This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
File: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (raw, json)
Hash identifier: YRwpO+qV9F49NAjD4t6i+dZs654OmXK5qpgT8nKdEac=
Subject key identifier: 68:72:F7:38:BF:A9:6C:9C:3D:3F:56:E5:71:A0:CE:96:73:26:42:5C
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 1986AF4160F356FFE84C7C341D828DF632CCC582
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
Signing time: Thu 27 Nov 2025 18:33:03 +0000
ROA not before: Thu 27 Nov 2025 18:28:03 +0000
ROA not after: Thu 26 Nov 2026 18:33:03 +0000
asID: 267366
IP address blocks: 45.234.132.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:86:af:41:60:f3:56:ff:e8:4c:7c:34:1d:82:8d:f6:32:cc:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Nov 27 18:28:03 2025 GMT
Not After : Nov 26 18:33:03 2026 GMT
Subject: CN=6872F738BFA96C9C3D3F56E571A0CE967326425C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:c7:b9:27:3c:cb:55:36:5d:ff:dc:1b:33:
5b:12:5f:d4:db:70:b6:4d:40:76:a9:70:39:73:23:
5f:df:88:d2:b3:17:33:dd:2d:98:10:9a:8c:fa:b0:
30:f4:04:db:e1:99:62:14:21:d6:22:e1:25:16:e6:
14:d0:4b:ed:8a:22:df:d1:5b:50:4a:36:77:05:ef:
b9:5e:c7:15:f3:c4:2f:fa:1e:ec:c4:9e:c6:f8:59:
1e:ef:36:86:a3:b4:7d:0d:68:a0:e0:87:e4:da:96:
e0:5b:07:9c:f7:79:f7:6d:95:f2:b6:7c:7f:72:be:
e1:7e:ae:fc:99:db:8a:5d:52:31:0c:0b:13:f4:41:
7f:36:63:97:e6:74:06:e6:e9:49:bf:21:06:ca:8d:
87:87:74:96:da:18:ee:a2:6b:4d:cd:56:e9:e6:33:
90:c2:0e:6a:3b:e4:10:e3:ef:5c:f6:fb:e1:8f:df:
33:0c:a1:04:1b:83:3b:de:b3:42:be:ea:e0:0a:38:
17:5c:d2:f6:81:66:16:ad:e9:07:1c:23:66:be:49:
75:2e:48:d4:5a:df:a2:52:16:9f:4c:db:a7:e8:31:
6e:a9:55:d9:ff:54:6b:87:de:5e:97:03:b6:e2:84:
ad:21:45:b3:c4:d1:24:a7:61:f3:4b:22:4f:c5:3c:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:F7:38:BF:A9:6C:9C:3D:3F:56:E5:71:A0:CE:96:73:26:42:5C
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.132.0/22
Signature Algorithm: sha256WithRSAEncryption
34:4a:c4:65:90:89:c1:2f:23:fa:3c:34:94:c1:a0:12:8e:28:
3a:ad:ea:4c:2e:de:68:e3:6a:7b:4a:85:fd:5f:ef:5b:c5:b7:
8c:74:9c:74:25:52:96:19:dc:17:10:6b:ae:2e:7b:9d:45:85:
0a:60:72:d3:e6:25:f8:45:0e:d2:ac:d9:e8:e3:a1:70:79:f3:
ef:b7:b3:d6:c7:61:23:f6:4c:ba:41:63:b4:2b:b3:39:ae:99:
0e:2b:37:27:1f:2e:5d:ca:7d:6c:92:cb:70:5d:cd:cd:b9:34:
fe:df:28:52:84:83:4a:21:83:64:80:a2:51:f8:dc:1d:1d:a5:
c9:31:a0:ba:47:45:d8:ae:1e:3f:d2:25:d5:5d:f5:8f:01:4e:
2f:66:76:39:88:84:a9:1e:18:54:5d:43:2a:e0:c1:8d:69:36:
de:65:db:0e:cf:3b:6c:64:9a:63:5d:49:a9:2a:96:48:d3:23:
05:6e:f5:e7:7e:91:46:35:56:8f:e3:19:c2:6d:6c:89:f7:ac:
2b:94:ae:74:8b:8f:ef:47:5c:4c:b2:52:55:2a:67:96:b8:b0:
8b:c7:83:52:51:61:76:46:10:6c:57:91:be:b7:8d:0f:15:69:
44:2a:40:1f:69:aa:85:98:de:fb:e6:b0:c1:9e:36:6d:47:43:
8b:70:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:07 2025 by rpki-client