This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
File: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier: 8dUgLkKwgUi6408DR8w3XZv0hY7PsCzllvsfyBghi5w=
Subject key identifier: CB:AD:DE:C9:DD:4F:6E:0A:38:DD:98:C1:E3:A5:BF:A1:9B:23:51:31
Certificate issuer: /CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Certificate serial: 68AAFD720BFE7AE8BD58F692865654FFB92471B8
Authority key identifier: 2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
Signing time: Thu 18 Dec 2025 14:18:26 +0000
ROA not before: Thu 18 Dec 2025 14:13:26 +0000
ROA not after: Thu 17 Dec 2026 14:18:26 +0000
asID: 269015
IP address blocks: 45.178.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 19 Dec 2025 15:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:aa:fd:72:0b:fe:7a:e8:bd:58:f6:92:86:56:54:ff:b9:24:71:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3E3C7985BC3380A11795444EADAFC865E9A8E4
Validity
Not Before: Dec 18 14:13:26 2025 GMT
Not After : Dec 17 14:18:26 2026 GMT
Subject: CN=CBADDEC9DD4F6E0A38DD98C1E3A5BFA19B235131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:15:0e:1f:dc:3a:72:f4:0c:5d:4f:21:02:
f0:ef:e1:11:df:90:58:cf:2d:d6:12:22:10:b7:c8:
d7:20:df:97:26:61:2b:6f:aa:79:6e:b1:43:d4:bb:
be:32:b3:f4:f4:e9:bf:d6:c2:91:14:58:7d:e5:d5:
ab:eb:33:12:0b:7e:ee:aa:61:25:13:0d:7b:50:82:
9f:a1:df:48:3c:56:bd:6d:7c:9d:9d:e8:4e:25:a9:
dc:f9:38:8f:9c:da:f5:da:fa:7d:9e:ce:1c:4a:27:
cf:18:3c:d6:85:07:ac:0d:3f:9d:45:4f:92:69:7e:
44:d9:6d:51:6a:99:30:a3:8a:64:7d:d9:22:7f:4d:
f9:71:47:ab:ad:3d:20:26:c8:f4:e2:14:27:70:be:
9e:d5:e3:2c:75:07:0f:76:66:3f:a3:47:0b:b8:6a:
96:63:54:51:2b:25:4a:d6:57:9e:f8:91:e2:df:66:
d9:a0:4a:57:c4:fe:83:20:b7:ba:cb:20:51:a2:4c:
ca:00:28:ab:c2:1c:be:81:02:d6:cc:7b:69:0a:71:
97:bb:5a:18:74:82:f9:26:19:b0:f3:6e:f2:32:70:
fe:8d:e6:69:08:4d:80:27:46:25:89:c1:93:20:73:
45:93:53:bd:a8:dc:18:1c:64:34:31:53:73:89:97:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:DE:C9:DD:4F:6E:0A:38:DD:98:C1:E3:A5:BF:A1:9B:23:51:31
X509v3 Authority Key Identifier:
keyid:2E:3E:3C:79:85:BC:33:80:A1:17:95:44:4E:AD:AF:C8:65:E9:A8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3E3C7985BC3380A11795444EADAFC865E9A8E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32322e302f32332d3233203d3e20323639303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.22.0/23
Signature Algorithm: sha256WithRSAEncryption
