This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32342d3234203d3e203532383338.roa
File: 34352e3233312e3233322e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: AsVNAyHzu2W2IC0H4Eehaf8UMnI0VMsXrDl6eCofHp4=
Subject key identifier: AB:C1:9F:98:2E:9C:05:FE:A1:46:B5:F6:85:46:71:8E:33:86:65:07
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 4C6B8E013CABF69FA304B11193B861FD4D54CB28
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:30:44 +0000
ROA not before: Wed 03 Dec 2025 00:25:44 +0000
ROA not after: Wed 02 Dec 2026 00:30:44 +0000
asID: 52838
IP address blocks: 45.231.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6b:8e:01:3c:ab:f6:9f:a3:04:b1:11:93:b8:61:fd:4d:54:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:25:44 2025 GMT
Not After : Dec 2 00:30:44 2026 GMT
Subject: CN=ABC19F982E9C05FEA146B5F68546718E33866507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:fa:f9:25:8a:e4:5b:82:80:69:36:6c:8e:
4a:10:fd:96:32:5b:5f:e3:54:24:a9:0e:8e:27:1b:
0f:77:3c:3d:ac:7b:ac:08:ce:2e:d0:9c:84:94:93:
00:79:91:53:54:24:9a:3a:1f:c9:90:1e:23:8c:e8:
c1:59:0e:74:2a:94:87:82:21:aa:68:1b:eb:0e:e9:
ce:5d:26:4b:8f:a4:0a:5c:63:2e:b7:a5:61:39:f4:
6b:cc:46:a7:aa:eb:a9:7b:5b:d1:09:09:5d:59:b5:
9b:6a:fe:e7:2b:17:e7:6c:4b:32:32:35:84:02:b0:
ba:91:29:2d:9e:fc:72:20:e4:81:6b:0c:5d:48:2a:
d6:f2:b7:e6:0a:20:1b:a9:d2:dc:86:bd:ae:26:d5:
3c:1f:9d:77:5f:41:e3:d6:83:6d:44:8a:a3:cc:4a:
69:be:37:5a:57:24:7d:0f:58:70:98:21:d8:cb:7a:
08:2e:5b:72:7d:3a:e5:ba:c9:b6:88:26:d2:34:20:
45:83:7c:b8:d3:89:0f:2a:cf:e0:ec:b9:8d:cb:37:
5c:be:0b:9c:04:ff:ac:63:71:b8:ba:fa:34:c0:b9:
00:cc:57:23:73:af:ef:03:d8:ae:3a:28:8e:80:9c:
ae:eb:53:97:47:88:81:b4:3e:7f:c5:00:67:db:fd:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:9F:98:2E:9C:05:FE:A1:46:B5:F6:85:46:71:8E:33:86:65:07
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.232.0/24
Signature Algorithm: sha256WithRSAEncryption
83:28:fd:ef:5e:5d:8d:ab:e7:78:c9:15:b3:5f:01:2f:07:61:
c6:8b:05:b8:46:fe:7b:b2:d3:60:90:55:6d:39:99:e4:05:01:
51:85:4c:a5:ec:d4:c5:db:fa:8d:ec:ec:fb:dc:00:f7:0d:0f:
c4:af:8c:20:c5:4b:c5:64:d0:96:b5:40:22:2d:b2:aa:9e:47:
05:27:4d:47:ea:28:f8:d5:2b:f4:4d:61:c6:c0:31:45:48:00:
49:2f:21:88:61:ec:b3:70:15:b9:ee:e7:4c:89:76:6b:87:de:
26:73:88:99:44:62:03:cb:1e:de:56:ac:bf:d1:65:1e:c8:5a:
68:4b:26:9c:7b:8b:13:da:8e:84:06:d3:8e:77:7d:73:e4:26:
2a:56:87:01:9d:ab:a4:b3:9f:06:22:e7:c5:d7:71:2a:67:25:
2d:c4:23:4e:66:a6:83:ee:c7:af:0d:63:05:09:d2:5e:62:11:
2a:39:62:85:40:73:1a:c5:07:92:4f:51:bf:36:48:e6:8a:5b:
6e:06:ec:16:0e:fc:94:d7:51:ae:9c:db:36:12:16:34:a0:3d:
bd:49:90:a4:74:c4:41:c5:db:00:b1:d0:fd:4e:97:90:23:7d:
4f:0c:9e:ce:24:84:90:60:d8:8c:d0:be:a9:95:60:19:8b:ad:
8c:ca:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:23 2025 by rpki-client