This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
File: 34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier: 1cwqLnwixhZ5EnGoY5oGrEkmFpdf8/JiSZdpQtNsYIQ=
Subject key identifier: 29:A1:C2:46:4B:7A:E0:6B:3C:29:3D:C0:9A:B8:36:CD:D5:94:48:34
Certificate issuer: /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial: 1BC06C9F5A8B7C6843AE8128B3E3703B9D4E8811
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
Signing time: Tue 16 Dec 2025 21:00:42 +0000
ROA not before: Tue 16 Dec 2025 20:55:42 +0000
ROA not after: Tue 15 Dec 2026 21:00:42 +0000
asID: 268678
IP address blocks: 45.165.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 17 Dec 2025 21:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c0:6c:9f:5a:8b:7c:68:43:ae:81:28:b3:e3:70:3b:9d:4e:88:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Validity
Not Before: Dec 16 20:55:42 2025 GMT
Not After : Dec 15 21:00:42 2026 GMT
Subject: CN=29A1C2464B7AE06B3C293DC09AB836CDD5944834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:1b:3e:6d:72:86:5b:19:c6:6b:ad:5a:58:
9c:f1:2c:90:b9:17:71:23:e4:59:5e:75:49:b2:e1:
c6:97:f2:64:ba:77:69:39:1f:dc:46:94:b8:a9:2f:
c3:5c:bf:42:a5:d7:db:8d:a4:bc:d6:2e:66:6b:57:
ad:1b:93:a5:34:76:c3:cd:33:7a:29:e1:fa:ee:ec:
78:d2:56:44:cd:70:18:33:f1:75:d6:8f:43:75:9a:
23:76:48:1a:9a:c9:38:af:42:b9:1d:f6:11:5a:a8:
a5:cc:ee:53:47:d1:06:1d:ae:34:28:9b:b8:ab:1f:
e9:ae:7a:3d:1c:e5:2e:a9:d0:f2:fc:11:d4:ea:5e:
4c:56:a9:1f:a4:c2:69:35:f2:76:1e:b6:c3:c2:18:
54:d8:43:19:4e:0f:a6:37:25:36:dc:66:52:da:64:
03:74:a6:09:5e:68:ef:f9:5b:d8:ac:15:f6:59:b7:
a0:4b:7f:07:08:fe:33:81:ae:4b:a5:f9:42:02:33:
dc:12:52:04:ea:01:04:6c:7a:35:fc:03:ba:8e:76:
24:9f:fc:70:51:6d:ee:b6:64:00:45:15:93:a4:c8:
3d:0b:e9:25:fc:38:cd:32:51:9f:81:f1:15:3f:77:
1c:99:7a:45:f2:0a:a4:79:d3:f8:52:b5:ea:82:70:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:C2:46:4B:7A:E0:6B:3C:29:3D:C0:9A:B8:36:CD:D5:94:48:34
X509v3 Authority Key Identifier:
keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.150.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e8:6c:81:13:c1:6b:4c:88:b7:c7:f2:16:d2:9b:8d:5f:59:
94:7c:77:bc:d8:df:8c:65:b9:6d:9f:1a:ce:12:09:20:49:5c:
ed:b5:e9:93:75:0c:fa:eb:c9:87:ef:3c:7b:e7:70:cd:89:f2:
c4:cc:2f:46:de:f7:b0:e7:15:37:a9:4f:f8:5a:67:a6:28:e2:
04:25:d2:d5:cf:38:4c:0c:f0:e5:a9:d4:d3:76:16:d2:3c:5d:
2c:80:7b:87:59:16:42:32:66:e7:49:c9:06:3e:4b:e6:bb:6e:
25:b0:6d:cc:65:b3:01:9c:ab:5d:4b:1d:09:a2:e6:58:79:2f:
91:62:b5:a2:46:14:e6:84:97:83:ac:59:e5:38:fa:23:08:11:
dd:37:46:dd:92:6e:6b:bb:bf:68:7d:aa:70:ba:35:35:e2:9d:
70:a5:88:87:58:8d:95:8d:8d:b5:3b:bc:5e:80:a6:19:2f:0f:
57:f2:45:b1:a9:22:fe:d8:f5:85:a0:4c:0d:18:ff:14:ff:ea:
70:09:d9:35:4b:48:ea:2c:b4:37:45:a2:d2:2e:10:8c:b5:fc:
f9:db:41:ab:3c:90:02:f6:68:a1:43:e0:e7:70:26:5d:63:c1:
47:35:ec:7b:2b:38:be:ea:7f:67:73:55:fd:6e:6f:f2:d3:a1:
8e:85:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:42:30 2025 by rpki-client