This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32322d3232203d3e20323636333839.roa
File: 34352e3138392e35322e302f32322d3232203d3e20323636333839.roa (raw, json)
Hash identifier: Q1M/wiJh8EIB6ynWf9ORTZt7BOGc52gi8XdkuV8LIjo=
Subject key identifier: 88:03:E5:D2:A9:AC:B9:2E:5E:9B:0C:AF:EE:13:C0:83:E6:C1:7F:99
Certificate issuer: /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial: 387E9C37D5B71DFB2742EA7CFF6CE4BCBD4DAC72
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32322d3232203d3e20323636333839.roa
Signing time: Wed 31 Dec 2025 12:08:49 +0000
ROA not before: Wed 31 Dec 2025 12:03:49 +0000
ROA not after: Wed 30 Dec 2026 12:08:49 +0000
asID: 266389
IP address blocks: 45.189.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 03:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7e:9c:37:d5:b7:1d:fb:27:42:ea:7c:ff:6c:e4:bc:bd:4d:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Validity
Not Before: Dec 31 12:03:49 2025 GMT
Not After : Dec 30 12:08:49 2026 GMT
Subject: CN=8803E5D2A9ACB92E5E9B0CAFEE13C083E6C17F99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:19:8f:8d:88:c7:24:16:cf:f2:7c:27:ec:
d5:39:1a:49:bf:93:46:79:a8:7e:a4:5d:bf:43:92:
30:00:f1:0a:3a:14:a7:9f:65:bd:7f:ed:1b:c5:98:
c7:9f:0b:01:13:49:45:a4:9a:49:50:ff:9d:10:d2:
78:ae:69:c0:a9:a0:f6:a3:db:13:eb:32:f8:3b:33:
92:60:03:64:c0:52:46:72:39:f1:49:8a:8a:c1:ef:
ff:24:9c:30:50:7a:6f:9d:73:47:f0:70:9f:f3:c1:
fb:80:eb:f8:f0:47:29:c8:82:bd:e6:09:af:1a:af:
04:92:0e:ca:a4:e0:a3:7c:9a:bc:42:3d:2f:d3:a4:
b5:dc:bb:73:14:29:ed:4f:3a:4a:8c:7e:a4:8b:9b:
d6:4c:2e:e5:b5:14:a7:4d:30:c9:ad:8a:6c:9b:16:
27:5d:6d:28:49:67:45:42:b8:19:5d:32:98:bb:0b:
f6:27:f2:0e:29:0f:64:e3:ce:ef:2c:3e:07:bc:83:
16:c3:3e:9e:78:7b:98:fb:72:f0:f8:42:22:7d:5a:
c4:48:46:a9:14:a1:75:9d:1d:1b:d7:af:0e:40:f8:
26:7a:68:10:cb:37:11:28:58:06:0d:1a:24:6c:2a:
5d:f0:a6:89:1d:84:99:1f:8f:4a:2c:df:52:fa:bb:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:03:E5:D2:A9:AC:B9:2E:5E:9B:0C:AF:EE:13:C0:83:E6:C1:7F:99
X509v3 Authority Key Identifier:
keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32322d3232203d3e20323636333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:6e:e2:f8:b4:3c:8c:3b:8f:64:b8:a3:46:a1:fb:4f:85:92:
22:ce:74:f1:db:f5:4d:a2:ac:36:a1:7d:cb:93:26:90:2b:a3:
01:1b:09:92:03:12:39:a8:b0:5e:ca:ba:73:79:2b:74:1e:98:
d6:5d:69:53:6d:66:fa:f5:35:aa:87:65:7f:f2:44:4b:31:dc:
60:02:60:68:2c:ec:e3:3a:4a:81:71:ec:3b:39:11:81:e7:67:
ee:05:27:fe:58:37:cf:2b:ca:56:bb:44:19:3a:ce:21:2f:57:
8f:0c:af:07:a9:b6:bd:93:44:cb:a7:7e:69:c5:73:c5:c5:67:
d3:45:37:cf:23:52:53:92:4c:11:0c:46:f0:25:7a:7f:e8:ff:
1d:e3:f3:76:34:59:62:f0:96:8b:85:67:9b:6c:2f:4e:f5:e8:
68:d6:49:86:e6:5b:8b:ee:56:5c:83:f9:bc:c8:91:c4:01:50:
b8:61:5b:94:20:b1:a9:a4:33:8b:45:3d:8a:85:65:90:fd:89:
a0:f0:10:80:7b:89:86:22:86:0e:b3:55:12:dd:47:a7:40:5e:
66:d1:6f:4b:e2:44:a9:d8:d8:b9:43:ee:f0:e5:5f:1a:e8:fc:
a5:b8:b1:79:9e:9b:60:03:9d:5c:a4:73:dd:d6:70:8f:00:78:
b1:03:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:00 2026 by rpki-client