This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
File: 34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa (raw, json)
Hash identifier: dC5dY1X9uMepaH6V9ATw7CR2EzBQvvL8Zl63jgx/Ujo=
Subject key identifier: 75:47:95:B0:B2:67:61:AA:45:56:9F:9E:EC:48:70:DC:38:A4:CE:50
Certificate issuer: /CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
Certificate serial: 5272B8049BE0E4C2CF22FF7AB6F6F54734BD0AD8
Authority key identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
Signing time: Mon 12 Jan 2026 18:01:17 +0000
ROA not before: Mon 12 Jan 2026 17:56:17 +0000
ROA not after: Mon 11 Jan 2027 18:01:17 +0000
asID: 264169
IP address blocks: 45.189.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl
rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:72:b8:04:9b:e0:e4:c2:cf:22:ff:7a:b6:f6:f5:47:34:bd:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240
Validity
Not Before: Jan 12 17:56:17 2026 GMT
Not After : Jan 11 18:01:17 2027 GMT
Subject: CN=754795B0B26761AA45569F9EEC4870DC38A4CE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:f3:69:f4:df:d6:56:fe:28:09:06:40:f3:
a5:41:5a:d6:86:8e:5a:6d:98:b4:08:44:a9:ee:91:
71:bf:a6:f2:4e:8d:a7:25:8d:7c:2b:06:8a:4d:3a:
2d:87:7f:14:e5:fc:87:bb:a3:f0:a2:04:90:63:26:
72:6d:d5:73:aa:50:2c:5a:da:d6:94:51:43:f3:ff:
12:c6:7f:be:ff:57:5e:e0:0b:d2:0d:5b:f2:9c:c4:
30:a6:96:26:47:4f:d4:62:55:19:fb:61:43:a5:5a:
11:fd:54:b6:48:c6:1a:2d:27:f4:5c:47:87:7f:ca:
b6:70:10:3a:39:21:d2:83:24:74:a7:83:54:43:06:
fd:17:9a:b0:28:8d:bb:dd:4d:d6:59:6c:d0:33:7c:
b8:5c:22:ac:8b:1f:a5:e3:5b:c8:b5:3f:6f:bd:14:
d8:25:72:1b:67:7a:67:15:44:c2:2f:9a:26:98:7c:
a5:08:ca:60:cc:07:d5:4b:ba:80:4b:27:7f:76:a1:
79:11:3a:41:06:7c:36:7a:e8:d4:98:5f:21:44:f5:
9c:f0:29:b5:c7:b1:99:b9:33:54:05:c8:ae:83:1a:
85:34:52:5f:0e:6e:a2:d6:f4:e5:a5:26:c6:ed:66:
db:f0:66:a0:41:48:aa:41:86:46:4c:df:d2:a6:8c:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:95:B0:B2:67:61:AA:45:56:9F:9E:EC:48:70:DC:38:A4:CE:50
X509v3 Authority Key Identifier:
keyid:C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/34352e3138392e3136382e302f32322d3234203d3e20323634313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:24:8a:f8:2b:f1:ff:0a:6d:00:d0:2a:aa:27:e8:4d:ba:a2:
b1:50:b6:96:e7:39:7d:70:8d:7e:8c:a8:96:b3:58:ae:ec:67:
3a:ed:52:69:25:8d:cc:53:91:ed:82:9d:d7:0f:94:7e:53:65:
09:57:2f:de:fd:16:16:7d:81:31:c2:27:f0:b0:3f:8c:32:7c:
26:b4:6e:31:d3:1c:07:f8:cb:98:ac:e1:16:59:80:a0:84:c0:
43:1d:b8:e6:12:a9:99:5e:9e:25:2b:ab:af:ee:b5:06:20:9c:
b4:86:b6:81:0d:c3:91:28:e2:2a:09:b3:30:73:df:25:dd:9c:
4d:16:2b:87:54:93:e4:15:c7:61:66:d2:9e:56:41:c8:24:c7:
64:ed:e6:f0:08:89:e6:af:c7:76:28:5e:47:58:47:90:0c:b3:
eb:99:7d:e9:cd:39:5c:3f:ec:82:fa:66:b0:1a:e3:14:61:78:
76:e1:99:37:9d:7e:2e:4e:78:d1:a8:a6:d4:51:63:9f:8a:88:
29:58:fa:96:55:77:4f:a1:9e:b1:e7:19:93:29:9e:35:95:8c:
e6:df:de:1f:6b:6a:81:30:64:15:88:70:69:a7:bf:12:e0:41:
28:46:b7:5b:7e:bd:18:07:3f:c7:18:00:34:ab:bb:92:c0:60:
59:79:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:47:25 2026 by rpki-client