This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
File: 34352e342e3130382e302f32322d3234203d3e20323636303437.roa (raw, json)
Hash identifier: hnc5ngq8vhKNLxkTmsmpXoaDEJEYuckeYztzAjHaOQM=
Subject key identifier: C8:C2:00:3F:DB:3C:CC:0E:F1:D4:66:2C:B1:58:BF:64:EA:1C:F3:E5
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 2BA88DA6011C8C100EECBF1FD69E9AEEF296762F
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
Signing time: Tue 23 Dec 2025 21:00:08 +0000
ROA not before: Tue 23 Dec 2025 20:55:08 +0000
ROA not after: Tue 22 Dec 2026 21:00:08 +0000
asID: 266047
IP address blocks: 45.4.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 15:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a8:8d:a6:01:1c:8c:10:0e:ec:bf:1f:d6:9e:9a:ee:f2:96:76:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Dec 23 20:55:08 2025 GMT
Not After : Dec 22 21:00:08 2026 GMT
Subject: CN=C8C2003FDB3CCC0EF1D4662CB158BF64EA1CF3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:4f:93:87:7d:37:d2:3d:82:25:d9:55:73:
ee:98:01:d6:61:60:39:d6:4e:10:e3:7e:92:6b:c8:
31:66:18:13:82:12:9b:05:40:d3:cf:34:2b:af:f5:
54:04:ca:5c:6f:76:77:85:83:4c:98:11:ea:80:db:
20:ea:67:91:34:dd:7e:b3:0c:17:8f:da:70:21:bd:
fa:4b:e5:98:42:c0:21:07:9d:f9:fb:d7:2b:99:e3:
71:ec:31:2d:c1:7d:8a:ba:62:a2:49:62:c5:46:d4:
8d:26:f0:a8:dc:86:39:22:d5:c5:41:9a:c9:79:cd:
bb:fa:d5:a3:e1:96:d5:ad:d5:06:11:99:9f:a3:cd:
c3:36:44:06:67:e7:61:77:dc:4f:d9:d1:a4:d9:47:
2d:92:47:30:14:43:c0:83:13:94:b1:6b:65:3f:5c:
19:66:6c:4c:a9:9f:66:81:50:56:de:c7:fd:0a:75:
43:4b:47:18:40:50:3c:ce:ab:ee:b0:57:f3:a7:ac:
fe:e2:86:14:d2:16:5b:a5:33:38:e3:8d:5e:40:90:
18:17:06:b1:0f:e3:5d:af:82:d6:41:54:01:0f:f4:
21:2c:c9:b6:07:97:8e:65:56:41:e6:50:41:c4:2d:
31:d3:45:48:59:fb:97:2b:f3:ad:b5:8c:a2:db:5d:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:00:3F:DB:3C:CC:0E:F1:D4:66:2C:B1:58:BF:64:EA:1C:F3:E5
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.108.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1a:7d:0e:e1:ea:8d:14:82:3c:a2:ee:c6:9c:d1:96:07:c5:
83:80:52:64:75:b4:a4:64:51:94:88:0f:a5:d5:a0:b2:5b:f8:
d0:c9:e1:4f:e7:cb:b1:ab:12:7c:4d:21:9b:39:dc:39:12:6b:
75:b1:04:1d:3d:6c:73:86:29:bd:04:fd:d9:89:cb:e8:7c:f5:
41:75:c5:e8:7c:a0:15:f9:1a:df:60:f9:6b:89:ee:b5:bd:be:
4a:e4:b9:d0:04:78:55:04:fa:8e:fe:a0:4c:9e:d1:75:16:c8:
15:de:92:f7:c0:ec:21:e1:bf:25:e7:ad:eb:ef:1b:b5:50:7e:
e1:99:5d:2a:02:7a:8f:f6:54:55:b8:9c:4d:b2:6b:08:b8:95:
d1:60:3d:bf:67:7b:0e:fb:37:06:06:45:8d:66:69:50:ed:3f:
96:31:a1:67:c3:0b:c9:27:4a:04:1e:61:fb:7c:00:7c:6d:46:
e9:85:33:bb:57:0f:cb:86:c9:f2:94:30:3a:56:32:71:5a:f3:
37:a0:d1:e1:0d:74:07:12:3e:69:bf:28:01:f9:4a:a9:3e:01:
86:07:54:f4:43:f4:54:c2:c3:cc:bc:b1:68:86:39:fb:64:e7:
e5:77:57:b4:d0:aa:e3:45:d1:58:fd:7c:cb:11:18:f1:f9:86:
5f:0a:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:27:58 2025 by rpki-client