This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
File: 323830343a376339303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier: kJqlibkSQIYnBmaBNN5p5gyy30IJ1FmY3Na8Qz3gyFY=
Subject key identifier: F4:CF:FD:9A:83:35:16:E0:D2:C2:47:B7:B6:22:98:8E:D3:99:01:00
Certificate issuer: /CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
Certificate serial: 36FBE50219F3A306B203E55AF280266427A199AC
Authority key identifier: DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
Signing time: Tue 16 Dec 2025 20:18:04 +0000
ROA not before: Tue 16 Dec 2025 20:13:04 +0000
ROA not after: Tue 15 Dec 2026 20:18:04 +0000
asID: 271504
IP address blocks: 2804:7c90::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl
rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 22 Dec 2025 09:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fb:e5:02:19:f3:a3:06:b2:03:e5:5a:f2:80:26:64:27:a1:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C
Validity
Not Before: Dec 16 20:13:04 2025 GMT
Not After : Dec 15 20:18:04 2026 GMT
Subject: CN=F4CFFD9A833516E0D2C247B7B622988ED3990100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:bb:d5:46:b3:2d:4e:5a:03:f4:9c:73:0c:
96:8a:69:98:9c:94:46:60:fb:17:7b:f4:34:da:be:
e3:ca:2b:a7:cd:b0:66:97:df:91:34:fb:3a:69:15:
66:5a:73:af:4e:14:25:56:9a:37:e5:0d:63:10:b7:
3a:8d:c5:90:63:66:ae:6c:24:5e:77:ae:eb:f9:84:
15:05:1c:78:20:64:1e:35:b0:9d:57:3d:7c:e3:20:
64:81:6f:ad:fd:54:6f:b1:d1:59:17:cb:ef:79:69:
e7:70:3a:f9:e1:58:8a:ba:1a:24:bd:81:71:ed:0f:
71:ab:e5:ef:f5:4f:2c:f1:2d:10:ca:ec:ed:0a:d5:
97:6b:7b:33:92:f8:34:c1:96:70:4c:89:b3:8b:2d:
d7:26:cc:1b:ac:95:4c:17:c3:90:4d:5d:a5:36:43:
ef:69:0c:03:de:8f:57:2a:d7:6f:a2:bc:ba:c9:19:
93:4d:94:a4:05:cd:a7:18:8f:99:60:c1:b4:c6:05:
59:d4:d7:b5:5c:8f:30:63:49:ce:1c:b1:f2:9b:dc:
cc:06:30:3d:1b:38:3f:6c:cf:7d:b0:6f:7d:11:79:
a6:e5:a9:2b:d9:cc:9c:cd:a6:7f:97:17:f9:32:97:
43:17:67:60:99:19:3b:cb:86:ac:f9:f7:24:ca:1a:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:FD:9A:83:35:16:E0:D2:C2:47:B7:B6:22:98:8E:D3:99:01:00
X509v3 Authority Key Identifier:
keyid:DB:49:BF:A6:AC:14:96:5D:7D:3B:14:53:23:EF:F6:A9:9C:3F:D0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB49BFA6AC14965D7D3B145323EFF6A99C3FD06C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90::/34
Signature Algorithm: sha256WithRSAEncryption
0c:58:2b:e5:b2:9d:21:61:30:02:29:c9:15:09:4e:ec:6c:b0:
dd:71:2e:f4:b3:81:75:b2:ba:07:83:2b:40:f8:0c:68:c9:27:
88:b6:d5:12:94:28:26:87:f5:2a:f6:1e:73:d0:22:3e:97:d1:
1d:61:8c:8c:cb:38:10:81:76:c7:a5:da:dd:1e:d5:56:1b:0f:
3c:8a:c7:b4:3c:16:72:7b:4c:80:9d:8b:6f:f1:54:47:f0:48:
d6:12:4c:9d:93:64:32:d6:b9:0d:4e:ff:b3:d8:1e:58:c9:cc:
53:03:63:91:b8:1a:a0:d2:13:4a:5e:bd:0a:8d:ce:76:d4:cc:
ed:77:3b:15:81:fe:a4:49:49:f2:ea:74:85:ed:9c:a1:8c:c7:
61:b1:83:5f:55:c2:ef:2a:8f:fd:3b:e5:20:af:ca:39:42:3c:
ca:8e:e4:ce:fc:f9:75:0c:08:ee:d6:d5:17:31:80:aa:10:2d:
2a:e3:e0:60:45:a2:6a:d5:2a:2d:e8:4b:4a:9a:f8:ba:41:c5:
e1:74:0f:33:f2:71:6f:25:4c:af:69:f1:d2:14:36:24:74:c2:
ec:11:01:1a:98:3b:c3:9d:32:bc:36:73:67:ad:53:e1:61:a2:
92:ed:0a:0b:fd:e2:00:cb:59:b4:a3:f0:be:93:b5:69:bb:ba:
15:4e:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:32:34 2025 by rpki-client