This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa
File: 34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa (raw, json)
Hash identifier: CjoqMsbzM1Hru4SLzSDKeuKS3sgxoGCHcCMd1Aw3lUI=
Subject key identifier: AB:2B:C1:A1:78:4B:9D:64:27:82:FB:32:BC:90:9B:34:30:7D:5A:0F
Certificate issuer: /CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
Certificate serial: 7CAA23481ACA27A826FC0950BC0F414B4D6381D9
Authority key identifier: 5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa
Signing time: Tue 25 Nov 2025 14:09:26 +0000
ROA not before: Tue 25 Nov 2025 14:04:26 +0000
ROA not after: Tue 24 Nov 2026 14:09:26 +0000
asID: 271717
IP address blocks: 45.164.168.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl
rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:aa:23:48:1a:ca:27:a8:26:fc:09:50:bc:0f:41:4b:4d:63:81:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E878ACF42BCB846E133F1C042360C4F1DF3ED27
Validity
Not Before: Nov 25 14:04:26 2025 GMT
Not After : Nov 24 14:09:26 2026 GMT
Subject: CN=AB2BC1A1784B9D642782FB32BC909B34307D5A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:31:1f:08:29:e8:b1:67:6b:20:7b:65:d1:
d4:87:b9:8a:05:88:b4:e6:96:ed:8e:b1:90:b8:67:
20:f3:c9:0a:74:06:58:21:d9:69:ed:25:30:1f:aa:
09:67:14:86:de:8b:03:d1:7d:71:75:0a:fc:bd:5f:
b5:42:6b:59:2c:a0:2d:c1:04:37:88:6d:22:b0:04:
95:b9:39:75:12:69:ab:76:cb:b1:6e:64:a6:a6:ab:
92:73:d0:0e:1f:f5:d6:da:db:9f:a0:1c:11:80:a0:
11:74:eb:b7:c4:29:d1:39:e9:a5:11:d7:83:c4:a3:
2a:85:76:30:ca:9b:32:b9:0b:49:8e:ca:5c:07:48:
ec:15:2e:2e:88:5c:5e:0c:e3:20:67:c0:7c:fd:25:
03:36:20:d1:6f:65:ee:8f:50:0b:e2:20:b3:52:3a:
bc:bb:de:09:76:b1:19:8c:3a:53:2d:e9:2c:7d:f2:
77:57:6c:d3:b5:5c:75:f6:db:c9:96:f6:64:73:8a:
ac:51:40:89:b4:66:4e:60:d7:1a:aa:1e:36:c4:6f:
00:44:ae:24:3f:e4:ad:e3:7a:3b:19:ab:61:ed:7d:
16:ac:0b:1c:0c:77:da:cf:51:c8:a2:ed:aa:28:23:
ae:7b:13:72:0e:ac:bf:13:4c:a5:3f:26:1b:f6:3f:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:C1:A1:78:4B:9D:64:27:82:FB:32:BC:90:9B:34:30:7D:5A:0F
X509v3 Authority Key Identifier:
keyid:5E:87:8A:CF:42:BC:B8:46:E1:33:F1:C0:42:36:0C:4F:1D:F3:ED:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E878ACF42BCB846E133F1C042360C4F1DF3ED27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QiGftbDyM61si2hjRaTEJcAn16j4Pn2ueFsjT6sNPWs/0/34352e3136342e3136382e302f32322d3332203d3e20323731373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:5f:6c:22:f0:10:cb:72:50:f6:e1:42:ce:b8:f6:21:9c:b5:
09:b1:86:39:34:5c:11:bc:f6:7d:f0:e2:35:f6:98:23:02:1c:
dc:01:c4:4a:48:6c:f0:82:75:f4:69:72:4e:eb:f6:44:06:3e:
29:9a:c7:66:5f:d2:a8:90:16:a4:3f:7b:84:f1:50:d4:b3:35:
79:98:98:2d:8a:85:2b:82:f8:b7:1e:38:57:3e:b9:e0:94:3f:
0d:95:79:8a:ac:d4:f2:ca:b5:4f:15:38:bf:38:ca:b2:3c:7e:
d6:38:ff:84:41:dc:0a:8c:2b:25:74:8c:fb:a6:10:b1:24:69:
45:84:08:ed:dd:33:36:47:27:c0:85:e4:fb:6e:33:2b:08:2b:
6e:80:c5:ea:03:52:dd:59:79:fd:52:f2:ed:20:a0:e7:54:37:
21:07:f9:e5:d8:b6:d8:db:71:e2:1e:f1:2e:6c:32:70:20:c8:
0e:40:c8:3e:17:c7:30:4c:20:70:a1:d1:9e:52:4c:6e:af:73:
e1:09:81:04:23:55:42:81:d3:fa:fe:2f:b3:23:dc:df:7a:45:
be:33:87:ce:26:b6:cf:10:61:70:e3:49:7f:6f:0a:52:93:7a:
d2:7d:c3:ea:df:0d:0f:ac:4f:f1:24:69:af:d9:73:4b:df:ec:
d1:2a:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:36:26 2025 by rpki-client