This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35332e302f32342d3234203d3e20323636333839.roa
File: 34352e3138392e35332e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier: fJ2NXolzvJXcziVgLo9LX22UC0Y+Typ9bWoW/P4eRzI=
Subject key identifier: 63:7C:B7:71:EF:4A:C1:B2:49:10:98:4A:39:04:0B:BB:5E:95:9E:0C
Certificate issuer: /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial: 7866E801ABFDCEF1D8B472D61C893A721736FA42
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35332e302f32342d3234203d3e20323636333839.roa
Signing time: Wed 31 Dec 2025 12:08:49 +0000
ROA not before: Wed 31 Dec 2025 12:03:49 +0000
ROA not after: Wed 30 Dec 2026 12:08:49 +0000
asID: 266389
IP address blocks: 45.189.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 03:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:66:e8:01:ab:fd:ce:f1:d8:b4:72:d6:1c:89:3a:72:17:36:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Validity
Not Before: Dec 31 12:03:49 2025 GMT
Not After : Dec 30 12:08:49 2026 GMT
Subject: CN=637CB771EF4AC1B24910984A39040BBB5E959E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:81:40:01:aa:6a:78:d4:09:b4:16:fe:05:
ac:bf:89:dc:79:40:a4:63:c5:b6:e5:6b:f9:10:33:
ad:f2:ba:fb:a9:ee:d0:b0:12:f4:61:87:ad:a7:43:
15:10:7c:32:fb:f9:6c:4c:85:df:9c:71:99:57:92:
f6:e9:73:b3:57:e9:52:17:4e:d3:dc:33:79:e8:19:
3c:fb:2d:17:c4:12:32:f4:7c:b5:65:1b:ef:29:ce:
44:55:0b:7f:ef:bb:7c:ab:86:f8:e6:c5:a0:72:bb:
0a:2c:88:39:bc:93:01:1d:fd:0d:71:76:12:39:15:
8f:10:81:1f:76:08:67:65:e1:12:de:b2:50:f7:67:
23:28:98:31:e6:b3:c7:ed:1a:88:c5:eb:a0:11:2a:
c6:11:9e:db:04:04:04:d3:9b:3c:f4:1c:71:ec:8d:
d5:d4:79:e4:6e:b2:51:b6:7e:f5:65:8f:69:a2:25:
1e:ba:0b:f1:76:00:4d:92:92:e8:f6:fe:d2:48:22:
62:6d:22:a5:22:e6:b8:4f:0a:0d:f1:ee:38:68:37:
a9:ef:e4:73:39:83:0b:64:a2:ee:bb:af:be:09:a8:
49:39:40:b1:a1:6b:00:3b:1a:c1:b1:7f:6f:4a:85:
3b:95:ac:e4:e6:05:9b:51:c8:4b:04:35:57:81:c6:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:B7:71:EF:4A:C1:B2:49:10:98:4A:39:04:0B:BB:5E:95:9E:0C
X509v3 Authority Key Identifier:
keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35332e302f32342d3234203d3e20323636333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:05:ea:32:68:05:4f:1c:f0:06:10:7b:94:8f:e8:09:70:57:
80:8c:fe:ef:2a:10:3a:3f:49:2a:5c:f5:4c:8f:77:9f:15:f5:
d3:1f:0e:ce:b9:8c:e0:f4:03:0e:8e:bf:65:e8:36:24:36:03:
34:37:2e:78:2d:6d:9a:a5:bf:30:2e:e4:1b:00:b2:3d:b2:bd:
3c:54:d1:82:68:7e:dd:68:e6:ed:72:cb:93:9a:19:dc:f9:0b:
dd:90:f1:08:59:ee:0c:90:1b:18:d5:4b:17:ab:80:d5:ed:09:
fb:01:4d:4a:25:64:68:7e:18:fa:35:23:10:84:ab:9e:00:ae:
c5:56:dc:60:2b:21:09:5f:dd:9a:bb:9a:20:39:e4:20:04:ef:
ca:1e:1b:7a:d0:6c:e7:74:54:ba:ee:a7:2f:74:a8:6c:6c:4e:
71:94:44:2c:f8:22:9b:b8:24:b4:23:14:d4:30:84:57:19:56:
9c:51:13:da:94:34:73:25:ee:b4:63:9e:fc:44:61:df:bd:a0:
21:60:1e:d5:21:28:8c:b9:c1:95:8a:38:3a:0f:67:d0:f0:77:
84:45:b0:c9:11:70:ce:7e:fc:d2:55:3c:aa:66:72:bd:44:29:
73:85:35:08:f7:09:4d:71:60:76:82:34:b1:af:4e:fb:cc:d0:
ea:57:6a:ce
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeGboAav9zvHYtHLWHIk6chc2+kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBRTkxMzcxNkExMEI4RjAxQzAyM0IzMDQzRkFERkJC
MTlFMzFCNjAeFw0yNTEyMzExMjAzNDlaFw0yNjEyMzAxMjA4NDlaMDMxMTAvBgNV
BAMTKDYzN0NCNzcxRUY0QUMxQjI0OTEwOTg0QTM5MDQwQkJCNUU5NTlFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuW4FAAapqeNQJtBb+Bay/idx5
QKRjxbbla/kQM63yuvup7tCwEvRhh62nQxUQfDL7+WxMhd+ccZlXkvbpc7NX6VIX
TtPcM3noGTz7LRfEEjL0fLVlG+8pzkRVC3/vu3yrhvjmxaByuwosiDm8kwEd/Q1x
dhI5FY8QgR92CGdl4RLeslD3ZyMomDHms8ftGojF66ARKsYRntsEBATTmzz0HHHs
jdXUeeRuslG2fvVlj2miJR66C/F2AE2Skuj2/tJIImJtIqUi5rhPCg3x7jhoN6nv
5HM5gwtkou67r74JqEk5QLGhawA7GsGxf29KhTuVrOTmBZtRyEsENVeBxsGJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY3y3ce9KwbJJEJhKOQQLu16VngwwHwYDVR0j
BBgwFoAU766RNxahC48BwCOzBD+t+7GeMbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUQ5cmpFTDZ0bUVpRDl4RjdCSkpUVnF0R0hXbTVWV01ON1FaUm5tbXZk
VnAvMC9FRkFFOTEzNzE2QTEwQjhGMDFDMDIzQjMwNDNGQURGQkIxOUUzMUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGQUU5MTM3MTZBMTBCOEYw
MUMwMjNCMzA0M0ZBREZCQjE5RTMxQjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEOXJqRUw2dG1FaUQ5eEY3QkpKVFZxdEdIV201VldNTjdRWlJubW12ZFZwLzAv
MzQzNTJlMzEzODM5MmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb01MA0GCSqGSIb3DQEBCwUAA4IBAQCKBeoyaAVP
HPAGEHuUj+gJcFeAjP7vKhA6P0kqXPVMj3efFfXTHw7OuYzg9AMOjr9l6DYkNgM0
Ny54LW2apb8wLuQbALI9sr08VNGCaH7daObtcsuTmhnc+QvdkPEIWe4MkBsY1UsX
q4DV7Qn7AU1KJWRofhj6NSMQhKueAK7FVtxgKyEJX92au5ogOeQgBO/KHht60Gzn
dFS67qcvdKhsbE5xlEQs+CKbuCS0IxTUMIRXGVacURPalDRzJe60Y578RGHfvaAh
YB7VISiMucGVijg6D2fQ8HeERbDJEXDOfvzSVTyqZnK9RClzhTUI9wlNcWB2gjSx
r077zNDqV2rO
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:19:15 2026 by rpki-client