This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
File: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (raw, json)
Hash identifier: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=
Subject key identifier: CD:72:85:F2:34:6E:6E:D3:7F:57:53:9C:BD:45:BE:3D:86:25:7E:ED
Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial: 3AC13B6C4BBEF769A5E06C0535CA42F5DD0561E0
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
Signing time: Sat 22 Nov 2025 17:21:01 +0000
ROA not before: Sat 22 Nov 2025 17:16:01 +0000
ROA not after: Sat 21 Nov 2026 17:21:01 +0000
asID: 268782
IP address blocks: 45.172.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c1:3b:6c:4b:be:f7:69:a5:e0:6c:05:35:ca:42:f5:dd:05:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FFDF44055E16082D529730642377D751467152
Validity
Not Before: Nov 22 17:16:01 2025 GMT
Not After : Nov 21 17:21:01 2026 GMT
Subject: CN=CD7285F2346E6ED37F57539CBD45BE3D86257EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:34:94:99:64:6e:71:2c:07:5b:32:97:00:
91:e9:55:0c:78:71:53:5c:86:94:e0:70:6e:2c:50:
d0:2a:7b:d6:a6:03:6f:54:3e:17:89:df:4f:bb:81:
a0:ae:46:ec:61:d1:e3:a7:23:45:b8:d2:8a:0a:a7:
bf:43:1b:c4:40:99:44:e9:82:98:e5:b6:c5:79:9c:
10:c9:5c:ff:d3:52:6c:c8:a7:32:1a:1c:7d:e0:03:
b2:f4:78:4d:a0:d6:be:d7:e4:f2:f2:93:60:83:9e:
5b:1f:70:4e:75:f2:cc:97:d8:ba:76:66:ff:1e:13:
08:a5:0d:a3:e4:c1:1c:ca:54:54:ce:94:6c:b8:6a:
f5:1f:3a:01:53:b5:a4:2c:fa:29:12:37:a8:20:97:
72:3e:ef:6c:28:64:42:77:c9:c7:71:cc:c9:b4:84:
b3:52:e5:c3:bf:60:2e:39:47:6b:71:9c:88:37:e3:
f3:e5:e1:f9:86:e1:1b:6f:2d:52:c2:31:a2:ed:f5:
fb:72:8a:2c:b0:65:52:58:8a:56:3a:23:b7:18:7b:
41:71:f6:9e:64:4e:d0:2d:f2:70:60:12:8d:13:ff:
b9:00:2f:b6:70:f6:d4:e1:87:94:12:1f:30:7a:44:
f0:ea:f5:60:99:4a:c7:4e:7f:d1:10:8d:94:9b:33:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:85:F2:34:6E:6E:D3:7F:57:53:9C:BD:45:BE:3D:86:25:7E:ED
X509v3 Authority Key Identifier:
keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.240.0/22
Signature Algorithm: sha256WithRSAEncryption
21:9e:49:97:a1:cb:98:ab:22:d5:8c:01:22:44:d4:0b:92:92:
18:07:26:5e:91:23:98:5f:e8:50:58:73:16:b5:eb:58:a6:12:
fa:18:93:17:54:56:da:eb:4c:b8:30:20:b2:24:5f:b7:c2:d1:
03:f4:a3:ce:2d:1c:e3:d5:b9:3e:78:a3:ca:15:58:15:d6:53:
f9:c5:c5:24:6b:aa:6d:f5:44:3a:f8:bf:59:30:52:d8:7c:ed:
09:df:0c:4a:12:f3:fe:77:d4:f5:c2:00:2c:7f:cd:c8:c8:98:
62:87:96:e4:85:76:15:77:bd:6c:50:c3:71:b3:e3:b9:80:2d:
f7:1d:9c:7f:39:c2:03:59:b6:94:5b:b4:61:f6:5e:8e:2b:77:
57:56:8f:59:50:c3:eb:17:5b:fa:8a:c5:98:33:b0:fc:26:c3:
64:d9:36:5f:c2:3d:ac:d6:65:1c:57:1e:c5:7a:07:24:98:aa:
ea:21:5c:23:ca:2f:a2:1c:99:a8:78:8d:19:64:77:df:29:01:
fd:d7:a3:2d:69:50:29:72:d0:33:4a:00:9f:42:9b:26:fd:b1:
14:c3:38:88:91:7c:c1:a7:6c:a6:ef:89:4e:0a:bb:d0:e1:a5:
db:4d:b5:0d:a8:0a:2a:e6:57:a4:75:71:79:7d:b0:d7:56:d2:
fe:d5:c9:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOsE7bEu+92ml4GwFNcpC9d0FYeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1
MTQ2NzE1MjAeFw0yNTExMjIxNzE2MDFaFw0yNjExMjExNzIxMDFaMDMxMTAvBgNV
BAMTKENENzI4NUYyMzQ2RTZFRDM3RjU3NTM5Q0JENDVCRTNEODYyNTdFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnjSUmWRucSwHWzKXAJHpVQx4
cVNchpTgcG4sUNAqe9amA29UPheJ30+7gaCuRuxh0eOnI0W40ooKp79DG8RAmUTp
gpjltsV5nBDJXP/TUmzIpzIaHH3gA7L0eE2g1r7X5PLyk2CDnlsfcE518syX2Lp2
Zv8eEwilDaPkwRzKVFTOlGy4avUfOgFTtaQs+ikSN6ggl3I+72woZEJ3ycdxzMm0
hLNS5cO/YC45R2txnIg34/Pl4fmG4RtvLVLCMaLt9ftyiiywZVJYilY6I7cYe0Fx
9p5kTtAt8nBgEo0T/7kAL7Zw9tThh5QSHzB6RPDq9WCZSsdOf9EQjZSbM81hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzXKF8jRubtN/V1OcvUW+PYYlfu0wHwYDVR0j
BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK
Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy
RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh5Uk5hU1RDS1o5YmtvYUZ3ZUZMalRzckdHNnlLYkFmeWRkNmpSNm1pSlpuLzAv
MzQzNTJlMzEzNzMyMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrPAwDQYJKoZIhvcNAQELBQADggEBACGeSZeh
y5irItWMASJE1AuSkhgHJl6RI5hf6FBYcxa161imEvoYkxdUVtrrTLgwILIkX7fC
0QP0o84tHOPVuT54o8oVWBXWU/nFxSRrqm31RDr4v1kwUth87QnfDEoS8/531PXC
ACx/zcjImGKHluSFdhV3vWxQw3Gz47mALfcdnH85wgNZtpRbtGH2Xo4rd1dWj1lQ
w+sXW/qKxZgzsPwmw2TZNl/CPazWZRxXHsV6BySYquohXCPKL6Icmah4jRlkd98p
Af3Xoy1pUCly0DNKAJ9Cmyb9sRTDOIiRfMGnbKbviU4Ku9DhpdtNtQ2oCirmV6R1
cXl9sNdW0v7VyX0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:25 2025 by rpki-client