This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa
File: 34352e362e3139382e302f32342d3234203d3e20323636353633.roa (raw, json)
Hash identifier: s0XvGz6QeWFrpQ1Z/0fw5KNpi1xfUqTzsaVPgHB+Sjs=
Subject key identifier: 3D:EE:65:63:F3:30:58:F7:33:77:95:86:0D:A2:CC:6F:6B:93:9C:FE
Certificate issuer: /CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Certificate serial: 294927ECD5C16B60541DE7F00CFDC171E3F12541
Authority key identifier: 13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa
Signing time: Sat 29 Nov 2025 18:08:09 +0000
ROA not before: Sat 29 Nov 2025 18:03:09 +0000
ROA not after: Sat 28 Nov 2026 18:08:09 +0000
asID: 266563
IP address blocks: 45.6.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 02:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:49:27:ec:d5:c1:6b:60:54:1d:e7:f0:0c:fd:c1:71:e3:f1:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13FA28C10847DE82ACF957B5591AB6E0E23F5057
Validity
Not Before: Nov 29 18:03:09 2025 GMT
Not After : Nov 28 18:08:09 2026 GMT
Subject: CN=3DEE6563F33058F7337795860DA2CC6F6B939CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:49:a5:d5:ee:7f:26:6e:6a:13:ce:23:37:
3a:01:2d:e2:23:42:01:78:73:84:6b:c0:a2:b6:3c:
06:68:69:27:ad:1a:ec:3c:f2:6e:a8:02:6d:be:f6:
df:00:79:c9:70:96:6b:d3:e1:91:e0:40:53:70:0d:
29:4b:56:17:cb:37:b8:e4:ce:36:a4:01:0e:9a:e6:
c7:80:1b:05:d6:d3:e0:79:8e:7b:1d:10:25:12:e6:
c6:b1:18:b3:7a:26:ae:3e:b0:63:e3:8b:f0:c9:2b:
1b:67:df:8d:20:3f:04:fb:db:5f:0a:21:72:77:e8:
84:14:80:97:a3:54:90:8e:10:82:f8:05:dd:22:5d:
7a:dc:e6:e7:41:07:24:dc:0b:4a:f5:45:5b:2b:cd:
d3:f2:28:fa:8f:43:70:22:61:0d:93:82:f1:81:9a:
1a:ea:2e:dc:16:06:92:e9:f9:9b:cb:8a:15:e2:4f:
ea:16:a9:08:b9:04:bc:d2:76:56:f1:f2:1d:9c:e7:
2a:08:af:46:85:68:5d:42:8e:1f:7d:23:ca:25:87:
81:ad:df:4c:5e:b9:c8:6b:76:f3:83:d7:7f:17:86:
2a:b5:8d:20:9b:29:43:5a:a2:3b:f9:92:a8:9d:11:
c9:85:ce:92:32:04:24:f9:03:79:e3:7e:1f:b0:9f:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:65:63:F3:30:58:F7:33:77:95:86:0D:A2:CC:6F:6B:93:9C:FE
X509v3 Authority Key Identifier:
keyid:13:FA:28:C1:08:47:DE:82:AC:F9:57:B5:59:1A:B6:E0:E2:3F:50:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/13FA28C10847DE82ACF957B5591AB6E0E23F5057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13FA28C10847DE82ACF957B5591AB6E0E23F5057.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/0/34352e362e3139382e302f32342d3234203d3e20323636353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.198.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e2:52:59:4b:fb:03:94:30:15:86:56:31:ac:2d:55:eb:fe:
f4:df:fd:1c:92:c9:1f:1c:5a:37:55:ad:3d:e5:ee:48:4a:d0:
d2:dd:0d:96:90:71:28:ce:bb:4f:5a:e2:7d:91:a5:fe:1d:2b:
a5:f3:a9:40:fc:b4:7c:e0:94:94:d5:8b:4b:50:e4:d1:c2:a8:
35:64:54:39:b5:07:6f:ba:5f:8e:47:70:3b:35:14:2d:93:d8:
38:d1:e4:c5:fc:8a:85:c4:9e:a3:90:54:1b:bc:70:24:17:90:
f7:53:8b:5f:6a:6b:b9:86:e1:a2:cd:68:86:49:93:ca:22:f6:
6c:93:5f:b6:1e:76:71:ca:3e:06:b2:3c:82:cb:f5:0c:e8:2a:
3a:c3:34:9e:21:73:0f:16:c2:31:bb:c5:c0:b6:35:87:d5:83:
7e:30:5a:91:f3:27:f4:73:c8:e7:93:d0:fc:0b:1a:ac:67:99:
d0:a6:7f:3c:29:47:90:66:dd:18:88:cf:7a:1c:ad:7c:e4:f9:
b0:94:15:68:3d:fa:ca:f6:24:bf:a1:5e:00:2f:b0:43:25:ee:
ae:f8:ad:5d:c7:9c:2a:92:85:b5:c3:25:10:98:fb:74:cd:d4:
0f:f6:4f:88:ca:1f:a9:47:8e:84:ee:9f:4c:a5:6f:93:62:03:
3b:8f:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:58:03 2025 by rpki-client