This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa File: 34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (raw, json) Hash identifier: 7OXFDR5pk4pLhj+Mzft27QfzniupFG53ONBjZ52rcJg= Subject key identifier: AA:C7:95:3C:5B:CF:C0:7F:DB:3D:D8:31:24:73:4A:37:C8:16:14:21 Certificate issuer: /CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Certificate serial: 124B2237D83FD5CDC122D2B243F862F845BA237E Authority key identifier: F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa Signing time: Thu 11 Dec 2025 13:20:47 +0000 ROA not before: Thu 11 Dec 2025 13:15:47 +0000 ROA not after: Thu 10 Dec 2026 13:20:47 +0000 asID: 267264 IP address blocks: 45.232.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 21:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:22:37:d8:3f:d5:cd:c1:22:d2:b2:43:f8:62:f8:45:ba:23:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4 Validity Not Before: Dec 11 13:15:47 2025 GMT Not After : Dec 10 13:20:47 2026 GMT Subject: CN=AAC7953C5BCFC07FDB3DD83124734A37C8161421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:45:29:b1:9f:4f:ef:0e:8e:cb:52:c9:80: c8:0e:46:1e:c3:48:c9:b9:be:33:64:84:6f:36:05: 76:e1:42:a6:96:64:2f:67:35:5c:27:56:89:a3:76: 9d:60:d4:03:be:03:bc:5a:da:49:93:5d:74:ef:e8: d3:4f:cb:3e:69:a4:5e:d4:8e:49:f2:7c:6a:50:97: 97:69:5b:29:a6:69:7a:6e:f0:20:05:4a:85:a7:f6: 73:ad:25:54:8c:7e:ec:95:71:6f:7b:ea:a9:81:c0: ed:56:0f:4e:a0:b4:8d:8d:48:4a:65:1a:d4:86:18: 4a:ef:51:95:4b:5a:b3:77:df:80:6a:21:98:50:0e: 86:b2:1d:64:e1:3f:ac:67:ee:85:50:f5:0d:60:37: 95:94:5e:f1:6c:88:79:ea:a1:1e:de:6d:58:1f:62: 2b:0c:c6:b4:da:7f:ed:02:9b:5c:92:67:0f:c0:91: ac:c4:fa:49:4f:0a:86:7a:06:25:df:03:44:5e:9f: f6:86:7e:fa:b7:f7:dd:12:4b:72:3f:d7:5a:5f:a4: 27:4c:fd:67:c2:24:fd:5c:02:cd:88:b1:bb:58:41: a3:06:83:3f:69:13:b2:70:b4:0d:34:44:8b:f2:d2: fb:81:6a:26:37:3a:c3:95:2f:8f:cf:f3:b3:4d:b5: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C7:95:3C:5B:CF:C0:7F:DB:3D:D8:31:24:73:4A:37:C8:16:14:21 X509v3 Authority Key Identifier: keyid:F0:CA:3C:25:5B:5A:CE:E9:E6:EA:0C:AF:48:5A:F0:91:EB:07:12:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CA3C255B5ACEE9E6EA0CAF485AF091EB0712E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.124.0/22 Signature Algorithm: sha256WithRSAEncryption 10:86:05:32:f1:5a:ea:f3:28:8a:60:a2:60:fb:4e:df:e2:c3: 38:3a:04:d8:90:06:15:9c:87:0e:dd:bb:df:9c:42:ae:a9:16: 