This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e332e302f32342d3234203d3e20323838333438.roa
File: 34352e3233392e332e302f32342d3234203d3e20323838333438.roa (raw, json)
Hash identifier: AJsuls88zP64VL7pz48oBZG9fDRhhBGPVOg8R7ZtLcM=
Subject key identifier: C1:C8:65:F4:F9:F8:95:BD:52:37:4E:F3:5C:13:81:FC:63:6E:EA:2D
Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Certificate serial: 1BC658D785888ABB8F10AE37203E00FC9D372007
Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e332e302f32342d3234203d3e20323838333438.roa
Signing time: Fri 12 Dec 2025 15:03:47 +0000
ROA not before: Fri 12 Dec 2025 14:58:47 +0000
ROA not after: Fri 11 Dec 2026 15:03:47 +0000
asID: 288348
IP address blocks: 45.239.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 14:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c6:58:d7:85:88:8a:bb:8f:10:ae:37:20:3e:00:fc:9d:37:20:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446
Validity
Not Before: Dec 12 14:58:47 2025 GMT
Not After : Dec 11 15:03:47 2026 GMT
Subject: CN=C1C865F4F9F895BD52374EF35C1381FC636EEA2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:ad:18:08:2a:b6:86:dc:8b:db:4d:06:f9:
16:9f:ae:73:af:f2:8f:5c:ce:37:d4:8b:88:d5:01:
a0:dd:be:25:bb:44:60:11:c4:98:af:e5:16:ce:c9:
59:c6:33:9c:c8:fd:54:5e:08:32:ce:58:bb:c1:57:
67:b3:08:e6:ff:36:bc:b0:5a:25:c9:2e:96:2e:82:
66:5f:bf:e8:d5:a7:2a:59:5a:07:e5:bc:b8:48:64:
c5:f1:dd:a4:d6:98:44:b8:3e:74:80:91:5c:40:c9:
03:1d:93:d5:e6:84:99:16:94:cd:69:09:c7:89:a0:
aa:81:e0:d0:1e:fd:63:09:bc:cb:62:52:c8:22:0f:
1a:1c:08:fd:05:53:6d:49:13:e7:8a:26:fd:f8:54:
de:a1:a9:74:5f:5b:43:da:f0:4c:1c:c8:8b:19:c8:
7d:76:15:60:03:22:63:47:98:bc:57:6f:46:77:86:
37:36:4c:f5:e9:5c:15:23:14:db:ab:99:54:1d:1c:
9b:32:a2:d2:6b:14:dc:fe:36:90:58:21:db:2e:5f:
db:97:5f:0c:3e:5e:a0:be:d9:60:39:91:03:51:59:
96:a9:4b:ba:67:fe:41:e4:a9:17:e0:41:32:be:c9:
ca:ed:96:f2:3b:5d:1f:72:04:6c:ee:9b:ec:37:2e:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:65:F4:F9:F8:95:BD:52:37:4E:F3:5C:13:81:FC:63:6E:EA:2D
X509v3 Authority Key Identifier:
keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e332e302f32342d3234203d3e20323838333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:46:30:0d:ea:16:de:b8:bc:8b:58:7d:87:1e:f8:fe:96:ad:
5a:29:63:0c:89:98:d8:b2:a6:e7:a2:ab:1b:de:32:c4:84:98:
c7:93:c8:fc:fe:a5:cb:64:80:2a:e8:c7:d1:a1:6d:85:68:26:
c3:08:d2:e9:99:af:8b:2e:66:e4:e1:78:96:a0:18:4e:84:75:
81:9a:94:cc:0f:8c:8e:d4:f3:36:83:cb:80:51:8b:ba:77:eb:
65:ec:5d:51:65:79:4a:ef:7f:c1:38:9c:a2:2d:b4:08:3a:09:
b9:72:af:d1:2e:e0:54:b9:32:46:b4:fc:22:b7:2b:e1:e8:7c:
b7:4f:c1:cc:5a:48:32:53:cc:d0:f7:cc:6d:0e:5e:3a:1e:c2:
1c:a5:7f:69:63:ba:4e:75:3a:71:d9:e4:ae:eb:e0:d2:88:b8:
ac:1d:d1:2e:57:b6:18:37:ea:2e:2c:68:9b:4a:36:62:d0:80:
a4:4c:1d:08:8e:bd:5c:4d:0b:8d:c3:69:df:9d:26:cf:35:88:
47:d9:76:95:38:bc:a5:9c:5c:04:a7:79:9f:1e:6f:aa:1f:46:
44:d3:48:0f:71:64:b4:cd:5e:82:90:ef:89:ac:83:bc:17:c7:
af:a7:74:8a:c7:aa:88:97:71:25:df:f2:5a:8f:64:65:94:88:
87:47:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:05:11 2025 by rpki-client