This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
File: 34352e3138362e35342e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier: Ubv0XT17fcWwFvE92h48IhABA1kOB8W3lOYvsfCJ5IM=
Subject key identifier: 24:AF:FF:07:69:6A:22:0A:93:DF:7D:95:2E:52:30:0E:B6:8D:9B:E1
Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Certificate serial: 5E966248E6E52309CDE001408310F187D5D23C8F
Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
Signing time: Wed 12 Nov 2025 02:08:20 +0000
ROA not before: Wed 12 Nov 2025 02:03:20 +0000
ROA not after: Wed 11 Nov 2026 02:08:20 +0000
asID: 269411
IP address blocks: 45.186.54.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:96:62:48:e6:e5:23:09:cd:e0:01:40:83:10:f1:87:d5:d2:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E
Validity
Not Before: Nov 12 02:03:20 2025 GMT
Not After : Nov 11 02:08:20 2026 GMT
Subject: CN=24AFFF07696A220A93DF7D952E52300EB68D9BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:53:93:6b:2c:ee:4e:e0:07:22:e7:1d:27:
19:ec:66:11:f2:45:7f:fc:05:2f:92:f8:4f:77:0e:
1f:97:e1:27:70:15:46:e4:58:ce:b7:4f:5e:00:4e:
93:47:08:cc:a8:c2:79:ca:56:ce:0e:02:60:1c:ab:
e1:c3:65:f2:99:95:32:27:e4:d4:9c:1d:ec:14:cf:
df:66:6b:82:6c:44:6a:aa:c9:31:c6:7c:cf:5d:4e:
4c:e8:dc:ec:ed:6c:e2:b5:81:0c:d1:0e:6c:3a:59:
7f:85:0f:19:4d:84:1b:2c:11:3c:fa:0c:d4:52:7c:
7c:50:59:74:51:e8:b9:d2:ed:52:f4:59:b8:23:15:
ae:7d:98:53:80:d9:e2:61:80:5e:04:45:b0:d6:b8:
5d:5e:a9:12:f1:a6:8f:01:5d:70:ee:72:18:1d:30:
1a:8d:97:91:39:46:7a:2e:32:49:b4:e2:2a:45:73:
c1:80:f2:75:a6:eb:89:59:cb:97:b9:05:89:3c:33:
9b:5e:6d:11:08:f2:fa:76:79:80:fd:b7:12:71:70:
c3:0b:49:f6:d8:c7:0d:2b:d0:fd:7c:5c:b7:a5:92:
5d:8d:2e:92:9c:e4:88:7b:68:5f:e8:64:0a:f0:1c:
3f:35:58:7a:4e:d1:f2:24:f0:34:29:a7:1a:9e:67:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AF:FF:07:69:6A:22:0A:93:DF:7D:95:2E:52:30:0E:B6:8D:9B:E1
X509v3 Authority Key Identifier:
keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f8:ab:f9:eb:10:34:3e:73:8c:14:0c:c9:f1:d4:7d:ed:52:
d8:62:54:ab:ba:00:14:d8:6d:b7:25:7b:cd:a4:d6:c9:48:a3:
94:7a:ba:f0:15:78:a4:ae:af:fa:86:b6:2f:88:f3:65:c8:d8:
11:eb:f0:56:88:03:3f:92:50:4f:e0:6b:ec:b8:e7:5b:96:10:
3b:16:c0:ab:53:7d:37:2b:15:0a:ac:70:b6:6e:b0:91:26:74:
bf:39:a0:df:de:8f:62:9a:31:9e:8c:f8:1d:9a:d7:b5:39:3e:
6a:cd:21:81:a0:b6:b1:cc:9b:71:06:75:96:e4:89:27:49:3a:
18:a0:d1:cc:d6:37:43:1c:31:48:e1:ca:2c:42:eb:96:63:7a:
e1:67:27:8f:b1:78:f4:5b:f3:af:f6:6d:10:ab:0e:78:46:e6:
9e:19:4d:d5:55:09:7d:b5:5e:a2:60:19:0d:da:75:bb:82:9b:
ad:ae:fd:3d:4a:71:d6:ed:7c:90:dc:64:8e:53:94:d4:2f:eb:
e4:2e:cf:97:af:f0:9c:cc:b7:a7:62:36:78:f8:0f:d2:16:f4:
51:7f:47:3e:5a:fe:00:78:77:c4:8c:50:86:ed:c6:f5:06:ed:
83:ec:10:a8:58:af:79:6d:89:6c:ca:2e:39:34:00:b3:46:66:
fb:62:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:51:17 2025 by rpki-client