This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
File: 34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa (raw, json)
Hash identifier: sLMb/Ih6L5ozCVou7/nvGcSHeciCr+viZtNiS747nqI=
Subject key identifier: 8C:4A:E7:DF:A7:31:53:07:10:63:8E:41:42:9F:42:FA:79:9D:4E:E5
Certificate issuer: /CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
Certificate serial: 4215AE08DAE102CEBE634C2D97FFBA58625DF599
Authority key identifier: A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
Signing time: Mon 08 Dec 2025 20:03:24 +0000
ROA not before: Mon 08 Dec 2025 19:58:24 +0000
ROA not after: Mon 07 Dec 2026 20:03:24 +0000
asID: 269405
IP address blocks: 45.185.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl
rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Dec 2025 08:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:15:ae:08:da:e1:02:ce:be:63:4c:2d:97:ff:ba:58:62:5d:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71
Validity
Not Before: Dec 8 19:58:24 2025 GMT
Not After : Dec 7 20:03:24 2026 GMT
Subject: CN=8C4AE7DFA731530710638E41429F42FA799D4EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:5e:e9:c3:d3:3f:b2:e6:bd:b1:1e:e0:ea:
d0:61:ef:12:2e:d2:24:1e:76:99:2a:cf:6f:8c:ac:
43:13:06:45:cb:d8:57:f6:8b:6f:e5:05:9a:b0:90:
6c:c1:22:3d:f1:8c:6f:57:e8:f4:5f:5b:2e:58:23:
07:cd:28:5b:a5:f8:21:fb:5f:b8:30:a8:ac:48:50:
3b:55:dd:f4:a9:d5:fd:f6:0c:a2:b5:0d:d7:4b:9b:
d1:5e:f0:c0:fa:56:13:79:72:ba:1a:d7:d3:a3:33:
0f:50:ed:b4:0d:28:a9:e8:ab:0d:25:59:77:38:4e:
cb:4e:90:c8:b3:34:ac:a6:91:47:38:fb:c9:fc:1d:
bd:d5:ec:ed:9b:9f:1e:f4:59:d1:e3:e0:64:ff:aa:
17:a5:99:f5:be:62:57:a7:cb:1e:64:b7:d0:b5:2c:
c8:87:e0:63:6a:0b:64:fc:0b:ed:cc:e0:3f:ec:2a:
be:28:a9:0b:9f:6e:a2:ec:96:16:8e:16:f1:20:2a:
70:14:7f:48:38:3b:a8:36:68:51:f4:0e:e2:6e:f0:
3f:89:e7:d6:0e:4e:75:48:6a:0d:11:d4:b2:6a:02:
da:9d:18:84:62:20:7d:d9:da:2e:b2:55:ee:cf:ef:
7a:db:da:7d:a5:7a:d8:2c:dd:cb:e8:37:73:f1:e5:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:E7:DF:A7:31:53:07:10:63:8E:41:42:9F:42:FA:79:9D:4E:E5
X509v3 Authority Key Identifier:
keyid:A7:F0:27:6C:65:FB:74:CB:5F:D0:B1:FA:77:87:E8:CE:5B:47:2E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7F0276C65FB74CB5FD0B1FA7787E8CE5B472E71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/34352e3138352e3232352e302f32342d3234203d3e20323639343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:94:16:b0:a0:06:a9:6a:ce:35:0e:03:29:d3:ee:5c:9f:6a:
