This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32332d3233203d3e203532383338.roa
File: 34352e3233312e3233342e302f32332d3233203d3e203532383338.roa (raw, json)
Hash identifier: bQrxdZhGYXUnDSBOXzAz1gqrE6gtEkx7X6X9Bc7momw=
Subject key identifier: EF:CF:43:9F:DD:D8:81:3C:56:D1:5F:87:7E:3B:ED:F7:07:70:98:36
Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829
Certificate serial: 57484AAC2C57BB0653B849985B20FE37A53E0C80
Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32332d3233203d3e203532383338.roa
Signing time: Wed 03 Dec 2025 00:30:10 +0000
ROA not before: Wed 03 Dec 2025 00:25:10 +0000
ROA not after: Wed 02 Dec 2026 00:30:10 +0000
asID: 52838
IP address blocks: 45.231.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 23:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:48:4a:ac:2c:57:bb:06:53:b8:49:98:5b:20:fe:37:a5:3e:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829
Validity
Not Before: Dec 3 00:25:10 2025 GMT
Not After : Dec 2 00:30:10 2026 GMT
Subject: CN=EFCF439FDDD8813C56D15F877E3BEDF707709836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:4a:f6:3f:ee:7a:2e:6e:b0:ec:bc:78:09:
5c:b4:7a:cd:6f:83:be:b2:ed:c1:8f:f7:43:f9:f9:
16:6c:a1:5a:a3:c9:1f:bb:fa:b0:ff:3d:90:a0:4f:
08:dd:63:f6:38:ae:3a:97:6a:81:cb:dc:4c:1e:9e:
8b:6d:aa:e7:35:61:3b:d1:12:aa:4a:05:8d:75:f7:
4f:db:54:5a:ca:8b:08:41:13:dc:ed:7f:69:6d:21:
9c:22:61:f9:69:b6:c1:80:59:5c:6e:f1:d2:61:3f:
63:d1:f3:5b:c8:99:ca:c2:ec:62:dd:e4:40:a3:02:
dd:ba:72:ea:da:a3:88:7e:9a:36:bc:9c:dc:56:bd:
9a:8f:4f:48:95:cd:aa:60:43:0f:ee:64:73:e3:cd:
66:88:ca:35:d9:f1:7a:35:ad:45:8f:55:5c:14:0c:
21:8c:08:d3:d3:27:8d:6f:ae:17:5f:a7:4f:7d:7c:
85:b6:c5:07:98:f7:cb:76:6b:21:a1:04:92:0b:a0:
a5:27:07:e5:42:99:38:c6:d3:3a:e0:3b:17:14:0f:
61:e1:03:a8:56:2d:25:40:35:37:c3:bc:35:18:9b:
75:02:a6:86:a9:cb:18:7c:7d:b0:f3:64:e9:69:be:
b4:c4:86:f3:3e:8b:97:be:2f:99:60:1a:43:71:6d:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:43:9F:DD:D8:81:3C:56:D1:5F:87:7E:3B:ED:F7:07:70:98:36
X509v3 Authority Key Identifier:
keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32332d3233203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.234.0/23
Signature Algorithm: sha256WithRSAEncryption
56:c0:89:52:e3:49:07:c1:31:3a:38:e2:21:1f:5e:b5:57:c4:
19:3b:3c:93:60:cc:6e:97:15:c4:04:7f:81:ca:af:47:8c:ac:
e8:0f:5f:96:6e:01:f0:fb:58:dc:c4:23:ea:33:f3:98:ca:60:
f1:4f:ea:47:71:eb:9f:72:75:4e:11:81:36:af:3b:16:f8:4c:
4f:db:54:26:d5:c4:99:32:0d:8d:8c:cb:1f:e0:aa:2e:30:ed:
52:fa:46:16:d8:12:7b:cd:f7:83:c6:cb:5c:78:bf:78:f9:e9:
15:46:94:cd:21:2b:92:c7:2c:40:24:61:ae:1d:f2:9a:59:c4:
8d:d8:fb:0c:aa:74:63:57:5c:cd:f2:ed:f1:89:11:7d:aa:39:
d8:46:0f:ea:5d:1c:63:1f:bb:81:2e:4a:55:a8:91:85:a8:fe:
8b:b9:21:38:d2:02:6c:37:97:34:75:da:be:79:7c:a8:10:fa:
68:c1:65:0d:da:c8:40:cd:eb:e6:1d:14:9c:28:dc:16:b1:59:
a8:ee:0e:64:21:aa:64:5f:bf:25:a2:76:1a:3a:96:38:5d:c9:
da:3e:0a:54:a4:e9:a0:9a:a7:7f:12:92:cb:48:67:b1:11:c6:
5e:1c:70:cd:67:3d:b9:4f:6e:a0:07:fd:dc:d4:c6:2a:d6:4f:
3a:60:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:42:24 2025 by rpki-client