This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa File: 34352e342e3132362e302f32332d3233203d3e20323636303636.roa (raw, json) Hash identifier: ouO54km611EbRguIo4LFNcnhDGneAYmoAd8BSe9cB+0= Subject key identifier: 89:F4:EF:53:9D:38:04:30:BD:63:C7:0D:66:9C:7E:4D:F2:65:85:1B Certificate issuer: /CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA Certificate serial: 09462BBBE4209053D8FAC8CEBE948FE194D54D0F Authority key identifier: 76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa Signing time: Mon 15 Dec 2025 19:10:38 +0000 ROA not before: Mon 15 Dec 2025 19:05:38 +0000 ROA not after: Mon 14 Dec 2026 19:10:38 +0000 asID: 266066 IP address blocks: 45.4.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 01:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:46:2b:bb:e4:20:90:53:d8:fa:c8:ce:be:94:8f:e1:94:d5:4d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA Validity Not Before: Dec 15 19:05:38 2025 GMT Not After : Dec 14 19:10:38 2026 GMT Subject: CN=89F4EF539D380430BD63C70D669C7E4DF265851B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:42:3f:dc:04:9f:a3:4e:45:b8:00:4b:17: 55:e5:5c:9b:e0:c3:79:99:d2:b4:94:8f:0d:dc:50: 13:6c:22:d0:02:36:36:f9:f6:96:16:fb:01:b3:d7: 05:f0:54:c8:3f:0b:d5:c7:d4:9d:3e:e5:a8:20:d8: 1e:13:c1:1a:36:10:1f:d8:71:79:f3:e6:02:72:4d: dc:96:d6:e8:08:b9:73:e2:17:76:50:31:a7:94:d3: 9f:82:8f:2f:a8:c1:91:09:f7:7a:9c:3d:44:d2:9e: 88:7e:89:9b:5f:b0:1e:11:0b:dd:4c:02:af:84:88: d6:52:45:2a:07:8f:81:96:b9:9c:59:6a:c0:d3:c0: 4f:00:43:7e:50:fd:11:78:2e:5e:69:b3:b9:d7:d5: ca:0a:9c:71:ff:7c:ea:12:cf:6b:1c:10:7e:cf:16: d9:aa:2a:56:69:f1:f8:0d:48:c1:c2:38:e3:a4:f9: a7:66:37:17:d7:3b:40:55:66:ed:d3:15:91:28:54: e8:e5:a2:0e:ca:27:48:25:68:64:af:c1:b9:4d:11: c2:f9:87:09:34:0b:f7:40:28:f4:4d:66:02:36:0f: 4a:5d:e1:3d:d9:25:4b:14:f2:3f:6b:ee:93:e3:11: 2b:ab:8a:ab:53:22:80:2c:40:90:02:e1:0c:4b:1e: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:EF:53:9D:38:04:30:BD:63:C7:0D:66:9C:7E:4D:F2:65:85:1B X509v3 Authority Key Identifier: keyid:76:D5:4F:CC:73:92:D6:6C:CA:6C:3D:59:7A:91:FB:F2:A6:EA:74:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D54FCC7392D66CCA6C3D597A91FBF2A6EA74DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.126.0/23 Signature Algorithm: sha256WithRSAEncryption 06:c8:b1:e3:fb:ae:33:19:24:89:2b:27:ec:7e:e7:f6:a3:b9: f3:fc:3d:17:16:9e:41:32:9e:f0:96:d6:37:7c:21:d7:99:c4: 8a:36:8b:5b:e7:3e:c5:3f:bf:b8:cd:ba:51:0f:79:66:2a:57: 36:ec:e6:ed:ad:01:33:93:26:60:41:30:e9:90:64:2f:5c:5f: 1e:84:d1:16:45:da:da:e9:77:c2:74:d3:1f:27:2d:fc:25:e1: f8:ea:44:4e:70:98:41:a5:21:21:95:9a:3a:ac:3b:8a:d9:c4: 8d:90:58:49:89:97:2e:b6:28:ae:a6:bf:8c:94:96:5b:27:10: c8:73:de:24:d9:b6:4f:f7:15:14:f4:32:6a:4c:2a:35:60:2a: a0:db:67:cb:50:fb:88:8d:3a:10:4b:df:53:c2:14:d7:b3:d9: 42:3f:21:3e:d6:f0:4e:99:c5:85:11:ba:d5:61:94:83:92:a3: c9:ea:e2:c4:bc:e1:61:47:0c:5f:36:85:c3:85:de:ea:c3:24: 02:ef:9e:e6:9c:24:b4:74:90:c0:40:2f:2c:26:56:a3:c2:93: 32:14:e6:f3:61:d0:86:31:58:80:bc:8d:1b:6b:72:f4:19:71: 66:1e:1e:23:36:32:81:58:fe:eb:54:ad:1f:84:27:c3:b9:98: 0a:ba:d3:15 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUCUYru+QgkFPY+sjOvpSP4ZTVTQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZENTRGQ0M3MzkyRDY2Q0NBNkMzRDU5N0E5MUZCRjJB NkVBNzREQTAeFw0yNTEyMTUxOTA1MzhaFw0yNjEyMTQxOTEwMzhaMDMxMTAvBgNV BAMTKDg5RjRFRjUzOUQzODA0MzBCRDYzQzcwRDY2OUM3RTRERjI2NTg1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpUI/3ASfo05FuABLF1XlXJvg w3mZ0rSUjw3cUBNsItACNjb59pYW+wGz1wXwVMg/C9XH1J0+5agg2B4TwRo2EB/Y cXnz5gJyTdyW1ugIuXPiF3ZQMaeU05+Cjy+owZEJ93qcPUTSnoh+iZtfsB4RC91M Aq+EiNZSRSoHj4GWuZxZasDTwE8AQ35Q/RF4Ll5ps7nX1coKnHH/fOoSz2scEH7P FtmqKlZp8fgNSMHCOOOk+admNxfXO0BVZu3TFZEoVOjlog7KJ0glaGSvwblNEcL5 hwk0C/dAKPRNZgI2D0pd4T3ZJUsU8j9r7pPjESuriqtTIoAsQJAC4QxLHgAZAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUifTvU504BDC9Y8cNZpx+TfJlhRswHwYDVR0j BBgwFoAUdtVPzHOS1mzKbD1ZepH78qbqdNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5 NncvMC83NkQ1NEZDQzczOTJENjZDQ0E2QzNENTk3QTkxRkJGMkE2RUE3NERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RDU0RkNDNzM5MkQ2NkND QTZDM0Q1OTdBOTFGQkYyQTZFQTc0REEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv MzQzNTJlMzQyZTMxMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMw MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAS0EfjANBgkqhkiG9w0BAQsFAAOCAQEABsix4/uuMxkk iSsn7H7n9qO58/w9FxaeQTKe8JbWN3wh15nEijaLW+c+xT+/uM26UQ95ZipXNuzm 7a0BM5MmYEEw6ZBkL1xfHoTRFkXa2ul3wnTTHyct/CXh+OpETnCYQaUhIZWaOqw7 itnEjZBYSYmXLrYorqa/jJSWWycQyHPeJNm2T/cVFPQyakwqNWAqoNtny1D7iI06 EEvfU8IU17PZQj8hPtbwTpnFhRG61WGUg5KjyerixLzhYUcMXzaFw4Xe6sMkAu+e 5pwktHSQwEAvLCZWo8KTMhTm82HQhjFYgLyNG2ty9BlxZh4eIzYygVj+61StH4Qn w7mYCrrTFQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:29:45 2025 by rpki-client