This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
File: 323830343a366538303a3a2f33322d3438203d3e20323730363031.roa (raw, json)
Hash identifier: cUkjvReO/bbwEIbfligyb9zEu/ROjEBsNzwqNOfwSd4=
Subject key identifier: EC:69:8A:91:A6:2A:F4:6D:AD:37:A4:C3:6F:8D:85:A7:A2:BC:FB:03
Certificate issuer: /CN=1721A6415AC9CCF211E5F3A40219B5B51A8C21C8
Certificate serial: 71E46864050E12DD5F750D36154AD461AF280402
Authority key identifier: 17:21:A6:41:5A:C9:CC:F2:11:E5:F3:A4:02:19:B5:B5:1A:8C:21:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
Signing time: Wed 17 Dec 2025 14:43:06 +0000
ROA not before: Wed 17 Dec 2025 14:38:06 +0000
ROA not after: Wed 16 Dec 2026 14:43:06 +0000
asID: 270601
IP address blocks: 2804:6e80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.crl
rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 20 Dec 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e4:68:64:05:0e:12:dd:5f:75:0d:36:15:4a:d4:61:af:28:04:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1721A6415AC9CCF211E5F3A40219B5B51A8C21C8
Validity
Not Before: Dec 17 14:38:06 2025 GMT
Not After : Dec 16 14:43:06 2026 GMT
Subject: CN=EC698A91A62AF46DAD37A4C36F8D85A7A2BCFB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:d7:21:e9:03:58:a2:e0:7b:49:ec:e4:16:
9d:cb:c0:50:e2:69:ae:9b:b7:1f:a1:9c:66:78:10:
93:93:c9:d1:e1:65:5a:a1:9e:24:93:4c:8c:b4:14:
c8:2e:74:de:76:fa:99:a7:c4:87:55:96:a0:7a:13:
0b:96:b9:d4:b9:8b:ae:a6:c0:04:92:5d:36:a7:ad:
00:05:17:a0:33:4c:75:75:ed:80:15:25:fd:06:e0:
76:c9:5a:64:61:ce:b5:9f:6a:fb:88:9b:9c:1d:a5:
88:50:f8:df:06:a3:ae:e0:e0:a8:4c:af:af:9e:49:
cf:5c:bb:2a:b8:5b:30:1e:f7:7c:42:12:21:a1:0a:
0f:41:27:b0:a0:95:c0:72:07:3c:b0:5c:d4:da:86:
f8:c8:7f:af:27:a7:0d:79:16:19:f9:e5:9f:c5:e6:
56:4c:19:33:2d:55:e0:f0:63:69:5b:45:ef:17:ab:
3f:0a:95:3b:10:0e:82:94:23:41:cc:91:09:9e:c6:
bb:90:8c:39:c4:a1:80:52:30:90:9f:73:30:3c:14:
2c:55:79:db:ee:94:19:41:8a:03:20:93:95:eb:56:
b7:8c:5a:bb:f8:1a:7e:0f:0a:e7:df:8c:27:2a:2b:
c0:11:48:b6:11:60:a7:d1:d2:d2:dc:d9:9e:1b:59:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:8A:91:A6:2A:F4:6D:AD:37:A4:C3:6F:8D:85:A7:A2:BC:FB:03
X509v3 Authority Key Identifier:
keyid:17:21:A6:41:5A:C9:CC:F2:11:E5:F3:A4:02:19:B5:B5:1A:8C:21:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1721A6415AC9CCF211E5F3A40219B5B51A8C21C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
c6:b5:42:66:2b:79:ef:1b:56:c6:0a:cd:f7:2b:c3:9d:4a:1e:
