This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
File: 323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (raw, json)
Hash identifier: 3f7u0nGtmYPujjf5NI+PCEdSA22DcU67wz8Hg0MAc+k=
Subject key identifier: 41:89:C8:00:5D:22:2A:02:03:ED:E4:78:1E:64:18:7D:C0:1B:68:3D
Certificate issuer: /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial: 0A6C97CD3D8CB0C8C3FC049F33A47E4FA9808750
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
Signing time: Thu 27 Nov 2025 22:19:05 +0000
ROA not before: Thu 27 Nov 2025 22:14:05 +0000
ROA not after: Thu 26 Nov 2026 22:19:05 +0000
asID: 266126
IP address blocks: 2804:3b0c::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6c:97:cd:3d:8c:b0:c8:c3:fc:04:9f:33:a4:7e:4f:a9:80:87:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Validity
Not Before: Nov 27 22:14:05 2025 GMT
Not After : Nov 26 22:19:05 2026 GMT
Subject: CN=4189C8005D222A0203EDE4781E64187DC01B683D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:dc:38:83:8d:b7:55:58:c8:24:8c:70:35:
3d:8f:ea:25:12:79:a7:a7:1f:e6:bf:43:50:53:97:
c0:b7:a5:5f:52:a5:2b:66:5a:3c:bb:78:d0:97:2d:
5f:e3:2f:17:67:64:d7:39:92:ca:b9:73:91:47:7c:
a9:a8:b9:41:97:ef:8f:61:ac:25:53:7d:6b:1a:ee:
2b:1f:43:96:7d:f8:59:a9:f6:3d:62:f2:1d:a9:36:
17:d5:9d:13:ea:62:38:d9:19:4e:bf:49:a8:87:50:
65:6b:73:1e:2f:39:31:ab:e4:e4:9e:8b:1a:3b:19:
cf:14:65:e0:2f:5a:14:e7:29:96:72:01:77:38:2b:
93:0d:20:47:39:37:ed:a3:80:5c:94:22:12:6e:4d:
f8:4d:57:2e:90:88:03:e3:e2:04:77:aa:61:44:94:
e0:27:57:29:6a:0f:5e:42:aa:b6:80:d3:e4:ed:72:
80:75:10:f8:43:24:f3:72:fa:ae:97:ef:cd:57:3b:
da:9a:52:fd:95:d8:1e:53:f9:c2:3d:e0:8e:2d:8a:
75:a4:76:a6:9b:f6:45:cc:ab:b2:68:30:fd:05:37:
dd:d5:21:9f:41:bd:c2:39:a0:7c:f2:99:43:ef:21:
74:81:8b:89:1f:7a:8d:4b:0b:94:75:0d:72:ff:b4:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:89:C8:00:5D:22:2A:02:03:ED:E4:78:1E:64:18:7D:C0:1B:68:3D
X509v3 Authority Key Identifier:
keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b0c::/32
Signature Algorithm: sha256WithRSAEncryption
0d:89:8e:5a:71:42:53:2e:55:57:7e:87:ab:a0:a6:73:ca:89:
da:ce:63:55:0a:22:ab:d9:a6:6d:1b:e3:28:da:7b:5d:26:ce:
7a:8b:8e:64:b1:7a:8c:4e:d1:6e:b7:f6:11:db:a2:76:37:81:
b3:33:9a:5d:d7:df:1a:d0:b5:79:2e:28:61:86:59:55:fe:94:
be:75:35:e3:90:51:7e:4f:c7:7d:6a:f3:be:3e:b0:8a:da:c3:
a7:c0:9f:12:92:cb:57:61:1a:d9:46:d9:53:a9:8b:d7:17:52:
d1:90:79:70:e4:96:39:2c:ca:d3:d2:8f:5a:32:bb:db:cd:7e:
7e:94:07:3b:db:1d:e3:9f:3b:df:79:a1:67:d9:1f:ca:6f:79:
8d:e1:26:f8:19:23:9e:42:83:d7:36:ce:52:18:99:d5:03:51:
87:ff:59:8d:30:80:2d:04:5f:0c:bc:69:dc:b4:a0:f1:c9:13:
f5:9a:89:89:1a:c9:ae:ce:a6:99:34:5a:0c:07:e1:3c:ba:b2:
b4:84:01:74:26:0d:6c:7c:f5:4c:cf:b3:4a:68:02:de:5a:61:
19:5d:21:4a:cb:27:aa:37:f1:9f:a0:2b:c0:43:b0:a8:59:9f:
ce:41:5c:20:88:77:66:7c:3e:91:81:d1:ec:8b:a8:6c:24:eb:
cf:7b:b4:26
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCmyXzT2MsMjD/ASfM6R+T6mAh1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThENTIyQUM2MTg5ODU2MkQ5NUVBMkE5ODZCMUIxQzI2
NjhENTFCMTAeFw0yNTExMjcyMjE0MDVaFw0yNjExMjYyMjE5MDVaMDMxMTAvBgNV
BAMTKDQxODlDODAwNUQyMjJBMDIwM0VERTQ3ODFFNjQxODdEQzAxQjY4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCadw4g423VVjIJIxwNT2P6iUS
eaenH+a/Q1BTl8C3pV9SpStmWjy7eNCXLV/jLxdnZNc5ksq5c5FHfKmouUGX749h
rCVTfWsa7isfQ5Z9+Fmp9j1i8h2pNhfVnRPqYjjZGU6/SaiHUGVrcx4vOTGr5OSe
ixo7Gc8UZeAvWhTnKZZyAXc4K5MNIEc5N+2jgFyUIhJuTfhNVy6QiAPj4gR3qmFE
lOAnVylqD15CqraA0+TtcoB1EPhDJPNy+q6X781XO9qaUv2V2B5T+cI94I4tinWk
dqab9kXMq7JoMP0FN93VIZ9BvcI5oHzymUPvIXSBi4kfeo1LC5R1DXL/tK1ZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQYnIAF0iKgID7eR4HmQYfcAbaD0wHwYDVR0j
BBgwFoAUqNUirGGJhWLZXqKphrGxwmaNUbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRIeUZTSmhFSDM5b01yaXVQSGNZanUzcUNiaEN3RFRIVGVUd1BNcG9j
YlAvMC9BOEQ1MjJBQzYxODk4NTYyRDk1RUEyQTk4NkIxQjFDMjY2OEQ1MUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RDUyMkFDNjE4OTg1NjJE
OTVFQTJBOTg2QjFCMUMyNjY4RDUxQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUSHlGU0poRUgzOW9Ncml1UEhjWWp1M3FDYmhDd0RUSFRlVHdQTXBvY2JQLzAv
MzIzODMwMzQzYTMzNjIzMDYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7DDANBgkqhkiG9w0BAQsFAAOCAQEADYmOWnFC
Uy5VV36Hq6Cmc8qJ2s5jVQoiq9mmbRvjKNp7XSbOeouOZLF6jE7Rbrf2EduidjeB
szOaXdffGtC1eS4oYYZZVf6UvnU145BRfk/HfWrzvj6witrDp8CfEpLLV2Ea2UbZ
U6mL1xdS0ZB5cOSWOSzK09KPWjK7281+fpQHO9sd458733mhZ9kfym95jeEm+Bkj
nkKD1zbOUhiZ1QNRh/9ZjTCALQRfDLxp3LSg8ckT9ZqJiRrJrs6mmTRaDAfhPLqy
tIQBdCYNbHz1TM+zSmgC3lphGV0hSssnqjfxn6ArwEOwqFmfzkFcIIh3Znw+kYHR
7IuobCTrz3u0Jg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:41:31 2025 by rpki-client