This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
File: 34352e342e35322e302f32322d3234203d3e20323636303430.roa (raw, json)
Hash identifier: RLtBrUHAHuFeC4noQtcFW0GnyXybP9EkHJSZ30WPels=
Subject key identifier: 2C:2E:C7:A3:B2:40:E9:44:02:E9:FD:71:4D:EC:3D:D2:1E:85:1A:17
Certificate issuer: /CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
Certificate serial: 12668088ED4527E176F770D227BE016FDDE28E2F
Authority key identifier: 4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
Signing time: Tue 06 Jan 2026 15:17:59 +0000
ROA not before: Tue 06 Jan 2026 15:12:59 +0000
ROA not after: Tue 05 Jan 2027 15:17:59 +0000
asID: 266040
IP address blocks: 45.4.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl
rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 07:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:66:80:88:ed:45:27:e1:76:f7:70:d2:27:be:01:6f:dd:e2:8e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
Validity
Not Before: Jan 6 15:12:59 2026 GMT
Not After : Jan 5 15:17:59 2027 GMT
Subject: CN=2C2EC7A3B240E94402E9FD714DEC3DD21E851A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:7a:14:9c:1b:01:b3:0c:5c:87:2a:ac:b3:
d2:1d:83:ba:b7:3c:5a:e6:c4:e8:5a:65:ed:50:8d:
c5:44:a0:fe:db:00:94:e0:fd:84:83:83:89:44:62:
45:74:c8:20:be:02:ba:83:1b:0d:f7:c7:10:67:f6:
33:ce:bb:07:e5:a3:8b:23:43:81:fd:35:fd:02:25:
94:f4:60:a0:22:d7:82:d3:00:de:c5:0d:2b:13:ad:
32:a9:9d:67:8e:cc:bf:30:fc:46:36:b5:94:41:ac:
7e:77:89:13:1c:2a:5a:be:b3:8c:5f:7f:91:32:11:
64:0c:49:84:67:8a:37:9d:75:65:45:2d:71:37:73:
9a:b5:38:ae:f4:e2:ee:e5:dc:e8:61:6b:e8:01:6b:
26:ec:2e:5f:18:c3:88:b2:2e:19:83:a0:2c:e0:ca:
3b:67:c1:4e:10:9b:df:4c:84:8a:e7:e1:55:bc:3c:
44:92:b0:4e:84:cb:6e:be:d4:98:fd:17:ad:2d:a5:
fb:f9:02:1f:3c:86:64:eb:39:a1:7d:c7:53:0b:28:
63:c9:61:75:a4:11:e1:2b:42:92:45:37:36:cd:34:
a7:81:80:25:74:75:98:c7:f5:e0:6c:7f:10:61:23:
c3:c9:95:9a:40:e3:99:39:42:ad:c9:55:3c:eb:c4:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:C7:A3:B2:40:E9:44:02:E9:FD:71:4D:EC:3D:D2:1E:85:1A:17
X509v3 Authority Key Identifier:
keyid:4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.52.0/22
Signature Algorithm: sha256WithRSAEncryption
87:0f:c3:ad:6b:14:98:0a:5f:61:cd:2e:30:dd:35:7f:65:89:
a3:2f:94:52:41:f5:bb:68:04:f0:20:bf:fb:02:6f:58:c7:94:
71:81:45:14:79:df:11:77:6f:4a:7d:8d:bf:7b:35:5e:fa:5a:
1b:48:db:b7:74:6c:96:d7:77:42:7e:20:03:49:74:3b:df:ca:
ce:e3:af:62:66:07:50:43:80:a0:54:a9:22:90:57:36:93:70:
d2:e3:29:b9:db:32:76:de:c9:c1:bd:22:cc:29:a7:48:45:6a:
94:3d:2d:3f:db:68:56:47:b1:11:90:42:c3:d9:4f:f2:da:e2:
ed:66:84:7e:ae:ae:16:84:c1:66:81:4d:e3:6a:7e:ac:08:7b:
f1:9f:82:0b:de:12:17:6f:59:0e:ef:7c:2c:a5:fa:15:04:06:
3d:a7:3b:e5:4a:ae:5c:2e:77:de:5d:80:72:5e:94:be:6a:b1:
fb:c5:cc:bb:df:8f:3c:87:0a:0b:e8:61:f7:43:18:fe:15:d5:
6e:c1:e6:6b:22:4f:56:1e:78:5e:f4:55:49:91:05:2f:22:e8:
1b:1e:8f:d1:a8:16:cb:e5:9f:f4:f7:05:c4:dc:7b:2b:b7:5f:
b5:6a:e4:74:4f:a5:06:43:d5:54:45:04:33:ef:ea:20:1f:1d:
57:f3:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:48:59 2026 by rpki-client