This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138372e302f32342d3234203d3e20323638373236.roa
File: 34352e3137312e3138372e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier: ly7wbPKnalWfGl0AZSE24Fi/aPo5UGVhvoR8DMTq2h8=
Subject key identifier: FA:E6:B9:0D:35:3C:4E:04:D6:0D:4F:05:1C:89:36:6E:0B:FB:4F:B8
Certificate issuer: /CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Certificate serial: 0CD8F445B7A032A68E9E92064E0D6F06EFE67CB1
Authority key identifier: 08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138372e302f32342d3234203d3e20323638373236.roa
Signing time: Thu 04 Dec 2025 17:13:09 +0000
ROA not before: Thu 04 Dec 2025 17:08:09 +0000
ROA not after: Thu 03 Dec 2026 17:13:09 +0000
asID: 268726
IP address blocks: 45.171.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:f4:45:b7:a0:32:a6:8e:9e:92:06:4e:0d:6f:06:ef:e6:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088BBB4B21E6547D922406FC4B0E8D5B6452A01B
Validity
Not Before: Dec 4 17:08:09 2025 GMT
Not After : Dec 3 17:13:09 2026 GMT
Subject: CN=FAE6B90D353C4E04D60D4F051C89366E0BFB4FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:99:c9:ec:40:dc:d5:b4:fd:b6:5e:d5:28:
90:75:49:da:6a:73:2d:9c:8a:e3:a7:e3:4d:14:e7:
1d:e8:27:11:dc:06:a9:b7:0e:94:13:c9:bc:13:78:
4d:b1:1e:5f:78:c0:71:77:20:c9:69:31:23:03:bb:
19:74:90:90:ff:f4:b5:22:8d:3f:8a:9e:d2:51:f9:
34:30:27:55:aa:1f:fc:44:23:24:65:61:e9:e0:15:
c7:b8:c4:5a:6d:8d:e8:d3:c7:fc:17:6b:b2:58:81:
56:5e:9a:04:cf:e4:78:34:be:80:8c:50:40:d4:02:
a9:c6:40:dc:39:6c:df:98:fa:26:d4:82:32:ca:1d:
c2:f2:91:cc:20:e8:a6:c1:4b:d7:03:c5:20:e1:63:
f6:99:ee:20:3b:3f:47:65:91:9c:05:bc:60:79:56:
9a:66:b3:b8:1d:6b:57:24:dd:6b:fd:6b:91:d8:e3:
03:f6:35:12:22:fd:ce:89:f1:9f:41:86:6d:0b:84:
21:82:93:dd:88:2f:08:f6:13:90:3a:b6:38:18:bf:
70:dd:b9:44:6e:cb:40:74:da:e1:ef:1a:5b:b4:9c:
60:d3:ab:af:8b:cd:da:e3:36:bf:b2:eb:39:b9:51:
ff:31:db:01:90:61:90:cd:49:2b:5d:91:b4:27:95:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:B9:0D:35:3C:4E:04:D6:0D:4F:05:1C:89:36:6E:0B:FB:4F:B8
X509v3 Authority Key Identifier:
keyid:08:8B:BB:4B:21:E6:54:7D:92:24:06:FC:4B:0E:8D:5B:64:52:A0:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088BBB4B21E6547D922406FC4B0E8D5B6452A01B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138372e302f32342d3234203d3e20323638373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.187.0/24
Signature Algorithm: sha256WithRSAEncryption
79:25:18:63:4b:82:9e:33:c3:f1:3e:e9:b6:0c:27:52:8a:bc:
00:4f:f0:5d:78:0f:88:b8:12:dc:dd:ce:53:40:22:c4:80:87:
2f:c1:2a:c8:66:8e:8f:fc:bb:c8:bc:9d:7e:16:e0:99:fc:57:
21:cc:76:42:22:ff:c0:6a:c7:d6:bb:96:75:61:d5:15:18:67:
ea:67:2d:5f:79:1c:f1:fa:6c:7e:2a:0d:c4:62:d2:f8:35:27:
3c:ce:38:bb:7d:c0:c8:e7:34:38:1b:1b:bd:32:3b:0b:b5:cb:
67:c9:e3:63:a9:7e:15:df:b7:03:46:e8:cb:3c:12:bb:d0:81:
ac:2a:b6:99:88:d6:c6:14:c9:4a:07:80:22:6d:a5:22:66:29:
98:24:8f:b6:d2:de:4d:d6:3d:4b:c2:91:82:99:b1:d6:53:15:
7c:39:94:9b:c6:fb:63:5f:a8:dd:f2:fa:75:41:ff:62:33:34:
95:ba:4f:20:4b:26:0b:bd:b0:38:2a:a5:99:3d:3a:33:63:65:
99:b8:c2:0e:09:fd:ed:fe:52:0c:e5:79:e7:a7:8c:b1:b1:e0:
b3:a5:d9:fa:aa:51:cf:97:8d:b7:79:44:34:7c:b4:e1:fa:71:
a2:47:fc:1b:2c:51:3a:67:e9:9e:8b:c6:52:ef:10:ee:75:92:
76:d3:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:51:25 2025 by rpki-client