This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
File: 34352e352e3134302e302f32322d3234203d3e20323639363333.roa (raw, json)
Hash identifier: y67OfZVDPgRzpBLZEZwQMoDnGBKooIkz9ea+s66O1rY=
Subject key identifier: 1C:2E:48:A2:80:83:95:8E:59:1C:36:AB:48:7F:DC:03:2B:89:37:D0
Certificate issuer: /CN=E0535C65CD18E8B560ACC81BB4943E3B10085C1D
Certificate serial: 669EFD26E2D66728A7BB623D9C958A6F9C3A2A37
Authority key identifier: E0:53:5C:65:CD:18:E8:B5:60:AC:C8:1B:B4:94:3E:3B:10:08:5C:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
Signing time: Sat 27 Dec 2025 03:10:28 +0000
ROA not before: Sat 27 Dec 2025 03:05:28 +0000
ROA not after: Sat 26 Dec 2026 03:10:28 +0000
asID: 269633
IP address blocks: 45.5.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.crl
rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 10 Jan 2026 18:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:9e:fd:26:e2:d6:67:28:a7:bb:62:3d:9c:95:8a:6f:9c:3a:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0535C65CD18E8B560ACC81BB4943E3B10085C1D
Validity
Not Before: Dec 27 03:05:28 2025 GMT
Not After : Dec 26 03:10:28 2026 GMT
Subject: CN=1C2E48A28083958E591C36AB487FDC032B8937D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:52:9c:b5:80:4c:37:01:99:4c:e4:ff:e4:
66:db:ff:bc:b1:62:4a:b3:72:d2:f5:25:49:f6:e9:
e7:dd:8c:d0:4a:c1:aa:a1:0f:2d:ae:90:42:da:9e:
ce:f4:e5:07:53:e8:b9:49:70:a1:81:25:98:da:9e:
ce:d1:4d:a8:73:66:75:9d:34:54:49:16:b8:a2:c4:
7c:f7:eb:fb:a7:a3:01:de:69:c5:77:c1:56:4d:6f:
35:26:40:e5:d8:98:9f:fb:e4:2e:42:11:d7:83:a8:
9c:d9:4f:2b:6d:07:af:ed:b0:1b:6f:8e:c8:3b:46:
eb:70:7b:34:82:07:1c:3e:38:44:e3:7c:0b:9b:b3:
be:e5:95:c2:da:63:ff:68:50:a4:0f:2c:5c:ce:85:
dd:36:de:79:98:54:11:e2:86:53:a5:37:93:1e:ff:
b2:5e:1b:4d:3a:95:75:71:6d:66:aa:96:68:a6:50:
c4:34:45:a7:2a:80:ea:cc:34:23:c1:dd:de:01:fd:
32:db:69:f3:45:0f:f6:0d:b0:36:2b:57:ef:f7:c3:
dc:b2:95:1c:16:44:b0:1d:14:29:3a:cf:67:80:5b:
e7:fb:a0:14:ed:e9:fb:8e:d7:46:cd:cf:22:ab:f5:
22:90:49:9f:50:eb:2e:9c:d1:f9:3c:61:98:a5:00:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:48:A2:80:83:95:8E:59:1C:36:AB:48:7F:DC:03:2B:89:37:D0
X509v3 Authority Key Identifier:
keyid:E0:53:5C:65:CD:18:E8:B5:60:AC:C8:1B:B4:94:3E:3B:10:08:5C:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/34352e352e3134302e302f32322d3234203d3e20323639363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b4:67:41:a9:a9:5c:36:74:62:02:37:f6:66:80:8d:4b:50:
3e:c1:a6:7f:15:82:fe:a1:de:3f:80:26:3b:aa:77:55:c8:14:
