This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
File: 34352e36352e3136302e302f32322d3332203d3e20323731353031.roa (raw, json)
Hash identifier: H3NuqNk3vNNBirGpcjdspYwdcMeRwfBDCSSVvmF9bXs=
Subject key identifier: 66:45:FE:46:86:33:A3:2E:93:7E:47:9A:F0:99:D4:4A:D9:E7:35:D4
Certificate issuer: /CN=5B19D2A4A69325A57956304D95BBD0D4EDA22145
Certificate serial: 143FB59C178E6392C77E912714DDC72B8E474DC4
Authority key identifier: 5B:19:D2:A4:A6:93:25:A5:79:56:30:4D:95:BB:D0:D4:ED:A2:21:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
Signing time: Tue 13 Jan 2026 20:42:06 +0000
ROA not before: Tue 13 Jan 2026 20:37:06 +0000
ROA not after: Tue 12 Jan 2027 20:42:06 +0000
asID: 271501
IP address blocks: 45.65.160.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.crl
rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 20:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3f:b5:9c:17:8e:63:92:c7:7e:91:27:14:dd:c7:2b:8e:47:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B19D2A4A69325A57956304D95BBD0D4EDA22145
Validity
Not Before: Jan 13 20:37:06 2026 GMT
Not After : Jan 12 20:42:06 2027 GMT
Subject: CN=6645FE468633A32E937E479AF099D44AD9E735D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:dd:73:38:9d:f2:27:f1:97:5c:20:70:d6:
c5:7d:98:df:4b:97:00:ee:21:7c:3d:7c:64:22:0a:
22:cd:37:35:18:86:94:43:7f:ae:89:a3:07:a6:d5:
1b:64:3b:d8:89:b0:65:82:25:e9:c3:17:09:9d:84:
54:9d:e0:fc:51:1f:f3:45:64:01:6a:0d:64:c2:1a:
9a:d3:26:87:65:eb:61:13:4c:3a:60:9c:91:98:ba:
83:48:a4:91:73:94:95:a1:b3:7a:47:d7:c3:bc:33:
65:49:44:30:33:e0:88:20:23:8a:39:c0:dd:43:b9:
be:32:3d:25:11:66:70:dd:93:72:2f:89:7b:b7:0b:
cb:30:25:17:f6:2a:d0:5a:80:6f:84:c1:36:c2:32:
ce:79:4a:a0:2f:eb:65:f6:c6:b4:f3:c9:e4:50:ad:
7f:fa:ca:63:86:6b:4d:4e:bf:ac:3e:47:4e:fc:6d:
00:46:ae:0e:e0:bc:6c:09:bc:38:5a:01:ff:a6:50:
c5:46:3c:e9:30:ea:b1:21:03:e0:4d:ec:51:ac:56:
de:f4:12:5d:c7:1f:9b:7d:eb:2f:8f:7b:a1:1e:24:
2d:41:a0:22:c9:5d:d5:97:b0:6c:2d:79:9d:ea:23:
b7:d6:22:85:20:ef:99:1f:a4:d7:3e:b6:f6:07:e6:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:FE:46:86:33:A3:2E:93:7E:47:9A:F0:99:D4:4A:D9:E7:35:D4
X509v3 Authority Key Identifier:
keyid:5B:19:D2:A4:A6:93:25:A5:79:56:30:4D:95:BB:D0:D4:ED:A2:21:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/5B19D2A4A69325A57956304D95BBD0D4EDA22145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B19D2A4A69325A57956304D95BBD0D4EDA22145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3332203d3e20323731353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:b8:f4:71:af:13:4c:d8:d3:d8:2b:fb:30:46:62:ac:3e:9c:
0a:19:8c:c4:32:ac:f0:8a:54:ad:96:6a:d5:14:87:7e:77:6c:
4c:0a:a4:72:7c:7a:d7:9f:73:d4:30:4d:80:70:ba:ba:c3:81:
4d:e2:5b:07:8b:fd:ab:11:6f:62:4e:37:cc:b7:d9:23:f7:63:
00:f9:42:76:36:5e:70:21:2a:6e:14:9d:fd:8c:fe:28:8a:81:
9c:1f:a3:c2:48:fb:e5:9b:1f:ab:cd:84:dd:ae:94:eb:a0:ae:
d8:80:5f:0c:5f:3a:6c:ca:a9:05:d8:d6:e5:4d:01:f8:69:f7:
4c:41:f0:33:49:40:de:b5:ac:5b:6e:b4:b0:f1:67:73:d8:05:
1a:ce:52:b3:61:aa:d2:2c:a0:c0:06:28:83:95:64:c4:27:5c:
3f:ca:14:3a:05:ef:4f:7d:f3:a0:5d:4b:02:fb:21:79:43:1c:
a2:cb:79:0f:57:71:c6:8d:eb:3b:99:91:32:af:77:e4:ff:28:
00:72:02:24:1d:16:da:87:26:b2:a5:17:d4:22:84:47:9b:0f:
ff:9d:ba:3c:0d:0c:c5:33:5c:5c:70:67:d6:48:3a:9f:d9:60:
0a:09:d3:7a:a2:41:e9:6b:c1:f4:56:07:b4:a0:ec:b3:d7:c0:
8d:97:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:51:21 2026 by rpki-client