This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
File: 34352e3138342e34342e302f32322d3234203d3e20323639333131.roa (raw, json)
Hash identifier: zjFfHVdkTZHCLeq+NOgiZYSRs1fe85UxqTIn4l5ZRDE=
Subject key identifier: CE:B3:B3:B8:91:A6:29:A6:3E:9F:86:F0:77:E5:26:D3:98:C0:F9:B2
Certificate issuer: /CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
Certificate serial: 2F3F647CFF0D48B6D1E604897F8BECD7D6976416
Authority key identifier: 0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
Signing time: Tue 25 Nov 2025 14:24:53 +0000
ROA not before: Tue 25 Nov 2025 14:19:53 +0000
ROA not after: Tue 24 Nov 2026 14:24:53 +0000
asID: 269311
IP address blocks: 45.184.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl
rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3f:64:7c:ff:0d:48:b6:d1:e6:04:89:7f:8b:ec:d7:d6:97:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
Validity
Not Before: Nov 25 14:19:53 2025 GMT
Not After : Nov 24 14:24:53 2026 GMT
Subject: CN=CEB3B3B891A629A63E9F86F077E526D398C0F9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:10:1a:42:19:b6:88:bb:4b:d3:a3:06:d1:
bb:e7:15:ef:73:e7:24:67:d5:c4:a4:07:db:66:78:
fd:d0:e6:47:fb:d8:13:7c:dd:a4:22:c9:86:cf:a4:
2e:ad:70:37:8c:ab:1d:a6:3b:e4:ef:90:b0:f8:b0:
82:86:d0:17:44:61:9a:e7:93:a5:b1:49:08:43:ba:
3d:56:8c:b9:dc:eb:d2:9e:88:9b:3b:61:66:6b:ee:
d1:7c:0e:73:80:9f:82:90:18:aa:16:b8:37:0a:37:
c7:f7:6a:e3:6e:1d:8a:bc:24:2f:b7:c2:1d:a6:e5:
c2:31:40:16:05:00:d9:26:a7:e9:a2:ef:c7:d1:c1:
42:3e:19:91:ca:5a:c1:2d:f3:bf:25:60:72:ef:1a:
2a:97:3b:1f:01:d1:d6:c0:ae:5b:bc:e5:13:e7:ff:
88:dd:9e:63:0a:ce:60:ce:e0:f2:6d:90:1c:f8:ca:
b8:4e:63:e9:90:07:9e:de:94:28:76:11:d4:14:e4:
a9:8a:d8:9f:28:33:bf:2b:3e:be:57:aa:a6:9e:d2:
7e:42:4f:2e:92:fa:a6:a5:68:fe:9a:2a:17:49:9a:
a2:d2:65:a3:17:70:fc:82:ca:80:cb:11:6a:fb:aa:
51:14:c5:d8:47:a4:6a:c7:d3:5b:c6:81:82:d3:d3:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:B3:B8:91:A6:29:A6:3E:9F:86:F0:77:E5:26:D3:98:C0:F9:B2
X509v3 Authority Key Identifier:
keyid:0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.44.0/22
Signature Algorithm: sha256WithRSAEncryption
52:37:4d:00:5c:1c:d4:ba:9c:68:43:de:04:71:8f:a6:dc:a6:
ba:f1:37:20:42:b5:cc:5a:60:50:de:6e:97:fb:52:19:95:b8:
6d:d3:21:e7:8e:b1:d7:3c:4e:5c:66:61:b2:46:a2:67:73:54:
