This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa
File: 34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa (raw, json)
Hash identifier: q3b368ZzCNZLfO6SwPa7rsF2rfDVHEdLx84ESBaPH4s=
Subject key identifier: E1:D9:E3:B5:8E:8D:F3:CB:65:26:29:09:CB:D0:01:AA:21:69:8E:A3
Certificate issuer: /CN=36244827F02756DD24031B3B242555C70EB4D0C3
Certificate serial: 4077E1EAFB0032F14F37018319DD625D4DA52E36
Authority key identifier: 36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa
Signing time: Wed 17 Dec 2025 18:25:03 +0000
ROA not before: Wed 17 Dec 2025 18:20:03 +0000
ROA not after: Wed 16 Dec 2026 18:25:03 +0000
asID: 269561
IP address blocks: 45.188.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl
rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 17:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:77:e1:ea:fb:00:32:f1:4f:37:01:83:19:dd:62:5d:4d:a5:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36244827F02756DD24031B3B242555C70EB4D0C3
Validity
Not Before: Dec 17 18:20:03 2025 GMT
Not After : Dec 16 18:25:03 2026 GMT
Subject: CN=E1D9E3B58E8DF3CB65262909CBD001AA21698EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:8f:6d:ec:1c:99:f3:75:20:f6:f9:b0:d0:
da:53:d6:18:2d:3a:f9:5e:48:65:86:a3:b6:76:f7:
f8:ab:bd:c5:d6:6b:b6:a0:37:1a:d0:21:54:94:e7:
3b:a5:d7:3b:5e:5c:a1:b0:78:d5:d0:1b:8d:f0:fe:
ed:e4:8c:9d:7e:08:15:45:cc:5f:13:27:50:f8:e4:
02:00:9d:b3:32:89:06:90:eb:0f:6e:09:d1:80:7b:
23:e9:a9:aa:36:8a:88:08:52:d0:b6:47:d9:bc:56:
91:42:21:5d:9d:91:a2:20:f8:7e:60:e6:77:a2:ae:
7e:19:ae:b0:76:a0:82:e8:00:ee:2d:d3:59:17:9b:
06:16:1e:2e:f5:89:48:45:19:8d:40:a6:ea:0d:a7:
2d:a8:4e:d6:73:98:a7:c7:9e:9c:0d:fe:4f:83:7a:
00:80:85:13:43:e4:fd:b4:44:88:44:b6:cf:30:5f:
70:87:30:8f:dc:3c:5c:53:1b:38:af:b1:3f:93:55:
15:b7:1b:c1:e0:bb:4c:c3:cb:a2:f8:c7:45:23:89:
3b:1e:f8:09:36:42:8c:84:29:26:c3:34:f5:b8:11:
1f:ce:25:06:d8:d8:f5:eb:70:14:00:fb:32:a2:c3:
33:ed:8b:92:fe:88:fa:f2:04:6a:3a:39:49:ca:f0:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:E3:B5:8E:8D:F3:CB:65:26:29:09:CB:D0:01:AA:21:69:8E:A3
X509v3 Authority Key Identifier:
keyid:36:24:48:27:F0:27:56:DD:24:03:1B:3B:24:25:55:C7:0E:B4:D0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/36244827F02756DD24031B3B242555C70EB4D0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36244827F02756DD24031B3B242555C70EB4D0C3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kZg7zjHyeGPDXzMh6gmDAXKh6vEbYPpZMEhwHPjsZnB/0/34352e3138382e3234302e302f32322d3234203d3e20323639353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:37:c3:fb:98:ad:46:3a:8b:e1:03:16:32:f0:4e:6e:78:4c:
85:d5:dd:77:97:d3:54:4f:6c:3f:21:57:d6:4d:6f:dd:3c:24:
58:5b:df:e0:96:2c:58:19:f4:ab:9c:dc:90:08:de:41:16:30:
e0:64:ac:a4:a5:14:98:82:9e:61:cf:41:3c:ca:35:f5:ab:16:
92:00:fc:28:49:e4:c4:51:15:12:42:55:1e:ae:48:d4:6c:77:
6e:71:76:15:1d:55:b1:6a:5e:23:51:8f:19:10:f2:a4:79:93:
18:d7:50:40:86:9a:2f:14:15:21:e5:c2:8c:eb:c3:0e:92:cb:
1b:01:19:4c:03:5d:19:e5:cd:71:4a:6f:54:92:f0:05:f0:22:
d8:af:c3:c2:fe:b7:30:f7:97:13:5d:c7:8e:35:49:12:4c:80:
35:64:40:22:96:34:e1:22:ce:be:a1:2b:35:ce:d2:1c:83:85:
43:69:8b:77:62:30:76:25:f9:50:97:a4:74:1b:9c:f8:4c:55:
73:cd:f7:57:1c:ea:c0:2e:22:36:f8:24:3a:2c:88:8a:4e:ce:
37:69:50:93:2d:c5:a0:cc:17:96:3e:89:4e:07:d4:4d:8b:ce:
b5:43:4d:8f:c2:c8:6c:42:8a:43:e6:59:57:c1:a6:83:c4:d8:
28:12:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:21:47 2025 by rpki-client