This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
File: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (raw, json)
Hash identifier: Akh9nscz8Ru7h4WuNxjio0jBeFurBOjjKKbR62pQnJ8=
Subject key identifier: 2E:53:24:85:F2:E8:B4:03:0D:93:7F:EC:06:F0:E9:F0:ED:E0:DD:86
Certificate issuer: /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial: 2F89D1D106B0E62D2E7CBB66824B2A7967639549
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
Signing time: Sun 07 Dec 2025 11:49:08 +0000
ROA not before: Sun 07 Dec 2025 11:44:08 +0000
ROA not after: Sun 06 Dec 2026 11:49:08 +0000
asID: 269053
IP address blocks: 45.179.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 15 Dec 2025 06:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:89:d1:d1:06:b0:e6:2d:2e:7c:bb:66:82:4b:2a:79:67:63:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Validity
Not Before: Dec 7 11:44:08 2025 GMT
Not After : Dec 6 11:49:08 2026 GMT
Subject: CN=2E532485F2E8B4030D937FEC06F0E9F0EDE0DD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:ba:12:4c:af:52:5a:25:47:25:80:59:1f:
66:27:31:f3:60:3e:96:80:16:9b:58:b0:86:f5:ac:
ca:05:e8:d5:a0:df:1d:63:70:13:20:66:bd:61:42:
93:09:c9:f1:fc:1e:9f:65:f8:7c:88:e0:c0:32:9f:
a8:f0:10:1e:33:26:69:35:21:a0:d2:f0:36:ae:42:
82:69:94:41:e7:e6:ce:e1:92:14:0e:34:47:4e:83:
be:69:76:d1:18:e4:32:5b:a9:71:e3:a0:89:36:0f:
50:95:03:ef:be:98:76:85:db:a3:0d:f2:cc:63:5f:
8e:7c:d2:a0:1a:d2:7c:b6:a5:84:67:c8:52:6d:d8:
36:3a:bd:f2:0f:63:e6:7b:35:c9:4d:cd:a1:91:25:
0f:4c:70:75:70:ec:ca:4b:a3:5b:a9:ab:d3:38:cc:
2a:09:f9:77:f4:6e:da:39:5a:b8:3a:9e:3c:38:74:
f6:32:23:c7:96:8d:0b:04:19:46:6c:1b:6d:d0:cb:
20:cf:4f:57:22:0b:0a:b7:e9:23:21:0b:70:8a:15:
9c:21:e6:6b:c8:77:0f:09:6a:ea:ac:22:18:4b:a4:
b1:68:fa:a6:f8:70:94:fa:ce:87:8c:d3:18:8e:73:
58:02:1e:9a:33:1f:3a:e7:d4:4b:48:4e:85:1d:26:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:53:24:85:F2:E8:B4:03:0D:93:7F:EC:06:F0:E9:F0:ED:E0:DD:86
X509v3 Authority Key Identifier:
keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/34352e3137392e35322e302f32342d3234203d3e20323639303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.52.0/24
Signature Algorithm: sha256WithRSAEncryption
82:af:82:14:e8:b6:f5:3c:1d:92:3c:35:2e:ca:17:d6:d8:68:
df:ff:97:4e:bf:e3:e1:b6:1c:ab:98:e3:98:3c:12:cb:76:a9:
cd:b6:db:9a:dc:07:0e:12:9d:87:d9:e9:7f:db:2c:6a:48:d2:
32:bd:ae:d1:13:5e:56:1c:97:47:ff:d0:a4:28:60:0e:c5:8b:
83:ae:97:98:7f:76:e3:2d:c3:19:6e:96:82:e2:d3:0b:03:de:
3f:fd:05:28:c4:65:da:77:7f:7a:13:a7:73:e1:10:94:11:ec:
4b:1a:a2:f6:86:9a:af:0e:02:24:d8:1d:62:01:05:f8:5b:26:
fa:8a:6b:6b:7d:9e:fb:dd:9d:52:9d:81:06:b3:f1:d8:55:86:
0c:51:19:e7:17:ee:06:d2:59:3c:86:66:30:3f:69:de:76:c3:
c3:e4:0f:b9:83:48:7c:8e:17:74:f9:7f:62:82:15:eb:77:7d:
7b:3c:fd:1b:9d:13:1c:a4:0f:a5:d0:2a:19:98:ec:05:ec:94:
0d:fe:63:50:2e:53:71:b0:d1:11:33:10:64:32:56:b4:3d:a0:
20:17:ee:d6:65:13:15:b9:e2:8b:98:9e:0c:81:0b:b4:86:54:
8b:88:e9:41:4b:16:7a:bb:30:fc:e0:30:d8:47:04:14:ad:f1:
8b:52:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 10:27:12 2025 by rpki-client