This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
File: 34352e352e39362e302f32322d3234203d3e20323636303931.roa (raw, json)
Hash identifier: TpP0pyyBddetIefEQp+tbjSdfBvTQ1UGHo5796I3wNk=
Subject key identifier: CA:50:38:77:A1:39:AB:C0:C8:3F:94:18:79:6C:CE:63:11:A8:C8:98
Certificate issuer: /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial: 7E78E9C07DCE6B0C3C22B76F7A729821329229B5
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
Signing time: Mon 29 Dec 2025 13:06:28 +0000
ROA not before: Mon 29 Dec 2025 13:01:28 +0000
ROA not after: Mon 28 Dec 2026 13:06:28 +0000
asID: 266091
IP address blocks: 45.5.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 31 Dec 2025 10:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:78:e9:c0:7d:ce:6b:0c:3c:22:b7:6f:7a:72:98:21:32:92:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
Validity
Not Before: Dec 29 13:01:28 2025 GMT
Not After : Dec 28 13:06:28 2026 GMT
Subject: CN=CA503877A139ABC0C83F9418796CCE6311A8C898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:80:08:68:82:74:8b:bb:71:51:dd:21:81:
63:8b:14:17:11:3c:96:32:2a:7c:46:00:8c:ce:ed:
6b:6f:36:6b:25:72:76:b7:4f:5f:fb:b2:6f:6f:23:
1a:bb:ee:78:7d:c1:17:5d:93:ce:96:66:da:0b:44:
ca:ca:0b:7d:33:81:7d:af:d9:52:59:03:77:c4:e0:
d7:5d:6f:03:76:37:09:c2:bb:f3:16:3e:bb:3c:dd:
2b:79:53:fc:8b:81:2b:4c:ce:00:06:d7:11:75:0f:
d5:96:bd:30:c8:b9:6b:a9:29:b0:ff:a7:65:ea:c0:
e1:ae:fa:32:ef:da:a5:66:18:9f:cf:07:07:01:b4:
3d:b4:fa:69:3e:8a:a1:2d:d5:77:c2:75:c2:7e:a4:
77:1f:dc:73:b6:a2:90:d7:36:cd:25:07:0b:c9:af:
2a:f4:ef:a3:11:cd:a4:4c:79:35:3c:0a:ab:33:3d:
23:57:d1:f0:5c:f0:5a:75:d2:72:ab:f0:33:a4:74:
ee:b6:58:c0:bb:31:47:95:a6:f6:7e:2a:22:89:38:
b5:13:44:b7:f2:66:c6:2b:81:3c:42:96:13:97:ea:
89:45:27:cb:af:3f:7d:d6:a9:92:0c:da:ad:c4:a4:
48:3a:76:c8:51:31:20:8d:53:ad:fc:67:9d:24:b0:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:38:77:A1:39:AB:C0:C8:3F:94:18:79:6C:CE:63:11:A8:C8:98
X509v3 Authority Key Identifier:
keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/34352e352e39362e302f32322d3234203d3e20323636303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.96.0/22
Signature Algorithm: sha256WithRSAEncryption
75:81:62:c8:74:c6:f3:b7:31:ae:50:2e:6d:98:df:4b:95:14:
f7:64:28:5e:79:da:cf:6c:4f:c2:85:94:b6:ff:2f:51:a4:fb:
93:43:69:bb:69:70:00:11:63:4c:f9:b7:e0:f3:c1:fb:97:77:
76:d0:8e:34:12:0b:9e:7a:5f:1f:5d:cc:89:d0:6e:f6:cd:ed:
26:50:4f:91:34:81:c0:58:e0:6e:a1:12:ec:7b:7f:70:17:07:
2e:b8:63:3c:01:11:79:7c:9c:51:5c:b7:f2:91:e1:c1:47:35:
f9:16:a1:de:96:68:d2:af:fc:87:a4:35:c7:00:a0:69:4c:07:
c7:00:45:fb:43:0b:13:56:d8:95:6c:55:94:4f:3b:40:81:3e:
ed:93:1b:1b:d6:f1:5e:87:4a:57:6f:e6:43:dd:e6:6b:2b:4d:
4a:b9:9a:7a:16:27:b4:38:75:e2:a7:d6:e6:89:7d:cb:14:68:
50:1e:28:86:c3:95:6d:c1:9b:90:09:3f:6d:72:9f:49:bf:64:
2b:2c:2b:bd:02:aa:8a:1f:6b:7c:89:5c:62:e4:59:67:04:3e:
21:27:d9:20:e8:76:ae:9b:c3:18:a4:d5:00:6c:94:de:df:0a:
49:9d:ce:b8:03:05:0f:c4:f2:27:b6:4c:86:06:a1:59:48:4d:
95:31:d9:5e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfnjpwH3Oaww8IrdvenKYITKSKbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI3MkI3OTk0MDQ0MDcyMTE5MDQyOUFBQkJBNDVCMEJC
NTU4OUYzRTAeFw0yNTEyMjkxMzAxMjhaFw0yNjEyMjgxMzA2MjhaMDMxMTAvBgNV
BAMTKENBNTAzODc3QTEzOUFCQzBDODNGOTQxODc5NkNDRTYzMTFBOEM4OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC4AIaIJ0i7txUd0hgWOLFBcR
PJYyKnxGAIzO7WtvNmslcna3T1/7sm9vIxq77nh9wRddk86WZtoLRMrKC30zgX2v
2VJZA3fE4NddbwN2NwnCu/MWPrs83St5U/yLgStMzgAG1xF1D9WWvTDIuWupKbD/
p2XqwOGu+jLv2qVmGJ/PBwcBtD20+mk+iqEt1XfCdcJ+pHcf3HO2opDXNs0lBwvJ
ryr076MRzaRMeTU8CqszPSNX0fBc8Fp10nKr8DOkdO62WMC7MUeVpvZ+KiKJOLUT
RLfyZsYrgTxClhOX6olFJ8uvP33WqZIM2q3EpEg6dshRMSCNU638Z50ksPPjAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUylA4d6E5q8DIP5QYeWzOYxGoyJgwHwYDVR0j
BBgwFoAU0nK3mUBEByEZBCmqu6RbC7VYnz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW
d1QvMC9EMjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNzJCNzk5NDA0NDA3MjEx
OTA0MjlBQUJCQTQ1QjBCQjU1ODlGM0UuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1dlY3WEI3Zmp3QXZNOFJ2RkVnN0M0d1RyaVFudzY3V25Bd1BTeTl6VndULzAv
MzQzNTJlMzUyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM5
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBWAwDQYJKoZIhvcNAQELBQADggEBAHWBYsh0xvO3Ma5Q
Lm2Y30uVFPdkKF552s9sT8KFlLb/L1Gk+5NDabtpcAARY0z5t+DzwfuXd3bQjjQS
C556Xx9dzInQbvbN7SZQT5E0gcBY4G6hEux7f3AXBy64YzwBEXl8nFFct/KR4cFH
NfkWod6WaNKv/IekNccAoGlMB8cARftDCxNW2JVsVZRPO0CBPu2TGxvW8V6HSldv
5kPd5msrTUq5mnoWJ7Q4deKn1uaJfcsUaFAeKIbDlW3Bm5AJP21yn0m/ZCssK70C
qoofa3yJXGLkWWcEPiEn2SDodq6bwxik1QBslN7fCkmdzrgDBQ/E8ie2TIYGoVlI
TZUx2V4=
-----END CERTIFICATE-----
Generated at Tue Dec 30 08:20:59 2025 by rpki-client