This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa
File: 34352e3137342e322e302f32342d3234203d3e20323638383431.roa (raw, json)
Hash identifier: ME1qWHiY1+wqbTPRjQ0tMTHiv+9fCJqyuz53EHRVvIw=
Subject key identifier: E1:AD:3F:03:C5:80:44:17:12:89:89:6B:D2:00:DB:7A:85:AD:79:83
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 67B5E60A32543314FC48D0ED6F529D6E9896C4F6
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa
Signing time: Fri 24 Oct 2025 00:30:06 +0000
ROA not before: Fri 24 Oct 2025 00:25:06 +0000
ROA not after: Fri 23 Oct 2026 00:30:06 +0000
asID: 268841
IP address blocks: 45.174.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Oct 2025 02:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b5:e6:0a:32:54:33:14:fc:48:d0:ed:6f:52:9d:6e:98:96:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Oct 24 00:25:06 2025 GMT
Not After : Oct 23 00:30:06 2026 GMT
Subject: CN=E1AD3F03C58044171289896BD200DB7A85AD7983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:5b:25:97:49:0f:9c:a5:fc:33:35:36:8b:
f2:cf:31:c2:3a:4e:f4:63:cf:09:ef:07:4a:61:66:
30:00:00:de:9f:43:7d:38:19:16:e3:fd:d6:49:ba:
c2:4d:81:b9:57:9c:4b:45:f5:d0:da:45:b4:6c:7b:
ed:39:50:95:df:7f:d8:5e:ed:08:e3:20:10:1b:6b:
9e:c7:a0:5c:7f:0c:d8:94:02:5a:47:16:e5:2c:82:
c9:fd:af:bb:62:c7:d4:fb:fb:5c:9b:9b:6f:21:ca:
d7:1d:bc:fe:5e:5d:8d:bc:0d:6c:2e:14:90:ae:d9:
fc:34:6c:1c:0c:16:de:a5:1f:00:08:9d:3a:89:b7:
f5:ff:5b:82:28:93:3c:ac:d5:c0:08:7c:7b:58:1a:
1f:28:d1:68:be:d8:35:04:a3:4b:3c:d7:b4:61:c9:
a7:63:b7:7c:47:1e:d9:e3:f6:2c:7b:05:9a:ad:2c:
a0:e2:58:f6:27:11:35:f0:9f:ae:b8:95:d2:a7:e7:
28:12:f3:b3:24:cf:42:5b:0a:11:98:17:d8:5a:e5:
57:de:1c:c4:b3:b1:4a:91:90:8a:a6:0f:85:24:57:
ec:35:de:8d:ac:ae:f0:07:b9:1b:07:c8:e4:42:a9:
ac:97:db:4d:a6:b2:f8:b2:79:49:b9:d6:8b:13:2c:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:3F:03:C5:80:44:17:12:89:89:6B:D2:00:DB:7A:85:AD:79:83
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e322e302f32342d3234203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.2.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bf:83:55:61:14:50:59:5f:05:8a:a8:6f:ce:d2:c3:f3:6e:
43:2c:a8:12:7c:35:50:8e:b0:eb:f7:40:2d:5f:fb:b9:12:9e:
e9:f9:c4:ba:29:3c:21:49:85:fb:ce:3a:dc:ac:8f:91:30:0c:
d3:14:3b:99:b7:12:69:06:f8:a2:7f:fa:72:2f:32:8a:72:1a:
9e:d4:18:c0:54:52:c3:44:c0:41:b4:14:98:86:6b:12:68:4f:
22:1e:c2:2c:1a:44:9c:d8:0e:c5:55:98:5d:9b:c2:21:84:4a:
5d:88:ca:3d:65:ab:73:ee:e2:51:2f:48:81:7f:0a:bb:2e:a4:
9a:16:e9:96:98:a0:d0:ac:ab:5a:57:96:5c:74:f7:c8:93:e3:
05:62:96:82:85:f9:0c:a5:a3:5d:a7:c7:53:70:d2:53:7d:17:
01:48:f6:49:8c:a4:ce:82:74:d2:74:cb:d5:1e:5c:ed:27:c9:
ae:50:bd:9b:4d:f3:8e:6b:55:ca:e6:7d:89:89:5d:01:df:81:
6a:7c:cf:5a:1e:07:92:9e:a9:49:53:46:5e:8c:9f:1a:48:ea:
a3:bd:6b:d3:9b:33:e4:d1:67:db:8e:c6:34:c8:45:ae:4d:5b:
b6:bc:50:d3:96:ae:31:0b:09:13:43:92:c6:42:10:57:8c:41:
b3:77:6f:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUZ7XmCjJUMxT8SNDtb1KdbpiWxPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3
NEQ1QTdGQzAeFw0yNTEwMjQwMDI1MDZaFw0yNjEwMjMwMDMwMDZaMDMxMTAvBgNV
BAMTKEUxQUQzRjAzQzU4MDQ0MTcxMjg5ODk2QkQyMDBEQjdBODVBRDc5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZlsll0kPnKX8MzU2i/LPMcI6
TvRjzwnvB0phZjAAAN6fQ304GRbj/dZJusJNgblXnEtF9dDaRbRse+05UJXff9he
7QjjIBAba57HoFx/DNiUAlpHFuUsgsn9r7tix9T7+1ybm28hytcdvP5eXY28DWwu
FJCu2fw0bBwMFt6lHwAInTqJt/X/W4Iokzys1cAIfHtYGh8o0Wi+2DUEo0s817Rh
yadjt3xHHtnj9ix7BZqtLKDiWPYnETXwn664ldKn5ygS87Mkz0JbChGYF9ha5Vfe
HMSzsUqRkIqmD4UkV+w13o2srvAHuRsHyORCqayX202msviyeUm51osTLFmXAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU4a0/A8WARBcSiYlr0gDbeoWteYMwHwYDVR0j
BBgwFoAUX1JjbySuaAo/aW7W/c+zBXTVp/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NUTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdG
LzAvNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3NEQ1QTdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RjUyNjM2RjI0QUU2ODBBM0Y2
OTZFRDZGRENGQjMwNTc0RDVBN0ZDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
UTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdGLzAvMzQz
NTJlMzEzNzM0MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM4MzQz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2uAjANBgkqhkiG9w0BAQsFAAOCAQEAKb+DVWEUUFlfBYqo
b87Sw/NuQyyoEnw1UI6w6/dALV/7uRKe6fnEuik8IUmF+8463KyPkTAM0xQ7mbcS
aQb4on/6ci8yinIantQYwFRSw0TAQbQUmIZrEmhPIh7CLBpEnNgOxVWYXZvCIYRK
XYjKPWWrc+7iUS9IgX8Kuy6kmhbplpig0KyrWleWXHT3yJPjBWKWgoX5DKWjXafH
U3DSU30XAUj2SYykzoJ00nTL1R5c7SfJrlC9m03zjmtVyuZ9iYldAd+BanzPWh4H
kp6pSVNGXoyfGkjqo71r05sz5NFn247GNMhFrk1btrxQ05auMQsJE0OSxkIQV4xB
s3dvAw==
-----END CERTIFICATE-----
Generated at Mon Jan 5 18:56:20 2026 by rpki-client