This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32342d3234203d3e20323838333438.roa
File: 34352e3233392e302e302f32342d3234203d3e20323838333438.roa (raw, json)
Hash identifier: jXjqC4GyzcwnDedpIgE0AoIWNCu4Qbkt7Z45DgJpADw=
Subject key identifier: 49:7D:74:3A:67:F3:0B:AF:5D:A5:6E:50:0B:F6:45:1B:D4:9D:DD:A0
Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial: 583F82662CB53B96AD13874E2FEE781F67F932F6
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32342d3234203d3e20323838333438.roa
Signing time: Fri 12 Dec 2025 15:03:46 +0000
ROA not before: Fri 12 Dec 2025 14:58:46 +0000
ROA not after: Fri 11 Dec 2026 15:03:46 +0000
asID: 288348
IP address blocks: 45.239.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 14:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3f:82:66:2c:b5:3b:96:ad:13:87:4e:2f:ee:78:1f:67:f9:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Validity
Not Before: Dec 12 14:58:46 2025 GMT
Not After : Dec 11 15:03:46 2026 GMT
Subject: CN=497D743A67F30BAF5DA56E500BF6451BD49DDDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:11:d8:85:38:22:e1:f6:53:bb:90:70:af:
e3:22:cb:2f:a9:03:71:c6:b3:1b:06:92:67:a4:23:
ed:a2:1e:d4:06:e7:03:df:d4:ad:5e:6d:04:ed:b7:
bc:ea:cb:9c:fc:b8:62:6e:4a:b3:e9:8f:12:99:0f:
78:af:b2:18:71:81:20:84:ed:4d:cb:e9:d1:e8:9d:
ef:2f:d0:78:34:ce:b7:88:0e:8a:d1:78:5d:aa:5d:
24:e9:aa:8a:ca:bc:03:a2:27:b0:5e:a5:15:ea:c4:
2e:dc:f9:51:f4:df:a1:5d:0e:4e:da:52:19:03:ac:
b3:df:13:f7:cd:24:5c:03:88:a1:fe:f3:88:0f:ad:
c5:ea:f6:2f:91:ef:6d:06:3d:84:7d:7e:ba:ef:3e:
55:86:22:cc:c2:91:1b:61:5b:bd:b9:e8:75:f0:5c:
02:4a:38:f2:df:e2:66:3e:56:ab:d9:5d:1b:5f:07:
a7:73:6d:95:5c:42:a6:9f:7e:61:b7:d7:76:46:1e:
5e:be:22:ac:d5:16:d8:71:84:15:1b:42:11:1b:b1:
30:74:25:37:73:a0:2b:10:2a:65:29:46:15:30:8f:
fd:36:65:bc:ea:bd:fd:27:51:21:4e:cb:15:9b:1b:
0a:23:bd:0d:fc:11:df:b9:68:7f:99:bf:76:95:d4:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:74:3A:67:F3:0B:AF:5D:A5:6E:50:0B:F6:45:1B:D4:9D:DD:A0
X509v3 Authority Key Identifier:
keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32342d3234203d3e20323838333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7e:de:97:48:da:7c:33:b6:ec:28:bb:b8:9c:40:7d:ca:f7:
b7:ee:8c:6a:59:4a:51:9b:8a:ca:20:7e:cb:1f:d0:e5:0c:45:
91:21:6e:14:64:9e:0e:b0:a9:36:04:67:5b:fa:77:10:ea:54:
87:41:51:bf:15:6c:28:ca:12:6a:e8:2c:43:8b:b4:44:5f:54:
c4:3e:ef:d3:bc:57:4e:ec:ab:5c:56:a4:74:3a:e5:e6:3c:e1:
ed:26:32:ca:38:76:32:1b:4d:d4:2f:d3:a3:57:0b:cc:bb:90:
56:6a:d0:6c:62:70:83:f2:10:f6:9f:e2:3a:5b:9e:ad:83:3c:
b3:cb:e3:92:7a:7e:1e:57:c7:a8:11:4c:b1:11:70:5d:fa:8f:
f0:e0:0a:e4:a4:5e:da:23:55:1b:6e:c1:d1:94:79:c6:e2:b8:
e4:e8:16:44:a8:cb:57:d6:96:4d:ee:3f:d0:38:48:69:fa:9a:
9e:c4:6a:b9:42:d6:08:e2:66:31:49:ac:60:23:28:5c:48:a7:
1b:4c:8b:34:28:14:89:72:5b:16:f0:48:5f:c0:34:57:39:0e:
22:ae:ea:1d:a7:6c:41:d8:ba:45:0d:dd:91:80:b4:c2:7a:c7:
2f:a0:b1:b4:5a:6e:49:a0:d2:8e:a8:ed:62:cb:61:78:8b:c0:
8f:01:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:05:11 2025 by rpki-client