This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a343030303a3a2f33362d3336203d3e20323633343536.roa
File: 323830343a313231383a343030303a3a2f33362d3336203d3e20323633343536.roa (raw, json)
Hash identifier: MXqBNfbEo/3NWYyT9Oa6+hT+gv+L2JqSpwizDhOWUAo=
Subject key identifier: 28:7D:E7:4B:72:66:0E:75:39:55:EB:DB:89:1B:12:0C:8B:C7:D9:50
Certificate issuer: /CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
Certificate serial: 7D8312CCED9426AD360FAB1617658B28D0A20C32
Authority key identifier: 1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a343030303a3a2f33362d3336203d3e20323633343536.roa
Signing time: Wed 31 Dec 2025 13:13:15 +0000
ROA not before: Wed 31 Dec 2025 13:08:15 +0000
ROA not after: Wed 30 Dec 2026 13:13:15 +0000
asID: 263456
IP address blocks: 2804:1218:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl
rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 20:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:83:12:cc:ed:94:26:ad:36:0f:ab:16:17:65:8b:28:d0:a2:0c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D65AA207322C3E3146C4DF4D431593D15BDED6C
Validity
Not Before: Dec 31 13:08:15 2025 GMT
Not After : Dec 30 13:13:15 2026 GMT
Subject: CN=287DE74B72660E753955EBDB891B120C8BC7D950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:a6:f7:62:a2:80:72:bc:cf:4e:1b:3e:e1:
dc:10:8e:60:35:41:da:00:fa:ce:3c:ba:22:1c:20:
20:23:b9:7c:e5:9c:bd:07:d2:bd:ae:7a:66:b7:fe:
e3:63:5b:54:8f:16:f9:87:f1:95:15:ca:4f:43:2d:
d5:59:b7:b0:47:08:af:c3:96:1e:7f:23:a1:59:91:
79:7a:ca:f4:04:ae:cc:0e:27:64:63:9e:45:e3:28:
8b:13:b8:bf:97:8c:2f:2f:01:f0:fa:ac:b2:a9:0f:
fd:58:9a:ad:e4:dd:f1:5e:57:98:6f:52:13:f2:d0:
66:9d:2d:95:c3:84:74:44:e4:21:de:03:8d:9e:c0:
69:75:8e:a2:83:b8:b5:60:92:39:92:0f:95:e2:d9:
a2:cb:31:03:6e:92:41:47:4d:4d:b4:70:2f:5a:3c:
63:10:de:84:15:12:e9:c8:cd:78:3e:39:49:f7:f0:
3c:b6:0e:0a:71:8f:ee:7b:1d:85:85:11:8d:d4:57:
e5:60:ca:c0:8b:69:47:fc:77:78:ea:0e:15:cf:73:
88:3f:88:f5:9a:53:77:e4:0f:5a:28:90:76:fe:62:
21:f2:4f:12:64:11:6c:d9:d3:6a:2a:88:49:31:13:
a8:33:f6:36:26:ae:d0:29:1b:12:93:63:e8:fa:f5:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:E7:4B:72:66:0E:75:39:55:EB:DB:89:1B:12:0C:8B:C7:D9:50
X509v3 Authority Key Identifier:
keyid:1D:65:AA:20:73:22:C3:E3:14:6C:4D:F4:D4:31:59:3D:15:BD:ED:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/1D65AA207322C3E3146C4DF4D431593D15BDED6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D65AA207322C3E3146C4DF4D431593D15BDED6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/323830343a313231383a343030303a3a2f33362d3336203d3e20323633343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1218:4000::/36
Signature Algorithm: sha256WithRSAEncryption
12:e0:40:fe:d9:85:04:54:0a:30:d3:50:2c:4b:84:48:c1:a6:
4d:70:0a:a8:e9:89:b6:84:7d:ab:da:9b:0c:c6:0b:fc:99:21:
8f:43:a8:8d:e4:43:fa:5d:57:4d:cd:ea:cd:b0:36:42:c4:d4:
6e:80:84:ea:2c:40:09:cb:e6:fd:fb:81:90:20:87:4b:dc:60:
8b:2b:12:b3:57:ea:b8:9f:c7:33:a3:67:a4:1d:9d:25:f1:c7:
48:9a:5d:77:2e:0f:60:42:ca:b5:0e:23:18:17:91:83:04:f0:
09:71:3b:a8:75:1b:1e:b7:10:e6:20:10:28:a7:8c:06:9b:95:
e4:0d:97:75:b1:de:c7:e7:c7:d1:51:76:71:3a:6e:39:8b:8b:
1e:f7:b0:9f:c2:c2:a7:2c:95:1e:10:01:d6:1d:61:13:9a:cc:
1d:d0:03:eb:75:58:7a:84:30:11:1a:4c:c9:63:fd:3d:15:3e:
bd:a0:82:bc:e3:36:21:23:b2:4d:4e:8e:73:e7:5d:c6:bb:cc:
a2:2d:bc:eb:4a:de:b5:08:a3:93:72:8c:b2:12:03:89:39:6f:
27:4d:f2:28:35:9b:a8:9d:eb:53:b5:74:b6:32:26:e0:c8:af:
97:31:75:27:e7:8c:13:65:fa:e1:7f:49:f7:02:8e:ce:bf:ab:
69:2b:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 23:27:13 2026 by rpki-client