This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35342e302f32342d3234203d3e20323636333839.roa
File: 34352e3138392e35342e302f32342d3234203d3e20323636333839.roa (raw, json)
Hash identifier: y7qBKG8HfXcbs1oioHGF82/5R03DPwEFVjwLk36Xdpo=
Subject key identifier: 8B:18:28:02:3F:73:E0:71:8D:5D:F6:D2:CE:86:11:5C:3D:50:D9:56
Certificate issuer: /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Certificate serial: 67D350CE7E136947C654528F2314BE2A6474AEDD
Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35342e302f32342d3234203d3e20323636333839.roa
Signing time: Wed 12 Nov 2025 01:01:59 +0000
ROA not before: Wed 12 Nov 2025 00:56:59 +0000
ROA not after: Wed 11 Nov 2026 01:01:59 +0000
asID: 266389
IP address blocks: 45.189.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d3:50:ce:7e:13:69:47:c6:54:52:8f:23:14:be:2a:64:74:ae:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6
Validity
Not Before: Nov 12 00:56:59 2025 GMT
Not After : Nov 11 01:01:59 2026 GMT
Subject: CN=8B1828023F73E0718D5DF6D2CE86115C3D50D956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:0a:36:9b:da:59:f7:1a:66:45:7b:cd:01:
2e:61:59:89:4c:a0:a8:25:60:38:24:ab:7e:08:d5:
b0:ef:ee:12:c2:7e:c4:6b:e5:31:45:3e:c7:93:59:
c6:e6:1e:14:ad:f9:c9:56:d6:a1:33:95:0a:ba:13:
e7:ef:c0:2b:98:22:78:14:8e:67:97:a0:48:8e:e6:
8b:48:02:d3:b8:bb:42:21:74:30:b1:1d:a4:59:84:
91:3c:f6:15:38:86:f1:8c:0c:6b:da:d6:7b:d9:f6:
a7:46:9a:9f:5b:38:38:2c:c0:00:9c:a3:9f:8b:4b:
4b:7c:f9:71:77:c9:46:2e:90:a9:d7:99:23:fe:eb:
7b:6d:a0:68:de:b8:af:94:77:b2:33:9a:d5:3c:b2:
98:0a:50:81:21:39:f2:0b:5a:d5:69:51:4b:53:17:
eb:1c:0d:d3:a9:7b:71:6f:f6:d4:f9:96:8c:ad:c6:
fb:cd:71:13:a3:07:a8:ae:ba:d3:6b:69:ae:a3:f9:
77:9c:5a:f3:21:03:e9:e6:46:2d:ed:6f:79:33:af:
bc:98:81:8a:e0:3f:76:b1:a1:53:7a:11:f8:f5:10:
7f:79:63:48:56:0f:d7:02:5a:bf:c8:f5:11:7c:10:
0b:ec:e0:60:63:34:6b:d4:8e:10:13:e0:af:f8:92:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:28:02:3F:73:E0:71:8D:5D:F6:D2:CE:86:11:5C:3D:50:D9:56
X509v3 Authority Key Identifier:
keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35342e302f32342d3234203d3e20323636333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.54.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9a:2f:84:aa:af:ef:ef:17:73:12:46:c0:d4:d0:44:7d:01:
56:df:7b:76:a6:25:de:2a:dc:f6:ed:e9:97:bc:97:21:4d:9c:
d8:7e:1e:e3:c2:31:61:78:75:92:8d:ef:e6:54:ce:64:f2:f7:
fc:c5:be:8f:40:fe:92:a2:6f:65:9b:9e:df:3f:4c:29:99:de:
64:7f:01:75:b2:0d:37:44:4a:8e:6e:91:77:3c:9d:89:49:df:
d8:ad:d9:77:46:e6:c7:46:f6:06:85:33:53:87:a5:be:90:a8:
6d:54:fe:ea:7d:73:98:79:be:61:a3:23:8d:cd:56:4c:ce:47:
17:ca:14:01:8c:b7:1a:f3:55:8b:02:3a:75:56:54:48:01:98:
a5:76:c4:3e:36:d2:ed:da:4f:85:1b:0e:a1:54:d0:36:74:00:
21:72:a3:e3:ef:9f:0a:c8:c3:13:3f:8c:31:14:80:52:15:9e:
cb:67:a3:5f:fb:4b:08:91:e5:c9:ba:19:8b:b3:5b:57:3f:cb:
08:9d:1a:d3:44:15:6a:64:bf:2a:47:99:e3:fc:39:d0:4f:9a:
f1:b3:ed:59:ac:cf:b7:2b:48:f7:30:2d:19:a6:c4:ae:36:6f:
61:70:59:b2:34:fb:9a:fd:3f:a2:90:98:92:8f:2c:cc:0a:1b:
87:dd:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:05:34 2025 by rpki-client