This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3232203d3e20323636303336.roa
File: 34352e342e32382e302f32322d3232203d3e20323636303336.roa (raw, json)
Hash identifier: kyBi8VEHaZ8e17CCQvmKcanDFyDsP8U5OALDF4f4JWk=
Subject key identifier: 10:9F:1F:1D:F1:B0:DA:F2:99:F1:7A:26:5B:AA:06:26:01:D7:60:54
Certificate issuer: /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial: 5DB9ABFA27474038F19FDF4BA33DB0537EB85C9A
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3232203d3e20323636303336.roa
Signing time: Mon 05 Jan 2026 21:13:51 +0000
ROA not before: Mon 05 Jan 2026 21:08:51 +0000
ROA not after: Mon 04 Jan 2027 21:13:51 +0000
asID: 266036
IP address blocks: 45.4.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b9:ab:fa:27:47:40:38:f1:9f:df:4b:a3:3d:b0:53:7e:b8:5c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Validity
Not Before: Jan 5 21:08:51 2026 GMT
Not After : Jan 4 21:13:51 2027 GMT
Subject: CN=109F1F1DF1B0DAF299F17A265BAA062601D76054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:9e:47:02:49:a5:16:05:8c:3e:9a:25:37:
b1:3e:fa:73:b4:4a:99:ef:6b:3e:59:ba:08:5f:1e:
3b:1e:d8:b4:bb:ff:d6:3f:39:6b:4d:bb:79:c5:ba:
a1:14:76:85:97:e5:f8:0b:4f:cb:29:77:d9:39:64:
e8:ae:67:f7:8a:18:d4:5b:9f:47:55:e1:d4:b5:38:
dd:ae:bb:7a:2a:31:77:2e:8a:3e:66:fa:4d:0c:42:
e8:c4:8f:47:17:1e:50:ad:79:24:4b:d8:b6:ae:73:
3d:74:aa:9b:1b:4e:17:35:50:66:cc:a3:b4:15:94:
07:d5:f9:87:a5:1f:46:03:f9:f3:4d:66:88:21:b9:
36:01:d5:5f:23:6a:40:d9:ce:53:22:a5:85:59:1b:
1e:5d:fc:7a:ff:60:c1:8e:2c:32:c9:7e:6f:2b:88:
18:5a:df:60:b8:45:04:2c:c1:86:95:2d:1f:2b:0c:
9a:76:c8:ac:b3:76:0d:fd:95:27:1b:79:24:94:9a:
4a:97:9e:54:2b:0f:ee:d6:b9:f3:7c:23:70:d7:f6:
c1:49:99:29:9f:57:10:e1:a2:d3:3e:d7:97:71:1f:
e6:e3:7a:ac:2b:da:fe:87:66:58:49:b5:1e:67:00:
47:73:a5:85:39:7c:ef:d3:11:af:71:a4:04:51:d7:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9F:1F:1D:F1:B0:DA:F2:99:F1:7A:26:5B:AA:06:26:01:D7:60:54
X509v3 Authority Key Identifier:
keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3232203d3e20323636303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.28.0/22
Signature Algorithm: sha256WithRSAEncryption
49:12:c9:ff:bc:cc:8e:2a:e2:b4:8f:c0:4e:37:7e:b4:ad:c4:
43:67:fa:d7:23:c5:90:e2:b0:9b:9a:4f:44:f0:a7:a4:63:1e:
75:a5:a7:42:81:bb:1c:5f:33:bc:79:bf:13:b9:20:2c:9f:ca:
b0:61:13:0f:f5:2d:1e:51:21:f8:48:c4:37:ed:fa:5f:a1:66:
