This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa
File: 34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa (raw, json)
Hash identifier: 6V05fELkF4e32vHx+d/JbETqZWHRFW671+pk24jLTUc=
Subject key identifier: A4:1E:39:4E:20:38:A5:67:CB:19:62:02:4F:75:8D:EB:85:33:E8:12
Certificate issuer: /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial: 4F1D8D0423CD820B3AE5917234D34B194B359B94
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa
Signing time: Tue 11 Nov 2025 12:59:53 +0000
ROA not before: Tue 11 Nov 2025 12:54:53 +0000
ROA not after: Tue 10 Nov 2026 12:59:53 +0000
asID: 268372
IP address blocks: 45.239.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 05:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1d:8d:04:23:cd:82:0b:3a:e5:91:72:34:d3:4b:19:4b:35:9b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Validity
Not Before: Nov 11 12:54:53 2025 GMT
Not After : Nov 10 12:59:53 2026 GMT
Subject: CN=A41E394E2038A567CB1962024F758DEB8533E812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:d6:27:7f:bd:06:70:a2:84:3f:88:e7:c4:
b8:12:43:8f:71:91:be:95:18:c8:d8:70:01:4f:cc:
f9:f6:c7:a0:5c:45:dc:e0:03:b5:f6:5e:99:51:a3:
3e:4f:2b:a1:07:c8:d7:34:a8:ba:99:bd:34:41:0f:
19:49:9f:b0:c5:b4:da:36:1a:12:8a:e6:26:8a:77:
79:cc:0f:e8:38:0d:1c:49:e0:05:89:f5:d2:94:ff:
24:04:04:28:bd:66:92:bf:90:0e:f9:bd:46:2b:7c:
f9:da:9d:00:08:19:56:4a:a4:35:3c:42:c0:2c:78:
7f:8d:08:e1:3a:8e:0d:41:32:fd:9e:06:c6:88:b8:
66:c4:e8:6b:01:59:33:e8:08:38:e9:c4:1e:b0:c3:
22:73:79:ae:9a:a6:90:76:a6:3b:9c:67:af:cf:93:
af:47:c0:5a:3d:23:36:f7:e1:73:6c:22:49:c9:26:
da:bf:2e:c6:ad:db:62:6e:0b:f5:3f:28:98:73:97:
31:3e:ec:ad:c6:99:3f:03:c9:3c:82:05:56:6f:cb:
07:5f:0a:8f:92:7c:14:b2:18:46:b1:b1:26:c0:58:
4f:41:46:79:0c:1f:a9:d2:a2:8e:f1:ba:3a:9c:65:
b9:95:ae:86:a7:17:bb:5d:be:90:f3:e2:7e:48:e6:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:39:4E:20:38:A5:67:CB:19:62:02:4F:75:8D:EB:85:33:E8:12
X509v3 Authority Key Identifier:
keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/34352e3233392e3135312e302f32342d3234203d3e20323638333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.151.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4d:0a:66:02:58:8e:de:3a:51:92:35:7c:7a:81:f5:67:ae:
52:9c:72:10:96:c6:cb:bc:bb:5d:49:4f:9e:0c:c3:63:16:46:
b1:ac:d1:88:82:d4:7b:38:ed:f1:99:b4:d9:0e:f0:4e:d0:33:
e5:fa:6e:03:5f:eb:52:ef:d9:06:d5:57:af:ed:65:f8:7a:e6:
ba:68:93:20:ee:e1:55:f3:ac:f5:bd:b4:51:d2:7a:63:ac:8a:
17:41:90:99:e6:6f:40:d1:79:d9:19:a1:6d:71:92:64:d8:40:
cc:51:9e:ee:5a:04:c2:d1:12:32:3b:e8:d5:f1:c5:46:a0:5a:
bc:e0:0c:63:32:6e:47:e4:2f:fd:33:03:da:af:22:5b:2e:7c:
3f:10:3b:74:6e:7d:13:ad:cc:57:c3:1c:a4:70:e7:27:75:62:
8a:58:37:05:bc:0f:05:05:06:fb:10:c0:28:02:4b:f0:15:74:
c1:c7:b8:47:88:34:09:7c:a4:ce:88:bc:8c:a2:72:f3:c1:d7:
05:83:c0:76:e9:28:f7:90:50:6e:ae:fa:2c:3b:b8:20:14:db:
9b:72:ee:c3:8d:e9:79:49:df:25:ad:79:22:a0:a0:10:d0:27:
6e:e8:09:be:1d:5b:db:1d:23:bf:83:41:6e:6a:b6:ff:d7:9e:
98:b9:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:00 2025 by rpki-client