This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
File: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (raw, json)
Hash identifier: JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=
Subject key identifier: B8:9F:BD:29:7B:BF:05:45:18:49:B2:6A:91:8E:C9:BA:55:90:B5:D1
Certificate issuer: /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial: 3E0B5FB58EE0A7B1CFA21D64DDCEF8B524BD0D13
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
Signing time: Thu 20 Nov 2025 20:20:45 +0000
ROA not before: Thu 20 Nov 2025 20:15:45 +0000
ROA not after: Thu 19 Nov 2026 20:20:45 +0000
asID: 268239
IP address blocks: 45.236.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 16:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0b:5f:b5:8e:e0:a7:b1:cf:a2:1d:64:dd:ce:f8:b5:24:bd:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Validity
Not Before: Nov 20 20:15:45 2025 GMT
Not After : Nov 19 20:20:45 2026 GMT
Subject: CN=B89FBD297BBF05451849B26A918EC9BA5590B5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:30:94:84:e1:7f:ce:e4:83:67:6c:3f:c5:c4:
de:64:62:df:4b:02:28:48:f3:74:a5:e2:50:a4:a7:
96:cf:cb:7d:69:75:2a:28:bc:c1:3e:fe:d5:2a:a5:
4e:b7:3e:eb:75:8a:92:28:8e:1b:bf:4a:f3:46:f4:
17:97:8e:87:f2:b4:84:85:83:a4:d7:6e:e2:58:ca:
3f:51:4e:11:a7:10:fc:8b:b2:82:54:8c:d7:bc:1e:
c3:b4:18:67:f5:f0:f5:a6:ba:13:cb:0a:da:35:a4:
ba:c5:07:1a:05:a2:11:ed:40:54:2b:87:dd:8d:4b:
dd:b0:18:7a:e5:e2:2a:24:fc:6a:09:04:d6:62:c3:
8d:bf:58:3b:6f:11:ee:f6:fa:c1:f2:6b:3c:6f:e9:
6b:8c:28:aa:46:78:df:a3:ab:2d:dc:ab:4e:fd:c8:
b9:f8:2d:55:5a:b7:f7:f9:af:35:79:e8:e7:9e:e2:
6b:e6:34:95:02:36:ac:7d:6b:db:f9:55:49:28:7f:
a8:7a:76:92:03:10:1c:dc:01:e8:e6:7e:73:5d:22:
1d:4f:2a:e5:cc:d5:73:05:46:d1:01:6b:2a:63:7c:
bd:8e:01:0d:f7:f0:16:38:fe:93:bc:39:fc:f1:35:
c4:cc:27:e6:e7:b3:26:74:2c:e9:88:5e:c3:c0:0f:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:BD:29:7B:BF:05:45:18:49:B2:6A:91:8E:C9:BA:55:90:B5:D1
X509v3 Authority Key Identifier:
keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/34352e3233362e33362e302f32322d3234203d3e20323638323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:d8:c9:ca:b6:c5:bd:5f:a9:70:cb:db:e3:cb:df:1c:0d:7a:
be:53:83:59:4d:15:1f:7b:c5:a6:6d:78:5e:82:89:0b:79:72:
5e:c3:6d:3c:15:1c:58:81:00:c3:9b:17:54:ea:5f:74:86:cf:
f9:2b:3d:9a:5e:78:c8:1b:33:78:49:7c:d7:19:20:94:45:5e:
b6:0d:a1:76:a1:a5:bd:29:66:87:2c:c2:24:28:60:88:40:4d:
ca:8e:d5:dd:94:cb:d0:c5:63:d2:b6:8a:b3:87:60:16:22:6e:
74:81:bd:3a:9a:d8:a9:a2:64:35:d1:23:fc:ab:fe:69:48:4d:
4d:c8:24:5f:4e:e4:e6:14:99:b6:9f:a3:b3:20:38:eb:a0:f8:
a0:a0:cb:5c:51:14:8a:ab:e8:f6:17:33:3e:4d:67:a1:88:da:
5c:20:0c:74:e8:13:6d:76:73:3e:5c:61:64:c0:24:0c:d7:c2:
60:53:25:31:11:4b:91:40:94:cc:63:93:38:9e:06:2f:30:7d:
a5:d5:4c:c8:26:50:90:9a:b9:67:9f:0f:19:28:f0:56:98:0d:
b5:4a:19:74:e8:40:ba:46:c1:e3:a8:05:0b:97:91:db:97:16:
8c:3b:9a:4d:03:79:57:09:bd:65:0a:83:18:d9:94:7b:c9:a1:
2a:04:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:59 2025 by rpki-client