This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230392e302f32342d3234203d3e20323636323638.roa
File: 34352e36352e3230392e302f32342d3234203d3e20323636323638.roa (raw, json)
Hash identifier: Hv0YJzhIwSQhSYQkWAdSwUDRzkDq8cu98X32JDQ0oAg=
Subject key identifier: 4C:0E:C7:FD:2A:6C:DA:66:0D:A8:AC:6F:A3:4A:01:25:31:52:4D:90
Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Certificate serial: 3184AC6B310EDF5A25587003DEE6C2A41D522844
Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230392e302f32342d3234203d3e20323636323638.roa
Signing time: Mon 22 Dec 2025 19:16:32 +0000
ROA not before: Mon 22 Dec 2025 19:11:32 +0000
ROA not after: Mon 21 Dec 2026 19:16:32 +0000
asID: 266268
IP address blocks: 45.65.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 22:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:84:ac:6b:31:0e:df:5a:25:58:70:03:de:e6:c2:a4:1d:52:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15
Validity
Not Before: Dec 22 19:11:32 2025 GMT
Not After : Dec 21 19:16:32 2026 GMT
Subject: CN=4C0EC7FD2A6CDA660DA8AC6FA34A012531524D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:23:8d:07:b6:b7:86:f3:d8:4b:0f:da:4b:
b8:dc:49:0c:50:e5:f9:9e:74:1e:22:c4:55:13:4c:
82:6c:7f:27:65:60:f6:2b:9c:9b:69:00:51:96:5a:
6f:a7:72:24:f3:54:41:ae:fc:e4:91:e0:9e:79:a3:
29:b6:de:4b:d4:fd:a5:ac:94:10:4e:69:22:f1:24:
d2:ce:7d:e3:08:a6:3a:54:9b:30:2d:f1:75:78:49:
f3:ca:d2:4b:60:6c:11:94:ff:2e:eb:2d:7d:cb:1c:
bc:19:9b:af:30:8a:a0:0e:85:93:4d:be:75:9a:bc:
30:ac:fb:ef:4a:bc:1e:ae:f4:ac:aa:6a:07:0c:4f:
3b:e3:bf:9a:4a:f6:40:2a:f6:d9:68:d4:63:7e:b8:
3b:89:62:ee:8a:22:ae:24:c0:d4:c9:95:83:f2:fa:
fc:ca:ab:27:ee:65:59:15:ba:dc:58:e3:e5:66:52:
83:d9:ea:ab:96:22:b7:a0:13:fe:e0:7d:4b:96:42:
91:85:02:f5:41:2a:56:3e:e0:7b:99:ac:8e:7c:aa:
09:ab:6d:b5:fa:f3:f5:48:29:07:b9:10:64:ad:9b:
27:33:3e:15:4a:f0:48:38:3e:3b:a9:af:10:4d:a5:
ef:a5:73:2c:68:7e:f9:d1:ca:85:ba:2e:dc:8e:09:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:C7:FD:2A:6C:DA:66:0D:A8:AC:6F:A3:4A:01:25:31:52:4D:90
X509v3 Authority Key Identifier:
keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230392e302f32342d3234203d3e20323636323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0a:49:67:9e:9c:87:97:b5:57:a1:98:1c:e0:e4:a5:f2:da:
4e:fe:ea:16:8f:d9:ba:ab:2b:d7:ef:7a:c2:91:9a:e7:1b:87:
45:62:2a:93:96:fc:44:a4:3e:e0:31:70:31:6d:31:1e:8e:d4:
1e:70:fc:d2:47:28:74:85:3b:04:67:da:9b:9c:35:d2:68:72:
33:cd:4c:2e:8e:95:24:38:3a:a5:02:06:1a:01:ae:6b:27:6a:
a7:a0:8d:01:61:de:0e:5c:22:a4:7b:c0:f5:62:9c:9c:a6:c0:
cb:96:48:c2:03:36:c9:c8:a0:eb:ff:dc:93:f6:9c:df:b9:da:
d7:05:7d:ca:23:c5:bb:76:f7:a1:ad:4f:52:ae:9b:55:f1:14:
60:aa:2e:01:c4:88:85:1e:69:8d:2e:8e:ae:64:aa:af:f1:e1:
2f:d9:1f:6b:fd:fa:cc:1c:d3:06:13:2a:37:ae:d7:fb:10:56:
c3:c1:83:00:5a:07:2d:03:bb:9b:ee:80:3e:18:1f:f7:27:5a:
9f:e5:b5:94:5a:56:6b:02:50:aa:e4:11:05:0a:8c:60:71:e2:
66:0c:76:bd:cb:16:52:51:37:85:cc:68:84:58:ed:ab:c5:27:
93:c9:81:bd:d5:47:ac:b4:d5:d1:de:8b:fb:3b:83:6d:ce:c3:
ad:18:a4:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMYSsazEO31olWHAD3ubCpB1SKEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG
MjU2MUYxNTAeFw0yNTEyMjIxOTExMzJaFw0yNjEyMjExOTE2MzJaMDMxMTAvBgNV
BAMTKDRDMEVDN0ZEMkE2Q0RBNjYwREE4QUM2RkEzNEEwMTI1MzE1MjREOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkyONB7a3hvPYSw/aS7jcSQxQ
5fmedB4ixFUTTIJsfydlYPYrnJtpAFGWWm+nciTzVEGu/OSR4J55oym23kvU/aWs
lBBOaSLxJNLOfeMIpjpUmzAt8XV4SfPK0ktgbBGU/y7rLX3LHLwZm68wiqAOhZNN
vnWavDCs++9KvB6u9KyqagcMTzvjv5pK9kAq9tlo1GN+uDuJYu6KIq4kwNTJlYPy
+vzKqyfuZVkVutxY4+VmUoPZ6quWIregE/7gfUuWQpGFAvVBKlY+4HuZrI58qgmr
bbX68/VIKQe5EGStmyczPhVK8Eg4PjuprxBNpe+lcyxofvnRyoW6LtyOCWzBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTA7H/Sps2mYNqKxvo0oBJTFSTZAwHwYDVR0j
BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE
RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzQzNTJlMzYzNTJlMzIzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUHRMA0GCSqGSIb3DQEBCwUAA4IBAQBqCklnnpyH
l7VXoZgc4OSl8tpO/uoWj9m6qyvX73rCkZrnG4dFYiqTlvxEpD7gMXAxbTEejtQe
cPzSRyh0hTsEZ9qbnDXSaHIzzUwujpUkODqlAgYaAa5rJ2qnoI0BYd4OXCKke8D1
YpycpsDLlkjCAzbJyKDr/9yT9pzfudrXBX3KI8W7dvehrU9SrptV8RRgqi4BxIiF
HmmNLo6uZKqv8eEv2R9r/frMHNMGEyo3rtf7EFbDwYMAWgctA7ub7oA+GB/3J1qf
5bWUWlZrAlCq5BEFCoxgceJmDHa9yxZSUTeFzGiEWO2rxSeTyYG91UestNXR3ov7
O4NtzsOtGKST
-----END CERTIFICATE-----
Generated at Tue Dec 23 10:56:05 2025 by rpki-client