This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31362e302f32342d3234203d3e20323731373537.roa
File: 34352e3138352e31362e302f32342d3234203d3e20323731373537.roa (raw, json)
Hash identifier: LCuOu2e0ljnHca4Ylr/7Z8wwDk9p4L3W07VXPdg+9Dg=
Subject key identifier: 65:D9:01:3B:67:19:E6:51:04:D8:2D:AF:9A:85:0E:AD:FE:A0:C5:AC
Certificate issuer: /CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
Certificate serial: 0B6081B33E2C911F9BF17D088F00B0839BA418C1
Authority key identifier: FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31362e302f32342d3234203d3e20323731373537.roa
Signing time: Tue 20 Jan 2026 20:16:09 +0000
ROA not before: Tue 20 Jan 2026 20:11:09 +0000
ROA not after: Tue 19 Jan 2027 20:16:09 +0000
asID: 271757
IP address blocks: 45.185.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl
rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:60:81:b3:3e:2c:91:1f:9b:f1:7d:08:8f:00:b0:83:9b:a4:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCBD8AF206226EBBA059E03684C489BDB6885CE5
Validity
Not Before: Jan 20 20:11:09 2026 GMT
Not After : Jan 19 20:16:09 2027 GMT
Subject: CN=65D9013B6719E65104D82DAF9A850EADFEA0C5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:5a:33:22:31:0d:03:d9:39:fe:a0:c4:b4:
9f:2d:77:14:ab:e3:46:d1:aa:3d:a7:3b:ed:ba:91:
dc:0e:61:ec:2e:90:fe:73:37:6a:2f:68:07:b3:ef:
00:c3:f9:f0:8a:d2:3e:b3:bd:fb:cb:cb:4f:11:66:
f9:b3:83:ba:5d:46:87:2a:ab:7d:ce:5f:cd:2c:38:
d9:b6:06:3d:0d:e5:2b:2d:2f:b8:c6:cb:e5:00:94:
98:8d:8c:5f:81:45:ac:c5:d3:87:b6:60:13:35:42:
74:28:dd:d8:aa:28:5d:76:18:42:0b:b6:c7:cb:61:
70:3b:27:3b:3d:6b:48:8f:83:21:ca:82:6b:38:05:
39:1f:d5:47:5e:79:43:95:1b:95:f8:45:48:14:51:
79:14:b1:3f:05:9d:80:49:49:06:4d:80:b5:31:e9:
c8:34:84:13:29:88:92:42:2a:22:28:77:7e:09:c9:
e7:f8:aa:63:da:88:e9:3a:15:58:36:e9:46:47:34:
08:09:a3:e2:e1:10:53:44:f3:3a:28:26:57:f3:68:
f9:ca:f5:53:05:88:9c:73:78:d5:40:26:b7:46:25:
26:3f:2e:0c:70:05:db:45:9a:4a:e1:da:dc:82:21:
f0:2d:82:d4:57:eb:55:6e:25:b2:e8:78:b7:5d:ca:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D9:01:3B:67:19:E6:51:04:D8:2D:AF:9A:85:0E:AD:FE:A0:C5:AC
X509v3 Authority Key Identifier:
keyid:FC:BD:8A:F2:06:22:6E:BB:A0:59:E0:36:84:C4:89:BD:B6:88:5C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/FCBD8AF206226EBBA059E03684C489BDB6885CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD8AF206226EBBA059E03684C489BDB6885CE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bSxHr1wQSTwHRfqWw72SLgW7VrUoPDZcBWgqVjFtQAP/0/34352e3138352e31362e302f32342d3234203d3e20323731373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ea:8d:70:15:37:6f:b3:cd:0b:3d:3f:4f:74:a0:18:5e:37:
67:c5:a8:aa:28:1d:40:91:f5:ce:80:2a:66:8f:70:cc:6c:95:
6d:45:4e:c0:fb:18:05:f8:1c:4b:dd:db:3e:5e:f7:e9:48:39:
d9:f4:37:e3:da:85:b4:67:80:ca:16:e0:ff:83:d0:1d:33:27:
cd:00:4b:32:78:54:d2:9b:e5:3c:12:9d:64:62:a0:a4:ef:3b:
e1:22:ef:f8:76:03:2f:85:88:c0:47:e0:7f:f7:02:af:4b:0a:
5b:03:11:8a:3b:cb:f4:c7:ac:91:ea:16:a8:b7:73:08:ef:7c:
c0:df:71:b9:9d:7a:a6:c3:07:a1:22:34:d3:15:91:f5:27:bd:
e9:cd:eb:6d:de:0c:fd:bb:72:f0:a3:98:7b:97:0d:97:a6:45:
7c:f7:23:94:d7:38:e6:a7:8f:b7:91:37:ba:5c:e0:ad:c9:4a:
91:14:b3:01:b2:ac:b7:7b:b2:11:8e:da:b9:ea:f7:28:fc:3c:
be:02:16:59:f0:17:49:4b:97:15:d0:ae:6e:57:72:5d:8c:b4:
ee:bf:c2:05:fd:a0:c1:b8:f5:d3:7a:42:10:fd:86:67:84:7b:
de:02:7d:13:b6:35:1c:ef:b2:ff:f0:a1:e8:19:10:d8:cd:c9:
22:02:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:17 2026 by rpki-client