This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa
File: 34352e3139302e32312e302f32342d3234203d3e20323639363038.roa (raw, json)
Hash identifier: a6yS35OBrvfAgwENFV2Ffdhi0aVqDSWGTXAVZBdJSL0=
Subject key identifier: 38:55:90:2E:44:83:59:9E:A7:23:CA:99:7F:0D:A5:EE:FC:23:82:EB
Certificate issuer: /CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
Certificate serial: 45A3BAA6A39640A37EE3A730388F1B0B1928947E
Authority key identifier: 77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa
Signing time: Tue 30 Dec 2025 16:15:32 +0000
ROA not before: Tue 30 Dec 2025 16:10:32 +0000
ROA not after: Tue 29 Dec 2026 16:15:32 +0000
asID: 269608
IP address blocks: 45.190.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl
rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 10:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a3:ba:a6:a3:96:40:a3:7e:e3:a7:30:38:8f:1b:0b:19:28:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77858F0B49CF01FBE34EAD0268D2D6A0B31685C4
Validity
Not Before: Dec 30 16:10:32 2025 GMT
Not After : Dec 29 16:15:32 2026 GMT
Subject: CN=3855902E4483599EA723CA997F0DA5EEFC2382EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:70:85:e4:63:0e:7b:9c:f1:9e:e1:82:fa:
96:a6:1c:c8:b2:27:b1:b0:d0:11:32:b7:e3:d0:d1:
a8:85:c4:48:0b:4f:4f:34:c4:de:bc:80:16:c0:00:
1f:43:fa:e5:22:94:72:49:80:73:64:e3:27:f0:64:
e1:d4:97:f0:c9:a1:36:0d:e0:da:33:8c:24:c1:c4:
5a:0b:ab:64:73:d1:29:00:d5:74:3b:6d:7c:4c:30:
5b:c9:e3:70:a5:c0:27:c7:a9:8c:77:0e:8c:74:c1:
e9:d7:ca:3c:19:ff:9e:2b:fb:9a:d6:e9:5a:d1:38:
4f:e6:25:78:1d:d0:74:b5:e6:d0:65:bc:01:51:95:
85:ca:f0:2d:f3:09:df:13:78:fb:b9:8b:de:26:a3:
0c:5b:a8:ae:da:89:12:7f:2a:41:b2:a8:14:eb:47:
f0:02:28:df:79:3c:92:bd:4a:8b:7b:86:5a:e3:88:
bb:09:b7:da:60:96:67:7a:97:35:cf:2a:c8:43:6d:
7f:10:f6:80:2e:55:e1:1b:ba:62:32:40:f8:0e:f0:
5e:e5:22:c1:eb:f0:d1:f9:5e:de:62:9e:55:e4:cb:
7f:30:16:4d:a2:37:2a:d7:72:af:5e:ce:3e:ab:d9:
24:f9:01:8c:10:89:52:46:18:c7:53:14:58:cf:44:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:90:2E:44:83:59:9E:A7:23:CA:99:7F:0D:A5:EE:FC:23:82:EB
X509v3 Authority Key Identifier:
keyid:77:85:8F:0B:49:CF:01:FB:E3:4E:AD:02:68:D2:D6:A0:B3:16:85:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77858F0B49CF01FBE34EAD0268D2D6A0B31685C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/2/34352e3139302e32312e302f32342d3234203d3e20323639363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.21.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:80:35:b1:a2:f9:11:1d:d9:da:0a:b7:34:9e:5b:3a:51:d1:
e0:11:1f:1d:2b:3e:c4:90:9e:4c:b5:ef:6f:46:8f:ec:ce:e8:
c7:86:7d:94:a7:04:3c:81:84:ec:f0:d3:16:92:64:2e:25:22:
96:b3:d6:a9:90:54:43:a0:0a:02:13:05:02:66:ae:03:f8:7d:
6a:38:9e:67:e3:f5:0b:86:ed:07:cf:69:15:61:f5:1c:74:aa:
5c:b0:9b:5a:ad:22:41:a1:34:ef:76:f9:65:a4:1a:41:5b:ba:
b1:29:78:4b:05:fe:45:29:95:45:7d:18:af:0b:1a:d2:0f:8f:
76:b2:ef:03:b2:14:e0:f0:0d:e3:74:f6:45:72:77:1b:32:d7:
0b:c9:82:e8:1d:ac:26:1a:08:a9:b1:b6:cd:27:e7:49:a5:e3:
5a:64:e7:f0:d4:da:c3:26:1b:70:d3:64:40:db:f3:62:e4:db:
44:1b:d6:b9:05:58:11:f2:1e:6f:cf:d7:91:08:22:c8:53:64:
9f:ec:10:cb:22:56:d7:79:d5:1d:2d:98:58:fd:48:75:aa:3e:
45:d6:6c:1e:4e:d0:9b:29:b3:b2:94:a8:15:91:30:7b:72:89:
5e:06:94:50:93:13:72:a6:40:65:24:1f:b1:82:41:1d:36:04:
c5:ba:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:38:52 2026 by rpki-client