This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
File: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (raw, json)
Hash identifier: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=
Subject key identifier: F7:C3:B2:00:42:26:8C:DE:A4:CD:15:86:B0:C2:B7:5D:3A:07:81:DF
Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial: 1FACD4ACD9D96A6D250B719530316C61A96506CC
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
Signing time: Mon 12 Jan 2026 11:23:26 +0000
ROA not before: Mon 12 Jan 2026 11:18:26 +0000
ROA not after: Mon 11 Jan 2027 11:23:26 +0000
asID: 268289
IP address blocks: 45.237.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Jan 2026 11:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ac:d4:ac:d9:d9:6a:6d:25:0b:71:95:30:31:6c:61:a9:65:06:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Validity
Not Before: Jan 12 11:18:26 2026 GMT
Not After : Jan 11 11:23:26 2027 GMT
Subject: CN=F7C3B20042268CDEA4CD1586B0C2B75D3A0781DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:67:07:03:26:c8:20:ef:9c:bf:6e:ed:6f:
73:ed:80:13:c2:14:22:d3:7d:78:8c:c7:0a:93:04:
c2:ae:f5:4e:3c:20:46:df:b2:6e:b3:7e:95:c9:c3:
99:17:85:72:82:c1:de:3b:67:ee:6e:3b:47:d2:7e:
19:c1:0d:d6:33:9f:b4:ce:e1:52:27:55:54:8a:83:
bd:d8:d8:ed:c6:ed:60:01:57:dc:91:c9:59:06:f6:
7d:73:82:ad:a8:48:10:06:3a:e5:81:28:52:d9:12:
27:0b:89:c9:85:cf:6c:fe:cc:22:00:d9:7c:87:c4:
c2:cf:ae:30:13:20:91:ac:4e:a3:d7:86:58:6a:bc:
76:1f:c4:44:15:69:37:70:6a:79:ca:f0:2e:70:9f:
66:11:19:84:e1:69:a5:0f:46:09:07:0e:4f:48:a7:
3e:7d:0c:12:27:61:85:d3:db:97:11:52:fa:fa:9a:
27:e6:52:80:86:ec:74:1f:b3:72:45:a1:fc:43:16:
53:bb:50:0b:c5:fd:2b:a9:70:1a:d1:68:45:07:7a:
ef:49:a1:47:06:c2:bc:80:60:54:8e:7b:9a:81:cc:
33:fe:aa:33:69:8a:29:a9:9d:6c:b1:10:86:66:0d:
45:de:06:84:41:c8:e9:4e:82:92:da:2e:aa:21:5f:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:B2:00:42:26:8C:DE:A4:CD:15:86:B0:C2:B7:5D:3A:07:81:DF
X509v3 Authority Key Identifier:
keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:22:40:be:2b:13:e9:ac:39:ab:ce:f2:e0:72:f2:b7:af:ae:
3d:a3:32:41:73:99:c5:ca:01:7c:95:b3:35:aa:d3:c6:1b:0a:
21:16:ca:d0:ee:c2:a6:35:94:c9:f3:70:fe:cb:2c:98:62:ad:
8f:31:7c:b7:23:7e:18:c8:03:cb:07:0e:80:bb:ac:45:bb:19:
5c:e3:9e:f4:6a:d3:30:a6:cb:dd:d2:30:d0:19:f0:16:98:d1:
ce:b0:6d:60:fa:b4:d6:61:d9:84:4e:a5:0f:38:0a:36:45:c3:
96:c7:58:c3:e5:f5:3b:4f:a1:2a:be:9a:ad:5c:01:86:82:85:
c3:12:28:f4:3e:fe:32:dd:e6:c4:91:f6:e2:a1:9e:8d:81:12:
57:34:2f:3c:23:8f:10:b7:8d:48:af:78:cc:0e:a6:5a:5f:33:
12:58:14:89:69:b0:d1:02:fe:af:84:4d:fe:c7:fe:32:65:c5:
a6:bf:92:aa:88:e1:6c:83:25:e7:54:23:70:4c:bd:d6:a7:1a:
aa:3e:ad:0c:2f:84:08:16:89:88:c2:09:9a:0f:e3:b3:aa:7e:
01:fb:2f:ee:48:34:70:88:0a:cc:24:c0:cd:b2:ca:82:91:64:
54:86:22:26:2a:55:f5:4b:f3:d9:3a:33:a7:c7:16:e7:e1:13:
80:1b:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:39:32 2026 by rpki-client