This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32322d3234203d3e203631363439.roa
File: 34352e362e3233322e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier: RWUOX1EjGbui1mW0XoN+PbnGNQoAUIBR5Yk2YqIGdxk=
Subject key identifier: B3:77:4E:8C:68:5C:73:4B:21:A8:83:C5:63:F1:BA:AB:A6:4D:6C:82
Certificate issuer: /CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Certificate serial: 264B960004E3252AEA1A59547BC4B79022E4A985
Authority key identifier: D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32322d3234203d3e203631363439.roa
Signing time: Wed 03 Dec 2025 17:38:42 +0000
ROA not before: Wed 03 Dec 2025 17:33:42 +0000
ROA not after: Wed 02 Dec 2026 17:38:42 +0000
asID: 61649
IP address blocks: 45.6.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 00:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4b:96:00:04:e3:25:2a:ea:1a:59:54:7b:c4:b7:90:22:e4:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D14C553C028BF04FA92696C8363DC8D5BE7B3713
Validity
Not Before: Dec 3 17:33:42 2025 GMT
Not After : Dec 2 17:38:42 2026 GMT
Subject: CN=B3774E8C685C734B21A883C563F1BAABA64D6C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:ca:b2:06:22:7c:70:7d:e3:0c:2a:c7:b7:
11:61:6a:26:ac:c5:bc:80:c7:93:73:dd:8b:94:05:
13:39:4b:17:1c:e2:8a:25:8b:06:29:d1:dc:50:15:
08:6c:a8:d5:2e:0a:c7:c7:0a:e0:72:2c:2b:01:10:
fe:5e:bc:b9:b4:63:11:0b:36:63:3f:ee:88:ca:4c:
a1:70:39:9f:7e:7a:c4:a4:d4:ff:25:59:3c:51:db:
bd:3c:eb:5e:ba:31:99:27:8e:6c:b4:bb:aa:db:d2:
5f:2f:9f:92:4b:ad:78:2c:33:d0:88:f1:8f:dc:67:
3f:b8:f0:fe:10:a0:37:6e:6d:f1:15:0e:07:1b:4e:
1c:1b:b7:b4:db:f1:86:b7:2b:15:2e:32:dd:3b:7e:
3a:4d:f7:78:22:d4:94:df:69:37:d9:27:38:8d:34:
c2:51:99:2c:71:b0:f6:0b:01:cf:31:ab:f5:b6:0f:
fe:76:61:97:ff:21:50:82:2c:27:5c:16:58:dc:7b:
8a:0c:b8:2c:0f:34:45:ed:ce:ca:b8:a7:59:30:35:
2b:e1:38:19:2d:19:18:cd:c7:d2:29:8e:96:ef:50:
0d:f2:6a:68:aa:99:b7:2d:f8:17:34:f3:93:6d:98:
52:b4:a8:ab:bd:3a:2b:2a:08:85:3b:3f:8e:7b:4b:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:4E:8C:68:5C:73:4B:21:A8:83:C5:63:F1:BA:AB:A6:4D:6C:82
X509v3 Authority Key Identifier:
keyid:D1:4C:55:3C:02:8B:F0:4F:A9:26:96:C8:36:3D:C8:D5:BE:7B:37:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/D14C553C028BF04FA92696C8363DC8D5BE7B3713.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14C553C028BF04FA92696C8363DC8D5BE7B3713.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/34352e362e3233322e302f32322d3234203d3e203631363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.232.0/22
Signature Algorithm: sha256WithRSAEncryption
63:5a:6f:cb:3c:bf:19:6e:d6:96:0b:84:7f:45:37:e7:8b:fb:
dc:15:d9:64:e0:5d:27:c7:37:bd:da:62:37:7b:86:83:9a:90:
e1:47:e4:1c:79:9b:57:78:22:0a:01:f3:fa:4c:bf:f2:f0:80:
e8:8f:cc:3b:eb:e4:a1:19:7e:79:46:e9:07:bd:fc:61:f7:14:
a5:21:57:c5:ad:2d:3c:88:25:e8:bd:72:cd:a0:c3:a4:81:a5:
54:68:1e:62:98:a6:12:66:c5:35:67:6f:d5:54:af:7b:7a:00:
a7:de:e1:2d:03:76:50:c0:ca:bc:20:bc:ff:c3:f7:51:30:bd:
eb:a7:61:d1:dd:0b:a7:f5:37:5f:e2:37:25:bf:81:8c:7f:e5:
a8:46:0e:54:73:a5:43:a6:01:ce:ba:cd:ed:bd:b5:dd:90:43:
04:32:35:cb:bb:38:c0:12:8d:4c:15:8f:f2:1b:e0:7a:63:32:
e3:e8:fd:40:8c:dc:63:8d:21:bd:2e:96:29:d7:0a:f3:20:ed:
f0:fe:dc:da:17:7f:96:29:0b:33:4b:95:f4:e5:ca:88:a0:63:
b6:b8:0e:11:7b:4c:8b:68:60:c9:1d:34:41:2f:1a:89:2b:0f:
d3:3d:f4:5d:58:7c:23:1e:14:30:d6:c7:c4:cd:4d:9c:b6:a9:
00:2b:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:56 2025 by rpki-client