This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3332203d3e20323636303434.roa
File: 34352e3232352e3136382e302f32322d3332203d3e20323636303434.roa (raw, json)
Hash identifier: PfIRI4JZKaIpw51R3eLhWTC84SVlrzIT1a6wuqiRVVo=
Subject key identifier: 51:DB:41:D3:7A:BA:AC:05:8B:97:FF:85:5A:9E:DE:17:D9:11:15:3D
Certificate issuer: /CN=FA017484FF398FD3AA53F2B2FDC5C239E7917A65
Certificate serial: 2F84092C7560C5AFBBC24178A822E39E248C3E5C
Authority key identifier: FA:01:74:84:FF:39:8F:D3:AA:53:F2:B2:FD:C5:C2:39:E7:91:7A:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3332203d3e20323636303434.roa
Signing time: Sat 06 Dec 2025 20:21:49 +0000
ROA not before: Sat 06 Dec 2025 20:16:49 +0000
ROA not after: Sat 05 Dec 2026 20:21:49 +0000
asID: 266044
IP address blocks: 45.225.168.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.crl
rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 09:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:84:09:2c:75:60:c5:af:bb:c2:41:78:a8:22:e3:9e:24:8c:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA017484FF398FD3AA53F2B2FDC5C239E7917A65
Validity
Not Before: Dec 6 20:16:49 2025 GMT
Not After : Dec 5 20:21:49 2026 GMT
Subject: CN=51DB41D37ABAAC058B97FF855A9EDE17D911153D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:4e:ca:6c:b4:70:8c:59:b1:80:ec:aa:e8:
2f:f9:42:4b:19:c2:49:51:49:0c:3c:db:46:ad:d5:
79:c5:c7:c7:ae:e5:9b:00:b8:8f:99:bf:83:71:31:
87:ab:03:dd:52:e5:a9:4d:9e:18:9f:0a:0f:b7:1e:
90:7e:7b:40:21:6c:fc:f9:96:3e:81:87:d1:51:64:
cc:ad:07:c5:31:de:39:ae:07:28:a3:8a:57:0c:7b:
a4:b3:7c:39:6d:49:5d:79:be:7b:36:be:ee:81:a4:
a3:fe:61:29:84:f8:2e:72:5e:e0:13:de:de:f1:86:
3f:cc:b2:40:80:f5:17:6e:41:bb:99:22:94:b1:f7:
7b:8b:67:73:b0:d1:9c:56:40:ad:a0:ee:2d:55:a8:
11:e0:11:3d:9d:39:e8:95:49:cb:2d:d9:24:21:0c:
a1:c9:4e:2d:9f:ac:f2:d6:da:de:2d:e2:53:45:40:
2c:ec:2d:21:a1:49:2a:76:83:ec:e0:9e:09:08:b4:
cd:20:3d:20:d7:27:7a:5c:91:48:5a:1c:8a:44:86:
c7:72:ce:1b:32:16:56:38:8c:fc:6d:47:42:c6:7d:
18:28:bf:af:41:f2:16:05:ea:fc:9c:55:08:cd:31:
a8:54:1a:a3:a7:5e:76:7f:86:35:1a:e3:23:25:92:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:41:D3:7A:BA:AC:05:8B:97:FF:85:5A:9E:DE:17:D9:11:15:3D
X509v3 Authority Key Identifier:
keyid:FA:01:74:84:FF:39:8F:D3:AA:53:F2:B2:FD:C5:C2:39:E7:91:7A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA017484FF398FD3AA53F2B2FDC5C239E7917A65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3332203d3e20323636303434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.168.0/22
Signature Algorithm: sha256WithRSAEncryption
92:bd:5f:a9:19:ef:ab:0c:60:91:aa:4d:de:3b:a6:9b:cb:75:
2e:b1:64:39:cd:9d:4a:b3:16:2a:d0:d3:37:d8:e3:98:a7:3e:
cb:f6:22:34:97:d8:f6:3a:79:25:5b:99:d3:08:3c:73:80:ff:
c5:3b:1a:c3:d0:08:c8:51:23:3b:0e:5b:d8:be:93:ed:78:26:
85:a2:78:f7:a7:2e:ec:b5:ed:c3:ac:83:02:dd:9f:6a:de:b1:
25:90:a0:9a:15:d3:a1:6a:34:c5:62:9a:b3:b5:7a:54:11:6c:
99:98:8d:01:25:5e:a6:5a:ef:f0:78:2c:b1:d3:d5:ee:01:de:
e4:b9:e3:59:42:d5:ad:82:82:1b:29:b0:7a:fe:63:88:5c:e3:
97:c4:a1:ec:c5:f8:b2:da:f9:a4:9d:59:5d:6b:1a:97:6e:4d:
c4:88:c1:1e:51:dd:ec:64:6f:25:47:36:15:7f:74:69:5d:dd:
05:3c:fb:42:d0:62:fd:ac:08:b3:bb:a1:e5:41:99:79:2d:48:
0f:59:9a:52:2c:39:a9:20:1b:0c:b1:09:b0:ba:d6:90:58:f5:
9b:a2:20:77:26:78:0c:96:e6:8f:d2:10:56:5f:05:fd:4d:07:
af:26:ff:06:19:ac:30:2b:0e:52:8b:ef:55:5d:fb:4c:14:dc:
f5:a7:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:53:04 2025 by rpki-client