This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa
File: 34352e3136372e3134342e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: w94PbPFa0PROFFJ7sJ/7yVw+QDBgkcIJWLK8o5i8SVI=
Subject key identifier: FB:51:74:89:E9:31:4F:64:F6:99:6B:85:7F:69:CF:F3:A0:45:82:E2
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 3ED3B09475C9D320622CF567F89B35D179F4F572
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:26:51 +0000
ROA not before: Wed 03 Dec 2025 00:21:51 +0000
ROA not after: Wed 02 Dec 2026 00:26:51 +0000
asID: 52838
IP address blocks: 45.167.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:b0:94:75:c9:d3:20:62:2c:f5:67:f8:9b:35:d1:79:f4:f5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:21:51 2025 GMT
Not After : Dec 2 00:26:51 2026 GMT
Subject: CN=FB517489E9314F64F6996B857F69CFF3A04582E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:ee:74:9a:d5:69:ea:0b:43:99:d3:8c:71:
f2:02:bb:d5:05:2e:a7:a4:63:ca:cf:ed:7c:32:07:
9d:05:78:fe:d0:b1:21:d0:e4:30:27:96:f8:87:3c:
dd:54:3c:99:91:50:92:5b:20:69:d8:59:79:72:6a:
93:7b:fb:50:61:db:78:37:63:d7:63:dc:b4:3f:f8:
2c:5e:cf:b2:7d:2f:95:62:e4:20:da:45:04:69:a1:
9d:09:cc:51:a1:35:e3:cb:ae:3c:62:a6:73:40:db:
96:e1:5a:9c:ca:33:e4:89:09:c7:ce:a7:2a:56:22:
5a:b5:b4:3b:66:61:6b:96:bf:21:6c:6f:11:7b:7a:
92:ff:6f:c8:5c:db:5c:ef:62:46:45:98:bf:8c:2c:
86:91:13:f6:36:a1:48:a2:4d:f3:d9:b3:92:e1:01:
91:96:6f:83:0e:45:09:f8:4b:5c:b4:0b:f7:1d:9a:
c3:e0:29:50:5c:30:92:e3:47:9d:c4:6e:2b:c5:08:
83:35:e8:0d:71:75:67:08:17:30:c9:a1:d7:97:f6:
0a:26:e3:45:cb:38:74:2c:7c:fc:15:28:ef:33:77:
08:92:c8:ca:3c:6e:d0:86:57:b2:99:2a:69:80:07:
29:f0:df:9f:c2:3c:76:cb:b1:67:b6:0b:af:a6:03:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:74:89:E9:31:4F:64:F6:99:6B:85:7F:69:CF:F3:A0:45:82:E2
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.144.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4f:3f:45:50:e6:08:b3:fd:88:f2:d8:d5:23:83:6c:a7:a9:
59:87:3b:e1:ac:91:23:fa:1e:c2:1d:34:bc:36:7b:e2:38:44:
c2:3e:e3:ea:0b:9c:40:c8:ea:7a:02:83:39:69:e4:3c:a5:24:
b3:a2:eb:46:21:62:c4:61:b3:f3:9e:d7:2f:33:44:78:d9:b4:
67:01:2f:24:c3:18:16:21:09:95:7a:4e:da:0e:5e:78:23:6d:
35:27:d1:8b:7f:f2:c5:7b:b9:2e:94:2b:46:f3:cb:5e:98:d3:
59:75:00:d7:ba:97:04:09:82:3a:93:0c:20:dc:bd:6b:45:47:
c3:7e:99:4a:24:98:87:c0:92:5f:63:e9:de:7b:d7:9a:e1:6d:
96:c8:e2:ae:0f:43:c8:88:83:82:6d:c5:17:b3:1c:ea:cc:33:
9f:3c:27:c1:eb:e5:59:e1:ef:47:33:73:11:ef:8d:a2:de:18:
49:09:b3:0d:e7:48:c2:50:f7:d4:25:7c:ff:9d:14:30:c4:12:
34:9b:f4:c0:9c:78:05:b1:79:34:8e:97:d3:ee:13:7c:98:47:
f1:93:ef:95:0c:8a:d9:d6:52:bc:3d:50:ad:14:6e:21:f8:00:
b9:08:ed:da:22:9e:89:61:9a:18:95:85:f5:b5:13:4a:b3:80:
8d:59:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:04 2025 by rpki-client