This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3232203d3e20323638333732.roa
File: 34352e3233392e3134382e302f32322d3232203d3e20323638333732.roa (raw, json)
Hash identifier: ga6xZPQx76H6D8GbJYafMeO4vk5apmeEhajB3e6eElc=
Subject key identifier: E4:49:0A:71:CA:36:37:56:8B:A2:2E:60:0B:77:A7:E6:98:E1:72:C5
Certificate issuer: /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial: 5692FC921840D7B9029287AD4F6952BD7CE650EC
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3232203d3e20323638333732.roa
Signing time: Tue 11 Nov 2025 12:59:51 +0000
ROA not before: Tue 11 Nov 2025 12:54:51 +0000
ROA not after: Tue 10 Nov 2026 12:59:51 +0000
asID: 268372
IP address blocks: 45.239.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:92:fc:92:18:40:d7:b9:02:92:87:ad:4f:69:52:bd:7c:e6:50:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Validity
Not Before: Nov 11 12:54:51 2025 GMT
Not After : Nov 10 12:59:51 2026 GMT
Subject: CN=E4490A71CA3637568BA22E600B77A7E698E172C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:74:b0:bc:ec:ab:2b:b1:38:5b:c6:7f:2a:
2c:12:9d:7f:d0:0b:c5:dd:55:c4:31:de:61:8d:2a:
2f:8e:b7:60:45:f1:a9:3a:6c:37:83:d5:57:33:94:
c6:22:89:06:80:94:e6:e2:1d:68:32:46:52:39:09:
ca:03:d6:ea:86:be:bc:63:04:58:28:55:26:d6:c3:
6a:0e:bd:68:f2:ab:66:5e:85:68:42:71:f0:2b:a4:
b5:4e:a8:74:7a:23:40:8d:98:6d:64:b8:81:12:40:
aa:93:f9:e9:dd:12:3f:9e:14:61:56:b9:91:d3:55:
84:4e:96:04:77:1a:e7:28:c4:16:d6:f1:44:d3:c2:
da:17:9f:cb:5b:b4:b3:d4:5b:fe:33:2f:cc:c4:f3:
eb:21:2b:7c:97:3f:1b:b8:7d:18:60:61:8f:70:e9:
fc:ef:5a:3d:d8:91:1c:48:cd:b0:cd:25:82:80:30:
6e:d3:9b:c7:de:db:26:32:d8:c9:b8:5a:ab:ef:da:
4f:d4:37:e7:43:cd:1a:b6:95:5a:d4:fc:56:83:76:
bf:b6:7f:4d:c8:2c:13:cf:78:53:b5:22:9b:09:90:
1d:c3:c7:6c:22:3e:20:c0:70:1d:37:e7:3f:de:d9:
06:20:2d:ad:98:9c:df:e4:1a:fd:47:d1:b1:91:3b:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:49:0A:71:CA:36:37:56:8B:A2:2E:60:0B:77:A7:E6:98:E1:72:C5
X509v3 Authority Key Identifier:
keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3134382e302f32322d3232203d3e20323638333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c8:6b:36:c5:77:af:33:43:ba:24:0d:a9:0a:2f:a3:dc:4c:
c0:cc:c4:eb:76:00:64:8d:03:15:fe:c9:bf:41:c0:14:ee:7d:
cb:92:36:b2:93:d7:03:ab:33:53:51:29:c5:a1:08:76:c5:9e:
30:6b:6c:ff:e9:5c:eb:2c:6b:08:32:9c:7f:5f:e7:7c:d6:30:
29:a4:78:92:cc:13:a3:ac:15:c8:4b:6f:d2:67:24:fc:ee:ce:
b8:75:00:39:c8:ce:ae:0c:d5:dd:7b:16:c5:f8:1b:3b:20:99:
bd:7f:ea:87:36:bf:12:2c:e9:b5:2b:94:53:1a:10:64:7a:87:
b4:34:72:67:e1:35:63:fe:10:7f:80:f4:8c:2c:3c:da:ce:df:
c7:eb:1b:f3:16:fa:6e:27:98:53:77:63:7d:50:5e:aa:bc:96:
90:95:0d:f2:72:21:b7:4f:91:c1:83:27:db:0a:0d:d6:59:61:
6f:1a:6e:9e:b8:fe:ca:82:f8:d9:ca:85:12:13:ad:f7:86:3f:
35:5e:17:80:a9:2e:29:74:bc:02:7f:e8:9c:99:8f:05:ee:3a:
a6:36:2e:ee:40:38:24:4b:fd:c4:72:f6:fa:79:2c:dc:95:b2:
81:47:a7:17:03:09:fe:e9:26:3a:f4:d9:0e:ee:d8:fb:68:33:
dc:78:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:03 2025 by rpki-client