This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139352e302f32342d3234203d3e20323638333830.roa
File: 34352e3233392e3139352e302f32342d3234203d3e20323638333830.roa (raw, json)
Hash identifier: Oo++4K40KD9MFDjAaNYP6+A1Y3iTiwAekdxKH6owBNQ=
Subject key identifier: 55:C0:2A:FA:D0:DA:AB:3E:0E:23:88:C5:D0:02:9C:C9:17:AD:F7:3D
Certificate issuer: /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial: 3C59A4B34A3F1069B3999CE8AB3949528AED5510
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139352e302f32342d3234203d3e20323638333830.roa
Signing time: Tue 09 Dec 2025 03:21:51 +0000
ROA not before: Tue 09 Dec 2025 03:16:51 +0000
ROA not after: Tue 08 Dec 2026 03:21:51 +0000
asID: 268380
IP address blocks: 45.239.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 11:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:59:a4:b3:4a:3f:10:69:b3:99:9c:e8:ab:39:49:52:8a:ed:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Validity
Not Before: Dec 9 03:16:51 2025 GMT
Not After : Dec 8 03:21:51 2026 GMT
Subject: CN=55C02AFAD0DAAB3E0E2388C5D0029CC917ADF73D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:5f:87:4f:e8:fc:19:cb:39:51:d0:dc:d6:
a4:ed:7e:56:b0:58:70:7d:ff:5a:88:d4:2b:ee:f0:
39:77:c1:1d:b2:bc:97:21:cc:4c:01:ce:21:35:f8:
0f:21:49:1f:a4:b1:2d:ce:9f:cb:6f:cf:44:b2:c3:
e3:f5:db:d5:3f:97:49:82:8e:af:30:a9:ed:63:df:
31:8f:c1:e7:37:e3:dc:24:fe:06:ca:d8:1d:58:a9:
6e:ed:7e:98:bc:6a:75:87:7e:49:3a:91:51:b8:51:
0c:79:b3:1b:9a:37:97:91:b2:2c:49:85:88:4a:37:
19:0a:e6:ce:02:71:77:aa:6e:14:c5:20:d0:1c:53:
68:56:5e:ce:da:65:23:ab:ea:58:dd:68:10:a7:d5:
2e:87:4c:dc:de:b9:19:a2:18:72:53:4b:e5:fa:7c:
87:04:f2:14:82:b6:6b:00:1c:33:bb:8a:22:de:72:
8c:c9:1b:1e:0f:e8:de:49:1e:de:3a:0c:64:a7:5a:
0c:12:f4:3b:23:eb:97:f2:5e:a6:30:12:38:45:e2:
4e:68:f8:99:39:45:82:90:49:da:58:be:be:9a:ce:
db:03:9e:41:47:e9:76:36:aa:6b:ab:fb:0c:cf:70:
d1:22:cb:e6:d5:23:25:75:26:de:81:cf:77:3e:60:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C0:2A:FA:D0:DA:AB:3E:0E:23:88:C5:D0:02:9C:C9:17:AD:F7:3D
X509v3 Authority Key Identifier:
keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139352e302f32342d3234203d3e20323638333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:47:08:4d:35:3a:ef:d7:b1:bf:6c:e7:3b:56:22:4b:3a:44:
ff:e6:2c:0e:9b:c6:37:45:12:35:93:54:5f:14:83:b9:28:b2:
78:20:7f:6a:ca:70:35:7b:25:df:65:f5:c9:99:13:25:09:fd:
83:22:76:17:fc:cd:e3:fb:d7:59:bc:e4:81:9c:d2:27:08:f7:
a6:85:f8:ef:6e:a3:3c:d1:d8:be:de:87:9b:af:38:ac:f1:68:
70:36:c1:e4:1f:9a:17:b8:7b:bb:7f:ad:e8:90:87:a8:69:15:
52:fd:4c:15:1c:29:5e:a7:1b:ff:f0:e3:48:f6:78:63:62:69:
cf:fe:2e:29:6f:d9:18:59:4c:1a:db:cc:15:f3:a6:da:e0:6f:
b1:55:de:b1:ff:69:cf:29:65:a5:b3:a3:cb:9f:14:df:87:f2:
0e:47:75:e8:3c:ee:a2:cf:8b:57:c7:63:3e:ef:5b:b0:90:ee:
99:a4:f8:5f:d0:30:79:3c:3f:b8:6e:ac:35:bb:65:d7:69:c6:
6e:cb:0b:2b:fd:bf:ff:49:06:22:0e:9d:cd:e6:c1:a0:d4:e7:
c4:7d:9b:c7:e6:19:4b:25:7b:31:bc:ab:de:62:1e:dd:04:9b:
41:8e:09:32:83:20:d4:81:7d:29:c3:75:e5:95:93:a6:59:75:
96:0b:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:18:33 2025 by rpki-client