This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
File: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier: WpsG3KArExUdoPX1+EU4Oa+2b5UCKUo9Pud77RA2n60=
Subject key identifier: E0:FD:CA:B9:B4:57:65:1A:07:46:73:1E:32:C9:9E:A5:DB:0C:DB:42
Certificate issuer: /CN=027E5989BE9C86C746877442F729BCCF804DAC18
Certificate serial: 20FD19A4013F0C570AE6D3852404B4703FDC5D9B
Authority key identifier: 02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
Signing time: Thu 18 Dec 2025 12:36:00 +0000
ROA not before: Thu 18 Dec 2025 12:31:00 +0000
ROA not after: Thu 17 Dec 2026 12:36:00 +0000
asID: 269626
IP address blocks: 45.190.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 00:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fd:19:a4:01:3f:0c:57:0a:e6:d3:85:24:04:b4:70:3f:dc:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027E5989BE9C86C746877442F729BCCF804DAC18
Validity
Not Before: Dec 18 12:31:00 2025 GMT
Not After : Dec 17 12:36:00 2026 GMT
Subject: CN=E0FDCAB9B457651A0746731E32C99EA5DB0CDB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:ca:ee:a6:fc:9a:3a:b2:7b:73:87:89:c7:
e6:b0:46:28:1b:ca:d5:4b:f6:d6:9f:58:20:3a:a7:
1c:07:9d:34:94:ca:0b:9e:dc:ed:4d:73:ed:64:ae:
d0:28:e5:68:12:42:10:77:28:e6:59:c8:55:b6:87:
b9:a4:b6:29:35:42:c5:9e:4d:a3:ea:4d:5a:c3:2d:
4c:4e:11:03:9f:4a:61:0d:9e:dd:db:d0:e2:a8:68:
aa:43:f2:e7:6e:a6:5b:af:ef:42:45:3e:ff:7e:3c:
a5:5c:f2:11:e2:b5:5b:2b:f6:62:55:e3:b7:d6:4b:
70:6b:40:b6:a7:cc:10:bc:8e:b8:5e:7e:0e:b8:2d:
74:f0:3f:2e:e4:61:b5:53:ee:df:3b:88:39:7b:d0:
b7:9a:99:21:f5:74:f0:75:58:c6:9a:33:37:55:5d:
e4:8d:9d:fd:fd:e5:15:11:3f:17:21:7c:4c:0a:92:
08:9d:3a:32:63:7d:98:6b:c3:1c:7f:d9:9f:f4:51:
2c:fd:89:03:cc:ce:d0:a0:53:33:5c:f4:01:38:79:
9f:b8:22:bd:17:c6:64:64:2c:50:7a:1c:14:8f:58:
35:68:4c:ab:7b:b7:f2:95:81:16:26:5e:76:df:8b:
f7:99:fa:5a:fb:99:38:7d:f8:4e:76:97:77:0d:62:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:CA:B9:B4:57:65:1A:07:46:73:1E:32:C9:9E:A5:DB:0C:DB:42
X509v3 Authority Key Identifier:
keyid:02:7E:59:89:BE:9C:86:C7:46:87:74:42:F7:29:BC:CF:80:4D:AC:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/027E5989BE9C86C746877442F729BCCF804DAC18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/027E5989BE9C86C746877442F729BCCF804DAC18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.108.0/23
Signature Algorithm: sha256WithRSAEncryption
82:02:81:e9:b6:fb:3d:33:57:ce:db:12:c7:1f:36:ae:3a:f9:
10:67:25:13:00:1a:43:e6:1e:dd:69:39:c0:e6:13:ea:91:66:
8d:2c:70:7f:c2:c2:09:dc:82:dc:4a:54:3e:39:7b:76:97:77:
40:8b:83:60:60:fc:4d:23:4b:26:b2:71:11:12:80:31:3c:1f:
d4:62:28:ed:eb:0e:18:68:23:71:28:0b:d8:f9:d2:34:99:df:
90:77:23:df:cf:36:27:80:b4:72:f0:c1:cf:c5:c9:18:c2:95:
59:ae:01:d0:00:ed:32:d0:49:da:29:fe:f4:b6:96:4d:87:56:
3e:bf:f2:fe:f2:fa:d2:ff:44:2e:48:5d:04:43:37:67:32:88:
93:00:82:50:3d:9b:50:fe:86:dc:b2:72:35:7a:16:85:d5:e2:
90:bc:a8:0c:72:18:ba:52:85:a9:bf:f9:40:8f:f2:f4:71:9d:
8e:4a:c2:4e:19:c9:d6:85:e4:15:c7:29:5a:21:ef:89:0b:13:
a1:86:af:04:b4:27:d3:cf:3d:63:76:1a:52:ed:5f:88:27:7e:
7b:39:41:c8:4b:f0:61:63:44:50:04:f5:b5:f1:e5:c6:14:4b:
e4:08:bd:14:04:97:6d:fc:88:5f:d8:e8:bd:1a:30:02:f1:12:
b1:9d:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:32:07 2025 by rpki-client