This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa
File: 34352e3136372e3134342e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: yk+ytOrKsUmVdJBiyHJ9lZif0pTUPW93YltYQX0czYE=
Subject key identifier: F7:F8:93:9C:32:AC:0D:F4:D4:BE:28:BF:C3:03:94:87:60:A9:E3:00
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 6BB22FAC9471F5FD65334737F9CCC37B0B05273F
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:25:50 +0000
ROA not before: Wed 03 Dec 2025 00:20:50 +0000
ROA not after: Wed 02 Dec 2026 00:25:50 +0000
asID: 52838
IP address blocks: 45.167.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b2:2f:ac:94:71:f5:fd:65:33:47:37:f9:cc:c3:7b:0b:05:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:20:50 2025 GMT
Not After : Dec 2 00:25:50 2026 GMT
Subject: CN=F7F8939C32AC0DF4D4BE28BFC303948760A9E300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:36:ca:1f:4d:a0:19:38:77:ed:da:0c:5a:
85:66:92:45:8f:10:ce:56:25:4e:65:6a:0b:c0:9b:
e3:41:58:2c:20:0b:6d:8c:08:03:11:20:68:9b:d0:
f6:da:65:10:8f:ae:41:55:f1:b2:58:1e:10:ab:ba:
69:27:db:94:29:52:9d:9d:ae:6c:e5:6f:da:62:68:
52:ec:b1:cd:3e:0b:40:fc:41:d7:77:b1:1e:32:00:
50:bf:dc:6a:b5:10:53:95:0c:19:db:d1:7c:0b:e9:
ad:80:98:83:8c:c4:14:d8:9a:f9:cf:9e:2a:2c:12:
12:b2:7c:47:75:72:84:69:46:2e:b6:1e:5b:7b:f9:
ea:f9:d2:29:75:1a:84:ec:b3:85:0a:51:cf:0b:b3:
df:8e:8e:0b:14:5d:73:95:e3:72:96:e0:55:15:b7:
6a:7a:e2:70:3c:30:2f:62:36:2f:2f:0b:4a:a5:b8:
0f:21:a9:50:78:5f:13:6b:d8:e6:49:ed:f0:27:44:
3a:89:02:1c:13:5c:80:96:00:88:ac:3e:92:33:22:
95:69:06:02:33:e5:65:1a:02:9b:0b:d2:07:f7:21:
b4:d2:75:92:8a:e4:a6:14:ba:25:95:e8:0e:de:48:
e5:0d:fb:66:29:4f:dd:3c:af:7f:67:7f:50:10:3c:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:93:9C:32:AC:0D:F4:D4:BE:28:BF:C3:03:94:87:60:A9:E3:00
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.144.0/23
Signature Algorithm: sha256WithRSAEncryption
82:12:38:d5:8e:c0:b4:9e:74:04:21:5d:8d:0f:ab:f7:2a:ad:
99:44:c3:ff:c2:ce:63:14:f6:96:2c:be:b1:0b:ea:eb:06:45:
5d:cf:40:88:a8:76:cc:a9:c5:42:cc:bd:4e:74:c7:21:ab:00:
32:a9:fe:7b:83:07:7c:ba:19:d7:7f:77:79:f5:9b:8f:23:ea:
63:59:81:aa:96:9b:a0:d5:f0:b0:fd:9f:69:83:49:b0:f2:0f:
72:fc:8c:2c:1a:5b:2b:06:d1:08:eb:3c:0f:f9:62:59:78:fe:
6f:f2:9f:e8:e2:5c:c1:90:e1:97:1e:55:de:0e:4f:bf:04:17:
ec:b1:86:24:72:2b:70:0d:0e:21:75:8b:4e:9d:df:90:c8:1e:
a2:c8:a0:d8:7e:51:59:2a:d3:5a:c5:76:9c:d9:26:ed:22:7f:
ce:34:cb:63:7c:80:ea:c7:b4:55:0e:f3:e3:6c:8d:45:e6:96:
b2:51:53:85:2c:9e:69:4b:b3:57:0f:6f:52:be:07:ec:58:50:
1d:b4:85:14:c7:8e:ef:7b:98:44:ac:5e:db:4d:b2:70:b2:35:
bb:9d:1e:a4:1a:37:c5:67:d2:f9:c2:ba:f5:2b:31:e7:60:31:
70:a1:d9:37:ac:2c:54:8e:1f:88:c5:30:c1:00:d1:38:ed:f9:
2f:fb:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:05 2025 by rpki-client