90:c7:04:0b:9d:9f:8f:23:38:43:ae:be:f1:ea:4e:61:36:7d:
df:a3:59:ae:d8:ae:f1:8d:02:5b:ca:4e:f2:21:c1:65:45:db:
48:15:9e:c8:31:32:5b:1e:d2:f7:0e:1f:ae:e3:7c:78:a0:40:
db:cf:cd:28:d5:98:d0:c4:f2:36:7a:59:20:da:aa:07:be:f7:
1b:74:b3:64:0a:58:f5:f7:2a:da:e3:53:b8:ca:e8:3f:54:39:
d6:8a:ee:f5:7d:a1:c7:b4:3d:59:92:f6:e0:c8:a9:cb:e3:9b:
0d:b5:25:0d:22:12:c2:ef:02:3d:1c:eb:a6:29:43:8b:25:99:
95:7c:7d:2a:8e:f3:7f:ee:c0:de:0c:68:eb:7e:51:3f:08:16:
10:24:ef:7a:01:e5:9d:90:03:25:a6:45:0f:37:32:0c:ce:be:
fa:7c:bb:cf:98:dc:5d:f3:28:41:e9:9f:5f:a3:77:e8:3d:ac:
cf:15:74:75:24:9a:ac:78:28:76:7d:51:72:c0:f6:d2:ef:dc:
95:94:fb:43:3a:e7:68:15:b0:33:71:af:6d:6c:f4:11:d3:94:
dc:d0:f4:d3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZp79JuLWZyinu2I9nJWKb5w6KjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1MzVDNjVDRDE4RThCNTYwQUNDODFCQjQ5NDNFM0Ix
MDA4NUMxRDAeFw0yNTEyMjcwMzA1MjhaFw0yNjEyMjYwMzEwMjhaMDMxMTAvBgNV
BAMTKDFDMkU0OEEyODA4Mzk1OEU1OTFDMzZBQjQ4N0ZEQzAzMkI4OTM3RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQVKctYBMNwGZTOT/5Gbb/7yx
YkqzctL1JUn26efdjNBKwaqhDy2ukELans705QdT6LlJcKGBJZjans7RTahzZnWd
NFRJFriixHz36/unowHeacV3wVZNbzUmQOXYmJ/75C5CEdeDqJzZTyttB6/tsBtv
jsg7RutwezSCBxw+OETjfAubs77llcLaY/9oUKQPLFzOhd023nmYVBHihlOlN5Me
/7JeG006lXVxbWaqlmimUMQ0RacqgOrMNCPB3d4B/TLbafNFD/YNsDYrV+/3w9yy
lRwWRLAdFCk6z2eAW+f7oBTt6fuO10bNzyKr9SKQSZ9Q6y6c0fk8YZilAFBdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHC5IooCDlY5ZHDarSH/cAyuJN9AwHwYDVR0j
BBgwFoAU4FNcZc0Y6LVgrMgbtJQ+OxAIXB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZYVlpxcjdYNHk3UFFkeVZQNFg3bllhaHZrVG5ER1V1cVhwdzZmZ3dy
SjIvMC9FMDUzNUM2NUNEMThFOEI1NjBBQ0M4MUJCNDk0M0UzQjEwMDg1QzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwNTM1QzY1Q0QxOEU4QjU2
MEFDQzgxQkI0OTQzRTNCMTAwODVDMUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWWFZacXI3WDR5N1BRZHlWUDRYN25ZYWh2a1RuREdVdXFYcHc2Zmd3ckoyLzAv
MzQzNTJlMzUyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM2
MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0FjDANBgkqhkiG9w0BAQsFAAOCAQEAH7RnQampXDZ0
YgI39maAjUtQPsGmfxWC/qHeP4AmO6p3VcgUkMcEC52fjyM4Q66+8epOYTZ936NZ
rtiu8Y0CW8pO8iHBZUXbSBWeyDEyWx7S9w4fruN8eKBA28/NKNWY0MTyNnpZINqq
B773G3SzZApY9fcq2uNTuMroP1Q51oru9X2hx7Q9WZL24Mipy+ObDbUlDSISwu8C
PRzrpilDiyWZlXx9Ko7zf+7A3gxo635RPwgWECTvegHlnZADJaZFDzcyDM6++ny7
z5jcXfMoQemfX6N36D2szxV0dSSarHgodn1RcsD20u/clZT7QzrnaBWwM3GvbWz0
EdOU3ND00w==
-----END CERTIFICATE-----
Generated at Fri Jan 9 21:13:29 2026 by rpki-client