This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
File: 34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (raw, json)
Hash identifier: SbOSFdxzGVAQQl6A3EVKqZn/w87WiQqqsbYgWTV8bmc=
Subject key identifier: FA:2A:F2:C6:68:6E:5F:9C:4A:C7:A3:94:12:D7:3C:29:DE:E6:BC:C9
Certificate issuer: /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial: 0465621E7E4F437049951E6D01BFD777C48BE879
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
Signing time: Fri 19 Dec 2025 15:22:34 +0000
ROA not before: Fri 19 Dec 2025 15:17:34 +0000
ROA not after: Fri 18 Dec 2026 15:22:34 +0000
asID: 268029
IP address blocks: 45.168.52.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 12:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:65:62:1e:7e:4f:43:70:49:95:1e:6d:01:bf:d7:77:c4:8b:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Validity
Not Before: Dec 19 15:17:34 2025 GMT
Not After : Dec 18 15:22:34 2026 GMT
Subject: CN=FA2AF2C6686E5F9C4AC7A39412D73C29DEE6BCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:a6:a6:e5:c8:8c:98:58:6c:7d:a1:bb:81:
37:fd:d3:5b:e5:80:fe:f6:58:28:e5:85:3a:20:ed:
8f:8e:30:66:23:1a:e1:27:76:2b:02:e0:a3:48:f7:
43:07:41:55:b5:9c:eb:cd:ca:3e:0d:a3:8d:94:8e:
e3:9d:03:08:f6:60:87:f8:46:9f:c2:a4:3b:f1:59:
74:c3:6f:fb:1d:6b:4a:52:3a:7c:ff:61:d8:70:79:
1b:be:83:48:eb:1f:17:2f:3f:db:94:2e:76:d6:cf:
f4:3f:ce:8b:e3:cc:38:b7:7b:cf:2f:a0:35:86:0c:
87:38:66:19:fe:86:5a:46:87:7f:da:d7:c6:5f:f4:
32:e3:e9:01:36:4d:af:77:7d:82:6c:99:51:8f:7d:
cd:e3:49:a3:25:0f:e8:99:37:9d:3e:c5:fe:bd:ca:
ad:82:07:78:8b:e3:ef:fe:ad:3e:48:d8:ee:51:ad:
80:2e:d3:dd:3b:e4:d6:cf:f5:e8:d6:5c:3d:a7:62:
7e:8e:de:5f:76:c4:83:bf:8c:34:0f:02:bd:0d:d9:
03:81:56:59:11:72:36:84:22:cd:ec:60:41:18:e2:
f0:63:82:e1:18:ef:a5:5c:bf:e6:d8:45:c4:8a:47:
33:db:b7:03:b9:fa:59:71:dd:05:0b:09:f5:4d:1a:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:F2:C6:68:6E:5F:9C:4A:C7:A3:94:12:D7:3C:29:DE:E6:BC:C9
X509v3 Authority Key Identifier:
keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0c:90:a1:b1:d9:cd:d6:19:0c:36:7a:5c:94:14:7b:57:5c:
22:58:8c:1a:fb:e0:ef:9c:4d:66:d6:38:99:f1:01:25:84:e0:
22:c1:6e:cb:d7:08:39:a3:ed:e0:c9:89:26:5c:04:4a:15:0c:
60:89:2c:e7:89:ed:24:8e:9e:1c:71:49:83:75:a8:78:4c:bf:
39:0b:7a:15:77:93:d7:2c:18:78:08:8b:c1:1c:0a:f6:98:03:
1d:65:39:ba:0d:f8:d7:1d:8d:c8:98:46:59:ec:12:aa:f3:c0:
cb:7e:9a:5f:9d:be:57:a6:26:e0:0a:7b:d6:ab:dd:e2:16:d3:
d5:37:04:03:69:d2:ce:df:9b:20:ab:d6:cf:5d:1b:a3:18:e9:
8d:a5:9a:0f:91:c6:1b:c1:0e:1e:3b:18:4a:15:a5:ff:bd:d1:
06:c2:af:c5:65:0c:15:77:51:25:8d:24:b5:93:ae:6e:bf:17:
aa:98:a3:58:ec:e5:45:58:8e:a0:c5:45:72:33:27:3f:66:a4:
5b:64:5c:cf:c6:d7:7c:7c:5b:a6:a5:0c:37:88:72:64:b1:f9:
2a:ac:79:44:d4:fb:63:91:c1:c7:60:b6:44:2f:d0:24:af:95:
5f:a7:3d:50:f4:2f:39:1a:94:79:ea:8b:6a:11:6c:04:63:66:
d8:91:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:28:57 2025 by rpki-client