1d:45:0d:93:b8:57:91:cb:8d:e9:7b:f4:c4:4b:67:87:26:27:
cd:a6:73:f8:db:3f:e0:a6:94:31:b4:23:31:23:0a:b0:92:8a:
ae:6b:c8:13:96:c1:12:b3:cb:27:32:5e:74:bd:46:e3:c2:52:
39:1b:26:f2:f8:d3:11:df:7e:ec:06:39:13:f8:66:0e:c9:e6:
2f:d4:d8:7d:24:47:fe:cd:83:0b:30:96:4d:18:9b:84:82:f1:
eb:71:70:e4:4b:7a:98:2d:bc:d3:96:46:b4:01:0e:d8:da:e9:
96:a7:21:c7:3c:bb:a1:a3:24:20:ce:f0:fb:dd:87:65:b0:69:
6b:74:fb:bb:d0:a3:b5:da:e6:d6:12:92:14:0a:fc:cd:31:c9:
21:15:0c:fb:1f:21:06:74:59:87:16:5a:3a:19:f0:3b:c5:11:
cd:56:3d:15:6a:18:8d:f3:28:13:f2:b6:da:b6:31:a6:36:03:
12:af:56:5a:88:1f:f4:bd:6d:2b:55:2c:93:54:96:e9:d3:54:
83:0c:00:bf:08:26:fd:1f:95:bf:da:7a:3d:12:ed:2f:f6:d2:
4d:1a:6d:80:b6:51:13:50:e5:0c:ec:70:6d:14:2b:51:c0:6d:
af:b0:8c:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQhWuCNrhAs6+Y0wtl/+6WGJd9ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdGMDI3NkM2NUZCNzRDQjVGRDBCMUZBNzc4N0U4Q0U1
QjQ3MkU3MTAeFw0yNTEyMDgxOTU4MjRaFw0yNjEyMDcyMDAzMjRaMDMxMTAvBgNV
BAMTKDhDNEFFN0RGQTczMTUzMDcxMDYzOEU0MTQyOUY0MkZBNzk5RDRFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhF7pw9M/sua9sR7g6tBh7xIu
0iQedpkqz2+MrEMTBkXL2Ff2i2/lBZqwkGzBIj3xjG9X6PRfWy5YIwfNKFul+CH7
X7gwqKxIUDtV3fSp1f32DKK1DddLm9Fe8MD6VhN5croa19OjMw9Q7bQNKKnoqw0l
WXc4TstOkMizNKymkUc4+8n8Hb3V7O2bnx70WdHj4GT/qhelmfW+Ylenyx5kt9C1
LMiH4GNqC2T8C+3M4D/sKr4oqQufbqLslhaOFvEgKnAUf0g4O6g2aFH0DuJu8D+J
59YOTnVIag0R1LJqAtqdGIRiIH3Z2i6yVe7P73rb2n2letgs3cvoN3Px5TRfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjErn36cxUwcQY45BQp9C+nmdTuUwHwYDVR0j
BBgwFoAUp/AnbGX7dMtf0LH6d4fozltHLnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmlteGVybUJtOGhVTUNEZ3hzZWJodVZDcE52NWk4bXVTWndHcmhoa290
eTkvMC9BN0YwMjc2QzY1RkI3NENCNUZEMEIxRkE3Nzg3RThDRTVCNDcyRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3RjAyNzZDNjVGQjc0Q0I1
RkQwQjFGQTc3ODdFOENFNUI0NzJFNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpbXhlcm1CbThoVU1DRGd4c2ViaHVWQ3BOdjVpOG11U1p3R3JoaGtvdHk5LzAv
MzQzNTJlMzEzODM1MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtueEwDQYJKoZIhvcNAQELBQADggEBAHyUFrCg
BqlqzjUOAynT7lyfah1FDZO4V5HLjel79MRLZ4cmJ82mc/jbP+CmlDG0IzEjCrCS
iq5ryBOWwRKzyycyXnS9RuPCUjkbJvL40xHffuwGORP4Zg7J5i/U2H0kR/7Ngwsw
lk0Ym4SC8etxcORLepgtvNOWRrQBDtja6ZanIcc8u6GjJCDO8Pvdh2WwaWt0+7vQ
o7Xa5tYSkhQK/M0xySEVDPsfIQZ0WYcWWjoZ8DvFEc1WPRVqGI3zKBPyttq2MaY2
AxKvVlqIH/S9bStVLJNUlunTVIMMAL8IJv0flb/aej0S7S/20k0abYC2URNQ5Qzs
cG0UK1HAba+wjJE=
-----END CERTIFICATE-----
Generated at Wed Dec 17 16:52:48 2025 by rpki-client