This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32332d3233203d3e203532383338.roa
File: 34352e3136372e3134362e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: 6FOc+W8fFYF7OmvEdfmjGYEmBgSA2W7XRju/e7IGYb0=
Subject key identifier: 0E:27:7A:93:87:95:21:9F:A8:C2:81:0D:6F:02:48:15:7A:D3:3C:EE
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 626BFFD82FC184F85009825E78CA298C05DD8EC2
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:26:15 +0000
ROA not before: Wed 03 Dec 2025 00:21:15 +0000
ROA not after: Wed 02 Dec 2026 00:26:15 +0000
asID: 52838
IP address blocks: 45.167.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 10:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6b:ff:d8:2f:c1:84:f8:50:09:82:5e:78:ca:29:8c:05:dd:8e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:21:15 2025 GMT
Not After : Dec 2 00:26:15 2026 GMT
Subject: CN=0E277A938795219FA8C2810D6F0248157AD33CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:26:93:88:f5:a8:04:8f:ee:0d:9d:fe:4a:
e5:27:b4:8a:58:6c:31:f9:15:be:d8:59:a1:64:7b:
b7:8a:14:b7:33:a6:10:5e:df:3f:03:fc:62:46:da:
bf:83:fd:92:40:b7:97:19:53:f9:22:70:9e:25:49:
5a:ea:08:06:d0:d7:af:45:b3:c5:c7:63:4d:d3:c7:
b8:48:eb:63:f5:2e:45:ec:87:2c:75:85:a0:49:d5:
33:a5:03:d9:34:df:c3:9c:59:0f:3a:be:bd:da:9d:
69:a1:e6:52:dc:1c:89:41:8d:8f:21:a9:2e:19:aa:
75:90:c2:24:fa:22:65:4e:ce:d9:ec:51:b1:61:72:
00:81:ec:0b:b8:e0:c8:ce:1a:06:70:68:e5:e1:ba:
0b:41:f8:9c:8b:87:94:f3:46:a3:05:06:ab:f4:72:
6e:6f:41:95:ca:bb:6f:6e:25:56:7a:79:b4:4d:72:
56:d1:a5:bb:20:04:a5:e5:4e:f5:fc:ed:68:75:7f:
1e:1a:89:24:6c:ce:bd:c3:f4:70:71:ec:eb:c7:c4:
d7:f2:7e:02:3d:50:0e:e4:0f:5e:0f:38:49:72:d5:
dc:d2:c7:16:af:37:93:3a:1d:5b:91:a4:c3:c5:aa:
75:2b:8e:37:2b:0f:1d:dd:d8:02:a1:05:50:7f:db:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:7A:93:87:95:21:9F:A8:C2:81:0D:6F:02:48:15:7A:D3:3C:EE
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.146.0/23
Signature Algorithm: sha256WithRSAEncryption
51:29:25:01:51:82:3f:33:37:ca:3b:1b:4e:b1:87:ff:d9:80:
b3:35:d2:18:04:87:9b:df:97:85:14:00:fe:a0:93:a2:0a:c4:
81:f0:fe:a5:57:c4:4a:f1:cf:64:a5:9e:bd:22:67:aa:e3:f7:
d9:15:c8:f4:01:99:0b:0c:b8:c1:f4:9b:d3:78:14:2a:7e:26:
ea:6e:10:5f:5f:47:39:ca:45:d6:a6:1b:1a:5e:a7:7c:3e:0e:
4a:ea:82:52:f8:d0:f8:3b:11:76:df:1c:31:0a:d2:1f:f2:fa:
1b:22:7e:e5:cf:de:71:da:db:aa:9d:ca:ed:73:d8:d0:b8:4e:
3f:5c:2e:4b:3d:d2:1a:80:43:d4:15:8a:2a:c7:4a:e2:a9:cd:
00:8d:6d:3f:cf:4c:88:ae:2a:eb:14:2d:49:19:46:0f:e9:95:
32:55:b4:5b:c2:95:78:ca:bc:31:72:3a:a5:01:0d:72:69:82:
b1:5b:b4:33:5e:41:b0:b0:6f:3a:3b:06:4c:1f:50:bf:e8:50:
cc:4b:5b:a6:a6:e9:37:8d:48:ce:1a:fe:79:e9:cd:35:ec:90:
c6:b2:88:66:63:1f:f2:b7:0f:db:89:ac:ae:77:d8:12:0a:c2:
e7:69:b9:8b:b2:9a:12:99:50:f6:c7:59:02:34:4f:45:3b:e7:
a1:8c:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:08:05 2025 by rpki-client