This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32342d3234203d3e20323638333830.roa
File: 34352e3233392e3139322e302f32342d3234203d3e20323638333830.roa (raw, json)
Hash identifier: ZSflHSEWmXIIzvOw9GkTKbO6nvZaa/gczQWLazeBcRo=
Subject key identifier: 9E:DA:3B:9E:66:01:0F:31:12:E0:E5:38:3D:97:03:AB:7C:50:88:09
Certificate issuer: /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial: 596E399A3A3931CADEC637C2EE5337B333D722CE
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32342d3234203d3e20323638333830.roa
Signing time: Tue 09 Dec 2025 03:18:37 +0000
ROA not before: Tue 09 Dec 2025 03:13:37 +0000
ROA not after: Tue 08 Dec 2026 03:18:37 +0000
asID: 268380
IP address blocks: 45.239.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 11:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6e:39:9a:3a:39:31:ca:de:c6:37:c2:ee:53:37:b3:33:d7:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Validity
Not Before: Dec 9 03:13:37 2025 GMT
Not After : Dec 8 03:18:37 2026 GMT
Subject: CN=9EDA3B9E66010F3112E0E5383D9703AB7C508809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:19:6b:3c:8e:ae:0f:63:60:82:bd:4a:4a:
7c:0a:83:42:8a:8b:a1:de:41:dc:de:9e:24:79:10:
96:84:16:cb:3f:d3:13:60:3b:68:4e:b9:db:1a:52:
8a:03:8c:24:a9:6a:70:1e:e7:bb:3f:5a:f5:8f:d9:
7e:c4:e1:5e:f2:88:54:69:c0:04:af:3b:5e:c7:03:
f2:7a:43:8a:df:06:d7:b9:0f:95:7a:dd:7f:51:2f:
9e:ef:d4:e7:2e:89:ca:27:1f:35:42:df:02:6a:f0:
6a:40:a6:ba:40:ce:bb:66:78:fc:4a:53:dc:6e:03:
67:33:84:5e:22:d0:4b:b1:40:31:b7:75:f9:aa:37:
40:4e:13:15:93:5d:70:f2:86:f5:b4:4a:13:84:2b:
64:f4:26:77:d4:85:c2:71:74:a1:8d:25:88:6d:c3:
c8:f6:0c:7c:19:8a:93:0a:a6:00:2f:3d:8f:45:fe:
a6:a9:7d:40:26:cf:48:46:e5:47:6f:75:24:f6:eb:
79:63:06:2f:12:5b:49:be:a6:16:95:ea:57:3f:69:
c7:97:9c:f5:4e:06:0e:39:72:d0:73:23:ed:00:fd:
4d:d8:84:bc:95:2b:0e:84:33:66:5b:02:ee:64:6b:
f3:dd:3d:db:5d:e7:6c:be:a0:18:a1:34:ec:4c:b6:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:3B:9E:66:01:0F:31:12:E0:E5:38:3D:97:03:AB:7C:50:88:09
X509v3 Authority Key Identifier:
keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32342d3234203d3e20323638333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b7:59:e8:38:73:e1:44:52:d3:ad:49:4d:ae:48:25:bf:32:
68:e6:b5:a0:76:6e:fc:b7:75:50:bd:67:df:65:ad:f4:26:d1:
37:02:4c:1a:ea:a1:33:c7:0c:55:39:ae:31:9f:b8:70:40:ab:
