This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
File: 34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (raw, json)
Hash identifier: iEQhmInTbcurGtDPmbOAgQnI1bBe4ECJgAm2A9xUQMM=
Subject key identifier: 30:BC:96:54:17:5C:25:41:C6:20:15:98:37:40:E6:E4:C7:FC:09:D0
Certificate issuer: /CN=27A06570A793C21B8D116720BF8BB4DF97989D2E
Certificate serial: 7C3080407F4055046A593F5B082E805C4B1A561C
Authority key identifier: 27:A0:65:70:A7:93:C2:1B:8D:11:67:20:BF:8B:B4:DF:97:98:9D:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A06570A793C21B8D116720BF8BB4DF97989D2E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
Signing time: Sat 13 Dec 2025 06:21:35 +0000
ROA not before: Sat 13 Dec 2025 06:16:35 +0000
ROA not after: Sat 12 Dec 2026 06:21:35 +0000
asID: 269681
IP address blocks: 45.191.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/27A06570A793C21B8D116720BF8BB4DF97989D2E.crl
rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/27A06570A793C21B8D116720BF8BB4DF97989D2E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A06570A793C21B8D116720BF8BB4DF97989D2E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 16 Dec 2025 11:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:30:80:40:7f:40:55:04:6a:59:3f:5b:08:2e:80:5c:4b:1a:56:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A06570A793C21B8D116720BF8BB4DF97989D2E
Validity
Not Before: Dec 13 06:16:35 2025 GMT
Not After : Dec 12 06:21:35 2026 GMT
Subject: CN=30BC9654175C2541C62015983740E6E4C7FC09D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:1a:12:1a:bd:6f:8a:6e:db:23:19:58:21:
4c:07:d9:11:16:e0:9f:06:5a:8d:0c:3e:e3:c6:6a:
49:42:af:f9:71:97:ef:bc:df:1a:78:67:95:69:fa:
3f:44:43:a3:25:09:7b:bf:df:06:20:22:35:51:22:
a4:c9:8f:ce:00:bf:4d:7e:c5:62:48:ea:76:e2:7e:
43:aa:ef:c9:d1:bf:3a:a3:70:ab:59:63:7a:48:cd:
43:35:b8:29:2e:da:a1:0b:ac:e9:f0:4b:7c:7e:76:
10:43:c0:72:8b:54:14:71:b7:d7:aa:7e:68:5f:40:
f8:2f:ab:a9:95:17:45:6f:a3:6c:4c:a2:25:53:21:
63:30:0f:69:9a:c8:9f:d4:09:54:5a:f8:b6:73:32:
a3:c3:33:f6:fb:ef:11:66:11:d3:9a:de:d4:e8:85:
07:9f:36:51:ff:78:78:f3:02:21:ea:41:ea:43:ec:
a7:86:c8:d0:4d:83:24:a2:5d:12:74:03:3b:8e:c4:
b0:6d:a6:b1:f1:b3:ce:5d:ea:7c:07:9d:1c:35:b1:
ba:7b:f3:49:12:f1:6a:9c:af:ee:43:d6:fe:44:2d:
8c:79:77:97:c3:df:2b:01:2d:38:90:b1:54:eb:97:
91:5e:fd:1e:62:6f:59:61:21:61:75:5d:02:e3:0e:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BC:96:54:17:5C:25:41:C6:20:15:98:37:40:E6:E4:C7:FC:09:D0
X509v3 Authority Key Identifier:
keyid:27:A0:65:70:A7:93:C2:1B:8D:11:67:20:BF:8B:B4:DF:97:98:9D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/27A06570A793C21B8D116720BF8BB4DF97989D2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A06570A793C21B8D116720BF8BB4DF97989D2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.120.0/22
Signature Algorithm: sha256WithRSAEncryption
27:53:33:48:08:d0:3b:f6:f6:f5:f0:26:e3:87:e8:9a:ac:1c:
0e:3b:7a:5d:30:e3:82:67:9b:fb:06:c9:81:cd:e9:a5:ea:eb:
3c:63:8b:64:e0:35:47:4c:1e:bd:7d:a5:58:58:da:52:7c:89:
4d:fa:71:70:4c:44:1b:4c:05:31:84:26:67:f1:79:b5:a9:45:
32:31:fb:88:d5:45:ac:2f:87:9d:73:21:4b:e5:0a:64:35:6f:
b3:f9:17:d2:ed:e2:f3:0b:bd:bd:53:30:6b:bf:ec:e2:25:f0:
f3:c9:59:ab:5a:fd:78:be:29:78:f8:a3:32:06:a5:e6:10:b3:
88:2e:eb:db:b4:b4:12:8d:97:ff:26:e2:ac:0e:00:86:a3:d6:
46:c2:f3:ac:b7:88:e2:8f:87:6c:60:cb:f1:f3:4b:d3:11:86:
27:86:1f:55:e9:55:54:6b:86:b0:da:42:7a:f9:b9:e0:7b:0b:
e5:98:12:66:cb:b5:dc:b9:17:5b:69:29:07:65:f3:60:89:e1:
6a:02:9f:fe:d4:3c:27:7c:3d:07:c0:4f:d0:51:ac:c9:17:ae:
c4:aa:3c:b3:8e:57:8d:ae:a4:14:d2:c4:63:17:b3:d9:1f:a6:
ba:22:56:6c:38:9b:e4:a4:31:77:3e:8f:f3:42:57:02:71:ec:
bc:3f:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:14:08 2025 by rpki-client