This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
File: 34352e3232362e36302e302f32322d3332203d3e20323636393635.roa (raw, json)
Hash identifier: CtufIamsnFMA0AtSte8xoffXKm3u3GBzpQIfGdCd7zg=
Subject key identifier: 1C:A7:9D:CD:52:0D:51:12:53:EC:4A:3F:BE:5C:CD:30:B1:D1:27:3F
Certificate issuer: /CN=08DDB7843FB53DE8554F73A5BFECC3A958B5110C
Certificate serial: 7AF3C22C454E2F04718BB3F19D169B02A9A07EBD
Authority key identifier: 08:DD:B7:84:3F:B5:3D:E8:55:4F:73:A5:BF:EC:C3:A9:58:B5:11:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
Signing time: Wed 10 Dec 2025 11:54:40 +0000
ROA not before: Wed 10 Dec 2025 11:49:40 +0000
ROA not after: Wed 09 Dec 2026 11:54:40 +0000
asID: 266965
IP address blocks: 45.226.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.crl
rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 09:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f3:c2:2c:45:4e:2f:04:71:8b:b3:f1:9d:16:9b:02:a9:a0:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08DDB7843FB53DE8554F73A5BFECC3A958B5110C
Validity
Not Before: Dec 10 11:49:40 2025 GMT
Not After : Dec 9 11:54:40 2026 GMT
Subject: CN=1CA79DCD520D511253EC4A3FBE5CCD30B1D1273F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:46:ec:39:7a:58:57:02:ea:c4:2c:78:f8:
70:0c:8c:a2:65:68:81:37:69:fa:51:82:a5:b6:fe:
d5:3d:40:5f:7c:b4:49:72:f3:06:c1:a7:90:29:a3:
3b:fe:16:f3:8b:9d:68:4f:df:3b:1b:1b:4d:75:35:
b6:26:23:9d:fa:5a:75:bc:be:b1:73:8c:40:69:b2:
3a:7e:fa:3d:4e:90:f0:61:fe:18:38:ae:84:53:40:
c3:d2:8a:c7:a3:59:46:14:05:46:c4:b0:08:f3:e4:
e2:ee:8e:ce:d2:8c:11:78:8a:19:2c:32:5d:22:3b:
c6:6c:f6:84:d4:fb:8b:e7:43:ec:c8:67:d4:66:52:
1b:79:6a:8e:7a:df:02:d9:a8:43:57:a6:c7:4d:87:
5f:93:b4:d8:fd:60:1d:36:a4:c7:1a:16:9a:17:6b:
11:83:58:61:bf:11:1b:12:b0:67:41:df:a8:b4:61:
74:4d:22:13:fc:e7:52:76:7c:a8:69:91:5b:c1:f2:
76:55:c4:a5:7e:6a:04:22:1d:1e:18:f7:4f:c1:a7:
80:37:3a:8e:4f:24:fe:37:d9:e7:a0:34:ab:49:bc:
a9:df:d1:42:2d:57:df:32:02:46:b8:e7:aa:03:c8:
52:f6:71:a7:35:cd:b4:2b:a6:60:bc:b2:35:9f:dd:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:9D:CD:52:0D:51:12:53:EC:4A:3F:BE:5C:CD:30:B1:D1:27:3F
X509v3 Authority Key Identifier:
keyid:08:DD:B7:84:3F:B5:3D:E8:55:4F:73:A5:BF:EC:C3:A9:58:B5:11:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08DDB7843FB53DE8554F73A5BFECC3A958B5110C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:e0:12:d7:bc:f5:41:f4:0b:08:01:71:15:9d:e3:4e:77:4b:
b7:a4:d2:5d:2e:e9:43:13:71:bf:f2:e9:29:ca:fb:2f:fa:a0:
