This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa File: 34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (raw, json) Hash identifier: cgmX45fTd+k4EKTWQqOEXQbR7n7gtUEsd2uY8VwYX/s= Subject key identifier: 77:D8:B9:6B:18:C3:E5:09:A9:D6:CA:81:93:58:1E:DA:16:35:91:A6 Certificate issuer: /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Certificate serial: 2F36F76893155ABACEB72047F13BFA48D43541F5 Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa Signing time: Wed 23 Jul 2025 05:17:39 +0000 ROA not before: Wed 23 Jul 2025 05:12:39 +0000 ROA not after: Wed 22 Jul 2026 05:17:39 +0000 asID: 268791 IP address blocks: 45.172.64.0/22 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2f:36:f7:68:93:15:5a:ba:ce:b7:20:47:f1:3b:fa:48:d4:35:41:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Validity Not Before: Jul 23 05:12:39 2025 GMT Not After : Jul 22 05:17:39 2026 GMT Subject: CN=77D8B96B18C3E509A9D6CA8193581EDA163591A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:b4:a4:6e:4f:56:4e:f8:fd:09:80:28:f5: 52:79:93:d0:f7:49:99:e9:9b:bd:9c:d9:16:3f:28: e9:02:43:bb:27:6b:e3:29:99:39:c3:27:47:89:fa: 87:b2:a7:6f:13:c1:85:0d:20:13:ec:46:b0:f1:c5: 9d:51:e6:22:72:8e:7c:1f:11:42:28:5a:c8:1d:e8: bc:2e:9e:df:83:14:27:4e:81:74:b8:ae:15:b4:20: c7:56:c5:6e:47:e3:85:3f:cb:44:e9:20:b9:e4:b5: 30:ca:03:cf:9b:43:43:6d:c5:61:6e:cb:22:5a:d1: 24:ee:01:74:90:cd:33:d0:c6:4d:05:e3:f9:1d:2c: 8f:1a:6b:b4:16:79:27:4f:53:c2:f0:e0:3b:87:dd: c6:9b:c8:28:5c:b5:ad:f9:ef:1a:59:f8:a5:ea:68: b1:fc:3b:5a:86:43:a8:1f:84:f7:be:1e:d8:76:4b: 35:c0:eb:00:51:e6:0a:33:59:d6:c1:2e:ea:ab:bb: 80:3f:b7:0b:44:a8:38:73:f2:1c:26:5c:f6:8e:0d: 5c:1f:68:28:9d:16:26:20:e6:82:bc:f2:b9:5d:40: 0f:6e:b5:5b:2f:aa:cf:8f:f7:b1:20:c9:0d:e4:3a: 65:ca:95:72:53:ac:53:b1:17:a0:9d:80:a6:68:a4: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:B9:6B:18:C3:E5:09:A9:D6:CA:81:93:58:1E:DA:16:35:91:A6 X509v3 Authority Key Identifier: keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.64.0/22 Signature Algorithm: sha256WithRSAEncryption 37:30:dc:4b:87:b6:0c:6e:03:8b:54:53:e6:f8:89:8f:e5:37: 33:bc:93:77:f2:9f:29:48:54:53:7f:97:c3:dd:14:e6:ec:3f: 4f:09:9b:1c:16:4d:aa:2e:90:5a:f4:eb:16:da:9e:49:50:13: 8e:0e:27:39:92:dc:e8:92:50:a8:b1:6d:2e:1f:2f:3a:30:c6: a2:f1:25:cd:34:eb:d5:21:e6:e4:5e:ce:6e:cb:2f:23:81:17: 9b:26:62:3c:3d:95:9b:50:22:fa:cd:39:24:d3:f1:fb:27:e0: b1:b6:90:46:3f:33:b8:34:16:e1:fa:f0:f4:86:42:16:14:30: fb:bb:ed:7f:41:17:32:0b:02:3e:7b:b5:25:68:35:a5:eb:a0: 8c:ec:67:53:a7:b6:dd:1c:95:64:41:79:e6:29:fe:63:26:1a: 91:40:7c:d7:28:3d:e6:27:b1:e7:f6:fb:37:81:f4:04:cc:8c: 04:f8:4a:4c:e1:29:30:62:0a:fe:fb:17:0c:23:c7:81:dd:d4: 3a:0e:8b:0f:8a:22:08:ac:cf:85:9b:f1:91:c7:af:3c:a8:a7: 1a:68:91:52:e3:12:ca:a9:04:c0:55:01:2d:40:ad:a7:2b:db: 9d:53:c3:05:19:36:67:e9:88:91:11:f9:93:84:a5:a6:de:98: f9:67:9c:58 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIULzb3aJMVWrrOtyBH8Tv6SNQ1QfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBRjEzMjRBMjNGREM4N0I3MTJBREQyMTg0NkNCMUJG M0NGRURGMjAeFw0yNTA3MjMwNTEyMzlaFw0yNjA3MjIwNTE3MzlaMDMxMTAvBgNV BAMTKDc3RDhCOTZCMThDM0U1MDlBOUQ2Q0E4MTkzNTgxRURBMTYzNTkxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRbSkbk9WTvj9CYAo9VJ5k9D3 SZnpm72c2RY/KOkCQ7sna+MpmTnDJ0eJ+oeyp28TwYUNIBPsRrDxxZ1R5iJyjnwf EUIoWsgd6Lwunt+DFCdOgXS4rhW0IMdWxW5H44U/y0TpILnktTDKA8+bQ0NtxWFu yyJa0STuAXSQzTPQxk0F4/kdLI8aa7QWeSdPU8Lw4DuH3cabyChcta357xpZ+KXq aLH8O1qGQ6gfhPe+Hth2SzXA6wBR5gozWdbBLuqru4A/twtEqDhz8hwmXPaODVwf aCidFiYg5oK88rldQA9utVsvqs+P97EgyQ3kOmXKlXJTrFOxF6CdgKZopL/1AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUd9i5axjD5Qmp1sqBk1ge2hY1kaYwHwYDVR0j BBgwFoAUv68TJKI/3Ie3Eq3SGEbLG/PP7fIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g5c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpI SjcvMC9CRkFGMTMyNEEyM0ZEQzg3QjcxMkFERDIxODQ2Q0IxQkYzQ0ZFREYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQUYxMzI0QTIzRkRDODdC NzEyQUREMjE4NDZDQjFCRjNDRkVERjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNoOXN3THVpOHBaaFpTVk16MW1UWldDVWNndTU2RDFwTjg2NHlKOTV6SEo3LzAv MzQzNTJlMzEzNzMyMmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4 MzczOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLaxAMA0GCSqGSIb3DQEBCwUAA4IBAQA3MNxLh7YM bgOLVFPm+ImP5TczvJN38p8pSFRTf5fD3RTm7D9PCZscFk2qLpBa9OsW2p5JUBOO Dic5ktzoklCosW0uHy86MMai8SXNNOvVIebkXs5uyy8jgRebJmI8PZWbUCL6zTkk 0/H7J+CxtpBGPzO4NBbh+vD0hkIWFDD7u+1/QRcyCwI+e7UlaDWl66CM7GdTp7bd HJVkQXnmKf5jJhqRQHzXKD3mJ7Hn9vs3gfQEzIwE+EpM4SkwYgr++xcMI8eB3dQ6 DosPiiIIrM+Fm/GRx688qKcaaJFS4xLKqQTAVQEtQK2nK9udU8MFGTZn6YiREfmT hKWm3pj5Z5xY -----END CERTIFICATE-----Generated at Sun Dec 14 14:45:56 2025 by rpki-client