61:71:93:26:28:77:11:c8:1d:3b:10:6c:7c:24:12:26:bb:84:
27:df:05:f4:d4:02:54:7d:9d:5c:9f:1d:2f:82:a5:5a:2d:e9:
fb:47:e9:94:60:84:19:f7:81:ea:81:20:a1:03:49:91:65:42:
87:d9:a1:c1:7e:29:73:54:af:5a:59:79:95:84:bc:28:e4:a0:
17:18:74:1c:0a:ad:57:4e:eb:37:a0:16:f1:1e:b3:8b:63:6d:
51:6c:5b:86:08:6b:fd:7e:a5:06:2e:81:47:e7:5d:7c:76:d4:
9c:2e:74:84:ab:01:bf:2a:5f:92:72:6e:99:6b:cc:6f:03:61:
2e:f9:a9:77:b4:0c:13:16:8c:3d:f5:47:2a:11:4b:b0:1f:c6:
f8:1c:4d:60:76:9d:dc:3d:f2:e1:d5:a1:fb:3e:d5:98:7d:4b:
32:17:f1:b5:06:b8:b6:02:9c:3b:7a:8e:2b:ba:d9:82:79:cf:
7c:f4:3b:e9:3e:e6:f0:bd:5c:06:63:1f:02:70:1d:cf:0b:76:
4c:92:b1:b2:e6:57:e8:d9:4a:3d:64:ac:2a:59:c7:9e:ac:5f:
da:c8:b4:38:b6:ff:77:64:59:f8:d8:a1:01:3b:8f:44:a7:c5:
ef:1a:39:5c:4b:e9:a7:9a:a9:12:7c:39:ed:fd:17:fe:91:a0:
51:06:f4:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaKr9cgv+eui9WPaShlZU/7kkcbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzRTNDNzk4NUJDMzM4MEExMTc5NTQ0NEVBREFGQzg2
NUU5QThFNDAeFw0yNTEyMTgxNDEzMjZaFw0yNjEyMTcxNDE4MjZaMDMxMTAvBgNV
BAMTKENCQURERUM5REQ0RjZFMEEzOEREOThDMUUzQTVCRkExOUIyMzUxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCRUOH9w6cvQMXU8hAvDv4RHf
kFjPLdYSIhC3yNcg35cmYStvqnlusUPUu74ys/T06b/WwpEUWH3l1avrMxILfu6q
YSUTDXtQgp+h30g8Vr1tfJ2d6E4lqdz5OI+c2vXa+n2ezhxKJ88YPNaFB6wNP51F
T5JpfkTZbVFqmTCjimR92SJ/TflxR6utPSAmyPTiFCdwvp7V4yx1Bw92Zj+jRwu4
apZjVFErJUrWV574keLfZtmgSlfE/oMgt7rLIFGiTMoAKKvCHL6BAtbMe2kKcZe7
Whh0gvkmGbDzbvIycP6N5mkITYAnRiWJwZMgc0WTU72o3BgcZDQxU3OJl/i/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy63eyd1Pbgo43ZjB46W/oZsjUTEwHwYDVR0j
BBgwFoAULj48eYW8M4ChF5VETq2vyGXpqOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMC8yRTNFM0M3OTg1QkMzMzgwQTExNzk1NDQ0RUFEQUZDODY1RTlBOEU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFM0UzQzc5ODVCQzMzODBB
MTE3OTU0NDRFQURBRkM4NjVFOUE4RTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzAv
MzQzNTJlMzEzNzM4MmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbIWMA0GCSqGSIb3DQEBCwUAA4IBAQBhcZMmKHcR
yB07EGx8JBImu4Qn3wX01AJUfZ1cnx0vgqVaLen7R+mUYIQZ94HqgSChA0mRZUKH
2aHBfilzVK9aWXmVhLwo5KAXGHQcCq1XTus3oBbxHrOLY21RbFuGCGv9fqUGLoFH
5118dtScLnSEqwG/Kl+Scm6Za8xvA2Eu+al3tAwTFow99UcqEUuwH8b4HE1gdp3c
PfLh1aH7PtWYfUsyF/G1Bri2Apw7eo4rutmCec989DvpPubwvVwGYx8CcB3PC3ZM
krGy5lfo2Uo9ZKwqWceerF/ayLQ4tv93ZFn42KEBO49Ep8XvGjlcS+mnmqkSfDnt
/Rf+kaBRBvRv
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:14 2025 by rpki-client