f1:b8:64:0b:95:f0:21:91:aa:6e:57:4f:67:80:bb:5b:ca:13:
e5:92:33:da:97:0d:c8:5d:8f:34:f0:5a:8d:5d:4d:7b:e3:c8:
80:36:46:10:31:43:67:23:8d:a0:08:ff:33:11:db:53:dd:c7:
a6:ba:cd:fe:c0:4b:cc:a6:5a:dc:8e:c7:2e:c3:c7:56:06:f5:
c3:be:67:4f:1d:ef:8a:38:a8:e4:0e:d5:80:33:89:ff:b2:1a:
23:64:a6:af:39:ce:80:c0:36:75:02:93:c6:c1:b1:3b:bb:c4:
37:0c:1d:1f:69:c3:4c:5e:73:9e:d2:d6:1a:55:10:13:c7:6c:
89:62:85:93:9e:3b:17:1a:0d:cb:e2:cb:59:2b:cf:e7:69:3c:
92:79:76:d0:71:61:67:4c:54:92:b1:4e:50:4d:fa:66:b8:89:
3e:a0:6f:95:08:4c:ca:bb:31:89:44:d3:b2:4c:44:2f:69:4c:
39:64:9d:9c:a9:d0:28:f5:8b:f0:2a:4f:58:96:ba:c2:f3:48:
ad:10:8a:4a:e4:e9:96:6f:9a:42:66:aa:35:13:07:4f:5c:71:
77:23:b9:07:7c:bd:9d:ff:52:10:8c:bd:25:0d:01:a7:79:59:
64:08:3a:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUceRoZAUOEt1fdQ02FUrUYa8oBAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcyMUE2NDE1QUM5Q0NGMjExRTVGM0E0MDIxOUI1QjUx
QThDMjFDODAeFw0yNTEyMTcxNDM4MDZaFw0yNjEyMTYxNDQzMDZaMDMxMTAvBgNV
BAMTKEVDNjk4QTkxQTYyQUY0NkRBRDM3QTRDMzZGOEQ4NUE3QTJCQ0ZCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUdch6QNYouB7SezkFp3LwFDi
aa6btx+hnGZ4EJOTydHhZVqhniSTTIy0FMgudN52+pmnxIdVlqB6EwuWudS5i66m
wASSXTanrQAFF6AzTHV17YAVJf0G4HbJWmRhzrWfavuIm5wdpYhQ+N8Go67g4KhM
r6+eSc9cuyq4WzAe93xCEiGhCg9BJ7CglcByBzywXNTahvjIf68npw15Fhn55Z/F
5lZMGTMtVeDwY2lbRe8Xqz8KlTsQDoKUI0HMkQmexruQjDnEoYBSMJCfczA8FCxV
edvulBlBigMgk5XrVreMWrv4Gn4PCuffjCcqK8ARSLYRYKfR0tLc2Z4bWWJ3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7GmKkaYq9G2tN6TDb42Fp6K8+wMwHwYDVR0j
BBgwFoAUFyGmQVrJzPIR5fOkAhm1tRqMIcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVlR0c4a0V0azFYdGh0SEw0S0dENTI2cGVHenFrTjY4anNhUWRuY1Bi
OE4vMC8xNzIxQTY0MTVBQzlDQ0YyMTFFNUYzQTQwMjE5QjVCNTFBOEMyMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MjFBNjQxNUFDOUNDRjIx
MUU1RjNBNDAyMTlCNUI1MUE4QzIxQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z1ZUdHOGtFdGsxWHRodEhMNEtHRDUyNnBlR3pxa042OGpzYVFkbmNQYjhOLzAv
MzIzODMwMzQzYTM2NjUzODMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARugDANBgkqhkiG9w0BAQsFAAOCAQEAxrVCZit5
7xtWxgrN9yvDnUoe8bhkC5XwIZGqbldPZ4C7W8oT5ZIz2pcNyF2PNPBajV1Ne+PI
gDZGEDFDZyONoAj/MxHbU93HprrN/sBLzKZa3I7HLsPHVgb1w75nTx3vijio5A7V
gDOJ/7IaI2SmrznOgMA2dQKTxsGxO7vENwwdH2nDTF5zntLWGlUQE8dsiWKFk547
FxoNy+LLWSvP52k8knl20HFhZ0xUkrFOUE36ZriJPqBvlQhMyrsxiUTTskxEL2lM
OWSdnKnQKPWL8CpPWJa6wvNIrRCKSuTplm+aQmaqNRMHT1xxdyO5B3y9nf9SEIy9
JQ0Bp3lZZAg6fg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:25:15 2025 by rpki-client