2e:2c:95:22:34:a7:3b:d4:04:63:f9:f0:64:76:73:58:bd:f3: a2:73:0e:b9:b2:5b:f4:07:f9:af:33:33:f8:4b:a1:6f:ed:f8: 08:51:d5:1f:60:eb:1a:52:ff:f6:29:36:a9:c4:c4:91:5b:dc: 77:6f:b6:8a:bd:2f:7e:14:a0:b0:2e:70:1e:1a:05:b5:fa:28: 90:b2:50:bc:8c:fb:77:1c:ad:01:43:6a:d4:e8:3a:0e:2b:c9: dd:33:c6:14:19:dd:5a:36:72:b8:45:48:d9:34:9b:06:10:71: d6:4c:1d:4f:fa:08:32:bd:1b:7f:f9:fd:8e:4c:6e:4b:dc:0d: 01:31:18:ac:fa:bd:2e:fd:0c:c5:d7:91:b4:80:97:3c:18:e9: 92:89:c9:7f:e3:fa:78:04:a6:da:b3:ce:3f:09:5a:25:0a:97: 7e:01:3d:a0:16:db:86:bc:2e:42:46:8b:ad:b1:69:d7:54:3d: 59:90:f6:e2:2c:54:0a:2d:a2:af:35:c5:46:14:1d:b0:c4:38: f7:46:9a:a4:df:ab:5a:70:ab:0d:7c:8b:d3:79:04:a2:a8:77: 01:7c:5c:85 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEksiN9g/1c3BItKyQ/hi+EW6I34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBDQTNDMjU1QjVBQ0VFOUU2RUEwQ0FGNDg1QUYwOTFF QjA3MTJFNDAeFw0yNTEyMTExMzE1NDdaFw0yNjEyMTAxMzIwNDdaMDMxMTAvBgNV BAMTKEFBQzc5NTNDNUJDRkMwN0ZEQjNERDgzMTI0NzM0QTM3QzgxNjE0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6UUpsZ9P7w6Oy1LJgMgORh7D SMm5vjNkhG82BXbhQqaWZC9nNVwnVomjdp1g1AO+A7xa2kmTXXTv6NNPyz5ppF7U jknyfGpQl5dpWymmaXpu8CAFSoWn9nOtJVSMfuyVcW976qmBwO1WD06gtI2NSEpl GtSGGErvUZVLWrN334BqIZhQDoayHWThP6xn7oVQ9Q1gN5WUXvFsiHnqoR7ebVgf YisMxrTaf+0Cm1ySZw/AkazE+klPCoZ6BiXfA0Ren/aGfvq3990SS3I/11pfpCdM /WfCJP1cAs2IsbtYQaMGgz9pE7JwtA00RIvy0vuBaiY3OsOVL4/P87NNtf7jAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUqseVPFvPwH/bPdgxJHNKN8gWFCEwHwYDVR0j BBgwFoAU8Mo8JVtazunm6gyvSFrwkesHEuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh RW4vMC9GMENBM0MyNTVCNUFDRUU5RTZFQTBDQUY0ODVBRjA5MUVCMDcxMkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQ0EzQzI1NUI1QUNFRTlF NkVBMENBRjQ4NUFGMDkxRUIwNzEyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM4SnMyMkJzNmd0MlhnNXFENW00WkFvN25YWER2U2s0aFdEb204U2N1YUVuLzAv MzQzNTJlMzIzMzMyMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzczMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt6HwwDQYJKoZIhvcNAQELBQADggEBABCGBTLx WurzKIpgomD7Tt/iwzg6BNiQBhWchw7du9+cQq6pFi4slSI0pzvUBGP58GR2c1i9 86JzDrmyW/QH+a8zM/hLoW/t+AhR1R9g6xpS//YpNqnExJFb3Hdvtoq9L34UoLAu cB4aBbX6KJCyULyM+3ccrQFDatToOg4ryd0zxhQZ3Vo2crhFSNk0mwYQcdZMHU/6 CDK9G3/5/Y5MbkvcDQExGKz6vS79DMXXkbSAlzwY6ZKJyX/j+ngEptqzzj8JWiUK l34BPaAW24a8LkJGi62xaddUPVmQ9uIsVAotoq81xUYUHbDEOPdGmqTfq1pwqw18 i9N5BKKodwF8XIU= -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:33 2025 by rpki-client