This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: fO+JJwzQmnhloBfacLAAcH6zgy3F5pzes8JZyuga2Xg=
Subject key identifier: C3:87:B0:AF:37:60:E1:F8:39:B2:55:08:20:C4:DC:F9:B8:FE:95:B5
Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Certificate serial: 59367ECC80EE58744FC679CFF398AF09BB54E9E5
Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Tue 09 Dec 2025 23:46:58 +0000
ROA not before: Tue 09 Dec 2025 23:41:58 +0000
ROA not after: Tue 08 Dec 2026 23:46:58 +0000
asID: 267991
IP address blocks: 2804:5654:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 21:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:36:7e:cc:80:ee:58:74:4f:c6:79:cf:f3:98:af:09:bb:54:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB
Validity
Not Before: Dec 9 23:41:58 2025 GMT
Not After : Dec 8 23:46:58 2026 GMT
Subject: CN=C387B0AF3760E1F839B2550820C4DCF9B8FE95B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:4b:2d:ea:4c:4e:9d:43:0c:fd:88:ff:e7:
05:9d:95:99:f7:8d:ea:4e:e1:a1:f5:14:05:7a:af:
27:43:84:ed:00:8d:d1:d9:83:8f:86:73:61:3a:7c:
7e:4b:4a:06:0b:b4:9c:ec:8b:be:ce:6e:c2:be:51:
f9:75:b8:f5:58:05:90:5f:8a:4f:9d:c3:29:b3:0b:
93:99:2a:da:f4:73:d4:e9:7e:57:2a:1b:e6:e6:ed:
af:47:7c:a6:72:58:0f:5f:79:55:e2:9a:84:51:13:
33:3e:11:95:71:32:e3:23:da:99:09:fa:ac:81:aa:
92:ac:1b:e0:84:7f:c5:79:30:55:6e:4d:5d:f3:13:
15:b4:c0:81:da:58:bf:4b:3c:6f:1f:75:c8:c0:88:
75:9e:b3:72:b2:1d:d6:0b:0a:83:62:be:32:7e:9d:
b0:a8:51:bb:d1:fc:72:41:98:5f:9a:3a:84:43:e1:
a6:6d:a7:5a:3b:ad:41:7b:f1:8c:db:ad:da:5c:2f:
f1:d9:e0:7a:3e:be:81:15:3c:55:95:20:65:23:40:
60:93:d5:50:cd:5a:52:a5:ad:5b:85:e2:b4:1a:e3:
fd:73:0a:7f:4d:f4:a3:c9:32:91:91:e6:94:7d:fc:
56:90:21:24:a2:35:ad:ab:58:14:b8:78:49:25:76:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:B0:AF:37:60:E1:F8:39:B2:55:08:20:C4:DC:F9:B8:FE:95:B5
X509v3 Authority Key Identifier:
keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:f000::/36
Signature Algorithm: sha256WithRSAEncryption
65:48:d0:66:b2:bb:6c:14:4f:4e:99:aa:f7:84:6e:de:98:ce:
f0:83:14:23:25:74:06:18:70:3f:b6:93:a3:e6:9b:11:9e:4f:
9c:3a:2a:4a:75:06:8a:e0:fc:a4:dd:2e:4e:2f:f7:dd:b4:72:
0f:03:4c:b4:35:b5:4e:7e:1f:e6:79:30:86:23:57:05:c6:f5:
4b:c4:71:40:3d:97:c2:21:c0:ae:1d:64:d5:88:eb:5d:5b:37:
79:03:80:a9:a8:21:1e:ad:aa:20:e6:94:74:70:4b:1e:5b:9e:
52:46:0b:c8:f1:44:ee:38:40:ce:69:6c:74:9a:52:18:69:b7:
13:03:da:dd:de:29:4f:5f:73:69:08:2a:2c:9c:7d:2b:8a:cb:
c8:d2:39:49:dd:31:5a:42:10:4a:ae:ac:32:e8:e6:7a:ea:38:
b8:de:16:f8:c0:be:a0:f4:f3:c5:c7:e6:ba:e9:9f:0b:51:1e:
ff:84:f5:c8:ea:44:ae:9f:90:33:5b:99:7f:5b:49:57:a6:b7:
ee:7c:97:58:c0:33:a7:fc:0e:bf:94:e7:c1:1b:84:b8:80:9f:
53:08:ac:f5:b3:d6:2a:63:5a:20:c0:87:0c:26:1e:ec:7f:da:
33:62:5a:2e:8c:e5:23:6c:33:2a:46:d8:36:11:56:df:ba:34:
d0:b4:77:df
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWTZ+zIDuWHRPxnnP85ivCbtU6eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1
QjkwRjFBQjAeFw0yNTEyMDkyMzQxNThaFw0yNjEyMDgyMzQ2NThaMDMxMTAvBgNV
BAMTKEMzODdCMEFGMzc2MEUxRjgzOUIyNTUwODIwQzREQ0Y5QjhGRTk1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SEst6kxOnUMM/Yj/5wWdlZn3
jepO4aH1FAV6rydDhO0AjdHZg4+Gc2E6fH5LSgYLtJzsi77ObsK+Ufl1uPVYBZBf
ik+dwymzC5OZKtr0c9TpflcqG+bm7a9HfKZyWA9feVXimoRREzM+EZVxMuMj2pkJ
+qyBqpKsG+CEf8V5MFVuTV3zExW0wIHaWL9LPG8fdcjAiHWes3KyHdYLCoNivjJ+
nbCoUbvR/HJBmF+aOoRD4aZtp1o7rUF78YzbrdpcL/HZ4Ho+voEVPFWVIGUjQGCT
1VDNWlKlrVuF4rQa4/1zCn9N9KPJMpGR5pR9/FaQISSiNa2rWBS4eEkldvDbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUw4ewrzdg4fg5slUIIMTc+bj+lbUwHwYDVR0j
BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG
MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlTwMA0GCSqGSIb3DQEBCwUA
A4IBAQBlSNBmsrtsFE9Omar3hG7emM7wgxQjJXQGGHA/tpOj5psRnk+cOipKdQaK
4Pyk3S5OL/fdtHIPA0y0NbVOfh/meTCGI1cFxvVLxHFAPZfCIcCuHWTViOtdWzd5
A4CpqCEeraog5pR0cEseW55SRgvI8UTuOEDOaWx0mlIYabcTA9rd3ilPX3NpCCos
nH0risvI0jlJ3TFaQhBKrqwy6OZ66ji43hb4wL6g9PPFx+a66Z8LUR7/hPXI6kSu
n5AzW5l/W0lXprfufJdYwDOn/A6/lOfBG4S4gJ9TCKz1s9YqY1ogwIcMJh7sf9oz
YloujOUjbDMqRtg2EVbfujTQtHff
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:55:27 2025 by rpki-client