This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32322d3332203d3e20323638333830.roa
File: 34352e3233392e3139322e302f32322d3332203d3e20323638333830.roa (raw, json)
Hash identifier: DyyoXXpasKHSTufaMTgX5I9SM8Dqv77WWBDvBUG6Vy4=
Subject key identifier: D8:A4:23:B6:F8:77:24:73:CC:A1:83:9E:0E:7B:FC:5B:56:3D:94:7F
Certificate issuer: /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Certificate serial: 4176FDDCC529EC1F1A208A25256FFA21F4301DA1
Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32322d3332203d3e20323638333830.roa
Signing time: Sun 04 Jan 2026 02:59:51 +0000
ROA not before: Sun 04 Jan 2026 02:54:51 +0000
ROA not after: Sun 03 Jan 2027 02:59:51 +0000
asID: 268380
IP address blocks: 45.239.192.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 13 Jan 2026 10:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:76:fd:dc:c5:29:ec:1f:1a:20:8a:25:25:6f:fa:21:f4:30:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
Validity
Not Before: Jan 4 02:54:51 2026 GMT
Not After : Jan 3 02:59:51 2027 GMT
Subject: CN=D8A423B6F8772473CCA1839E0E7BFC5B563D947F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:2f:10:6f:7f:d5:5c:98:d7:cd:ed:82:5f:
1f:64:96:81:f1:e8:c6:d0:85:ff:66:01:31:ca:70:
1b:1c:29:98:6a:47:3b:e9:6b:49:0f:99:0b:3c:05:
07:eb:af:ec:48:f4:7d:3c:ba:8b:fc:c2:80:5c:b3:
ac:1b:f1:72:45:51:8d:7a:e5:b0:d3:41:0d:1e:66:
e3:66:54:7b:ce:4c:32:64:f4:27:c3:fe:c5:86:05:
a7:07:03:7d:d2:8f:ac:21:67:3c:d2:a7:87:1b:e1:
03:10:e3:f1:59:db:17:1c:14:72:6f:dd:8c:b4:64:
27:96:20:eb:b5:ce:b2:0c:47:f4:31:89:2a:1f:df:
6e:9f:69:33:fd:18:02:69:66:87:01:5c:55:38:f6:
a3:30:22:b1:40:1b:ba:94:b1:fc:47:9b:1a:9c:6f:
72:00:71:27:81:08:4f:f6:f6:07:6e:cf:b2:c2:7c:
4c:d0:45:6d:7b:65:62:ca:f8:f9:b5:3c:83:b6:f8:
71:cc:7d:14:b8:de:95:63:ba:71:94:12:b4:c9:a1:
22:ac:ac:d8:f8:6c:63:b4:f8:0f:c4:6d:10:48:79:
9e:d7:11:06:b9:3e:3f:61:77:1a:15:f2:18:05:a7:
66:29:3f:07:27:55:0b:ab:b1:00:e5:de:94:8a:00:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:23:B6:F8:77:24:73:CC:A1:83:9E:0E:7B:FC:5B:56:3D:94:7F
X509v3 Authority Key Identifier:
keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/34352e3233392e3139322e302f32322d3332203d3e20323638333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.192.0/22
Signature Algorithm: sha256WithRSAEncryption
18:72:95:25:80:e7:db:f3:1f:49:9f:d8:24:c4:4d:15:05:f3:
0e:43:3f:6b:30:83:48:34:64:22:07:d6:6e:11:9a:f0:08:0c:
a5:ac:bf:7a:ab:fe:23:7b:2f:38:e5:5e:be:74:f4:ec:ac:df:
01:9a:d6:5c:e8:95:fa:89:3b:41:79:f3:25:4e:7a:5e:de:7c:
c4:5e:5c:ea:5f:95:9d:b2:3f:a9:18:70:09:1a:45:b8:54:80:
31:04:63:18:95:0a:4b:a3:87:87:d9:0a:d5:ee:dd:8a:e3:3c:
39:f7:59:a6:e5:e4:2a:9d:46:31:c7:d6:b7:08:a5:64:23:55:
2d:c6:ce:c8:12:e0:4e:38:49:6f:4d:27:72:63:5a:a4:cc:05:
13:44:c7:7a:fd:e9:87:e5:d5:f2:3a:18:05:1f:ae:aa:f5:f1:
b8:d6:fd:97:6a:38:34:6a:9c:3e:aa:43:4b:db:c8:a7:8f:e3:
c7:8f:ff:0d:61:5d:f2:74:4a:39:09:75:10:8f:e0:ca:61:03:
da:1a:7e:14:56:bd:ab:20:d1:94:b4:00:f5:9d:dc:7a:21:f2:
86:ab:ce:7b:02:0a:aa:69:02:a3:d1:64:19:79:fa:a0:00:48:
ce:1d:85:27:d0:72:cd:2f:dd:24:f4:dc:eb:20:1a:57:dc:10:
77:10:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:05:20 2026 by rpki-client