This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a633030303a3a2f33342d3334203d3e203532383338.roa
File: 323830343a6264383a633030303a3a2f33342d3334203d3e203532383338.roa (raw, json)
Hash identifier: 9LfruRJM2syPf0nrUln74JDaPha9UUk1FZu2+WjcBA8=
Subject key identifier: 2F:41:58:2C:C6:E8:47:9D:CE:60:07:37:65:21:76:24:58:70:68:E3
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 38109F94465810DB1541F568629E27B58EE6FF71
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a633030303a3a2f33342d3334203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:48:55 +0000
ROA not before: Wed 03 Dec 2025 00:43:55 +0000
ROA not after: Wed 02 Dec 2026 00:48:55 +0000
asID: 52838
IP address blocks: 2804:bd8:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:9f:94:46:58:10:db:15:41:f5:68:62:9e:27:b5:8e:e6:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:43:55 2025 GMT
Not After : Dec 2 00:48:55 2026 GMT
Subject: CN=2F41582CC6E8479DCE60073765217624587068E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:ef:3e:16:d9:cc:a6:fc:d1:be:83:7d:73:
c1:d6:b5:e5:4e:62:70:7b:72:75:48:39:ac:c3:cc:
bc:39:5e:8f:97:3a:c5:e5:70:2e:7d:95:18:64:41:
53:2b:6d:87:3a:20:cc:2a:e8:c3:c0:87:27:d4:4e:
14:9e:6a:9b:9f:3a:4b:84:ac:cd:ab:60:8f:83:da:
d1:a8:5c:b2:a9:6e:df:07:d2:7b:c0:55:50:bf:ca:
b3:ed:24:6d:e6:e5:81:ca:45:a6:ea:b0:cf:34:b1:
f8:96:e8:6e:3d:31:29:31:47:dc:e4:2f:70:2f:1d:
7f:c3:37:6c:19:62:14:72:64:c3:53:34:67:80:f1:
1f:68:eb:3b:3d:0c:96:56:46:8e:71:db:d2:db:3e:
b2:b1:3d:a7:d5:14:d3:e5:05:3b:5e:7b:34:38:29:
6b:59:de:cd:20:69:c8:9c:13:c3:83:d2:25:1f:93:
c9:50:76:a6:77:35:80:c5:ae:9b:e6:73:8c:82:7d:
a2:e5:a1:93:fd:fb:ea:12:50:31:e2:03:a7:26:56:
f1:61:eb:43:01:69:75:1b:56:f4:cc:91:ea:5f:b8:
f4:ce:cc:06:7b:94:8b:e9:b3:76:3b:b8:c0:0e:26:
0f:0c:03:0e:fa:b3:48:f0:bd:3c:88:1d:57:9f:9e:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:58:2C:C6:E8:47:9D:CE:60:07:37:65:21:76:24:58:70:68:E3
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a633030303a3a2f33342d3334203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bd8:c000::/34
Signature Algorithm: sha256WithRSAEncryption
1b:b9:a0:82:53:7c:9d:a5:cd:96:01:6d:97:a4:1a:86:7b:19:
60:9c:90:fc:e0:26:d3:78:fc:06:91:14:70:53:52:69:2c:c5:
08:e0:c4:1f:75:26:75:dd:74:4a:f6:f5:7c:7f:7c:da:7f:bd:
5a:5d:fc:ca:51:97:ef:29:4e:b3:d3:87:62:56:e8:d5:7f:bf:
d5:35:34:1f:32:cb:c8:67:cc:02:33:ab:6c:25:1c:b9:5c:b6:
cb:5a:ef:b9:3e:2d:c3:cb:c0:33:4a:a3:c4:dd:92:fc:0e:57:
72:05:34:b5:89:7c:6f:f4:23:78:6c:1b:0b:65:13:10:47:61:
4d:6d:32:f2:26:29:bc:f4:2d:fb:cd:3c:eb:d7:83:c0:4c:f8:
15:fd:5e:d4:57:e8:3e:20:88:44:a9:67:e6:5c:65:16:b4:2b:
d8:40:c5:d1:b9:f6:35:9d:ca:66:fc:a2:22:fd:e3:df:9e:c0:
86:f9:6b:af:be:70:3c:75:00:2c:d9:25:f7:31:d6:48:ef:20:
9b:76:c6:83:e6:7b:b2:37:40:1f:16:19:e3:d3:05:a2:47:ce:
be:a5:8a:93:8e:f7:25:ad:52:b7:5e:96:84:4a:ef:ad:f7:d0:
f6:89:c5:04:56:ea:86:a9:c6:ff:d6:86:f5:8a:fa:33:f9:bf:
9e:68:4e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:03 2025 by rpki-client