This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa
File: 34352e362e3139322e302f32322d3332203d3e20323636353435.roa (raw, json)
Hash identifier: YH680lgfZ081Y1oei0RageEt7fimwLvkD/vUyrtn+l4=
Subject key identifier: E0:38:E6:31:58:58:5C:6C:CE:6F:98:D2:3A:14:FB:09:30:A1:33:03
Certificate issuer: /CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
Certificate serial: 1604D1261298BC474F92960F18F86B5CC0E33095
Authority key identifier: 24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa
Signing time: Tue 23 Dec 2025 22:37:53 +0000
ROA not before: Tue 23 Dec 2025 22:32:53 +0000
ROA not after: Tue 22 Dec 2026 22:37:53 +0000
asID: 266545
IP address blocks: 45.6.192.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl
rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 17:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:d1:26:12:98:bc:47:4f:92:96:0f:18:f8:6b:5c:c0:e3:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2489F1FF97AF22D681753C8939AAAD3DB5781A11
Validity
Not Before: Dec 23 22:32:53 2025 GMT
Not After : Dec 22 22:37:53 2026 GMT
Subject: CN=E038E63158585C6CCE6F98D23A14FB0930A13303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:93:ba:54:d7:3c:59:69:70:be:0f:0e:fa:
e9:fc:5a:a8:c1:94:26:93:03:cf:de:9a:07:b9:75:
ff:2f:04:f7:0b:26:c8:2f:34:9a:32:11:3b:17:26:
7c:8e:46:80:1a:9b:fb:7a:a5:57:ba:34:fe:08:e3:
01:9a:fc:01:79:ff:f2:cf:c0:fa:15:3e:61:e3:f5:
70:4c:68:db:29:59:ea:61:4e:f2:b4:c7:69:6b:d4:
f4:73:94:be:2d:99:53:63:b4:c5:c1:b3:f2:21:cd:
44:66:78:92:7a:e8:59:36:0c:45:54:31:07:21:3e:
75:e2:a3:81:56:17:39:ad:b8:3c:6e:b4:9c:0a:3b:
9d:c1:bf:7f:60:90:11:af:30:99:ef:c3:14:d8:23:
90:83:30:c2:13:13:a6:cb:b5:1d:96:9d:df:0e:17:
75:21:4c:46:a0:d1:46:f6:38:89:ea:55:1e:71:e2:
ae:5a:b0:4f:3b:a6:28:d7:ec:0a:f5:59:29:aa:22:
b6:94:3a:b1:08:66:de:08:de:62:5d:6a:46:90:77:
d5:8a:69:c9:48:5b:a3:64:5e:5e:39:0b:c3:c7:ce:
f6:e2:74:3f:e7:7a:3e:68:25:97:e1:99:35:6f:62:
f0:4e:34:38:9d:71:bf:a9:ba:cf:09:c4:3e:56:a5:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:E6:31:58:58:5C:6C:CE:6F:98:D2:3A:14:FB:09:30:A1:33:03
X509v3 Authority Key Identifier:
keyid:24:89:F1:FF:97:AF:22:D6:81:75:3C:89:39:AA:AD:3D:B5:78:1A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/2489F1FF97AF22D681753C8939AAAD3DB5781A11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2489F1FF97AF22D681753C8939AAAD3DB5781A11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/34352e362e3139322e302f32322d3332203d3e20323636353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.192.0/22
Signature Algorithm: sha256WithRSAEncryption
47:02:b6:2a:65:3e:09:d9:a3:29:41:42:54:db:0c:bd:07:4e:
b0:a2:0a:81:99:20:28:28:79:d7:e3:62:5e:57:29:62:7e:02:
49:16:2f:be:a6:e4:a8:7f:9e:50:8e:b8:46:43:f6:9f:f4:6c:
9c:c0:fb:c0:44:1d:0c:ea:3f:7b:76:3a:cf:1f:14:6d:ce:3b:
18:85:e6:60:ae:5a:2b:06:eb:6c:51:32:ef:03:c1:3d:5c:db:
c3:66:39:fb:dc:15:2b:fa:37:65:e8:0b:2a:98:44:6f:6b:fa:
ee:04:6f:b8:5d:22:3f:9c:64:29:f3:72:24:6e:37:ef:8b:46:
ef:66:86:b8:49:ca:07:d5:18:eb:9e:a2:e7:07:69:fe:98:e0:
54:53:aa:60:e2:a6:a4:25:96:11:f4:ff:a5:25:ca:99:e4:88:
14:d4:d1:2a:3a:6a:4b:16:40:c2:6c:33:3a:57:e6:a0:0e:45:
ab:3e:ec:f1:b8:6f:7c:5b:02:c2:c0:54:3e:61:88:c0:c1:20:
ef:d9:f2:61:09:25:de:ae:0a:93:30:fd:bf:08:75:5c:38:fb:
4b:6c:5d:b0:9d:5f:9e:4e:9d:af:72:e9:0a:75:ad:f3:b2:be:
b0:73:c9:c0:bc:0f:94:11:a9:79:b1:5f:3f:8f:91:b2:c2:d7:
75:7b:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:41:02 2025 by rpki-client