This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3232203d3e20323636303636.roa
File: 34352e342e3132342e302f32322d3232203d3e20323636303636.roa (raw, json)
Hash identifier: gMPzMAOMeRc6u36z5q+QRnVnRoOgxmNCl6CxZ3imOvo=
Subject key identifier: C6:F9:A3:6D:48:85:44:9E:27:FC:8F:60:68:23:C3:52:60:04:55:C2
Certificate issuer: /CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA
Certificate serial: 0ACF3018E9D4D9D509547F6FEA694974DADBD86B
Authority key identifier: 76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3232203d3e20323636303636.roa
Signing time: Mon 15 Dec 2025 19:10:37 +0000
ROA not before: Mon 15 Dec 2025 19:05:37 +0000
ROA not after: Mon 14 Dec 2026 19:10:37 +0000
asID: 266066
IP address blocks: 45.4.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl
rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 18:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:cf:30:18:e9:d4:d9:d5:09:54:7f:6f:ea:69:49:74:da:db:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA
Validity
Not Before: Dec 15 19:05:37 2025 GMT
Not After : Dec 14 19:10:37 2026 GMT
Subject: CN=C6F9A36D4885449E27FC8F606823C352600455C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:de:de:b6:b9:c3:7c:e5:dc:a3:f1:35:2f:
30:97:d7:98:b2:28:b9:38:8a:24:90:d6:d7:0f:2b:
25:9c:da:f1:e9:9d:db:f1:30:fd:06:f9:9f:0d:26:
87:ab:99:7d:e5:ec:5a:a8:37:d4:ec:dd:cd:39:93:
2b:57:4c:6b:c8:ce:a5:09:6f:df:de:8d:e8:9d:7d:
09:e5:ad:4c:59:f1:ec:3a:6d:dc:0f:4b:8f:bf:df:
c5:60:18:00:04:df:26:d2:9b:8c:b7:69:75:1c:3a:
5c:7e:f0:65:ea:19:b1:e8:c3:83:80:63:43:72:df:
82:78:0c:33:6a:80:07:39:c3:c7:fb:b4:ac:bb:ad:
da:3f:a7:2e:f0:05:a5:43:5b:8b:9a:40:63:78:b9:
a2:fb:92:a2:9a:fb:49:0a:4f:43:91:e7:f2:33:ae:
d5:95:e3:d5:2b:0a:6f:a7:a5:bb:36:0f:29:b3:1e:
04:9f:e5:98:dc:dd:e7:7a:e7:1e:d1:ee:55:2a:29:
a3:c3:bb:62:ec:92:0d:5d:c0:9b:9d:06:29:9b:26:
4f:3f:50:09:22:34:7c:44:01:b3:82:e5:5d:d0:62:
78:de:25:57:b3:b8:73:44:48:c6:b6:91:94:0e:47:
5b:0e:83:80:b1:03:f7:cb:1a:64:96:ae:5f:74:3e:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:A3:6D:48:85:44:9E:27:FC:8F:60:68:23:C3:52:60:04:55:C2
X509v3 Authority Key Identifier:
keyid:76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3232203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:64:28:fb:a1:53:43:93:ad:2a:43:87:f5:d3:09:02:38:c3:
14:74:f1:98:28:e0:a2:c3:af:2d:e0:6e:2a:00:79:d8:49:4b:
9e:a4:2f:8a:07:65:3e:f0:0f:a8:fb:9e:c4:bf:84:31:5d:97:
31:35:66:1b:36:25:b1:ef:54:a4:9c:f7:6a:36:cf:48:f8:04:
92:f8:bf:5f:70:e7:ed:49:a0:0b:fe:79:a2:a7:f2:cd:a1:6d:
ac:70:2a:1b:00:39:1d:93:bf:b9:a0:5b:05:df:8f:4e:fb:bf:
f3:39:82:94:e6:69:ca:9c:f9:cc:e2:77:43:ec:f1:b4:b5:0b:
78:79:45:0f:82:8b:f9:b9:5a:bf:13:5a:5b:4d:a0:d5:7e:33:
b6:60:48:20:5c:63:1e:8e:b7:21:90:d4:c7:45:51:84:54:f6:
67:63:52:fc:12:5e:75:9b:f5:12:ba:fb:97:b2:1c:c6:68:1a:
69:f2:49:88:86:62:2f:fa:8b:92:95:d6:eb:8d:02:c7:fd:cb:
ec:5b:af:58:af:cd:76:ad:34:cd:d5:9b:aa:68:87:f4:5b:49:
e7:fd:13:c9:5b:d3:b2:81:d4:a1:d4:24:90:21:7b:ff:12:38:
04:ca:15:d3:68:c1:6f:12:f0:3a:fd:17:80:6f:89:44:3e:d3:
db:bb:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:09:32 2025 by rpki-client