This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa
File: 323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa (raw, json)
Hash identifier: OAmaALNKs/JLcC0f7KpXIIakzC+B1Gp5pkD5fCw785s=
Subject key identifier: 60:14:6B:FA:6A:B7:5B:7B:58:89:36:46:16:82:F4:F3:5E:EF:CF:13
Certificate issuer: /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial: 39C55658CE3674728EEEF61B61096D055A8598AF
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa
Signing time: Tue 09 Dec 2025 16:52:46 +0000
ROA not before: Tue 09 Dec 2025 16:47:46 +0000
ROA not after: Tue 08 Dec 2026 16:52:46 +0000
asID: 264999
IP address blocks: 2804:3130:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 24 Dec 2025 11:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c5:56:58:ce:36:74:72:8e:ee:f6:1b:61:09:6d:05:5a:85:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Validity
Not Before: Dec 9 16:47:46 2025 GMT
Not After : Dec 8 16:52:46 2026 GMT
Subject: CN=60146BFA6AB75B7B588936461682F4F35EEFCF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:d8:b9:d0:f9:a3:82:82:ba:48:c2:7e:4d:
52:04:d0:bd:94:63:fd:51:af:fc:e0:2f:dd:26:96:
b8:be:69:47:f4:77:c9:6d:99:57:19:e1:78:c1:81:
e0:fb:70:4e:77:09:8b:9d:dc:96:e4:95:1e:20:47:
d6:1f:09:a4:48:e6:3d:1c:80:53:30:b8:5a:47:06:
c1:b3:9d:c1:5f:ec:f5:dd:2d:64:80:08:f8:68:0c:
8c:b5:62:0d:97:83:59:89:0e:31:e6:72:5b:95:30:
0a:6e:53:5f:66:13:d8:46:4c:1a:c7:2d:da:a7:fc:
10:b0:be:8b:96:18:37:00:e5:f3:62:47:e7:3f:02:
93:79:4f:df:33:fe:b0:b5:e0:b7:05:79:c1:67:a7:
ae:23:64:6f:29:50:d5:19:08:ff:0d:44:0d:4f:fb:
50:d8:a9:2e:6d:b7:ad:dc:4d:76:86:8a:58:5c:36:
16:4b:8d:4a:94:80:c4:49:c0:bd:ef:af:58:4a:81:
5d:74:8b:b5:19:06:5a:33:c3:41:9c:43:87:5b:ac:
89:b3:21:81:d9:eb:33:52:ed:75:e5:f5:80:f1:ca:
49:e4:3c:fd:45:37:54:69:52:24:aa:f3:3b:3f:17:
96:f0:84:fa:35:9b:7d:d3:44:ad:c0:3d:cf:7f:b4:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:6B:FA:6A:B7:5B:7B:58:89:36:46:16:82:F4:F3:5E:EF:CF:13
X509v3 Authority Key Identifier:
keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a633030303a3a2f33342d3334203d3e20323634393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3130:c000::/34
Signature Algorithm: sha256WithRSAEncryption
a1:c5:62:c9:78:f1:72:05:d1:35:19:f8:de:13:e1:43:d7:af:
64:0c:3c:26:97:67:50:07:66:73:81:19:24:86:32:54:b1:6e:
d7:04:1e:0f:22:55:72:95:27:d9:fc:7c:c5:7f:ca:7b:a4:54:
e8:f6:db:e1:28:07:ca:43:ff:6e:82:06:2c:30:17:73:cd:99:
e7:0e:72:be:60:60:c2:27:76:74:4d:15:f7:b7:de:0f:c7:7d:
91:c3:b8:34:8f:d9:ec:19:b6:bf:23:80:12:96:1f:50:27:7f:
dd:fc:24:51:3a:11:91:cb:76:24:e4:f3:b6:63:a4:fd:12:76:
80:07:fb:4b:e0:54:1c:50:ee:ee:a4:f9:2c:dc:1e:fa:d4:d2:
35:fd:fa:32:82:a6:75:63:00:bb:9b:d3:01:cf:27:2f:6e:0d:
ef:d5:32:7c:ef:08:29:31:ad:a7:f4:f4:9c:2b:45:75:94:de:
67:51:07:72:8f:71:aa:6b:43:d8:73:6c:5c:d7:a1:23:ae:9a:
e9:ab:76:1a:7d:77:ab:8b:c1:0d:f1:e0:09:75:1e:a8:fa:1b:
f1:5d:51:78:76:80:01:ef:86:79:00:fc:aa:90:b5:76:62:98:
73:03:a8:dd:40:3a:e8:ee:aa:29:84:25:10:3b:fc:8b:c2:32:
17:ff:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:09:57 2025 by rpki-client