This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa
File: 34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier: EDwgP1aaaFsp1FZU4ejOSLhb6KBhxwjiwiLY64jjeAk=
Subject key identifier: 6A:3F:D5:2E:5F:E7:DB:F4:1B:C0:CA:1D:A1:2F:0D:D3:42:46:57:5B
Certificate issuer: /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial: 2B24F44A38DB08431A41A1E89E27681563C55627
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa
Signing time: Thu 18 Dec 2025 12:33:09 +0000
ROA not before: Thu 18 Dec 2025 12:28:09 +0000
ROA not after: Thu 17 Dec 2026 12:33:09 +0000
asID: 263980
IP address blocks: 45.232.200.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 03:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:24:f4:4a:38:db:08:43:1a:41:a1:e8:9e:27:68:15:63:c5:56:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Validity
Not Before: Dec 18 12:28:09 2025 GMT
Not After : Dec 17 12:33:09 2026 GMT
Subject: CN=6A3FD52E5FE7DBF41BC0CA1DA12F0DD34246575B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:7a:dc:c1:64:62:17:76:85:68:52:40:d9:
5d:ac:0c:04:b9:08:6b:1e:28:81:99:71:c0:d5:67:
4f:9d:20:26:8a:2f:e1:09:1b:62:22:0d:38:ef:8d:
37:26:6e:b3:d2:be:93:f9:ed:05:b6:68:dd:7f:ee:
99:c6:f9:ba:93:8b:24:b3:2f:7a:e4:9b:cc:cb:51:
70:3e:0a:6f:2e:ce:2b:93:91:ba:70:8c:c9:57:8b:
e7:aa:84:03:ed:05:f5:8b:fe:3a:04:a3:50:3d:28:
c6:95:b0:01:bd:ff:d6:29:be:bd:e1:1f:d7:8a:90:
f5:79:a4:cc:f2:f9:fa:0b:fc:0b:88:e1:54:8b:15:
07:58:63:6d:7d:2f:2c:de:22:6c:b0:94:3a:3c:c7:
18:b3:a1:1c:61:75:ce:2e:93:88:9e:09:bc:2b:0f:
44:d4:55:00:83:99:c5:56:b5:9c:c0:40:b8:a2:7c:
7b:65:ff:36:71:f1:13:8e:03:f2:23:03:9e:01:9f:
8b:e0:18:47:85:a5:63:80:2f:98:0c:38:41:ca:48:
1a:09:c4:dd:57:a5:db:9f:dc:5a:cd:4e:40:3d:df:
15:f2:04:81:2a:f1:48:a4:13:f9:dd:1c:f4:05:fc:
8e:04:5f:47:a9:08:b4:ec:f9:2b:0f:0d:d6:52:00:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:D5:2E:5F:E7:DB:F4:1B:C0:CA:1D:A1:2F:0D:D3:42:46:57:5B
X509v3 Authority Key Identifier:
keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3230302e302f32322d3332203d3e20323633393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.200.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c4:ca:ea:60:bd:1e:26:87:69:4e:09:cf:1a:db:45:68:68:
38:86:fc:e7:1b:6c:85:ec:02:9e:be:6d:77:80:5b:cd:92:60:
14:84:ed:9a:20:bb:88:c1:39:f4:6f:5f:89:19:0e:fa:d8:e7:
89:6a:b5:ea:84:92:b2:b0:7a:89:71:65:e4:f4:42:a1:46:fb:
75:e6:f1:48:fa:d0:7e:0d:a3:d2:a5:89:38:f0:09:a0:2b:aa:
f3:30:a3:3c:84:03:42:44:00:40:28:d2:cf:96:e4:74:f1:d0:
ad:b1:b4:a3:a5:af:9a:54:14:31:71:e9:77:17:88:98:ca:c8:
e0:a7:ec:c2:ec:25:a1:98:4a:81:04:06:64:5a:cc:24:3a:1b:
f1:58:f4:03:76:5a:12:18:18:69:0c:44:2b:b3:91:64:b2:62:
fd:e4:ef:ce:f9:1b:aa:2e:84:18:80:fa:53:d3:b6:03:9f:93:
b4:2f:7c:32:04:c6:d7:3e:f5:82:3f:6f:5d:27:2e:45:06:b3:
74:53:52:e5:ef:2f:b7:54:c1:c3:ad:08:87:c1:0d:6c:52:61:
99:6a:47:79:94:26:ef:62:32:9b:2d:85:8b:eb:3f:31:83:50:
0a:f7:5d:46:a6:bd:10:64:87:3a:83:ef:bc:d1:75:13:83:c4:
6a:f3:91:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKyT0SjjbCEMaQaHonidoFWPFVicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyNDQ3Qjg1NDI0QzhDRTMxNjlCMEU2N0NBQkFDQkMz
MzEyNEYxNjAeFw0yNTEyMTgxMjI4MDlaFw0yNjEyMTcxMjMzMDlaMDMxMTAvBgNV
BAMTKDZBM0ZENTJFNUZFN0RCRjQxQkMwQ0ExREExMkYwREQzNDI0NjU3NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz3rcwWRiF3aFaFJA2V2sDAS5
CGseKIGZccDVZ0+dICaKL+EJG2IiDTjvjTcmbrPSvpP57QW2aN1/7pnG+bqTiySz
L3rkm8zLUXA+Cm8uziuTkbpwjMlXi+eqhAPtBfWL/joEo1A9KMaVsAG9/9Ypvr3h
H9eKkPV5pMzy+foL/AuI4VSLFQdYY219LyzeImywlDo8xxizoRxhdc4uk4ieCbwr
D0TUVQCDmcVWtZzAQLiifHtl/zZx8ROOA/IjA54Bn4vgGEeFpWOAL5gMOEHKSBoJ
xN1Xpduf3FrNTkA93xXyBIEq8UikE/ndHPQF/I4EX0epCLTs+SsPDdZSADb1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaj/VLl/n2/QbwModoS8N00JGV1swHwYDVR0j
BBgwFoAUsSRHuFQkyM4xabDmfKusvDMSTxYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVXR2VNVWdla0hKZDg3M1pnSGRjSjk5c1dEbllRelZtSnlVck5QUHRE
OVMvMC9CMTI0NDdCODU0MjRDOENFMzE2OUIwRTY3Q0FCQUNCQzMzMTI0RjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMjQ0N0I4NTQyNEM4Q0Uz
MTY5QjBFNjdDQUJBQ0JDMzMxMjRGMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1V0dlTVVnZWtISmQ4NzNaZ0hkY0o5OXNXRG5ZUXpWbUp5VXJOUFB0RDlTLzAv
MzQzNTJlMzIzMzMyMmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzOTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6MgwDQYJKoZIhvcNAQELBQADggEBAGDEyupg
vR4mh2lOCc8a20VoaDiG/OcbbIXsAp6+bXeAW82SYBSE7Zogu4jBOfRvX4kZDvrY
54lqteqEkrKweolxZeT0QqFG+3Xm8Uj60H4No9KliTjwCaArqvMwozyEA0JEAEAo
0s+W5HTx0K2xtKOlr5pUFDFx6XcXiJjKyOCn7MLsJaGYSoEEBmRazCQ6G/FY9AN2
WhIYGGkMRCuzkWSyYv3k7875G6ouhBiA+lPTtgOfk7QvfDIExtc+9YI/b10nLkUG
s3RTUuXvL7dUwcOtCIfBDWxSYZlqR3mUJu9iMpsthYvrPzGDUAr3XUamvRBkhzqD
77zRdRODxGrzkUM=
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:14:13 2025 by rpki-client