This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139342e302f32342d3234203d3e20323638333830.roa
File: 34352e3233392e3139342e302f32342d3234203d3e20323638333830.roa (raw, json)
Hash identifier: HqXxAR6gIQl8ZKsJUnBAqxs2iGMlp3jgEXbUlLvVWKw=
Subject key identifier: 4E:9B:28:87:7F:25:2B:31:3E:E2:4A:70:8E:EB:9A:FC:DA:0D:B8:BA
Certificate issuer: /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial: 79F2B6B51FB095845B1E76C654260119B47AAB34
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139342e302f32342d3234203d3e20323638333830.roa
Signing time: Tue 09 Dec 2025 03:21:34 +0000
ROA not before: Tue 09 Dec 2025 03:16:34 +0000
ROA not after: Tue 08 Dec 2026 03:21:34 +0000
asID: 268380
IP address blocks: 45.239.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 11:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f2:b6:b5:1f:b0:95:84:5b:1e:76:c6:54:26:01:19:b4:7a:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Validity
Not Before: Dec 9 03:16:34 2025 GMT
Not After : Dec 8 03:21:34 2026 GMT
Subject: CN=4E9B28877F252B313EE24A708EEB9AFCDA0DB8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:4f:ad:c9:70:9e:e4:22:15:5c:20:79:9d:
ff:ed:02:a0:89:cc:e0:f5:37:bf:d8:05:f7:7c:c4:
1d:1a:42:9d:5a:bc:a3:f0:10:8c:02:c8:11:24:c4:
77:f9:02:41:4d:f9:2a:3b:7c:72:b0:cf:a1:0f:fb:
27:ac:df:d0:2d:b2:5a:9b:78:3b:87:e6:c6:09:9d:
1b:d8:59:3c:58:ec:32:47:f8:cc:9a:a9:44:78:20:
98:79:9b:35:eb:da:88:73:f0:95:8c:77:2f:9e:be:
0c:aa:81:a0:e0:64:34:46:87:49:7f:6c:ec:1d:f8:
47:79:ac:13:40:a3:ec:5a:35:6b:8b:36:6e:95:f0:
fd:ef:eb:b1:14:25:d7:05:00:8e:64:ae:21:f5:9f:
62:d5:f0:33:85:e3:27:a6:8e:4d:de:e2:26:65:99:
d5:87:b0:42:8c:70:d1:f4:f5:02:af:e8:8c:c6:50:
1c:75:08:c9:3b:fd:91:c5:6b:f3:78:28:93:e8:ad:
6a:59:f0:22:bb:21:27:5f:dd:9b:b8:bd:86:de:22:
9a:2b:d8:fd:7e:86:77:83:04:70:c0:10:8f:f5:34:
c8:2c:2b:b4:e2:6f:1d:40:2b:9b:99:d6:02:5b:2a:
e9:69:97:f8:81:75:c0:e5:92:0b:a0:3e:81:10:8b:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:28:87:7F:25:2B:31:3E:E2:4A:70:8E:EB:9A:FC:DA:0D:B8:BA
X509v3 Authority Key Identifier:
keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139342e302f32342d3234203d3e20323638333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.194.0/24
Signature Algorithm: sha256WithRSAEncryption
45:36:8f:32:32:c1:35:ad:2e:42:81:97:96:08:29:26:98:8a:
c7:35:e9:37:d0:38:07:61:f9:49:95:81:cc:c3:d7:80:5c:7d:
