This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa
File: 34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier: Cb+8AfDxYNPYsk5AR8G/u4+vII/kYh+VaEbH5XpoXVw=
Subject key identifier: 76:8C:F0:30:89:E9:AD:55:FB:D5:38:D6:27:DA:C8:7A:9C:8C:6B:16
Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial: 5EE4B8F0F40EA7CAA52B82E8B007E52C1BFE7C75
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa
Signing time: Fri 23 Jan 2026 16:56:46 +0000
ROA not before: Fri 23 Jan 2026 16:51:46 +0000
ROA not after: Fri 22 Jan 2027 16:56:46 +0000
asID: 198949
IP address blocks: 45.229.208.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 06:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e4:b8:f0:f4:0e:a7:ca:a5:2b:82:e8:b0:07:e5:2c:1b:fe:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Validity
Not Before: Jan 23 16:51:46 2026 GMT
Not After : Jan 22 16:56:46 2027 GMT
Subject: CN=768CF03089E9AD55FBD538D627DAC87A9C8C6B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:63:00:fd:cc:79:7b:f1:63:d5:4c:73:1c:
2e:6c:cd:f3:3a:49:69:d4:39:2e:94:32:f3:56:aa:
a4:b6:32:fd:70:87:85:04:eb:c5:b7:87:da:df:74:
16:f1:a0:54:f3:00:0a:13:cf:ea:8d:9f:aa:35:19:
27:29:fd:b0:02:90:42:cc:98:93:91:8f:aa:6b:39:
cd:bf:bd:2e:98:5f:02:79:7d:b0:9e:2c:f6:0b:9e:
25:e6:23:f7:53:4c:98:30:16:a4:06:ed:c4:de:55:
88:29:f8:2a:72:d5:f1:2b:47:cc:51:fa:61:73:f3:
14:0d:c2:4d:c7:84:f7:3d:ee:74:d2:a5:36:1f:9f:
08:ca:96:e8:62:87:69:63:0d:af:16:7b:2b:a8:ca:
3c:65:6e:9a:7b:1f:0e:63:9a:97:2d:cb:d2:65:01:
89:5d:ef:03:99:d0:01:77:22:ad:c9:9d:8b:a4:bf:
ee:ef:bd:13:fb:f2:be:d1:e2:22:f7:7e:4b:99:d3:
6b:5f:3a:df:92:eb:0a:3d:dc:5f:ed:fe:d0:0e:7c:
22:cf:53:0e:56:b9:4b:b3:15:e1:3e:76:6a:e4:fe:
3b:ba:a9:f9:b3:52:70:3d:7d:4a:3b:be:9b:b0:07:
9c:6b:ec:02:c3:06:a7:a9:05:8c:fe:df:94:e0:d3:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:F0:30:89:E9:AD:55:FB:D5:38:D6:27:DA:C8:7A:9C:8C:6B:16
X509v3 Authority Key Identifier:
keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.208.0/22
Signature Algorithm: sha256WithRSAEncryption
03:11:3f:90:71:d9:f6:f2:e8:5c:27:9b:b8:fb:9e:06:61:ef:
e2:f6:f3:61:d6:74:86:6b:ab:52:ba:19:96:0e:43:41:3b:87:
97:06:e6:a7:1f:a7:2f:f8:4d:a4:cb:22:a5:0f:3d:cb:8f:28:
f1:e5:88:f3:44:50:db:27:fe:c5:b5:85:78:3b:f3:d0:c4:38:
0a:05:c9:01:9c:6e:cb:d1:6d:65:98:f7:5b:32:4b:52:4e:88:
2c:db:e5:42:3f:c9:26:fb:16:86:46:95:6c:3b:a4:cd:c5:44:
9c:34:47:b6:70:15:da:fd:05:fb:75:8a:a3:f0:79:ab:04:54:
f4:ce:47:25:91:98:e5:18:bc:8a:a0:a7:0e:0d:22:fa:cf:e6:
3c:5a:bd:67:04:83:ce:52:8b:1d:8a:49:7a:03:f2:ab:a7:fa:
bc:5a:9d:62:fb:cd:ca:2d:0f:65:c9:07:d5:a2:d7:42:26:01:
d6:07:d6:47:4f:a3:a9:93:ef:90:16:ea:af:8d:91:12:ea:77:
4d:20:86:ed:6e:5f:94:f8:57:70:7c:b0:b9:b6:82:3e:79:99:
13:f5:09:01:41:ea:0e:94:4f:b8:94:b9:06:19:bd:fa:62:2a:
3a:e2:2b:2d:6b:91:2e:6b:a7:ca:2c:f8:50:2f:39:ac:08:08:
82:5b:c0:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXuS48PQOp8qlK4LosAflLBv+fHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY4NUM5RkVCRjgxNTE1NUM2RDQ0Nzk4NjY5RkIzQkZC
OUZENDlFMDAeFw0yNjAxMjMxNjUxNDZaFw0yNzAxMjIxNjU2NDZaMDMxMTAvBgNV
BAMTKDc2OENGMDMwODlFOUFENTVGQkQ1MzhENjI3REFDODdBOUM4QzZCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDmMA/cx5e/Fj1UxzHC5szfM6
SWnUOS6UMvNWqqS2Mv1wh4UE68W3h9rfdBbxoFTzAAoTz+qNn6o1GScp/bACkELM
mJORj6prOc2/vS6YXwJ5fbCeLPYLniXmI/dTTJgwFqQG7cTeVYgp+Cpy1fErR8xR
+mFz8xQNwk3HhPc97nTSpTYfnwjKluhih2ljDa8Weyuoyjxlbpp7Hw5jmpcty9Jl
AYld7wOZ0AF3Iq3JnYukv+7vvRP78r7R4iL3fkuZ02tfOt+S6wo93F/t/tAOfCLP
Uw5WuUuzFeE+dmrk/ju6qfmzUnA9fUo7vpuwB5xr7ALDBqepBYz+35Tg0x2HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdozwMInprVX71TjWJ9rIepyMaxYwHwYDVR0j
BBgwFoAUn4XJ/r+BUVXG1EeYZp+zv7n9SeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4
aEgvMC85Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGODVDOUZFQkY4MTUxNTVD
NkQ0NDc5ODY2OUZCM0JGQjlGRDQ5RTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOdzNBaWlxOExtQ0daR0p2NDQxWXB2alIxZHBlZmFSakVkY3JZc1Y3eGhILzAv
MzQzNTJlMzIzMjM5MmUzMjMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTM5
MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5dAwDQYJKoZIhvcNAQELBQADggEBAAMRP5Bx
2fby6Fwnm7j7ngZh7+L282HWdIZrq1K6GZYOQ0E7h5cG5qcfpy/4TaTLIqUPPcuP
KPHliPNEUNsn/sW1hXg789DEOAoFyQGcbsvRbWWY91syS1JOiCzb5UI/ySb7FoZG
lWw7pM3FRJw0R7ZwFdr9Bft1iqPweasEVPTORyWRmOUYvIqgpw4NIvrP5jxavWcE
g85Six2KSXoD8qun+rxanWL7zcotD2XJB9Wi10ImAdYH1kdPo6mT75AW6q+NkRLq
d00ghu1uX5T4V3B8sLm2gj55mRP1CQFB6g6UT7iUuQYZvfpiKjriKy1rkS5rp8os
+FAvOawICIJbwO8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:42 2026 by rpki-client