This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
File: 34352e342e33302e302f32332d3233203d3e20323636303336.roa (raw, json)
Hash identifier: a6JQCbb4ZrxXL1G7lnb+Mg1GTozru6qELh8bF62VqcU=
Subject key identifier: 4A:2A:5F:8B:18:00:78:6B:DA:85:3D:28:F9:C3:01:A5:FA:7D:FC:D2
Certificate issuer: /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial: 23E7279482BBD01AB72FBC84641A05692862EE1B
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
Signing time: Mon 05 Jan 2026 21:13:51 +0000
ROA not before: Mon 05 Jan 2026 21:08:51 +0000
ROA not after: Mon 04 Jan 2027 21:13:51 +0000
asID: 266036
IP address blocks: 45.4.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 16:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e7:27:94:82:bb:d0:1a:b7:2f:bc:84:64:1a:05:69:28:62:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Validity
Not Before: Jan 5 21:08:51 2026 GMT
Not After : Jan 4 21:13:51 2027 GMT
Subject: CN=4A2A5F8B1800786BDA853D28F9C301A5FA7DFCD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:b8:29:86:f3:43:0c:c2:df:c8:3f:24:fa:
f0:a8:cc:80:54:db:3b:30:85:6f:27:bb:d5:cf:e0:
8a:3f:5b:6d:09:48:05:36:2a:28:fe:f2:46:eb:32:
a9:b2:01:1f:8a:6e:27:d0:5f:08:85:3b:28:14:27:
30:3e:44:65:0a:3b:91:ea:82:e1:45:40:d1:6a:aa:
c4:f1:c1:3e:7f:4b:15:76:d0:64:ff:4f:36:1a:4c:
33:2c:96:41:14:83:b4:31:91:bf:6b:08:b9:d3:59:
35:21:af:96:cc:ef:37:60:47:27:b5:32:b6:48:1e:
73:85:e6:3c:94:1f:f7:8a:90:32:bb:7d:4c:c0:07:
b4:fd:15:45:ea:af:1f:47:18:cb:5f:60:f5:a4:8e:
69:08:c0:72:bd:d7:ab:7e:6e:79:61:05:73:22:d8:
04:93:ed:83:bf:9e:29:f6:f2:a4:0c:ee:f8:ec:3a:
24:b7:d1:70:c2:91:30:79:fb:63:88:29:1d:08:c9:
db:d7:43:da:13:1b:16:6d:7e:00:4b:6a:e0:cb:27:
c8:a4:9d:5c:69:e4:ce:a8:ea:93:b4:05:f8:c3:ac:
fd:5f:9f:c5:2c:33:05:c7:dc:9a:32:b2:55:b8:1b:
22:b8:0a:6d:19:24:27:2a:2b:a3:d4:9a:ee:4a:2a:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:5F:8B:18:00:78:6B:DA:85:3D:28:F9:C3:01:A5:FA:7D:FC:D2
X509v3 Authority Key Identifier:
keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:28:a2:dc:94:6b:05:ab:2c:cf:ce:22:d2:28:41:15:5b:04:
ed:b4:04:d1:15:40:fb:7e:bb:9f:a1:31:db:e9:78:00:fd:7e:
aa:59:63:5a:8d:6c:78:1c:3d:95:f7:c4:83:2e:ac:8b:6f:c9:
ef:7e:d3:ca:8b:53:9e:41:8a:7b:59:8a:ab:55:c6:0f:ae:f0:
2f:ea:0e:b6:e2:a3:8f:b3:ae:8a:73:a5:02:cf:97:cc:27:04:
c3:3a:67:78:53:0b:12:3f:6c:da:1a:80:95:50:4b:b3:fd:ec:
60:10:3d:f7:00:00:4f:76:42:b6:2a:30:85:92:eb:61:ab:9e:
8d:b2:f1:50:e6:a3:18:53:ab:30:2a:07:3b:7a:26:8b:51:02:
2a:65:79:2f:b5:0f:83:94:5b:61:47:2e:77:56:b2:87:67:1d:
56:ab:18:40:77:40:04:a9:53:b6:fd:2f:51:f5:1c:9a:b1:43:
0a:f5:d9:84:d6:a8:cd:35:8e:cb:01:57:96:c7:b4:7b:8f:35:
6a:c6:a3:1e:aa:f0:0a:ac:b0:79:b3:54:df:9e:de:12:e6:2f:
95:f1:ea:00:9b:3c:4a:2a:ca:e2:88:1a:c3:af:57:12:9c:01:
ab:f9:ae:12:28:60:97:b9:9f:4b:51:d8:ee:9e:d0:3f:cc:99:
35:1f:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:48 2026 by rpki-client