This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa File: 34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (raw, json) Hash identifier: Q2divZIGt9yISnqRhiMhja18Vf+5ZmHlhPkftGpDC4Y= Subject key identifier: F6:30:03:00:9E:D2:9F:02:11:72:F9:25:60:3F:C1:95:80:32:03:FB Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 53CFAE0142DABD3166937372D1A7FB00C7D57512 Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa Signing time: Tue 09 Dec 2025 11:25:20 +0000 ROA not before: Tue 09 Dec 2025 11:20:20 +0000 ROA not after: Tue 08 Dec 2026 11:25:20 +0000 asID: 269015 IP address blocks: 45.178.20.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 53:cf:ae:01:42:da:bd:31:66:93:73:72:d1:a7:fb:00:c7:d5:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Dec 9 11:20:20 2025 GMT Not After : Dec 8 11:25:20 2026 GMT Subject: CN=F63003009ED29F021172F925603FC195803203FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:66:5f:e7:64:e4:e2:45:54:af:5d:78:a8: 9d:2b:6b:57:e9:33:b4:ab:62:0e:21:93:64:1f:f6: 91:9d:1a:03:cd:a4:91:1c:54:11:ec:0c:d7:eb:be: 9f:73:9a:25:74:75:6e:9b:81:5c:d6:1b:a1:81:9a: 1a:99:1e:3f:4a:6f:20:90:9a:a7:cd:b3:7a:72:74: e0:3f:30:76:c1:aa:0d:4c:6b:6c:a3:c9:d0:62:80: db:8e:82:e6:c0:1c:bc:fa:46:62:2f:d3:e2:78:f7: 2a:1d:3c:00:24:52:d8:a1:37:b8:f6:06:f2:de:38: 3d:37:5c:0d:eb:30:15:34:a2:e6:f4:f8:aa:4c:bc: d1:2b:d3:bb:28:5c:98:1b:af:6a:1f:8e:9d:f8:79: 7d:f6:ae:3b:15:58:fb:a4:ff:cc:68:c3:bc:39:de: b9:79:f6:2e:25:3e:5e:eb:38:2e:1b:0b:84:17:7e: ee:ed:fe:75:b1:50:49:d7:83:4f:e5:7c:2c:f5:51: 6c:97:ad:f1:b7:c9:f0:49:a6:f6:14:2a:78:9f:3a: e7:4b:04:4c:4a:8e:b3:cb:ae:34:3f:cb:ca:53:66: f4:ae:6e:d5:76:19:66:10:b0:cc:c2:5c:c6:d7:f9: 11:86:c5:d6:e4:56:01:ac:34:30:41:96:84:d6:32: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:03:00:9E:D2:9F:02:11:72:F9:25:60:3F:C1:95:80:32:03:FB X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.20.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fc:26:4c:2d:95:1b:b5:8b:39:ba:61:67:ba:95:76:e7:bf: 2a:e0:c2:6c:6d:ad:81:7a:46:b5:4b:17:f9:61:85:79:df:e0: e9:e8:2e:c5:d8:4e:8b:ee:87:9f:cc:c6:66:46:6a:4e:a4:c9: 56:39:ea:bc:5e:8d:7f:86:57:a4:15:dc:2d:f5:c8:2c:1d:26: f5:a8:61:82:ef:ac:60:4e:87:b6:73:40:fd:6d:c8:54:99:9f: 0e:9d:34:32:1e:41:c8:56:13:66:10:7c:7e:73:66:b2:81:d4: 24:91:c3:59:1f:d0:6c:22:5d:a3:7d:ed:80:8a:4f:44:0b:93: fe:42:ad:c4:02:68:ad:90:62:1c:32:b7:e8:8c:96:83:72:73: 52:71:75:5a:c2:50:b5:03:51:81:d4:86:ff:a2:1e:13:3b:fd: 23:a8:17:06:f6:a0:d0:d1:81:a7:d6:4a:98:e0:69:89:13:06: d6:f4:72:3e:4d:83:fd:24:ae:20:ce:e9:26:55:62:1d:a8:17: 6d:93:d8:87:bd:9e:c0:df:f2:9c:a8:a2:06:f8:d5:d8:64:de: 25:7a:26:14:1d:0b:8c:98:25:8c:85:c3:6d:09:d2:31:c4:30: 3b:b5:63:f3:eb:8b:37:37:e0:50:cd:00:ac:64:db:79:2f:16: 3b:bb:35:fc -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUU8+uAULavTFmk3Ny0af7AMfVdRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTEyMDkxMTIwMjBaFw0yNjEyMDgxMTI1MjBaMDMxMTAvBgNV BAMTKEY2MzAwMzAwOUVEMjlGMDIxMTcyRjkyNTYwM0ZDMTk1ODAzMjAzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLWZf52Tk4kVUr114qJ0ra1fp M7SrYg4hk2Qf9pGdGgPNpJEcVBHsDNfrvp9zmiV0dW6bgVzWG6GBmhqZHj9KbyCQ mqfNs3pydOA/MHbBqg1Ma2yjydBigNuOgubAHLz6RmIv0+J49yodPAAkUtihN7j2 BvLeOD03XA3rMBU0oub0+KpMvNEr07soXJgbr2ofjp34eX32rjsVWPuk/8xow7w5 3rl59i4lPl7rOC4bC4QXfu7t/nWxUEnXg0/lfCz1UWyXrfG3yfBJpvYUKnifOudL BExKjrPLrjQ/y8pTZvSubtV2GWYQsMzCXMbX+RGGxdbkVgGsNDBBloTWMrw5AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU9jADAJ7SnwIRcvklYD/BlYAyA/swHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv MzQzNTJlMzEzNzM4MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALbIUMA0GCSqGSIb3DQEBCwUAA4IBAQAg/CZMLZUb tYs5umFnupV2578q4MJsba2Beka1Sxf5YYV53+Dp6C7F2E6L7oefzMZmRmpOpMlW Oeq8Xo1/hlekFdwt9cgsHSb1qGGC76xgToe2c0D9bchUmZ8OnTQyHkHIVhNmEHx+ c2aygdQkkcNZH9BsIl2jfe2Aik9EC5P+Qq3EAmitkGIcMrfojJaDcnNScXVawlC1 A1GB1Ib/oh4TO/0jqBcG9qDQ0YGn1kqY4GmJEwbW9HI+TYP9JK4gzukmVWIdqBdt k9iHvZ7A3/KcqKIG+NXYZN4leiYUHQuMmCWMhcNtCdIxxDA7tWPz64s3N+BQzQCs ZNt5LxY7uzX8 -----END CERTIFICATE-----Generated at Tue Dec 16 00:50:43 2025 by rpki-client