This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa
File: 34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa (raw, json)
Hash identifier: Y3MklqqDjVo5vwDZxh9tYAFq1tEMaamaFHOoH2SZg+Y=
Subject key identifier: E9:79:4E:73:37:75:D4:09:49:14:00:16:D0:47:29:41:8B:1E:E1:52
Certificate issuer: /CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Certificate serial: 438A5443E457B9A9E33FEE8BE11055434CA7081D
Authority key identifier: F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa
Signing time: Tue 25 Nov 2025 20:15:16 +0000
ROA not before: Tue 25 Nov 2025 20:10:16 +0000
ROA not after: Tue 24 Nov 2026 20:15:16 +0000
asID: 269444
IP address blocks: 45.186.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8a:54:43:e4:57:b9:a9:e3:3f:ee:8b:e1:10:55:43:4c:a7:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC
Validity
Not Before: Nov 25 20:10:16 2025 GMT
Not After : Nov 24 20:15:16 2026 GMT
Subject: CN=E9794E733775D40949140016D04729418B1EE152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:ba:5a:2b:bf:41:1d:53:c0:b2:d2:b5:09:
a4:cc:87:8b:ff:bf:74:1d:b7:4b:1e:14:d6:0f:9c:
17:45:18:9a:c6:db:3d:e8:19:39:42:79:74:d0:84:
dd:e9:94:cb:e4:58:d2:61:8a:62:91:6a:17:f6:65:
37:88:ea:20:9e:e0:3a:47:00:ed:89:d7:6f:a9:93:
cf:ec:93:b3:c9:c7:a5:ea:61:42:1f:fc:63:86:6f:
83:00:74:10:44:8b:03:91:5f:16:06:96:ad:f3:9c:
8b:4e:e4:15:04:dc:d6:d2:87:5b:e1:e1:7c:15:5e:
e7:cd:e7:01:c3:c6:15:b2:77:4c:18:6f:08:0d:e1:
27:81:a9:19:dc:a8:db:33:d3:81:44:f0:1f:c9:1f:
9d:70:9e:f3:3b:7e:d9:e7:3b:56:d3:26:b7:d5:86:
e5:0a:3b:02:05:03:0d:09:f5:71:27:f7:cd:20:b0:
aa:fa:66:a1:91:5a:48:62:bc:86:1a:9a:34:6d:d5:
ae:0a:cc:56:2f:37:38:e6:f6:ca:ba:ef:e3:e4:50:
65:d4:67:42:10:24:05:b7:d1:40:ec:56:29:1c:1c:
e6:fd:42:13:b8:95:dc:ed:4d:aa:dd:5d:a3:c6:c8:
b4:69:2b:36:48:52:66:18:65:d9:53:75:0c:b1:24:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:4E:73:37:75:D4:09:49:14:00:16:D0:47:29:41:8B:1E:E1:52
X509v3 Authority Key Identifier:
keyid:F9:28:CC:C2:3B:37:F2:91:D7:8F:3C:89:91:CE:9B:D3:B5:FE:BB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F928CCC23B37F291D78F3C8991CE9BD3B5FEBBDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136362e302f32332d3233203d3e20323639343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.166.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:ca:27:76:48:03:4f:dd:3a:37:d1:56:5e:dc:33:e2:10:5b:
21:af:66:e4:e7:d1:03:fa:f9:be:4d:b1:6b:df:11:a9:1e:40:
