This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20313938393439.roa
File: 34352e3138362e37322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier: mMgO63x5shp2vmRW5jjNKZ09lHM6iR8AdYzrMDrSKqE=
Subject key identifier: 6F:9C:DB:1D:E5:78:69:61:01:86:CA:8E:DB:3E:E6:F7:D7:A1:58:5C
Certificate issuer: /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial: 3880F1E07C6914A1CD4F5930661D164B073BEDF6
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20313938393439.roa
Signing time: Tue 06 Jan 2026 17:00:43 +0000
ROA not before: Tue 06 Jan 2026 16:55:43 +0000
ROA not after: Tue 05 Jan 2027 17:00:43 +0000
asID: 198949
IP address blocks: 45.186.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 08 Jan 2026 13:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:80:f1:e0:7c:69:14:a1:cd:4f:59:30:66:1d:16:4b:07:3b:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Validity
Not Before: Jan 6 16:55:43 2026 GMT
Not After : Jan 5 17:00:43 2027 GMT
Subject: CN=6F9CDB1DE57869610186CA8EDB3EE6F7D7A1585C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:0d:7a:da:f9:3c:1c:51:27:df:6b:02:1f:
6f:f4:02:ea:ad:aa:22:8d:96:f9:7c:ba:d5:3e:2d:
db:6e:8a:77:f3:82:c6:ef:1d:d1:00:f9:7a:71:b8:
e2:93:e4:15:e9:a1:00:83:2a:07:94:51:14:00:28:
54:92:92:1d:b8:63:7e:3a:62:1c:e0:e9:44:28:cb:
98:1e:7a:b6:65:c3:a8:26:f3:c0:30:4c:4f:e6:de:
5e:c8:bd:aa:b1:bd:14:03:ab:92:4e:17:c0:bb:4c:
f6:cc:20:18:57:49:f2:9e:7a:17:86:d2:ab:2c:d7:
b0:7c:9a:af:60:67:10:b8:0f:19:2c:0e:c1:b8:e2:
fa:3e:84:a2:51:79:a1:f3:c4:f8:16:b9:20:f7:08:
02:84:33:3b:f9:dc:ad:07:ef:cd:91:78:32:73:d2:
1e:ab:c1:68:b9:ee:7d:03:96:fb:b2:a6:0b:ae:98:
4e:97:00:80:41:5f:9a:d2:56:97:04:68:d9:ad:55:
ff:15:9f:22:28:dd:20:9f:be:af:b0:3c:6e:68:13:
f9:73:34:8a:e4:5b:49:93:6f:51:3c:5a:51:4f:9e:
f2:23:53:85:3b:63:00:bd:29:ef:5e:8b:b1:a1:67:
70:7c:24:a0:1a:c6:b0:f2:06:d3:68:92:83:3a:4a:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:DB:1D:E5:78:69:61:01:86:CA:8E:DB:3E:E6:F7:D7:A1:58:5C
X509v3 Authority Key Identifier:
keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3138362e37322e302f32322d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3b:51:02:01:8a:19:26:26:bb:67:1b:21:0c:14:a2:89:bf:
6a:88:3f:31:c3:d2:0e:7e:ea:2e:e8:4f:2f:dc:60:fb:47:45:
5a:b2:95:e7:c4:8b:55:b7:e5:5c:8e:25:7e:c6:b0:65:b8:bb:
47:86:c7:05:5d:8b:9a:28:85:2d:4f:ff:ab:8b:f7:66:e3:7f:
e4:ac:8b:66:33:d4:f8:38:95:1c:f4:d6:17:5b:fd:c9:4e:2b:
d7:cb:af:e2:1c:99:40:63:35:ff:e7:b3:e5:a0:e7:c1:6b:43:
0b:9e:22:d1:2e:13:69:74:8b:ae:c1:42:c5:79:08:28:13:26:
e8:fd:14:a6:da:48:8f:dd:51:7c:9d:11:f1:4e:8c:86:6e:12:
05:2c:65:b7:b0:0b:c8:6b:91:d3:bf:84:d1:2b:89:26:47:bb:
82:ec:48:8f:2b:cd:97:a6:ec:bb:8f:7d:96:cb:ce:b4:6a:f9:
85:27:c0:15:c0:56:ec:f1:31:41:46:1e:02:5b:33:ca:3d:24:
46:ab:a8:16:b8:63:97:c5:74:a9:1c:e2:ec:37:d2:3f:a6:a2:
b6:04:ae:0a:70:10:61:bb:a2:a9:af:41:ec:60:6a:d8:02:e4:
43:ec:2f:80:73:c8:ed:6a:aa:b6:32:e9:76:c6:80:3d:20:ab:
79:b7:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:31:06 2026 by rpki-client