c8:9c:1b:8c:fd:65:cc:fb:b6:f9:6a:a2:7d:58:30:eb:55:48:
d3:32:da:78:32:e9:05:67:b3:33:1d:3d:79:34:ff:10:69:94:
bb:20:93:df:a4:c8:11:32:e7:25:1d:a7:1e:66:4d:e5:4c:57:
19:1b:9c:0b:d6:11:a3:16:8f:f0:22:a6:cd:e5:4a:4c:e8:67:
19:b4:0a:bf:4a:90:4d:c6:42:4e:89:c4:dd:d2:cf:a4:b0:57:
8c:47:65:ec:31:72:f1:5a:01:5a:41:a7:49:6e:1e:52:92:72:
49:17:ba:f9:78:df:7e:8a:4f:9a:80:3e:c0:25:22:52:6b:17:
8e:4e:6e:20:a0:61:73:33:63:ab:79:de:31:77:bf:a6:a8:0a:
a4:47:cc:81:6e:74:68:09:84:b8:1d:47:5c:2b:cc:24:b7:c8:
d0:81:b7:fc:28:ef:64:cc:33:8e:7a:03:f5:84:a7:1e:49:6e:
0d:ed:62:4e:47:98:af:f4:5b:e6:cb:f9:75:3f:96:f8:75:09:
6f:95:e8:9d:01:ce:2d:60:0d:fb:33:39:ef:26:c5:cf:d8:cd:
a0:92:ca:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUevPCLEVOLwRxi7PxnRabAqmgfr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEREI3ODQzRkI1M0RFODU1NEY3M0E1QkZFQ0MzQTk1
OEI1MTEwQzAeFw0yNTEyMTAxMTQ5NDBaFw0yNjEyMDkxMTU0NDBaMDMxMTAvBgNV
BAMTKDFDQTc5RENENTIwRDUxMTI1M0VDNEEzRkJFNUNDRDMwQjFEMTI3M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjUEbsOXpYVwLqxCx4+HAMjKJl
aIE3afpRgqW2/tU9QF98tEly8wbBp5Apozv+FvOLnWhP3zsbG011NbYmI536WnW8
vrFzjEBpsjp++j1OkPBh/hg4roRTQMPSisejWUYUBUbEsAjz5OLujs7SjBF4ihks
Ml0iO8Zs9oTU+4vnQ+zIZ9RmUht5ao563wLZqENXpsdNh1+TtNj9YB02pMcaFpoX
axGDWGG/ERsSsGdB36i0YXRNIhP851J2fKhpkVvB8nZVxKV+agQiHR4Y90/Bp4A3
Oo5PJP432eegNKtJvKnf0UItV98yAka456oDyFL2cac1zbQrpmC8sjWf3dhzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHKedzVINURJT7Eo/vlzNMLHRJz8wHwYDVR0j
BBgwFoAUCN23hD+1PehVT3Olv+zDqVi1EQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZDUktMeXBRbXVTaXV5a1FNVmFjOEU5ZUE4QlF1M1V4Y0QxbXJWOHFT
a3gvMC8wOEREQjc4NDNGQjUzREU4NTU0RjczQTVCRkVDQzNBOTU4QjUxMTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4RERCNzg0M0ZCNTNERTg1
NTRGNzNBNUJGRUNDM0E5NThCNTExMEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWQ1JLTHlwUW11U2l1eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAv
MzQzNTJlMzIzMjM2MmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeI8MA0GCSqGSIb3DQEBCwUAA4IBAQAr4BLXvPVB
9AsIAXEVneNOd0u3pNJdLulDE3G/8ukpyvsv+qDInBuM/WXM+7b5aqJ9WDDrVUjT
Mtp4MukFZ7MzHT15NP8QaZS7IJPfpMgRMuclHaceZk3lTFcZG5wL1hGjFo/wIqbN
5UpM6GcZtAq/SpBNxkJOicTd0s+ksFeMR2XsMXLxWgFaQadJbh5SknJJF7r5eN9+
ik+agD7AJSJSaxeOTm4goGFzM2Ored4xd7+mqAqkR8yBbnRoCYS4HUdcK8wkt8jQ
gbf8KO9kzDOOegP1hKceSW4N7WJOR5iv9Fvmy/l1P5b4dQlvleidAc4tYA37Mznv
JsXP2M2gksry
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:12:59 2025 by rpki-client