject: CN=1D0475CD1AB24D91FC03E7EBFEABB62E96F5CE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:cd:80:b3:8a:1a:20:81:64:c5:39:d1:7b:
10:fc:b5:95:09:2e:fb:c5:2e:7a:20:b1:46:cf:07:
fe:c9:8e:d7:15:1a:ef:3e:eb:84:de:32:2c:20:aa:
d0:e8:86:74:7f:4a:a7:29:4b:48:f3:af:84:ce:db:
2e:64:68:9b:25:38:8e:5f:fe:e7:33:2e:81:58:d9:
a8:f0:48:c8:b9:57:71:7f:d8:28:42:fc:fb:41:d0:
7c:01:a3:7a:1c:3a:f8:4d:30:b2:c7:35:db:f4:b3:
5f:8e:65:82:99:25:87:71:ba:db:e8:31:10:55:bf:
98:07:68:74:68:f8:bd:3b:63:8b:37:66:2a:3a:a4:
a7:f7:54:ea:7a:44:84:a9:73:21:37:2a:3e:c7:3e:
63:de:98:24:84:bc:7c:d2:12:90:cf:b0:0b:85:b6:
1e:45:cd:e3:d1:74:a7:9f:6c:b4:5e:18:00:2e:3f:
a8:a1:04:af:8d:2b:60:1a:d8:58:ac:ff:92:ca:99:
fa:f1:c4:bc:e2:20:8c:40:96:08:e2:17:76:25:a4:
1e:9a:93:f3:88:8b:83:14:ae:33:87:f9:24:63:8e:
9d:87:37:ef:40:a4:e9:b6:b9:2e:c9:56:6b:7a:a0:
02:91:9b:e1:11:2a:9d:06:9a:dc:38:3d:95:0c:70:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:75:CD:1A:B2:4D:91:FC:03:E7:EB:FE:AB:B6:2E:96:F5:CE:36
X509v3 Authority Key Identifier:
keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a643030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:d000::/36
Signature Algorithm: sha256WithRSAEncryption
c0:94:b7:2a:28:06:f6:25:a8:0a:54:01:0c:f6:b3:38:96:90:
a2:41:fb:2b:d5:c8:ce:78:46:56:f2:9b:3b:1b:0f:b1:c0:2f:
14:83:60:18:f5:78:f5:74:a2:f2:39:64:c0:c6:67:6f:0b:25:
7c:de:1f:70:20:e6:b1:b5:af:57:e4:00:33:83:10:81:cf:ec:
94:cd:a1:75:0c:a5:67:70:38:50:84:4e:55:82:70:7d:d2:7e:
63:67:d0:e6:16:9e:ac:4d:c3:6d:08:f6:09:dc:34:f0:db:7f:
ed:d9:39:2f:de:1c:9f:56:70:25:00:43:ce:2b:1d:81:6b:43:
8d:9c:21:c9:e8:c7:e2:2d:52:03:87:f3:0f:72:2b:09:a1:b1:
ab:d6:71:a9:9c:93:1c:6b:a5:72:b6:10:04:64:7e:be:14:6a:
75:4e:40:78:1e:92:b4:13:34:bb:e8:53:3b:a9:68:98:96:ed:
51:95:ae:01:c6:f6:b1:71:49:1d:2c:62:15:62:85:1b:10:4d:
2b:bf:81:60:85:c0:c8:8b:85:47:fa:f8:87:c8:fa:98:35:f3:
11:16:a2:17:e4:bd:e7:96:d7:f1:7c:80:00:c2:0b:cf:83:be:
cd:60:dc:54:fa:b3:bc:41:91:04:bf:6c:65:c6:34:84:ee:f7:
d7:f2:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:13:17 2025 by rpki-client