db:5d:42:9c:7e:3d:d3:32:7b:df:9b:31:e9:d0:cd:c3:07:23:
bd:36:0e:98:1f:92:c3:17:28:69:e8:59:70:6e:bd:4a:12:87:
3d:2b:16:78:5b:11:42:6f:7b:9e:95:8c:e9:d4:b9:d2:21:da:
a6:cd:a2:93:d9:ff:fb:dc:32:dd:3d:2b:ef:aa:d3:18:b7:3b:
c0:16:14:c2:4e:40:81:fc:be:c5:42:38:0f:04:39:80:40:80:
71:74:2b:b4:43:a0:22:19:e9:64:02:9e:9c:a9:93:da:c1:cd:
37:f2:39:0f:f7:36:99:47:50:c7:2d:52:40:74:f8:00:61:f9:
6c:99:17:20:ed:52:23:75:67:de:1d:4f:aa:54:9e:df:b6:ce:
1f:4d:d1:76:25:71:aa:ff:8f:bf:e4:73:a3:af:99:55:89:d9:
54:e5:d7:76:e8:a7:97:32:5d:7b:ea:23:06:64:9d:73:86:39:
d7:5d:53:86:9d:5a:5b:d4:75:2e:30:f6:f3:67:f3:4b:f7:88:
73:61:cd:df:eb:11:77:fc:93:59:a5:f7:5a:58:1e:10:4a:dd:
28:06:6f:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ4pUQ+RXuanjP+6L4RBVQ0ynCB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkyOENDQzIzQjM3RjI5MUQ3OEYzQzg5OTFDRTlCRDNC
NUZFQkJEQzAeFw0yNTExMjUyMDEwMTZaFw0yNjExMjQyMDE1MTZaMDMxMTAvBgNV
BAMTKEU5Nzk0RTczMzc3NUQ0MDk0OTE0MDAxNkQwNDcyOTQxOEIxRUUxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGarpaK79BHVPAstK1CaTMh4v/
v3Qdt0seFNYPnBdFGJrG2z3oGTlCeXTQhN3plMvkWNJhimKRahf2ZTeI6iCe4DpH
AO2J12+pk8/sk7PJx6XqYUIf/GOGb4MAdBBEiwORXxYGlq3znItO5BUE3NbSh1vh
4XwVXufN5wHDxhWyd0wYbwgN4SeBqRncqNsz04FE8B/JH51wnvM7ftnnO1bTJrfV
huUKOwIFAw0J9XEn980gsKr6ZqGRWkhivIYamjRt1a4KzFYvNzjm9sq67+PkUGXU
Z0IQJAW30UDsVikcHOb9QhO4ldztTardXaPGyLRpKzZIUmYYZdlTdQyxJACLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6XlOczd11AlJFAAW0EcpQYse4VIwHwYDVR0j
BBgwFoAU+SjMwjs38pHXjzyJkc6b07X+u9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3paM2VkTUFudzRnakpiVXBXaWVKbXhCMVJHY2lSOU03RXh4a2Jia05m
WmsvMC9GOTI4Q0NDMjNCMzdGMjkxRDc4RjNDODk5MUNFOUJEM0I1RkVCQkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5MjhDQ0MyM0IzN0YyOTFE
NzhGM0M4OTkxQ0U5QkQzQjVGRUJCREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6WjNlZE1Bbnc0Z2pKYlVwV2llSm14QjFSR2NpUjlNN0V4eGtiYmtOZlprLzAv
MzQzNTJlMzEzODM2MmUzMTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuqYwDQYJKoZIhvcNAQELBQADggEBAMjKJ3ZI
A0/dOjfRVl7cM+IQWyGvZuTn0QP6+b5NsWvfEakeQNtdQpx+PdMye9+bMenQzcMH
I702DpgfksMXKGnoWXBuvUoShz0rFnhbEUJve56VjOnUudIh2qbNopPZ//vcMt09
K++q0xi3O8AWFMJOQIH8vsVCOA8EOYBAgHF0K7RDoCIZ6WQCnpypk9rBzTfyOQ/3
NplHUMctUkB0+ABh+WyZFyDtUiN1Z94dT6pUnt+2zh9N0XYlcar/j7/kc6OvmVWJ
2VTl13bop5cyXXvqIwZknXOGOdddU4adWlvUdS4w9vNn80v3iHNhzd/rEXf8k1ml
91pYHhBK3SgGb6U=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:42 2025 by rpki-client