This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
File: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (raw, json)
Hash identifier: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=
Subject key identifier: FF:CB:2D:60:2D:57:2F:E6:99:8C:49:CB:49:B7:B7:DC:B0:4D:3C:F1
Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Certificate serial: 2B49ECB0D69601438358E64ED80CB2E972CD63DF
Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
Signing time: Fri 21 Nov 2025 12:20:51 +0000
ROA not before: Fri 21 Nov 2025 12:15:51 +0000
ROA not after: Fri 20 Nov 2026 12:20:51 +0000
asID: 61595
IP address blocks: 45.165.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 08 Dec 2025 01:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:49:ec:b0:d6:96:01:43:83:58:e6:4e:d8:0c:b2:e9:72:cd:63:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A
Validity
Not Before: Nov 21 12:15:51 2025 GMT
Not After : Nov 20 12:20:51 2026 GMT
Subject: CN=FFCB2D602D572FE6998C49CB49B7B7DCB04D3CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:79:86:0b:84:b7:83:95:83:38:bd:3e:f1:
e9:1f:af:e9:a4:6d:8d:5b:7a:30:73:81:dd:e8:6d:
31:31:dc:5e:dd:37:e3:e3:05:84:6d:bb:1c:7d:42:
87:0f:1b:0a:4d:a2:1f:21:04:a1:6d:74:88:86:b1:
64:52:4a:8d:32:63:65:51:d1:52:f3:97:e1:65:cd:
35:3b:55:30:b7:4f:5c:26:2d:05:e8:ed:ac:52:9f:
53:27:99:5f:99:eb:90:0e:25:4a:c0:f9:3d:a9:cd:
09:ca:f4:a1:45:f0:de:ee:ce:9e:c6:4c:61:97:e7:
08:b1:8e:25:b3:15:4b:ed:66:2f:fd:11:fb:b8:d4:
12:17:7f:6f:46:52:59:df:88:ad:b8:66:6b:f4:35:
ee:23:d5:f0:f8:28:51:fe:be:6e:52:a4:a6:47:73:
47:c8:83:8a:2d:bd:f0:62:8b:29:a1:b3:de:f5:9d:
d9:26:05:ab:b1:95:72:f0:cb:bc:e9:83:73:14:fd:
b6:33:e8:16:15:3c:f5:ad:1e:b3:87:03:fd:66:82:
de:19:ad:35:50:a1:7a:12:b5:d6:78:f3:3d:e5:75:
ba:88:c9:24:b9:73:ce:ec:13:cf:a4:5f:c6:02:b3:
e4:05:4d:f4:ce:ce:e8:a0:52:f9:c4:6a:f4:98:9e:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CB:2D:60:2D:57:2F:E6:99:8C:49:CB:49:B7:B7:DC:B0:4D:3C:F1
X509v3 Authority Key Identifier:
keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.80.0/22
Signature Algorithm: sha256WithRSAEncryption
07:c4:17:fe:ca:ee:bf:32:ab:1f:18:29:71:47:b1:c5:e0:42:
15:cc:20:93:ed:f8:ca:b8:6a:33:a0:ce:a5:ca:59:a1:c0:ec:
82:3a:bf:a8:36:48:b4:ae:96:28:8e:d2:49:ac:d4:08:c2:39:
82:5e:d7:7e:5e:c5:2f:68:44:66:c2:6d:a5:c1:0f:bc:9c:1b:
96:c9:1b:68:6e:70:79:2a:5c:07:74:fd:6c:43:fb:d9:3a:17:
13:16:52:09:99:21:fd:c2:90:42:c4:17:d7:11:cd:32:ee:72:
1b:45:6e:cf:19:e7:02:ea:23:8b:83:92:50:13:fe:eb:9f:62:
55:cd:a5:4e:11:4d:09:bd:fc:9d:4b:3c:91:21:6e:c6:da:0f:
52:81:2c:ff:54:05:28:ec:44:3f:55:32:54:be:96:46:4b:06:
a9:f5:c0:f7:68:05:b4:78:4e:77:41:c1:91:45:f8:cc:86:14:
4b:c5:fc:d7:fe:e3:93:8d:60:33:89:da:b5:ca:a6:21:03:e6:
b9:d2:37:2a:34:4d:c1:a1:c9:28:52:93:68:a7:2d:21:92:74:
98:8a:d4:20:9f:03:dc:ea:19:0a:e0:ff:b4:13:76:32:fa:c2:
5a:31:0c:18:6a:27:5e:ae:29:d0:fa:c7:b8:b2:b9:ba:76:85:
7b:82:e5:e7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUK0nssNaWAUODWOZO2Ayy6XLNY98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1
OUQ3MTEzQTAeFw0yNTExMjExMjE1NTFaFw0yNjExMjAxMjIwNTFaMDMxMTAvBgNV
BAMTKEZGQ0IyRDYwMkQ1NzJGRTY5OThDNDlDQjQ5QjdCN0RDQjA0RDNDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypnmGC4S3g5WDOL0+8ekfr+mk
bY1bejBzgd3obTEx3F7dN+PjBYRtuxx9QocPGwpNoh8hBKFtdIiGsWRSSo0yY2VR
0VLzl+FlzTU7VTC3T1wmLQXo7axSn1MnmV+Z65AOJUrA+T2pzQnK9KFF8N7uzp7G
TGGX5wixjiWzFUvtZi/9Efu41BIXf29GUlnfiK24Zmv0Ne4j1fD4KFH+vm5SpKZH
c0fIg4otvfBiiymhs971ndkmBauxlXLwy7zpg3MU/bYz6BYVPPWtHrOHA/1mgt4Z
rTVQoXoStdZ48z3ldbqIySS5c87sE8+kX8YCs+QFTfTOzuigUvnEavSYnoxdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/8stYC1XL+aZjEnLSbe33LBNPPEwHwYDVR0j
BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi
eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC
REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIZ3hOc0FKZkE0aVM5NFprRmYyeVp5UUJ5Um96YkoxRVBVQUtMZjVwYnlGLzAv
MzQzNTJlMzEzNjM1MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2lUDANBgkqhkiG9w0BAQsFAAOCAQEAB8QX/sruvzKr
HxgpcUexxeBCFcwgk+34yrhqM6DOpcpZocDsgjq/qDZItK6WKI7SSazUCMI5gl7X
fl7FL2hEZsJtpcEPvJwblskbaG5weSpcB3T9bEP72ToXExZSCZkh/cKQQsQX1xHN
Mu5yG0VuzxnnAuoji4OSUBP+659iVc2lThFNCb38nUs8kSFuxtoPUoEs/1QFKOxE
P1UyVL6WRksGqfXA92gFtHhOd0HBkUX4zIYUS8X81/7jk41gM4natcqmIQPmudI3
KjRNwaHJKFKTaKctIZJ0mIrUIJ8D3OoZCuD/tBN2MvrCWjEMGGonXq4p0PrHuLK5
unaFe4Ll5w==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:44:19 2025 by rpki-client