This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
File: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier: wSJ8zHAMWeXXZQgdUcoTZ2Htt1i9SzwY+k+H/hm8qI8=
Subject key identifier: 9D:67:8F:53:F0:CD:1A:44:3B:C0:37:06:61:E5:C4:78:F4:F7:3B:DD
Certificate issuer: /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial: 5B7FA5D7AAF37207CDC43C3897B822FB03A04B9D
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
Signing time: Thu 18 Dec 2025 14:18:20 +0000
ROA not before: Thu 18 Dec 2025 14:13:20 +0000
ROA not after: Thu 17 Dec 2026 14:18:20 +0000
asID: 269015
IP address blocks: 45.178.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:a5:d7:aa:f3:72:07:cd:c4:3c:38:97:b8:22:fb:03:a0:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Validity
Not Before: Dec 18 14:13:20 2025 GMT
Not After : Dec 17 14:18:20 2026 GMT
Subject: CN=9D678F53F0CD1A443BC0370661E5C478F4F73BDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:53:1c:81:55:ae:a6:71:0a:bd:41:58:3f:
49:fd:b2:6c:91:a6:fa:53:10:26:13:81:76:da:d0:
21:cc:7f:2e:6c:aa:ff:2d:c7:6c:b4:9d:73:ba:ae:
f1:00:fa:37:b9:cd:3a:c0:b1:0d:bf:44:aa:fb:7d:
80:4b:55:a4:d1:cf:4a:ea:4a:a7:bf:56:05:6c:43:
45:71:b0:6e:4c:5e:a7:93:95:5e:b3:9c:b5:44:a3:
06:ce:42:b9:e7:2e:a5:ec:12:95:63:4d:9b:ae:b0:
5e:b0:57:a4:a1:f7:c6:96:13:9c:1b:ee:a1:08:6e:
0e:bc:fe:ff:18:e8:7e:bf:d9:1f:39:a4:1b:b1:46:
e4:79:e4:89:a0:d1:0e:86:df:1a:82:55:41:82:71:
88:cd:b8:3f:40:05:54:4d:c2:e1:9f:af:85:fe:b4:
14:85:ff:f1:7b:03:d8:65:37:c2:9e:e8:d0:3a:7c:
3c:ec:c3:41:91:3b:e0:4b:72:f0:f9:5c:8c:59:54:
cd:25:6c:51:75:61:89:77:0d:e2:2a:f4:15:d5:e1:
eb:97:2f:26:28:1a:8b:2f:7c:f5:3a:11:c0:d6:6a:
a2:5c:93:9c:6d:6d:51:42:7e:0b:9c:2b:b1:f9:58:
a1:9d:ba:15:ad:a8:69:f1:bb:d2:01:b0:cb:b4:3d:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:8F:53:F0:CD:1A:44:3B:C0:37:06:61:E5:C4:78:F4:F7:3B:DD
X509v3 Authority Key Identifier:
keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.20.0/23
Signature Algorithm: sha256WithRSAEncryption
25:32:a9:29:79:11:6e:43:38:5e:55:80:7f:a3:a1:ef:b9:24:
fc:81:12:81:27:64:02:aa:fe:dd:8c:66:ff:ff:11:5c:11:9c:
1d:e1:32:54:c5:91:99:dc:78:6e:99:6f:62:21:ef:80:83:10:
a0:45:c8:12:c5:00:3d:50:27:01:eb:dc:64:c6:c4:06:76:ad:
ba:13:9d:20:d9:6c:fc:12:c3:1f:e5:ff:28:d8:f9:c2:cc:99:
c6:fe:67:ec:ac:3b:c3:9d:7e:95:b2:49:49:1c:27:6a:d2:69:
21:05:96:08:00:03:af:6d:e7:9a:a0:17:66:36:5b:4b:aa:75:
26:4a:49:09:12:6f:ce:d3:5a:94:99:43:e6:c7:bb:3a:85:79:
e5:0f:d0:f6:76:0b:ed:a5:fd:a1:27:cc:cc:76:e1:4c:e0:52:
a3:fd:7d:00:da:32:2b:63:53:5e:f7:7d:df:b7:19:79:0d:67:
cf:d4:79:98:bb:de:db:01:a1:0d:ee:52:2b:ab:50:7f:78:88:
10:6a:8c:02:4b:0e:02:d6:08:0c:94:d4:4d:37:f0:b4:e4:6c:
c5:83:73:37:17:5d:b4:09:dd:43:27:3a:b8:24:54:28:25:ce:
d2:86:ad:34:86:4a:00:5d:bf:cd:ca:af:39:40:d3:af:cb:b9:
23:fa:38:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW3+l16rzcgfNxDw4l7gi+wOgS50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzRTNDNzk4NUJDMzM4MEExMTc5NTQ0NEVBREFGQzg2
NUU5QThFNDAeFw0yNTEyMTgxNDEzMjBaFw0yNjEyMTcxNDE4MjBaMDMxMTAvBgNV
BAMTKDlENjc4RjUzRjBDRDFBNDQzQkMwMzcwNjYxRTVDNDc4RjRGNzNCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XlMcgVWupnEKvUFYP0n9smyR
pvpTECYTgXba0CHMfy5sqv8tx2y0nXO6rvEA+je5zTrAsQ2/RKr7fYBLVaTRz0rq
Sqe/VgVsQ0VxsG5MXqeTlV6znLVEowbOQrnnLqXsEpVjTZuusF6wV6Sh98aWE5wb
7qEIbg68/v8Y6H6/2R85pBuxRuR55Img0Q6G3xqCVUGCcYjNuD9ABVRNwuGfr4X+
tBSF//F7A9hlN8Ke6NA6fDzsw0GRO+BLcvD5XIxZVM0lbFF1YYl3DeIq9BXV4euX
LyYoGosvfPU6EcDWaqJck5xtbVFCfgucK7H5WKGduhWtqGnxu9IBsMu0PfTVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnWePU/DNGkQ7wDcGYeXEePT3O90wHwYDVR0j
BBgwFoAULj48eYW8M4ChF5VETq2vyGXpqOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMC8yRTNFM0M3OTg1QkMzMzgwQTExNzk1NDQ0RUFEQUZDODY1RTlBOEU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFM0UzQzc5ODVCQzMzODBB
MTE3OTU0NDRFQURBRkM4NjVFOUE4RTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbIUMA0GCSqGSIb3DQEBCwUAA4IBAQAlMqkpeRFu
QzheVYB/o6HvuST8gRKBJ2QCqv7djGb//xFcEZwd4TJUxZGZ3HhumW9iIe+AgxCg
RcgSxQA9UCcB69xkxsQGdq26E50g2Wz8EsMf5f8o2PnCzJnG/mfsrDvDnX6VsklJ
HCdq0mkhBZYIAAOvbeeaoBdmNltLqnUmSkkJEm/O01qUmUPmx7s6hXnlD9D2dgvt
pf2hJ8zMduFM4FKj/X0A2jIrY1Ne933ftxl5DWfP1HmYu97bAaEN7lIrq1B/eIgQ
aowCSw4C1ggMlNRNN/C05GzFg3M3F120Cd1DJzq4JFQoJc7Shq00hkoAXb/Nyq85
QNOvy7kj+jho
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:13 2025 by rpki-client