This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa
File: 34352e3233392e322e302f32342d3234203d3e20323838333438.roa (raw, json)
Hash identifier: SNdm+xTrERJRASdVVTfjgLDhBuzYN0HGIOjd6/NQFgY=
Subject key identifier: 25:D0:88:E1:E0:85:E9:4E:88:36:E1:A1:7A:1B:1E:7F:80:D0:63:9F
Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial: 371A4444D6F2316298C7E9FD8E361B670F162B1A
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa
Signing time: Fri 12 Dec 2025 15:03:46 +0000
ROA not before: Fri 12 Dec 2025 14:58:46 +0000
ROA not after: Fri 11 Dec 2026 15:03:46 +0000
asID: 288348
IP address blocks: 45.239.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 14:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1a:44:44:d6:f2:31:62:98:c7:e9:fd:8e:36:1b:67:0f:16:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Validity
Not Before: Dec 12 14:58:46 2025 GMT
Not After : Dec 11 15:03:46 2026 GMT
Subject: CN=25D088E1E085E94E8836E1A17A1B1E7F80D0639F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:c4:fd:c5:e2:b3:d3:e6:d0:f7:b6:c7:6d:
fc:a3:21:76:ac:70:6e:cc:d6:79:64:f8:96:08:42:
38:70:2c:93:ed:cf:62:82:14:cd:b3:e7:8c:23:b5:
c7:88:19:9a:1e:92:82:06:3c:dd:6e:a8:cd:64:14:
9d:fb:ab:4a:74:a5:b7:40:e8:6e:da:a7:de:bb:e8:
c5:2a:3d:c2:f5:c8:54:a5:34:9c:a5:53:a4:93:4a:
11:94:25:11:26:a0:2a:27:be:51:3f:db:9f:4b:ea:
a7:54:61:ca:6a:c0:bd:2d:a4:7c:d6:23:a9:20:68:
84:9a:0e:a8:29:4f:f5:0f:f2:95:be:91:f3:7e:a2:
b7:a8:3c:88:69:9a:29:29:89:7a:de:24:fe:23:f5:
ff:cc:f4:5b:22:b9:39:a2:ef:08:57:a4:99:b5:d8:
cd:c6:40:67:35:fb:78:f8:63:28:ce:5c:8b:aa:3b:
bd:2e:09:21:97:36:e3:d9:de:0c:91:f0:57:07:49:
9a:99:bf:f2:08:21:14:60:8d:aa:df:2d:c0:ab:d6:
b4:ab:93:f0:b2:8e:d8:07:f2:9a:f4:12:4a:12:8a:
9f:80:99:41:4b:2a:a6:11:59:b1:48:e4:44:72:47:
61:a1:7d:83:57:a1:f1:7b:9b:9c:10:b3:57:68:13:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:88:E1:E0:85:E9:4E:88:36:E1:A1:7A:1B:1E:7F:80:D0:63:9F
X509v3 Authority Key Identifier:
keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e322e302f32342d3234203d3e20323838333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1d:91:ae:2b:66:f3:f9:f0:b8:f5:9e:2d:d2:e0:41:be:1e:
93:f8:1d:9e:a1:de:b6:bb:8b:e2:ac:0a:c7:6a:35:00:c2:d0:
f1:94:95:46:87:a8:3a:d9:41:ae:cf:7f:a4:24:61:3b:83:00:
97:c2:9a:62:80:4b:86:47:9d:63:c2:21:b6:3f:56:c3:61:d0:
17:37:26:b7:3e:15:d6:de:1f:ce:a6:ed:01:bb:2d:4e:80:bf:
08:8d:d0:c4:4b:e6:b7:06:8a:fe:1d:4f:b2:67:ea:5f:24:db:
0c:10:a9:c3:5a:c1:02:ef:72:75:b4:d6:cd:f4:f2:ac:5b:1a:
04:7b:1c:10:10:cd:ae:07:3f:57:79:1f:10:8f:dd:89:0b:8e:
1f:b3:c2:a3:3a:45:0f:27:62:89:e2:22:57:c7:ca:be:c7:de:
98:75:03:34:80:0b:e9:2d:cc:fb:a9:96:97:d4:ef:30:26:2c:
ab:d3:a7:08:00:2d:99:18:17:7f:55:1d:d0:d6:81:1a:21:77:
ab:84:a9:cb:fd:d8:46:1e:72:ba:17:dc:f7:66:42:84:bb:68:
c0:a9:8c:7e:36:48:28:75:0a:56:5f:25:6e:95:0b:0d:db:55:
9a:3c:d7:0a:f0:dc:14:f2:04:67:3f:93:58:91:01:c2:09:bd:
11:19:75:0e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNxpERNbyMWKYx+n9jjYbZw8WKxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE1NEE0N0U1RjkxMEFFOTIxRUFFRTlCOUJFNTEwOUMz
MjUwMTQ0NjAeFw0yNTEyMTIxNDU4NDZaFw0yNjEyMTExNTAzNDZaMDMxMTAvBgNV
BAMTKDI1RDA4OEUxRTA4NUU5NEU4ODM2RTFBMTdBMUIxRTdGODBEMDYzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn8T9xeKz0+bQ97bHbfyjIXas
cG7M1nlk+JYIQjhwLJPtz2KCFM2z54wjtceIGZoekoIGPN1uqM1kFJ37q0p0pbdA
6G7ap9676MUqPcL1yFSlNJylU6STShGUJREmoConvlE/259L6qdUYcpqwL0tpHzW
I6kgaISaDqgpT/UP8pW+kfN+oreoPIhpmikpiXreJP4j9f/M9FsiuTmi7whXpJm1
2M3GQGc1+3j4YyjOXIuqO70uCSGXNuPZ3gyR8FcHSZqZv/IIIRRgjarfLcCr1rSr
k/CyjtgH8pr0EkoSip+AmUFLKqYRWbFI5ERyR2GhfYNXofF7m5wQs1doE+/1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJdCI4eCF6U6INuGhehsef4DQY58wHwYDVR0j
BBgwFoAUulSkfl+RCukh6u6bm+UQnDJQFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V
eFQvMS9CQTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTRBNDdFNUY5MTBBRTky
MUVBRUU5QjlCRTUxMDlDMzI1MDE0NDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTV3FTWVlBc0Zrc05wY3JoZ0REdDVvOWMyaVk4am9lNWlHVHVwN0NNVXhULzEv
MzQzNTJlMzIzMzM5MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzODMz
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC3vAjANBgkqhkiG9w0BAQsFAAOCAQEAZx2Rritm8/nw
uPWeLdLgQb4ek/gdnqHetruL4qwKx2o1AMLQ8ZSVRoeoOtlBrs9/pCRhO4MAl8Ka
YoBLhkedY8Ihtj9Ww2HQFzcmtz4V1t4fzqbtAbstToC/CI3QxEvmtwaK/h1Psmfq
XyTbDBCpw1rBAu9ydbTWzfTyrFsaBHscEBDNrgc/V3kfEI/diQuOH7PCozpFDydi
ieIiV8fKvsfemHUDNIAL6S3M+6mWl9TvMCYsq9OnCAAtmRgXf1Ud0NaBGiF3q4Sp
y/3YRh5yuhfc92ZChLtowKmMfjZIKHUKVl8lbpULDdtVmjzXCvDcFPIEZz+TWJEB
wgm9ERl1Dg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:05:10 2025 by rpki-client