This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/34352e3137342e3135322e302f32322d3234203d3e20323634323735.roa File: 34352e3137342e3135322e302f32322d3234203d3e20323634323735.roa (raw, json) Hash identifier: UdKEpTsQnQLjc28FXJJo4HV/VaqC8b2uhE5A+dbquRc= Subject key identifier: 09:FF:2C:EA:0B:F1:7A:64:D7:FE:99:2E:8F:1F:8D:96:2B:64:58:22 Certificate issuer: /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797 Certificate serial: 7831DCA0DBF04826355225CE46664FF0F6B41D9F Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer Subject info access: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/34352e3137342e3135322e302f32322d3234203d3e20323634323735.roa Signing time: Wed 17 Dec 2025 23:22:47 +0000 ROA not before: Wed 17 Dec 2025 23:17:47 +0000 ROA not after: Wed 16 Dec 2026 23:22:47 +0000 asID: 264275 IP address blocks: 45.174.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 04:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:31:dc:a0:db:f0:48:26:35:52:25:ce:46:66:4f:f0:f6:b4:1d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797 Validity Not Before: Dec 17 23:17:47 2025 GMT Not After : Dec 16 23:22:47 2026 GMT Subject: CN=09FF2CEA0BF17A64D7FE992E8F1F8D962B645822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:08:92:41:97:7b:7d:7b:39:ac:2c:91:c0: 61:28:b5:24:3c:63:e7:89:76:eb:4f:41:c0:ad:92: e3:7c:51:be:09:0e:d6:dc:c8:d7:d1:72:a3:75:d4: 4e:4f:1e:8c:26:31:7d:94:5a:3d:7b:a3:ce:8d:33: 3d:55:00:0e:dc:98:50:9e:88:26:97:80:e8:16:ae: d8:bc:b6:24:16:d0:45:5e:43:b8:d4:2d:8e:21:5f: eb:aa:21:43:37:51:0d:06:2c:af:82:6b:56:89:6b: ed:71:76:9e:6d:19:f0:5a:e2:34:1e:b5:8a:10:1b: 96:59:10:5a:3e:b7:28:8e:ba:35:f3:14:77:29:68: 69:4c:ce:82:40:70:a7:36:70:0f:4b:46:39:34:2b: fb:77:3d:53:90:79:d6:b8:88:8a:03:7b:2c:97:c5: 29:d5:4b:0d:db:1b:74:99:6f:0c:2a:e7:ae:2f:59: a2:ac:1b:e7:3a:a3:ad:8d:62:b9:38:4b:7f:72:4f: fa:eb:df:b2:c7:08:75:d5:52:48:2e:96:bf:08:99: 88:8d:d7:67:f4:b7:59:ac:27:f8:60:d2:e8:ce:a3: 39:96:c6:80:58:04:3d:58:a0:4f:d6:ee:d7:d5:0d: 87:cf:c0:d7:1e:32:5c:b2:0e:d1:fe:15:05:74:0c: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FF:2C:EA:0B:F1:7A:64:D7:FE:99:2E:8F:1F:8D:96:2B:64:58:22 X509v3 Authority Key Identifier: keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/34352e3137342e3135322e302f32322d3234203d3e20323634323735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.152.0/22 Signature Algorithm: sha256WithRSAEncryption 53:41:02:e5:c4:ea:e3:d3:76:1a:e4:8f:14:7b:c2:1f:e2:08: 