This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa
File: 34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa (raw, json)
Hash identifier: e0VDWuUuQUXBAgektx0uESLz5NGVVsC1UNvDE4BpMIM=
Subject key identifier: 2A:C1:70:68:ED:57:38:59:C1:A3:10:46:35:8A:C4:B4:AA:E5:72:99
Certificate issuer: /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial: 4C65A0D7547B88938B6D9C5B00F6B7CFFBF97976
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa
Signing time: Tue 25 Nov 2025 20:15:15 +0000
ROA not before: Tue 25 Nov 2025 20:10:15 +0000
ROA not after: Tue 24 Nov 2026 20:15:15 +0000
asID: 269444
IP address blocks: 45.186.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:65:a0:d7:54:7b:88:93:8b:6d:9c:5b:00:f6:b7:cf:fb:f9:79:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Validity
Not Before: Nov 25 20:10:15 2025 GMT
Not After : Nov 24 20:15:15 2026 GMT
Subject: CN=2AC17068ED573859C1A31046358AC4B4AAE57299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:d5:f4:3d:e8:6e:e8:0e:c2:84:1e:c3:cb:
da:6c:ba:41:4a:8f:22:14:6e:9e:ea:a2:b5:99:c2:
d8:6d:35:f4:94:3d:9a:30:be:1c:ea:5c:47:28:60:
b6:94:50:f0:03:33:f9:2e:0b:ca:56:78:d2:ac:d6:
5b:21:d9:17:38:af:a9:f0:59:58:a0:b8:4e:6e:03:
9f:01:20:93:94:ee:1f:dd:d9:28:51:c5:57:cc:ea:
42:05:24:2e:0e:90:bf:4a:95:c8:a5:da:37:81:d2:
26:a4:88:3c:4e:64:f7:dd:5f:9e:cd:11:fb:d4:27:
c2:1f:52:02:b5:f1:54:9a:28:d9:2f:12:41:5a:53:
74:0a:14:c3:6a:fb:b4:7a:f2:e7:12:19:f3:d1:49:
8a:a8:37:0e:0e:c4:27:7a:cd:51:c9:c5:22:ee:00:
15:2a:21:cf:7f:b6:e8:99:92:31:6c:5a:8b:5a:b2:
61:f0:a4:10:0e:f3:d9:d7:0a:49:b5:36:65:b3:37:
eb:49:81:d6:29:f0:1d:6a:7f:2e:f9:16:83:b4:b3:
a1:9b:d7:57:82:ac:50:ff:5f:f4:a8:85:bc:8f:b8:
97:d3:88:49:d1:b3:03:d8:8b:20:82:33:fe:30:84:
99:3a:a5:1a:1e:78:49:0f:14:5d:46:d9:c9:5b:4e:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:70:68:ED:57:38:59:C1:A3:10:46:35:8A:C4:B4:AA:E5:72:99
X509v3 Authority Key Identifier:
keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3233203d3e20323639343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.164.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:14:64:f9:76:93:58:66:2f:33:5b:16:3b:b1:7a:ca:97:79:
d7:d2:ec:ca:69:28:b4:28:b0:bb:b7:7f:3c:f9:bf:aa:2a:48:
42:ae:90:fd:e6:0f:c7:20:d7:66:ee:0f:55:e7:4c:2a:f0:4a:
2b:b8:65:86:92:b7:9c:cf:9b:59:14:92:03:f6:3a:9e:c0:44:
b0:53:12:33:4c:c6:b6:88:18:e8:6b:3e:4a:79:0d:33:93:49:
f2:c9:52:ec:9f:3e:93:87:55:73:3c:b0:90:31:10:a9:84:de:
0b:16:b5:46:fe:21:2d:6c:3d:00:bf:e3:28:11:67:73:76:b0:
bb:72:f0:16:de:96:5e:80:40:54:99:7c:22:94:c4:d6:04:26:
d0:d2:ef:6b:21:2f:c7:45:c1:53:d5:d1:6f:ed:64:24:a8:22:
9e:1c:42:df:c8:3c:60:d4:4f:00:ec:af:09:4c:15:71:76:83:
65:dd:80:a1:19:8b:7a:9c:3d:b0:b0:11:98:62:48:39:26:9b:
33:b1:2e:07:89:2a:e0:c8:37:b6:92:9c:74:ae:72:07:04:99:
e9:04:0b:d8:31:2e:3b:88:20:f3:63:04:81:e2:4c:8a:fa:91:
3d:98:8a:62:f1:aa:3d:af:02:73:d7:57:92:35:78:c2:a4:a2:
fa:3e:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:53:38 2025 by rpki-client