This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
File: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (raw, json)
Hash identifier: HftmIyrokhGUjcr0FEZyXrdA7R5IHKyE3fX0Rugnkr4=
Subject key identifier: 87:22:25:1C:DB:F2:A9:95:34:0B:22:CF:94:55:A7:75:54:09:51:AD
Certificate issuer: /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial: 4F1B6F088645B947F5F2526D1CA433F246982361
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
Signing time: Thu 18 Dec 2025 14:18:18 +0000
ROA not before: Thu 18 Dec 2025 14:13:18 +0000
ROA not after: Thu 17 Dec 2026 14:18:18 +0000
asID: 269015
IP address blocks: 45.178.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1b:6f:08:86:45:b9:47:f5:f2:52:6d:1c:a4:33:f2:46:98:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Validity
Not Before: Dec 18 14:13:18 2025 GMT
Not After : Dec 17 14:18:18 2026 GMT
Subject: CN=8722251CDBF2A995340B22CF9455A775540951AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:4a:84:33:a6:fc:a5:e6:07:e4:d9:14:20:
c8:31:d7:dc:da:24:7b:4b:44:69:8c:5d:91:7b:d3:
a2:66:15:54:3d:15:40:d0:65:52:2c:c8:9b:13:b8:
7b:00:5f:92:59:20:cd:c7:27:81:26:a3:c9:72:3f:
a9:2c:11:17:d7:90:a7:26:c5:ac:89:bf:01:bf:ea:
d5:d0:fa:39:2c:bf:e5:60:b8:85:26:ac:8b:d8:9d:
ac:e5:74:45:35:a7:a0:8b:64:0a:7f:82:b0:1d:bc:
30:8c:ac:d3:32:cf:27:74:ee:51:ac:ba:65:96:87:
e6:dd:f1:01:4d:6a:e6:0e:72:7f:8d:c1:7b:aa:c2:
d0:a9:49:0f:bb:6b:3f:70:00:d1:18:ce:35:20:54:
63:c2:b1:7f:db:3b:c5:f0:52:e4:00:fa:f6:35:1e:
c9:9b:f4:e5:1e:c7:d0:85:21:42:2d:2d:d5:33:9b:
15:94:d1:90:3a:6c:ef:3c:80:54:08:83:d9:6f:fa:
01:69:f0:83:40:f6:6f:3c:d8:8d:9b:f0:0b:d7:d8:
d2:e1:e8:5a:10:56:5f:b4:a7:cc:45:f0:f9:69:f0:
6f:54:01:1c:a0:a4:97:d2:55:60:02:e8:d7:9e:c6:
89:26:f2:1a:d5:70:e8:fd:0c:d6:0d:ad:17:1e:6f:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:22:25:1C:DB:F2:A9:95:34:0B:22:CF:94:55:A7:75:54:09:51:AD
X509v3 Authority Key Identifier:
keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.20.0/22
Signature Algorithm: sha256WithRSAEncryption
96:2c:9f:98:a6:d6:19:9b:2d:77:ff:6c:a5:11:60:fa:93:b7:
fa:1b:07:b2:52:93:0c:50:a6:76:9c:0c:db:d0:71:84:44:35:
0d:ed:aa:d2:a7:37:41:25:2e:80:02:fe:30:0f:27:2c:32:e4:
a4:a4:44:3e:6c:19:ec:9f:7d:58:cc:74:14:34:7a:a5:13:89:
2b:69:d7:9f:96:39:b7:aa:0a:dd:aa:ff:ef:f7:a9:b6:a3:ac:
ab:1e:cc:c3:eb:8b:57:32:d9:21:44:fc:7b:26:58:a0:cf:6c:
d4:d7:5d:a9:5c:85:fb:05:ca:ac:80:38:96:3a:a6:cd:38:14:
49:6c:91:70:43:3c:b0:41:d4:b8:ac:6c:f9:97:2a:97:1b:46:
98:1e:a7:7d:a9:d7:d4:b0:15:19:8d:d3:e3:59:fd:37:70:c7:
37:ef:34:f4:f0:73:80:00:44:5b:45:be:f7:b1:32:9e:ee:d7:
0a:8f:8e:4f:f0:98:c0:68:7b:59:22:ff:d9:0d:9c:6c:f6:9e:
4e:20:be:53:db:99:e6:b0:2c:2c:9f:07:a6:f7:15:bc:93:57:
6c:6c:f0:bb:4c:e7:d4:1a:ba:7c:93:24:81:ea:8a:e8:46:48:
95:99:27:c8:f2:eb:d0:79:ac:56:78:9f:b5:64:05:77:e1:3b:
54:e8:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:15 2025 by rpki-client