58:dc:f5:ca:90:01:c3:84:70:a6:98:80:6f:1b:0c:44:a4:18: b1:1f:ed:a1:b9:59:4a:da:4a:ad:80:db:ca:55:77:4f:75:c0: e5:15:c7:f5:ab:8e:52:57:09:d0:5f:76:e5:ff:13:43:06:71: a0:af:74:da:86:0f:5c:af:17:2b:3d:7d:91:a5:74:03:2b:b8: 68:e1:42:4f:da:b9:a5:94:e7:9a:da:1e:d0:59:e6:78:c7:aa: 8c:1b:22:8a:0d:8b:b7:73:d2:e8:56:66:c2:5c:35:6c:f1:7b: cd:80:c1:ec:a3:e5:72:0e:6e:02:cb:02:aa:27:68:71:13:f3: 0e:75:9d:17:2d:83:16:8d:76:a4:c8:a6:94:a0:66:33:12:e4: 4c:c7:77:a1:c1:2f:ce:0a:38:12:69:80:5d:8b:a6:67:07:54: 79:d9:e8:da:c5:80:2f:71:e3:de:d2:14:6d:91:ca:7e:21:5d: f5:45:0b:b4:77:62:24:5e:75:18:19:57:3c:69:1d:8f:4b:04: 48:ad:7b:f9:fe:4d:48:22:f9:e9:01:c1:55:4d:78:ed:5a:50: f1:ad:22:c4:34:f3:65:a6:83:94:73:0f:2c:0b:46:ac:2a:6a: 97:bb:a6:e0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUeDHcoNvwSCY1UiXORmZP8Pa0HZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDNEYxN0U4RkVBQTcxMTQwMzI3RkY4MzRGQzAxRTVE RDQwRTc5NzAeFw0yNTEyMTcyMzE3NDdaFw0yNjEyMTYyMzIyNDdaMDMxMTAvBgNV BAMTKDA5RkYyQ0VBMEJGMTdBNjREN0ZFOTkyRThGMUY4RDk2MkI2NDU4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRQiSQZd7fXs5rCyRwGEotSQ8 Y+eJdutPQcCtkuN8Ub4JDtbcyNfRcqN11E5PHowmMX2UWj17o86NMz1VAA7cmFCe iCaXgOgWrti8tiQW0EVeQ7jULY4hX+uqIUM3UQ0GLK+Ca1aJa+1xdp5tGfBa4jQe tYoQG5ZZEFo+tyiOujXzFHcpaGlMzoJAcKc2cA9LRjk0K/t3PVOQeda4iIoDeyyX xSnVSw3bG3SZbwwq564vWaKsG+c6o62NYrk4S39yT/rr37LHCHXVUkgulr8ImYiN 12f0t1msJ/hg0ujOozmWxoBYBD1YoE/W7tfVDYfPwNceMlyyDtH+FQV0DMcPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUCf8s6gvxemTX/pkujx+NlitkWCIwHwYDVR0j BBgwFoAU2cTxfo/qpxFAMn/4NPwB5d1A55cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjdwVXhBYnpyS2M3Unk3aFhkbWFSRUtETmpkdHNySm5xOTJ1dk53NnMy WEwvMC9EOUM0RjE3RThGRUFBNzExNDAzMjdGRjgzNEZDMDFFNURENDBFNzk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QzRGMTdFOEZFQUE3MTE0 MDMyN0ZGODM0RkMwMUU1REQ0MEU3OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI3cFV4QWJ6cktjN1J5N2hYZG1hUkVLRE5qZHRzckpucTkydXZOdzZzMlhMLzAv MzQzNTJlMzEzNzM0MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItrpgwDQYJKoZIhvcNAQELBQADggEBAFNBAuXE 6uPTdhrkjxR7wh/iCFjc9cqQAcOEcKaYgG8bDESkGLEf7aG5WUraSq2A28pVd091 wOUVx/WrjlJXCdBfduX/E0MGcaCvdNqGD1yvFys9fZGldAMruGjhQk/auaWU55ra HtBZ5njHqowbIooNi7dz0uhWZsJcNWzxe82Aweyj5XIObgLLAqonaHET8w51nRct gxaNdqTIppSgZjMS5EzHd6HBL84KOBJpgF2LpmcHVHnZ6NrFgC9x497SFG2Ryn4h XfVFC7R3YiRedRgZVzxpHY9LBEite/n+TUgi+ekBwVVNeO1aUPGtIsQ082Wmg5Rz DywLRqwqape7puA= -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:52 2025 by rpki-client