This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3136302e302f32322d3234203d3e20313938393439.roa
File: 34352e3232352e3136302e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier: giR6gzrDAC44QQEPKsVYozQcn+P3B7fMwBbd8u9kGeQ=
Subject key identifier: 4E:0E:39:83:01:1C:14:A5:AC:48:91:1D:14:9C:42:AE:C3:82:8B:CE
Certificate issuer: /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial: 609B70FFB5D7C6C596C1FC4F71B0FBFC314C51B9
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3136302e302f32322d3234203d3e20313938393439.roa
Signing time: Tue 06 Jan 2026 17:00:28 +0000
ROA not before: Tue 06 Jan 2026 16:55:28 +0000
ROA not after: Tue 05 Jan 2027 17:00:28 +0000
asID: 198949
IP address blocks: 45.225.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 08 Jan 2026 13:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9b:70:ff:b5:d7:c6:c5:96:c1:fc:4f:71:b0:fb:fc:31:4c:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Validity
Not Before: Jan 6 16:55:28 2026 GMT
Not After : Jan 5 17:00:28 2027 GMT
Subject: CN=4E0E3983011C14A5AC48911D149C42AEC3828BCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:2d:73:35:18:9a:ce:cb:44:cc:69:ae:94:
a3:85:3f:92:08:be:3e:f5:e1:72:6e:27:5e:c3:e7:
0a:1d:4a:5d:93:34:7b:13:64:7b:c0:fe:21:25:52:
67:12:7d:f5:f5:ee:de:c7:61:98:ab:00:c4:33:0e:
3a:d6:ef:a2:f9:d0:44:ce:bb:f0:12:79:53:44:1c:
4a:aa:da:31:a5:ce:bd:13:ee:5e:5f:7a:7c:3d:aa:
c0:29:06:6a:b8:3e:39:55:00:9e:5d:cc:a8:bf:72:
c3:94:e5:72:f1:43:64:b4:d5:f1:cd:11:4e:19:63:
92:16:6d:f4:04:71:27:9a:d2:09:ef:ab:27:be:77:
7e:64:c6:72:92:00:c9:26:99:22:a4:45:25:d6:21:
bd:ad:ed:72:14:ea:e9:80:6f:f3:05:40:8b:bf:e0:
f7:ca:24:e8:bc:79:f7:e2:d5:7a:c4:6f:85:7a:bc:
05:ff:bd:dc:e9:d1:3e:9f:f2:59:b5:ef:dd:a2:98:
3c:60:cb:01:de:e4:8b:26:2e:8c:27:cb:fa:e8:ba:
55:79:a1:ca:76:8b:37:28:2d:d2:9f:60:67:7e:df:
9f:71:56:ee:33:c5:51:04:be:db:de:93:07:f9:c4:
04:16:fa:c6:90:25:29:6f:f2:fa:e9:ee:a4:72:d8:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:39:83:01:1C:14:A5:AC:48:91:1D:14:9C:42:AE:C3:82:8B:CE
X509v3 Authority Key Identifier:
keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3136302e302f32322d3234203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:49:e4:fc:e3:da:1e:d2:c5:5b:fa:6c:4e:31:f3:8c:2d:72:
29:ad:1c:c9:38:07:40:cf:4d:3c:4f:8e:4a:99:79:64:f2:d0:
6d:22:61:18:94:61:00:25:f8:4f:29:10:c7:92:c6:89:fe:fb:
d9:80:b8:f8:48:d0:76:75:97:1b:8e:bc:a4:e2:bc:a5:a3:96:
bf:0e:6a:f9:1c:bb:8d:4e:ea:dd:12:e8:d3:cc:f2:90:91:56:
6d:c6:bf:19:50:30:ed:6f:20:5d:45:39:41:57:97:40:b8:49:
ed:85:3f:62:e5:63:87:77:51:a2:dd:3a:29:d9:88:5a:7a:03:
45:9a:2a:70:c0:3e:76:6c:97:af:8e:b3:a8:8f:4d:e8:ee:17:
dd:35:14:ef:99:3e:47:31:5e:20:08:b1:58:39:f3:e0:22:94:
e8:04:b2:76:5e:04:49:e5:93:60:0d:9f:49:eb:66:c9:18:0a:
a3:ff:9c:f0:1f:6e:f3:83:15:e2:e1:c0:8f:87:3c:5a:db:d3:
1f:32:8b:6e:d1:cb:a0:77:59:87:55:c7:47:0f:52:e7:da:88:
0e:24:87:c2:c8:34:97:38:83:69:b9:c5:45:19:93:1f:7c:b8:
b4:c8:e8:79:70:4a:b5:05:5b:71:99:cc:91:1f:b4:cd:16:ec:
92:8e:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:31:05 2026 by rpki-client