93:28:bb:93:e7:2a:e1:a5:13:e9:5d:9f:5e:86:8e:73:53:c9:
dc:f4:b8:51:e1:9c:c3:66:be:1c:2d:7a:20:cb:be:70:d5:1c:
50:73:39:d5:62:bf:39:b9:91:6c:da:0c:12:ba:d5:25:18:c6:
04:fb:c2:5b:60:0f:9e:51:56:8f:92:7d:e1:44:53:7e:8f:da:
68:d5:60:8a:b1:6c:5b:fc:ed:6b:e4:11:fc:27:30:d0:60:4f:
91:ab:30:06:ed:63:60:88:41:6e:2f:40:5c:de:af:1a:2d:49:
41:9c:2c:27:fb:e1:36:92:8f:b2:d5:b9:be:c1:71:d4:58:73:
32:8c:fc:ac:6d:20:ef:c3:fa:67:cb:5f:d3:16:66:80:3d:f3:
2c:6f:e1:85:b0:d4:1e:c9:89:64:ae:8c:ca:d9:be:1d:90:cc:
3c:25:7d:72:11:cb:87:e0:26:9d:b7:d9:d3:dc:0c:33:c8:33:
4f:f7:13:d5:f0:25:d8:fd:c0:cc:12:03:1b:3e:20:5b:79:8e:
40:07:56:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULz9kfP8NSLbR5gSJf4vs19aXZBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJCQjhDOTUxMEQyNkYyQkI2RUJBQzlCQTg5RTUyNEUz
Q0E2NkFEMDAeFw0yNTExMjUxNDE5NTNaFw0yNjExMjQxNDI0NTNaMDMxMTAvBgNV
BAMTKENFQjNCM0I4OTFBNjI5QTYzRTlGODZGMDc3RTUyNkQzOThDMEY5QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCElBAaQhm2iLtL06MG0bvnFe9z
5yRn1cSkB9tmeP3Q5kf72BN83aQiyYbPpC6tcDeMqx2mO+TvkLD4sIKG0BdEYZrn
k6WxSQhDuj1WjLnc69KeiJs7YWZr7tF8DnOAn4KQGKoWuDcKN8f3auNuHYq8JC+3
wh2m5cIxQBYFANkmp+mi78fRwUI+GZHKWsEt878lYHLvGiqXOx8B0dbArlu85RPn
/4jdnmMKzmDO4PJtkBz4yrhOY+mQB57elCh2EdQU5KmK2J8oM78rPr5Xqqae0n5C
Ty6S+qalaP6aKhdJmqLSZaMXcPyCyoDLEWr7qlEUxdhHpGrH01vGgYLT0yWPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzrOzuJGmKaY+n4bwd+Um05jA+bIwHwYDVR0j
BBgwFoAUC7uMlRDSbyu266ybqJ5STjymatAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBX
WXMvMC8wQkJCOEM5NTEwRDI2RjJCQjZFQkFDOUJBODlFNTI0RTNDQTY2QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQkI4Qzk1MTBEMjZGMkJC
NkVCQUM5QkE4OUU1MjRFM0NBNjZBRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBN3ZEWVkyVmRqOUxjQ3RvaXhjdDJnbVBvcWVnTFlwOW1FdVQxOE1wV1lzLzAv
MzQzNTJlMzEzODM0MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbgsMA0GCSqGSIb3DQEBCwUAA4IBAQBSN00AXBzU
upxoQ94EcY+m3Ka68TcgQrXMWmBQ3m6X+1IZlbht0yHnjrHXPE5cZmGyRqJnc1ST
KLuT5yrhpRPpXZ9eho5zU8nc9LhR4ZzDZr4cLXogy75w1RxQcznVYr85uZFs2gwS
utUlGMYE+8JbYA+eUVaPkn3hRFN+j9po1WCKsWxb/O1r5BH8JzDQYE+RqzAG7WNg
iEFuL0Bc3q8aLUlBnCwn++E2ko+y1bm+wXHUWHMyjPysbSDvw/pny1/TFmaAPfMs
b+GFsNQeyYlkrozK2b4dkMw8JX1yEcuH4Cadt9nT3AwzyDNP9xPV8CXY/cDMEgMb
PiBbeY5AB1b9
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:23 2025 by rpki-client