This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa
File: 34352e362e35322e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier: T6sbK5ATj2loD2AeZWKwxGT7cpC21JxW6XuMUh/Z/I0=
Subject key identifier: B3:8C:D0:2D:40:9F:3D:02:BA:DA:97:90:2D:42:B6:CB:D9:F3:F6:AC
Certificate issuer: /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial: 068A076F3E8C5C74175575EC365505FD585B544C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa
Signing time: Tue 09 Dec 2025 20:01:54 +0000
ROA not before: Tue 09 Dec 2025 19:56:54 +0000
ROA not after: Tue 08 Dec 2026 20:01:54 +0000
asID: 0
IP address blocks: 45.6.52.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8a:07:6f:3e:8c:5c:74:17:55:75:ec:36:55:05:fd:58:5b:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Validity
Not Before: Dec 9 19:56:54 2025 GMT
Not After : Dec 8 20:01:54 2026 GMT
Subject: CN=B38CD02D409F3D02BADA97902D42B6CBD9F3F6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:72:97:e3:49:91:ad:f7:6b:7e:b6:e6:52:
c8:8a:50:04:3d:ef:cc:3e:3d:2f:ed:33:43:57:1f:
a9:d9:67:90:10:d3:e1:ee:a4:af:19:e8:ec:f5:2e:
1c:a3:6f:38:44:4b:b2:27:b9:b8:eb:ac:df:3b:0f:
46:9f:d3:d5:4f:a5:c7:8a:2d:c0:32:f0:1e:6e:6b:
8e:6e:ec:8f:69:5d:05:4d:ec:f2:6b:95:6e:f1:10:
d5:c9:0d:9c:19:d7:d6:d6:08:b1:f4:34:ef:3e:90:
78:9d:cd:6c:60:cd:e3:15:fa:e7:13:66:0f:02:01:
f4:54:6f:44:63:58:88:22:66:86:05:f0:ca:ac:b7:
80:3f:30:70:52:51:a8:a8:c0:dc:9c:3b:0a:56:40:
46:fc:29:c0:49:b6:d5:53:0f:c3:7c:a6:85:1d:36:
23:fd:f2:4c:33:19:07:18:09:ee:52:8c:b4:d8:4c:
50:fa:1a:7e:16:5b:02:eb:26:ec:c3:9e:d3:f5:3f:
f5:f3:23:54:1f:78:9b:32:34:fb:6f:14:c2:5c:46:
1d:3a:3e:92:93:4f:ea:67:21:06:1e:0c:e7:7e:3c:
5b:c7:08:65:51:73:89:97:00:a5:ab:a5:03:02:8e:
be:8a:ab:81:8f:63:75:b4:e9:22:c3:24:5e:04:b3:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:D0:2D:40:9F:3D:02:BA:DA:97:90:2D:42:B6:CB:D9:F3:F6:AC
X509v3 Authority Key Identifier:
keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e362e35322e302f32322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.52.0/22
Signature Algorithm: sha256WithRSAEncryption
43:98:11:43:64:27:73:43:07:6d:f4:8f:4f:d5:36:c2:8b:1b:
dc:e7:88:0c:b8:a5:a4:c4:1d:78:b6:03:1f:f4:42:68:c4:68:
e0:b4:80:93:fd:c3:81:58:9f:13:34:7a:90:36:b1:bb:0c:8d:
19:a4:94:f9:00:e8:df:ac:33:0f:7a:13:bf:e0:3c:db:6b:2b:
dd:d1:8c:5e:46:48:3b:14:a8:6f:2d:ca:dd:c5:d0:1d:69:4f:
da:c7:1b:00:3f:aa:9e:60:9e:a1:dd:f5:76:56:bf:70:6f:4f:
9a:ae:f3:3f:63:b0:7a:80:68:04:7e:8e:79:31:33:3b:60:8f:
4d:f3:86:f5:33:b2:bd:59:80:35:3b:b2:e9:62:82:ab:f5:0e:
07:7c:92:ea:6a:73:1e:59:14:69:8a:16:e4:40:3b:ef:ed:5b:
1b:2c:34:db:a6:fc:0f:83:0c:6a:49:48:3f:3c:30:b5:b9:8a:
ad:e7:64:b1:db:d6:b6:6a:a8:f1:b8:c5:15:09:5e:96:6b:ad:
24:18:8e:02:1f:ee:40:a5:99:ea:6f:7d:59:8e:d1:17:e1:12:
04:62:ec:63:78:13:b3:a9:61:5a:95:e9:9d:48:fb:1e:ef:d6:
34:48:35:ca:3c:64:df:31:0c:0f:41:a8:16:cd:af:ac:43:85:
a4:5a:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:15:49 2025 by rpki-client