81:c4:c6:9b:ab:bb:c4:0f:d3:a1:52:a8:a3:8e:23:b7:67:5f:
80:22:75:a8:58:5c:6b:55:0c:43:ee:4d:53:d9:bd:a1:2d:36:
ad:a2:47:de:ca:71:90:ee:ee:e2:f5:3c:8d:c0:ba:04:4d:4d:
71:50:f4:8d:1e:8e:51:15:a5:91:6d:7f:d2:92:64:49:12:e6:
15:a5:76:f6:59:bc:bc:a2:3d:21:81:3a:6f:21:b4:ac:04:e4:
72:91:31:e6:0a:76:17:af:75:42:4e:72:a4:b6:7f:14:29:56:
7f:e1:88:bf:f3:74:bf:33:0d:e1:d6:b9:7f:17:4c:8b:9a:c5:
cd:82:de:f1:7a:c7:6f:eb:7a:fe:96:b7:0b:62:cf:ec:ac:99:
a1:83:32:b2:15:88:92:9a:1b:11:d5:fb:93:dc:67:f6:2e:65:
8a:6c:2f:ed:c0:b5:a6:be:4b:b1:3d:1c:47:35:e2:fe:82:21:
75:d1:a5:0f:96:67:4d:fc:b8:e2:50:1b:d9:73:79:68:90:fb:
48:e9:08:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWW45mjo5McrexjfC7lM3szPXIs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFDRTVCODFCQTQ1ODhBOTA1OEUzMkY3ODU5MEVENEFC
RkVCMjlCQTAeFw0yNTEyMDkwMzEzMzdaFw0yNjEyMDgwMzE4MzdaMDMxMTAvBgNV
BAMTKDlFREEzQjlFNjYwMTBGMzExMkUwRTUzODNEOTcwM0FCN0M1MDg4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosxlrPI6uD2Nggr1KSnwKg0KK
i6HeQdzeniR5EJaEFss/0xNgO2hOudsaUooDjCSpanAe57s/WvWP2X7E4V7yiFRp
wASvO17HA/J6Q4rfBte5D5V63X9RL57v1OcuiconHzVC3wJq8GpAprpAzrtmePxK
U9xuA2czhF4i0EuxQDG3dfmqN0BOExWTXXDyhvW0ShOEK2T0JnfUhcJxdKGNJYht
w8j2DHwZipMKpgAvPY9F/qapfUAmz0hG5UdvdST263ljBi8SW0m+phaV6lc/aceX
nPVOBg45ctBzI+0A/U3YhLyVKw6EM2ZbAu5ka/PdPdtd52y+oBihNOxMtpZbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnto7nmYBDzES4OU4PZcDq3xQiAkwHwYDVR0j
BBgwFoAUms5bgbpFiKkFjjL3hZDtSr/rKbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3p1eHVkMWI0dWNzYUtZc2lDeldUenl1S0R6WDdoMWpWNjFBb1FZM245
cnIvMC85QUNFNUI4MUJBNDU4OEE5MDU4RTMyRjc4NTkwRUQ0QUJGRUIyOUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQ0U1QjgxQkE0NTg4QTkw
NThFMzJGNzg1OTBFRDRBQkZFQjI5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6dXh1ZDFiNHVjc2FLWXNpQ3pXVHp5dUtEelg3aDFqVjYxQW9RWTNuOXJyLzAv
MzQzNTJlMzIzMzM5MmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt78AwDQYJKoZIhvcNAQELBQADggEBAJW3Weg4
c+FEUtOtSU2uSCW/MmjmtaB2bvy3dVC9Z99lrfQm0TcCTBrqoTPHDFU5rjGfuHBA
q4HExpuru8QP06FSqKOOI7dnX4AidahYXGtVDEPuTVPZvaEtNq2iR97KcZDu7uL1
PI3AugRNTXFQ9I0ejlEVpZFtf9KSZEkS5hWldvZZvLyiPSGBOm8htKwE5HKRMeYK
dhevdUJOcqS2fxQpVn/hiL/zdL8zDeHWuX8XTIuaxc2C3vF6x2/rev6Wtwtiz+ys
maGDMrIViJKaGxHV+5PcZ/YuZYpsL+3Ataa+S7E9HEc14v6CIXXRpQ+WZ038uOJQ
G9lzeWiQ+0jpCL8=
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:34 2025 by rpki-client