This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa
File: 323830343a376366343a3a2f33342d3334203d3e20323731353239.roa (raw, json)
Hash identifier: Nc2umPUKLPcWXOSESvXsSp68BpDayWXykNkhJ6IqF4k=
Subject key identifier: E5:CA:27:93:15:74:11:4C:A4:2E:36:8F:CD:55:E1:63:4D:01:3A:D3
Certificate issuer: /CN=23D8D5FC5C1576BC524220F18D107B00FDBA4B95
Certificate serial: 1143EAFC88A63957C3C9C944DE8C99586C76F750
Authority key identifier: 23:D8:D5:FC:5C:15:76:BC:52:42:20:F1:8D:10:7B:00:FD:BA:4B:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa
Signing time: Fri 07 Nov 2025 11:22:33 +0000
ROA not before: Fri 07 Nov 2025 11:17:33 +0000
ROA not after: Fri 06 Nov 2026 11:22:33 +0000
asID: 271529
IP address blocks: 2804:7cf4::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.crl
rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 18:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:43:ea:fc:88:a6:39:57:c3:c9:c9:44:de:8c:99:58:6c:76:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D8D5FC5C1576BC524220F18D107B00FDBA4B95
Validity
Not Before: Nov 7 11:17:33 2025 GMT
Not After : Nov 6 11:22:33 2026 GMT
Subject: CN=E5CA27931574114CA42E368FCD55E1634D013AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:03:da:b5:98:0b:61:6e:d7:8c:51:5f:47:
17:43:84:aa:b7:5b:66:48:02:82:57:67:9d:9e:ab:
e4:87:1f:5d:32:53:c9:44:31:15:b4:67:9d:32:b0:
de:2d:01:f1:b1:24:69:c1:aa:0c:6e:8c:ef:d2:bf:
34:36:ee:d2:09:3e:ee:e0:a6:56:97:92:5b:77:32:
1c:6d:e1:c2:e9:39:d1:a6:2d:c5:9c:91:97:96:e0:
60:f8:81:74:57:56:fa:7f:d1:c3:91:f2:e1:36:12:
9a:67:e1:ff:0e:80:e9:e7:54:4b:81:c7:cc:38:26:
0f:7e:fa:18:66:d0:9c:5a:4b:cc:95:85:c0:ad:6b:
e4:8f:4b:8f:23:cc:8e:b8:63:21:42:7e:c8:e1:b4:
4a:46:c5:a0:92:e1:0a:1f:f2:41:18:e9:b8:3c:ab:
32:3f:5a:fb:ca:3b:e1:dc:62:b1:da:41:37:60:e7:
16:79:25:df:d2:7e:7d:a3:41:a4:2d:94:b4:d2:29:
e6:17:2f:4f:7c:ee:3f:40:55:f7:e4:c5:16:85:16:
09:1a:15:18:44:fa:5a:4b:22:83:07:17:dd:65:23:
20:e3:5e:94:41:4c:43:3f:84:c6:31:60:33:c9:44:
83:d4:c6:0c:35:84:f3:84:90:74:31:09:d3:89:15:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:27:93:15:74:11:4C:A4:2E:36:8F:CD:55:E1:63:4D:01:3A:D3
X509v3 Authority Key Identifier:
keyid:23:D8:D5:FC:5C:15:76:BC:52:42:20:F1:8D:10:7B:00:FD:BA:4B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8D5FC5C1576BC524220F18D107B00FDBA4B95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/323830343a376366343a3a2f33342d3334203d3e20323731353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7cf4::/34
Signature Algorithm: sha256WithRSAEncryption
71:c1:a2:a9:ba:61:c2:32:6d:28:39:bb:81:cd:f5:bd:0d:bc:
77:e4:c2:d3:d6:07:cb:bd:b5:92:6b:64:f1:66:c8:00:5b:1f:
e1:ea:bc:92:1c:c2:98:75:33:65:3e:b3:55:5a:36:b3:f5:3a:
ca:1c:f9:b2:af:fc:80:13:98:aa:ce:96:36:18:25:81:4c:2c:
4e:9f:12:4c:93:22:3e:01:cb:9a:f9:a5:11:99:6e:35:26:36:
a7:16:8f:a3:61:39:22:7f:f8:f7:b6:72:23:1b:0a:88:79:ec:
0c:26:6e:ce:fe:97:71:43:5c:fb:ba:97:e4:bd:2a:c2:80:5f:
76:8b:26:d7:46:7e:00:e0:71:60:d8:e0:df:d5:63:af:e2:e5:
e2:d3:a7:a0:c4:48:0e:60:5a:8b:96:1c:6d:36:8f:80:95:39:
db:72:74:67:fc:de:8c:46:17:86:8f:00:e7:6c:73:be:04:b8:
51:55:92:ab:be:da:f0:6f:0b:51:a0:43:2a:11:5e:99:c4:a1:
99:c1:ca:6d:47:74:b5:b1:c1:37:a7:c7:af:b4:eb:d9:0c:37:
01:1b:71:56:9a:3e:d1:76:f4:1b:db:2b:de:f0:7d:10:28:35:
85:16:2c:07:ce:e4:7c:07:86:00:26:bd:46:ce:d0:6f:b2:ac:
b0:a7:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:17:59 2025 by rpki-client