This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32342d3234203d3e20323638333732.roa
File: 34352e3233392e3135302e302f32342d3234203d3e20323638333732.roa (raw, json)
Hash identifier: 3emUju+bq1h5KG0t+6jppyUit00ckQBePKSe+PVTCIo=
Subject key identifier: DB:F9:77:E6:13:FC:F6:0B:FF:4D:E1:57:76:31:C8:28:4C:1D:AF:0C
Certificate issuer: /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial: 6030003F99E0654B9649A7455D5A84D7135BCCBD
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32342d3234203d3e20323638333732.roa
Signing time: Tue 11 Nov 2025 12:59:51 +0000
ROA not before: Tue 11 Nov 2025 12:54:51 +0000
ROA not after: Tue 10 Nov 2026 12:59:51 +0000
asID: 268372
IP address blocks: 45.239.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:30:00:3f:99:e0:65:4b:96:49:a7:45:5d:5a:84:d7:13:5b:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Validity
Not Before: Nov 11 12:54:51 2025 GMT
Not After : Nov 10 12:59:51 2026 GMT
Subject: CN=DBF977E613FCF60BFF4DE1577631C8284C1DAF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:7f:f0:fe:fd:8f:72:ce:6b:a6:12:9b:3c:
49:01:ea:0d:da:d3:36:ae:ab:17:f7:6c:a2:87:ce:
77:e3:a5:fb:46:26:40:b3:f1:29:30:f5:6b:47:66:
76:a0:82:f7:b7:15:05:ba:78:43:c8:f8:3a:fe:67:
99:6f:5b:41:22:bd:f2:e5:c0:7d:94:28:04:2b:b8:
69:04:8d:d3:21:f6:0c:db:d2:7f:2f:de:3d:10:2b:
8e:e1:00:58:d4:1b:a6:4f:d2:b8:fd:b0:90:42:8f:
0e:30:0e:a6:09:cd:20:4f:25:a8:54:f1:88:d4:60:
f5:c2:9e:02:76:3c:d3:a7:c7:c5:28:f4:a9:c3:09:
f5:49:82:65:4b:44:f8:be:1f:b9:3a:ea:8e:d1:e9:
11:04:ce:42:0d:91:23:fb:c1:ee:0b:70:3c:b3:fa:
05:6d:9b:27:fb:fe:12:ff:d8:bb:01:fa:10:60:a8:
c5:11:34:88:82:68:72:34:68:e5:fd:17:72:13:1e:
f4:8b:ee:0d:a6:8a:4d:a3:19:27:e6:5a:98:85:3d:
f1:4d:42:04:5b:65:a5:ab:3d:d1:cd:78:6e:b9:ad:
fb:2d:29:27:18:b0:c5:23:16:a9:46:65:3a:4b:8a:
df:8a:02:bc:ca:d4:50:ed:84:f2:76:12:31:15:20:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:77:E6:13:FC:F6:0B:FF:4D:E1:57:76:31:C8:28:4C:1D:AF:0C
X509v3 Authority Key Identifier:
keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135302e302f32342d3234203d3e20323638333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
64:de:59:70:66:1d:3b:35:c2:fe:f5:90:6b:d8:df:bb:f2:37:
3c:67:b1:65:82:fe:08:9e:1e:45:7b:e1:03:f8:9a:11:c7:6a:
c5:55:55:96:cb:67:43:44:a6:76:2e:f4:40:cb:2d:0e:83:3a:
37:68:8b:76:17:09:53:a9:2e:5a:97:d4:ca:4c:26:0f:bb:f3:
18:69:09:a3:11:17:4d:61:d2:a4:01:1e:6b:15:c2:43:47:de:
43:cc:70:7b:a0:a3:12:fb:40:ee:cb:b4:ad:e8:61:42:60:b2:
34:bc:b3:8d:7e:d3:19:fe:bc:ef:84:ce:5a:3d:9c:42:14:22:
55:53:33:c7:56:d2:15:58:88:4f:2f:57:85:af:1f:dc:4a:a7:
76:45:13:73:33:13:74:84:8d:5e:7f:53:35:94:2a:58:f9:dd:
5f:10:83:01:f1:94:c8:c8:1c:20:63:e8:f8:ad:d0:8c:d2:70:
63:5a:2e:6d:47:e9:49:55:1b:d8:07:cb:8c:a5:54:18:e0:9a:
b6:02:84:62:fc:a5:e5:8d:e4:3b:1d:77:4d:a6:57:d1:ff:d4:
89:eb:d2:27:1a:a1:05:81:02:e8:2c:00:a6:eb:e6:7d:e7:78:
80:fc:f3:20:d4:23:93:0f:18:14:90:8b:6e:3f:dd:d6:af:b4:
51:f1:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:01:58 2025 by rpki-client