b5:9c:40:85:73:a3:29:c3:9a:ea:42:97:73:8f:07:aa:3a:9c:
6b:8c:25:71:5b:65:7c:c8:c3:ed:22:ab:6e:13:e7:22:d0:60:
f4:3f:c5:2c:e2:44:3c:f9:87:32:4d:c7:e8:a2:61:2e:fd:3e:
1c:54:02:47:96:c1:d3:2c:eb:3c:3a:47:e3:a8:c7:e5:89:59:
6b:4d:5f:4a:f8:33:e9:81:26:1b:a6:c0:0c:fd:73:bb:36:a1:
90:9d:69:49:5a:29:ed:34:ec:1f:42:2b:0a:8c:8b:30:0d:6f:
70:be:55:1f:89:97:68:cd:40:7f:c8:2d:ac:c7:78:3e:34:0f:
5d:2e:fb:6d:ec:eb:2c:68:73:a8:54:61:c3:63:21:e4:60:9e:
0b:73:f6:24:a0:f8:b3:d7:2d:90:3c:90:1d:19:4f:87:cb:0b:
e6:6d:99:6c:ba:8a:c1:9e:e0:bd:a2:e3:32:f7:37:9f:1a:21:
b1:36:ca:d7:b6:c4:85:e5:2f:e8:66:dd:46:15:65:3d:d8:16:
73:cb:7d:93:08:22:30:33:c9:af:b1:2e:64:46:45:d7:80:9a:
31:a3:23:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUefK2tR+wlYRbHnbGVCYBGbR6qzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFDRTVCODFCQTQ1ODhBOTA1OEUzMkY3ODU5MEVENEFC
RkVCMjlCQTAeFw0yNTEyMDkwMzE2MzRaFw0yNjEyMDgwMzIxMzRaMDMxMTAvBgNV
BAMTKDRFOUIyODg3N0YyNTJCMzEzRUUyNEE3MDhFRUI5QUZDREEwREI4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC570+tyXCe5CIVXCB5nf/tAqCJ
zOD1N7/YBfd8xB0aQp1avKPwEIwCyBEkxHf5AkFN+So7fHKwz6EP+yes39Atslqb
eDuH5sYJnRvYWTxY7DJH+MyaqUR4IJh5mzXr2ohz8JWMdy+evgyqgaDgZDRGh0l/
bOwd+Ed5rBNAo+xaNWuLNm6V8P3v67EUJdcFAI5kriH1n2LV8DOF4yemjk3e4iZl
mdWHsEKMcNH09QKv6IzGUBx1CMk7/ZHFa/N4KJPorWpZ8CK7ISdf3Zu4vYbeIpor
2P1+hneDBHDAEI/1NMgsK7Tibx1AK5uZ1gJbKulpl/iBdcDlkgugPoEQi71ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTpsoh38lKzE+4kpwjuua/NoNuLowHwYDVR0j
BBgwFoAUms5bgbpFiKkFjjL3hZDtSr/rKbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3p1eHVkMWI0dWNzYUtZc2lDeldUenl1S0R6WDdoMWpWNjFBb1FZM245
cnIvMC85QUNFNUI4MUJBNDU4OEE5MDU4RTMyRjc4NTkwRUQ0QUJGRUIyOUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQ0U1QjgxQkE0NTg4QTkw
NThFMzJGNzg1OTBFRDRBQkZFQjI5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6dXh1ZDFiNHVjc2FLWXNpQ3pXVHp5dUtEelg3aDFqVjYxQW9RWTNuOXJyLzAv
MzQzNTJlMzIzMzM5MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt78IwDQYJKoZIhvcNAQELBQADggEBAEU2jzIy
wTWtLkKBl5YIKSaYisc16TfQOAdh+UmVgczD14BcfbWcQIVzoynDmupCl3OPB6o6
nGuMJXFbZXzIw+0iq24T5yLQYPQ/xSziRDz5hzJNx+iiYS79PhxUAkeWwdMs6zw6
R+Oox+WJWWtNX0r4M+mBJhumwAz9c7s2oZCdaUlaKe007B9CKwqMizANb3C+VR+J
l2jNQH/ILazHeD40D10u+23s6yxoc6hUYcNjIeRgngtz9iSg+LPXLZA8kB0ZT4fL
C+ZtmWy6isGe4L2i4zL3N58aIbE2yte2xIXlL+hm3UYVZT3YFnPLfZMIIjAzya+x
LmRGRdeAmjGjIxE=
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:33 2025 by rpki-client