This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
File: 34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier: RPy45GTjObf3K5Ds7tv2KM3kQqe5+NFTwhcazBuaejc=
Subject key identifier: DA:F7:9A:03:31:5D:B1:EB:3E:BA:46:17:54:F5:47:5A:E1:76:19:47
Certificate issuer: /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial: 382E2E93B5306FDADC8A3D67252B64657F2E6FBA
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
Signing time: Thu 18 Dec 2025 14:18:24 +0000
ROA not before: Thu 18 Dec 2025 14:13:24 +0000
ROA not after: Thu 17 Dec 2026 14:18:24 +0000
asID: 269015
IP address blocks: 45.178.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2e:2e:93:b5:30:6f:da:dc:8a:3d:67:25:2b:64:65:7f:2e:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Validity
Not Before: Dec 18 14:13:24 2025 GMT
Not After : Dec 17 14:18:24 2026 GMT
Subject: CN=DAF79A03315DB1EB3EBA461754F5475AE1761947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:1d:84:56:97:a5:d9:9c:03:0d:63:1e:84:
5a:93:08:a1:67:95:de:1f:4b:df:aa:57:a6:15:47:
fe:83:33:13:27:a1:c1:05:8c:f7:f1:39:90:8f:13:
9d:2c:bb:07:11:3e:74:df:5b:80:06:f9:c3:52:7d:
84:e9:4b:8f:3a:e3:42:e5:1a:9c:3e:d7:1d:04:79:
89:d6:4d:6a:b7:79:12:d8:b4:bf:e6:9d:9e:c4:af:
7c:b0:c0:ad:5f:e9:3c:85:06:2c:f2:21:ff:a0:0c:
a6:64:ce:8e:a6:b0:6d:a3:d4:ab:71:25:26:76:0b:
8f:76:f4:34:bd:54:dd:7e:23:53:f9:36:c4:ba:09:
c7:d8:dc:90:be:54:9f:a6:0e:68:31:7c:95:01:a0:
79:f8:56:ed:dd:e9:a5:ad:a0:21:fd:eb:4d:d8:5a:
16:ff:66:80:82:40:26:4d:ee:45:02:c6:d9:26:c3:
7e:d6:cd:bb:7a:42:63:12:57:d0:3e:6c:55:35:06:
70:be:ab:8d:a9:f4:f0:5b:5d:92:82:58:9d:b7:e5:
6d:8f:b7:05:21:94:1d:fc:47:14:61:d7:d9:e9:23:
80:a5:26:dd:7f:29:1b:c4:a5:7a:ac:9b:bc:80:3b:
69:d0:67:c1:95:d1:0f:78:9a:94:07:d8:52:10:9a:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:9A:03:31:5D:B1:EB:3E:BA:46:17:54:F5:47:5A:E1:76:19:47
X509v3 Authority Key Identifier:
keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:63:91:cb:49:6e:b3:6c:94:29:7d:e0:d5:72:77:a5:f2:68:
44:fc:c6:b8:e8:e6:2e:70:fa:79:c4:f8:2b:fd:b7:42:95:73:
a0:a5:7f:5b:5a:62:30:57:20:3f:23:70:b3:ef:a6:15:8c:8a:
83:f3:59:05:4a:49:f2:33:0e:9b:cc:19:a3:f8:2a:3f:39:5d:
30:15:ec:5f:e2:81:10:f0:a9:e1:59:c3:65:f0:68:13:40:5c:
e3:ec:d4:36:9b:e8:db:a6:c2:6c:4b:92:76:bb:be:7d:0d:26:
2d:f3:12:ff:a6:25:2e:ce:33:ac:ff:6e:c2:f4:8e:ac:93:5c:
03:e7:ac:0a:54:f5:8c:50:fd:04:ea:c1:a7:59:aa:cc:08:27:
b5:00:22:bf:9e:fd:28:45:5e:2c:79:be:75:50:30:a1:68:df:
26:aa:5f:27:aa:90:0a:d6:99:99:a0:fa:c7:c4:f5:4f:88:69:
61:27:f6:f4:89:48:44:e2:87:98:43:ec:50:fd:52:ef:73:b6:
0c:2c:4b:59:f0:ae:8c:8f:94:92:7f:76:0f:81:6a:d2:24:1d:
6b:f9:7d:e4:62:5a:72:de:6b:f0:0b:0b:a2:bf:09:92:58:70:
58:e2:b6:d6:ba:8f:9f:74:be:61:0f:d3:0b:3a:e2:0d:a1:be:
c4:ef:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:13 2025 by rpki-client