This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
File: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (raw, json)
Hash identifier: L4NKghT34qholQK01Y3x7G87AXCKbr3ie1Ll7Ffrwek=
Subject key identifier: 3A:28:34:D9:6D:C3:4D:19:2F:6A:CF:92:E9:30:57:99:6B:DB:F4:60
Certificate issuer: /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial: 35C02DADBB4A0FA27565AED9CD0D681BF4F71A0E
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
Signing time: Thu 01 Jan 2026 18:51:21 +0000
ROA not before: Thu 01 Jan 2026 18:46:21 +0000
ROA not after: Thu 31 Dec 2026 18:51:21 +0000
asID: 269151
IP address blocks: 45.180.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 19:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c0:2d:ad:bb:4a:0f:a2:75:65:ae:d9:cd:0d:68:1b:f4:f7:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Validity
Not Before: Jan 1 18:46:21 2026 GMT
Not After : Dec 31 18:51:21 2026 GMT
Subject: CN=3A2834D96DC34D192F6ACF92E93057996BDBF460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:c3:11:e0:4c:76:ba:b6:9d:09:1b:88:5d:
30:c7:58:71:10:04:ff:aa:0c:b9:92:aa:45:b6:37:
7e:91:45:94:95:70:aa:58:e6:74:00:c6:ad:54:5a:
bd:e7:54:0a:79:9a:96:0f:5f:45:9a:78:d0:53:84:
4f:cf:4d:6d:8f:d6:6f:d1:eb:30:52:d3:98:7c:ce:
e0:74:38:a5:2d:d8:9a:64:68:b0:65:61:23:b5:bd:
3a:19:24:5f:ce:7e:77:90:2c:50:1b:50:b5:e1:cf:
5a:54:50:a6:54:1a:30:01:1f:3b:fd:54:01:61:4b:
eb:d5:58:cc:77:8f:bb:1c:ae:06:ea:43:5f:71:fd:
00:98:5b:df:cc:9a:97:f0:72:5b:31:28:b3:82:35:
39:7c:0a:bc:a9:51:eb:c7:a0:ca:8a:50:25:67:42:
76:3c:8f:d6:8b:90:f1:f3:ce:6a:91:14:02:70:e6:
47:c5:43:d4:df:56:23:81:32:15:46:a8:a6:7f:b1:
28:ac:7c:3d:a0:f0:a0:14:65:71:b9:bf:2d:02:39:
27:ee:64:19:69:ce:83:92:38:07:d5:d1:45:05:a6:
46:c9:89:19:59:16:50:a8:f3:12:0e:35:75:08:88:
7e:36:f0:95:1b:28:21:47:78:10:85:f6:43:42:fd:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:34:D9:6D:C3:4D:19:2F:6A:CF:92:E9:30:57:99:6B:DB:F4:60
X509v3 Authority Key Identifier:
keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.228.0/22
Signature Algorithm: sha256WithRSAEncryption
15:54:6c:8a:ac:78:62:84:c2:ea:9a:2b:0a:bb:b9:0f:36:cb:
80:2d:dd:9f:0e:e1:be:0c:5e:79:a0:52:9d:7d:0f:f1:97:5f:
23:80:b2:65:16:fd:1e:fb:1a:38:15:ca:8b:be:ae:52:a0:38:
c2:45:94:a1:e8:99:3d:86:a3:c0:a1:2b:87:20:41:68:ad:bb:
1b:36:a5:38:c8:3d:ac:5e:70:ec:b0:c4:3a:91:f7:3f:86:ca:
6d:d8:c3:8b:a8:40:9e:89:36:9c:9c:35:b2:6c:66:73:77:00:
f3:ab:b7:10:d0:2e:e0:02:97:05:28:83:28:89:ab:5b:04:7a:
1b:4a:cc:5e:e1:25:34:95:b0:40:8f:66:e0:f1:2d:53:4a:79:
59:c5:34:38:61:7f:0d:ad:52:41:6d:85:f5:08:bf:a2:f2:ce:
4d:43:9d:06:0e:23:b5:20:d4:bb:73:61:2a:7f:b4:3d:cc:48:
e6:3f:47:44:a2:1b:94:6d:15:50:2f:7f:d1:fe:85:35:b9:93:
db:e9:d5:67:eb:bf:12:47:7b:40:61:e0:fe:ba:29:41:6b:9f:
71:7f:b2:70:86:00:f2:8e:de:3e:6d:94:68:82:fd:b9:27:73:
3e:74:b9:8c:7a:cd:9d:c3:4e:52:82:69:8f:66:4f:2b:5b:5e:
e5:48:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:31:38 2026 by rpki-client