cd:56:8f:f2:b5:83:e2:b0:0b:d9:95:49:75:f2:44:09:d2:56:
43:0a:c4:1a:0c:3b:2a:dd:50:de:e5:b1:2e:85:22:a5:23:98:
9a:e3:ea:47:2f:3e:2e:05:64:f1:70:ba:cc:67:a9:36:11:7f:
db:5c:90:56:c3:07:58:8d:d5:1f:cb:45:ef:95:8d:46:4c:44:
6a:82:52:16:cd:63:88:a4:13:ab:3c:03:fc:06:cf:ba:d2:6f:
b3:45:c9:27:5d:13:28:35:d6:5c:24:fe:99:54:fc:33:0c:07:
39:a5:07:7b:90:ce:9e:b4:e5:88:af:40:54:c9:e0:bd:eb:4a:
42:7b:ad:cf:7a:be:45:65:9e:b1:d8:08:a4:d1:01:54:cb:3c:
76:5a:9a:e0:29:b6:d8:41:18:cd:2f:83:da:e0:50:ec:a1:b4:
f6:5b:7b:1c:06:25:40:96:67:b3:f6:79:78:d3:4c:61:d5:5f:
90:50:58:8e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUXbmr+idHQDjxn99Loz2wU364XJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNDNDdFQjEzOUIzNTc3MDA4NEQ1RDZCQjRDNjU3MDdC
QzJFRENDNjAeFw0yNjAxMDUyMTA4NTFaFw0yNzAxMDQyMTEzNTFaMDMxMTAvBgNV
BAMTKDEwOUYxRjFERjFCMERBRjI5OUYxN0EyNjVCQUEwNjI2MDFENzYwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+Z5HAkmlFgWMPpolN7E++nO0
Spnvaz5ZughfHjse2LS7/9Y/OWtNu3nFuqEUdoWX5fgLT8spd9k5ZOiuZ/eKGNRb
n0dV4dS1ON2uu3oqMXcuij5m+k0MQujEj0cXHlCteSRL2Laucz10qpsbThc1UGbM
o7QVlAfV+YelH0YD+fNNZoghuTYB1V8jakDZzlMipYVZGx5d/Hr/YMGOLDLJfm8r
iBha32C4RQQswYaVLR8rDJp2yKyzdg39lScbeSSUmkqXnlQrD+7WufN8I3DX9sFJ
mSmfVxDhotM+15dxH+bjeqwr2v6HZlhJtR5nAEdzpYU5fO/TEa9xpARR1/5TAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEJ8fHfGw2vKZ8XomW6oGJgHXYFQwHwYDVR0j
BBgwFoAUU8R+sTmzV3AITV1rtMZXB7wu3MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdDWXZCTXdpQmllV1B3cTE5ODhBQVE4R0pqYTlVTEh4M1ZxUEdZZjZk
ZFQvMC81M0M0N0VCMTM5QjM1NzcwMDg0RDVENkJCNEM2NTcwN0JDMkVEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQzQ3RUIxMzlCMzU3NzAw
ODRENUQ2QkI0QzY1NzA3QkMyRURDQzYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHQ1l2Qk13aUJpZVdQd3ExOTg4QUFROEdKamE5VUxIeDNWcVBHWWY2ZGRULzAv
MzQzNTJlMzQyZTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzYzMDMz
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBBwwDQYJKoZIhvcNAQELBQADggEBAEkSyf+8zI4q4rSP
wE43frStxENn+tcjxZDisJuaT0Twp6RjHnWlp0KBuxxfM7x5vxO5ICyfyrBhEw/1
LR5RIfhIxDft+l+hZs1Wj/K1g+KwC9mVSXXyRAnSVkMKxBoMOyrdUN7lsS6FIqUj
mJrj6kcvPi4FZPFwusxnqTYRf9tckFbDB1iN1R/LRe+VjUZMRGqCUhbNY4ikE6s8
A/wGz7rSb7NFySddEyg11lwk/plU/DMMBzmlB3uQzp605YivQFTJ4L3rSkJ7rc96
vkVlnrHYCKTRAVTLPHZamuAptthBGM0vg9rgUOyhtPZbexwGJUCWZ7P2eXjTTGHV
X5BQWI4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:36 2026 by rpki-client