This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa
File: 34352e3233312e3233332e302f32342d3234203d3e203532383338.roa (raw, json)
Hash identifier: g6i1xmZngL/waMETNS6V3UTlwQqK3YuQVFRFs2Ry4VE=
Subject key identifier: 3F:E8:CE:B8:6E:6B:16:72:D4:E9:ED:45:B2:42:E8:36:EE:25:11:3A
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 17585B1227816B65DCD920F60FCF4AA8C24B8179
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:31:04 +0000
ROA not before: Wed 03 Dec 2025 00:26:04 +0000
ROA not after: Wed 02 Dec 2026 00:31:04 +0000
asID: 52838
IP address blocks: 45.231.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:58:5b:12:27:81:6b:65:dc:d9:20:f6:0f:cf:4a:a8:c2:4b:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:26:04 2025 GMT
Not After : Dec 2 00:31:04 2026 GMT
Subject: CN=3FE8CEB86E6B1672D4E9ED45B242E836EE25113A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:43:4d:9a:a8:39:0f:ef:7f:31:c7:67:e0:
29:24:42:c0:8f:d5:7b:fd:d4:85:d2:6d:88:f3:b1:
4b:05:0f:5b:2d:f6:62:0f:1d:df:ef:e1:a7:26:11:
11:5c:42:5a:73:9c:0d:50:11:d5:47:0b:73:f6:3d:
cf:80:0d:63:2c:55:bf:5a:7e:13:c2:8f:9b:8b:0f:
c5:c2:76:31:35:b4:82:02:0b:9d:32:6e:5b:e9:d6:
af:1b:86:c7:2d:9e:14:14:91:5d:80:6d:5b:0b:88:
27:ea:15:4b:34:0e:51:67:73:3a:63:2c:66:e1:b9:
69:dd:13:40:fd:9b:a4:f6:bc:01:4c:d6:be:84:42:
c2:42:f2:69:6f:6e:36:77:20:f9:36:02:76:2f:b7:
f5:82:53:46:91:24:ba:bc:57:08:09:f3:b7:b1:fb:
9d:dd:35:64:d3:8a:ac:ff:81:42:63:32:81:33:25:
98:2f:86:b9:01:70:f2:34:fc:18:94:a1:bb:fd:0b:
27:95:36:77:7f:53:b2:78:63:17:58:ff:76:e8:6c:
39:f9:44:c5:83:ce:82:7b:cb:2e:7a:73:dd:75:01:
f8:36:68:18:ec:01:f9:38:a0:f7:de:03:5b:74:0e:
8c:ba:03:d0:0d:31:60:55:55:cb:2f:1e:17:50:a6:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:CE:B8:6E:6B:16:72:D4:E9:ED:45:B2:42:E8:36:EE:25:11:3A
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233332e302f32342d3234203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.233.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9f:d8:ec:10:4c:f1:e7:9f:3c:be:a3:16:f3:a5:26:02:13:
99:fe:76:27:6f:84:7f:ed:bc:62:8d:39:1d:7a:7e:5f:0f:49:
08:73:af:1e:6a:ec:47:b6:ca:a5:b9:ef:57:46:38:a9:32:e4:
9d:ec:67:81:ae:2e:65:01:19:11:12:f9:b8:e5:23:d7:3a:9a:
5d:17:0d:2b:2e:e1:81:9c:14:54:4d:d4:88:b9:29:ec:9e:15:
b2:75:95:d7:d1:3f:dd:d4:1a:68:86:63:20:3e:b4:1f:70:77:
71:c8:66:36:4f:db:e2:5a:74:03:c8:bc:f5:ff:e7:2b:f7:5c:
66:7e:8a:f1:95:a1:ab:d8:6c:d8:13:df:80:53:ed:d4:2b:95:
89:49:4b:5f:fc:f0:07:78:47:cb:38:15:37:dd:e6:ac:fe:0b:
e2:ab:11:f2:bc:38:62:a4:bf:4b:0d:9a:6e:66:16:ce:50:6c:
28:e9:29:3f:83:a7:87:7f:42:fe:4d:7c:2c:dc:d8:03:39:5f:
70:ec:dc:61:1a:81:a5:41:f1:24:7e:c3:db:d8:cb:38:d8:62:
e8:80:52:9b:a6:aa:11:22:8f:d6:79:73:fc:cb:d7:6b:1d:21:
d1:6b:df:74:74:da:b5:52:c8:c7:0f:b0:38:6f:e0:85:98:5e:
38:e1:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:20 2025 by rpki-client