This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3332203d3e20323637333034.roa
File: 34352e3233332e33322e302f32322d3332203d3e20323637333034.roa (raw, json)
Hash identifier: XtHoK7dfRy7tR6+T28fxt/Uuz/TohdYNwMlHslZf12A=
Subject key identifier: AB:ED:B4:18:F1:49:73:2C:74:42:DD:12:F9:FF:DD:20:45:DF:D0:C5
Certificate issuer: /CN=774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA
Certificate serial: 06C1451A82899015E4FBDE17983CC46E23EB4358
Authority key identifier: 77:4B:E7:62:A2:EA:2B:0D:CE:8C:6C:06:1C:6A:55:7F:1C:FC:30:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3332203d3e20323637333034.roa
Signing time: Mon 19 Jan 2026 15:49:49 +0000
ROA not before: Mon 19 Jan 2026 15:44:49 +0000
ROA not after: Mon 18 Jan 2027 15:49:49 +0000
asID: 267304
IP address blocks: 45.233.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.crl
rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 17:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c1:45:1a:82:89:90:15:e4:fb:de:17:98:3c:c4:6e:23:eb:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA
Validity
Not Before: Jan 19 15:44:49 2026 GMT
Not After : Jan 18 15:49:49 2027 GMT
Subject: CN=ABEDB418F149732C7442DD12F9FFDD2045DFD0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:db:b1:38:fc:2f:41:dd:d6:78:ec:f6:1a:
18:5c:36:5a:1d:d4:55:ba:47:75:a8:20:87:1a:48:
67:36:5a:61:88:f6:9d:50:d0:e6:a2:68:ca:4b:ed:
05:0c:72:3e:e9:d4:4e:14:17:d3:a4:f3:ec:98:59:
e4:06:8a:47:92:96:71:42:ce:a1:c6:42:3a:40:25:
ca:e3:44:03:5b:c2:e4:e5:2c:f5:03:15:0f:48:23:
71:a2:ae:b7:bc:bd:d0:f0:4c:f4:dd:af:59:78:be:
15:07:5c:40:6b:72:eb:8c:2f:da:da:98:e2:e4:4f:
0b:e7:4e:e0:c9:fe:20:8e:3c:7e:41:2d:77:57:9b:
dd:4c:46:42:7c:60:28:64:01:cc:9d:b5:52:45:98:
62:b1:36:9f:db:ec:94:2a:00:51:96:44:fe:68:9f:
ad:44:73:d1:2c:49:48:36:1a:94:41:17:27:ce:a1:
66:82:c3:c8:d1:31:0b:94:83:6e:ce:44:0e:36:be:
d9:af:cb:f9:39:53:e4:64:22:51:60:8e:60:c7:18:
01:8b:57:b0:ea:78:0c:98:a6:22:b3:ed:f3:e9:f9:
e9:24:13:7b:d6:4f:b4:fd:20:d0:08:9f:59:9b:18:
0f:01:30:f3:1a:09:fb:76:1b:b3:ee:23:c0:50:ef:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:B4:18:F1:49:73:2C:74:42:DD:12:F9:FF:DD:20:45:DF:D0:C5
X509v3 Authority Key Identifier:
keyid:77:4B:E7:62:A2:EA:2B:0D:CE:8C:6C:06:1C:6A:55:7F:1C:FC:30:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774BE762A2EA2B0DCE8C6C061C6A557F1CFC30FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3332203d3e20323637333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:45:43:38:f8:97:13:33:e6:26:b2:57:46:bf:29:30:40:f5:
10:54:72:2d:a0:79:35:e2:b9:08:86:71:9c:72:b6:e0:a9:3d:
82:5b:c6:d3:c1:7b:22:5b:ac:2d:6f:51:87:fd:bf:e8:c3:08:
29:2d:57:07:d1:64:4f:3c:96:85:d4:f9:bd:28:35:c2:6c:23:
31:dc:9a:e6:00:ea:7a:d3:93:7a:a9:c0:4d:99:7c:2c:92:11:
3d:9a:0b:1a:e0:c6:65:b3:7c:98:26:26:95:17:a8:97:3b:3f:
f7:a0:ce:0b:03:fc:af:8c:23:2d:d3:fa:85:68:93:a2:da:8b:
e3:b9:20:c4:b2:61:bd:f6:fb:0a:10:a4:af:c2:a5:40:62:88:
f5:d5:b3:cc:28:35:67:84:d4:df:9e:41:d8:ee:5f:c0:d6:9b:
2e:03:38:a4:1f:56:70:e7:9e:31:6a:11:67:e0:25:da:45:51:
77:aa:84:da:7f:0b:ae:2a:bd:0a:8d:7a:0b:86:b4:61:64:1a:
d3:53:f3:c6:76:67:28:ae:68:1f:bc:61:d0:86:38:56:d9:de:
47:e4:7d:f0:7a:3b:4e:4c:30:5e:d1:f5:2a:e6:58:98:2c:5b:
40:e2:b0:34:57:13:f4:78:b6:b1:28:91:35:96:01:95:a2:ca:
4b:68:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:11 2026 by rpki-client