This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File: 34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier: 8mwHgXK3uG3eviHzEqSVQk7ausNSlSB8hiEyReZk1Uk=
Subject key identifier: BB:5B:EE:1B:87:E0:36:87:94:BE:A1:17:F8:4A:C2:65:6C:EE:86:1A
Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial: 1613EFC154245383337FDCD578F6239BE3F87766
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time: Tue 16 Dec 2025 21:00:42 +0000
ROA not before: Tue 16 Dec 2025 20:55:42 +0000
ROA not after: Tue 15 Dec 2026 21:00:42 +0000
asID: 268678
IP address blocks: 45.165.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Dec 2025 21:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:13:ef:c1:54:24:53:83:33:7f:dc:d5:78:f6:23:9b:e3:f8:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Validity
Not Before: Dec 16 20:55:42 2025 GMT
Not After : Dec 15 21:00:42 2026 GMT
Subject: CN=BB5BEE1B87E0368794BEA117F84AC2656CEE861A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:6a:b1:80:37:8e:32:1e:cf:7a:47:a6:51:
18:c1:23:70:f1:eb:74:1f:f1:8a:cb:f3:90:4b:ad:
3c:0b:52:42:15:c0:8d:f3:d2:dc:b3:9b:b4:b2:89:
a8:e7:29:06:e7:c0:f1:cf:e0:99:01:32:b5:cd:72:
75:6a:bc:1e:d7:4e:6b:72:56:d2:d8:13:25:1a:a3:
80:6a:ae:3a:c5:b7:fc:b3:40:d2:df:69:e5:ee:bd:
f8:e7:81:85:3f:03:41:81:28:cf:99:36:e7:90:da:
6b:76:1b:e1:57:61:cf:99:ae:dd:8a:75:46:ee:e6:
99:b4:66:d4:5e:b2:4a:df:71:30:6f:10:0f:27:62:
bb:b4:cf:30:aa:e7:89:67:d4:a4:24:e4:bc:d0:53:
54:e8:db:5d:53:c5:0c:99:fd:51:59:b4:4d:26:c9:
01:c5:49:8b:b3:43:b7:3d:67:58:ea:73:16:a1:b3:
ea:15:8e:71:43:2e:7f:74:20:20:57:d5:24:57:bb:
72:de:b2:8d:c2:8c:b9:3a:c6:43:69:c2:46:6e:0d:
ee:92:fe:7d:20:74:0c:44:8e:40:93:8a:c0:26:ec:
4a:73:dc:7b:38:91:a4:35:4f:43:42:bf:a8:17:8a:
e8:ba:a9:f4:b4:d0:2a:14:e3:84:b2:3d:95:30:fe:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:EE:1B:87:E0:36:87:94:BE:A1:17:F8:4A:C2:65:6C:EE:86:1A
X509v3 Authority Key Identifier:
keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:29:75:4d:44:43:38:da:8f:8a:73:eb:28:ff:47:dc:49:d1:
b0:3c:16:11:68:bb:c9:1c:06:33:db:d0:3f:0c:57:13:8e:ef:
64:b8:df:43:f0:b2:2e:e1:db:c5:39:6a:ae:38:38:95:6a:76:
6a:cb:9b:e4:e9:73:61:dd:bf:01:6b:7c:65:18:29:f5:e2:c0:
ae:36:d2:51:08:bc:0a:bd:09:0c:57:88:fc:f1:c1:5e:14:31:
e3:ad:3e:da:fd:30:1f:a5:fd:8b:a1:5f:4b:3a:ac:e1:31:b5:
7f:0a:c2:95:e0:d8:79:aa:47:7c:85:99:1e:51:cc:33:6d:bc:
14:12:87:db:a7:dd:d3:f6:21:8b:0d:6c:b6:df:7b:5d:a5:bb:
3e:c9:1c:04:cf:cb:f8:ec:5a:c0:62:15:b4:43:f1:11:6d:62:
43:d8:a4:8c:69:a4:b3:ca:85:a0:86:b1:88:9d:ab:c1:2c:42:
a3:65:74:93:fa:0c:ef:69:ff:00:87:cd:29:b1:63:b5:dc:4b:
91:7f:a8:46:1c:51:2b:e2:2f:eb:b7:91:f7:29:f8:67:01:2b:
c7:37:79:5f:c4:48:22:d5:30:b6:b0:74:00:5d:2f:29:ac:2e:
7a:54:44:e7:aa:f4:49:8c:67:d4:e7:12:80:5a:f7:c2:9d:a4:
34:f5:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:40:27 2025 by rpki-client