This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134352e302f32342d3234203d3e203532383338.roa
File: 34352e3136372e3134352e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: jLiPpWG3d3LGCF4aaX77z/uEPtIlAH7Xai28NAw+tOY=
Subject key identifier: 30:2B:69:F7:FF:01:17:A0:6E:83:B9:19:4D:01:51:02:46:81:0A:E9
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 72BA7BECC09EDA2B7242F9AA2913C5380B7C9146
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134352e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:27:25 +0000
ROA not before: Wed 03 Dec 2025 00:22:25 +0000
ROA not after: Wed 02 Dec 2026 00:27:25 +0000
asID: 52838
IP address blocks: 45.167.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ba:7b:ec:c0:9e:da:2b:72:42:f9:aa:29:13:c5:38:0b:7c:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:22:25 2025 GMT
Not After : Dec 2 00:27:25 2026 GMT
Subject: CN=302B69F7FF0117A06E83B9194D01510246810AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:d7:3c:e6:cd:ab:67:10:bc:4c:be:7e:bf:
7d:f2:94:9b:0f:ed:be:8f:69:71:c3:ed:c8:fc:5b:
99:e5:f0:b3:f8:81:62:8b:73:a0:d6:b2:60:51:33:
e6:21:e4:e6:ca:bd:fc:56:58:e7:41:c0:9b:2d:0d:
1b:8e:f5:a2:4e:b9:20:5c:38:99:7b:d3:b5:f2:87:
39:e9:40:94:e9:db:d8:26:2a:82:ec:eb:a3:ef:45:
fc:5d:41:8e:65:4d:bf:9e:47:ca:c4:91:a7:8c:5e:
9d:e1:00:29:f8:ad:00:40:81:dd:3f:22:45:a6:4c:
bc:ed:49:fc:ac:f4:b0:0c:18:43:44:b7:44:3d:00:
3e:75:f5:2e:95:f5:03:6e:f9:4b:06:81:a6:c9:9c:
28:29:c8:30:d0:68:c9:15:c6:69:da:3d:15:0b:7b:
01:fa:b7:7f:c7:c9:99:fe:e3:2c:98:f9:bc:2c:ab:
bd:5d:14:cf:6e:86:94:34:55:3e:8c:1b:89:13:57:
4d:83:55:19:df:bb:ae:7b:85:1c:2f:1b:d9:b2:07:
52:f8:0f:55:dd:c2:25:f0:85:ea:17:8f:c0:68:78:
93:86:cd:ed:ad:ad:d0:cd:ec:54:2f:ea:58:71:e2:
35:de:3c:f7:3e:6e:6e:35:0e:4b:bd:53:c1:05:56:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:69:F7:FF:01:17:A0:6E:83:B9:19:4D:01:51:02:46:81:0A:E9
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134352e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f9:49:cb:0f:43:b5:06:4c:dd:49:64:38:7f:ce:eb:6c:78:
c8:5e:59:d8:22:9d:c1:87:4b:60:88:22:2c:a6:df:85:eb:72:
ed:ea:6c:fc:0a:7d:ca:4e:0c:46:1b:a4:ff:3b:c5:b2:b8:ee:
bc:f6:19:41:23:e1:3c:b0:63:f6:04:9b:3b:97:48:fb:2a:6b:
b5:bd:ec:70:98:bd:8e:8b:91:35:b7:65:89:2f:e2:2e:52:14:
94:e3:df:14:40:ba:03:6c:75:5b:20:47:b0:eb:a4:c5:35:98:
3e:dd:f5:ad:37:21:6a:59:d6:9c:43:bc:7c:42:de:fc:df:48:
df:1f:e0:32:79:14:f1:ab:d0:5a:ae:12:46:1a:d6:57:79:ea:
31:8d:c1:eb:b6:b4:61:97:d4:4b:13:89:40:9f:c2:6e:e5:99:
55:0a:03:9e:e4:43:34:e3:f5:19:d1:42:b4:03:9e:4b:ef:72:
21:12:69:ed:af:0e:a8:61:5e:09:48:c8:21:54:93:00:f2:b6:
ae:ac:ae:2b:39:70:3b:e0:08:e5:ec:db:83:ad:17:79:72:65:
51:8f:9d:f3:95:79:c2:40:3b:57:81:c5:0d:5f:41:66:4a:00:
fa:45:c0:eb:05:20:35:77:60:41:c3:3d:3a:bf:ed:11:a3:fd:
de:0d:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:03 2025 by rpki-client