This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
File: 34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier: OufUszNAwdTkYGGkoMrVbhlvse4wLzgSyBoffAkDg18=
Subject key identifier: 44:72:E8:F0:AA:E1:50:1A:75:99:01:B1:A7:50:B8:81:D9:33:02:CB
Certificate issuer: /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial: 7F4D95584E31C3CDE5070FF8F0F5B7FE584437AE
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
Signing time: Wed 10 Dec 2025 17:18:28 +0000
ROA not before: Wed 10 Dec 2025 17:13:28 +0000
ROA not after: Wed 09 Dec 2026 17:18:28 +0000
asID: 267091
IP address blocks: 45.229.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 08:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:95:58:4e:31:c3:cd:e5:07:0f:f8:f0:f5:b7:fe:58:44:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
Validity
Not Before: Dec 10 17:13:28 2025 GMT
Not After : Dec 9 17:18:28 2026 GMT
Subject: CN=4472E8F0AAE1501A759901B1A750B881D93302CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:22:d7:8c:10:ae:7c:bb:e9:55:0e:e1:cd:
0a:c5:f7:a4:63:97:b5:a0:e7:16:62:c7:4f:c7:2b:
57:2d:ae:07:58:36:51:03:3b:b3:1e:17:fb:8b:f1:
7c:d5:f0:4c:1e:19:f3:26:00:6d:99:54:d1:01:b7:
3d:cc:a3:7d:aa:08:1c:5e:a6:90:2d:d8:11:68:8c:
47:ef:bb:35:b4:2d:ce:80:8c:54:a3:08:db:37:32:
ef:0c:45:69:54:41:0d:dc:0f:7a:65:b5:7f:dc:81:
08:ce:1e:46:d8:1e:3e:c4:25:1d:55:60:65:ca:d5:
24:55:db:e4:20:5a:d9:fe:91:43:1b:65:a0:0c:c0:
e2:50:08:5b:af:05:97:1c:d1:63:f0:b1:17:62:32:
28:e6:63:54:1c:a9:65:de:45:e5:b2:16:3e:06:f0:
b1:a4:75:4b:9c:57:07:6b:be:8a:1c:d9:9e:d3:9a:
80:1a:9e:11:15:a4:9d:c4:f0:24:b9:61:f6:c6:38:
5a:40:22:ef:ba:eb:4d:9c:b0:06:e1:72:f4:83:8b:
3f:a5:d0:52:29:62:cb:6f:f3:80:68:02:d6:86:ce:
2a:d7:f6:d0:ec:3a:df:8c:89:89:ed:08:af:3b:83:
6d:9d:5a:5e:e0:f1:d4:8f:e4:98:88:df:b5:2e:72:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:E8:F0:AA:E1:50:1A:75:99:01:B1:A7:50:B8:81:D9:33:02:CB
X509v3 Authority Key Identifier:
keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32322e302f32342d3234203d3e20323637303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.22.0/24
Signature Algorithm: sha256WithRSAEncryption
25:24:0f:88:49:cf:e0:eb:8a:89:5e:c2:a8:38:94:37:26:49:
39:52:bc:ab:8c:d3:15:8e:53:7b:a2:9f:82:d7:8a:0b:c2:08:
71:34:19:09:1f:4c:66:73:3c:df:e5:09:ec:eb:5b:43:8f:c8:
57:56:58:5e:80:8c:ef:38:4a:22:db:4e:7f:19:e9:47:db:11:
33:9d:45:22:ec:aa:68:54:91:8c:2c:1c:1d:62:15:9d:03:0a:
fe:31:75:a3:70:78:92:44:7e:f7:6b:ec:e7:ab:f4:e8:db:4e:
e0:ce:4c:3d:92:84:9c:6d:ab:10:64:9b:a6:28:fb:30:f1:17:
79:0e:ba:96:6a:1a:a6:a8:cb:2f:23:af:33:d7:59:58:34:5a:
c2:3e:f1:c9:39:23:5b:36:de:c2:cb:20:88:4b:92:f1:8b:4f:
6f:31:96:4d:af:41:c5:84:54:b7:12:11:0a:83:05:0e:e3:da:
75:67:fc:d9:cc:7e:a3:61:30:31:8e:15:c5:09:e8:cb:fc:e5:
75:10:09:ed:ce:c6:a1:23:b4:2c:86:81:fa:d3:9b:08:8f:0e:
2b:aa:13:d8:04:83:cc:49:5c:f5:8f:6a:5c:66:a7:f0:61:0e:
2e:58:d3:b9:55:0a:43:a6:8d:46:55:94:7a:3c:93:57:66:f5:
ec:cb:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:15:27 2025 by rpki-client