This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa File: 34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (raw, json) Hash identifier: wASAGN2NMic6mlVkFg1fXDaELQ7Iq/Po9+OkSUShzVs= Subject key identifier: 57:36:E1:BD:6C:40:4D:B7:8D:CA:BC:3E:53:D8:6E:1F:BB:BF:D2:35 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 57DDCB749A17BD891B1C9B789561D349094A9918 Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa Signing time: Tue 09 Dec 2025 11:24:39 +0000 ROA not before: Tue 09 Dec 2025 11:19:39 +0000 ROA not after: Tue 08 Dec 2026 11:24:39 +0000 asID: 269015 IP address blocks: 45.178.22.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 57:dd:cb:74:9a:17:bd:89:1b:1c:9b:78:95:61:d3:49:09:4a:99:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Dec 9 11:19:39 2025 GMT Not After : Dec 8 11:24:39 2026 GMT Subject: CN=5736E1BD6C404DB78DCABC3E53D86E1FBBBFD235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:2e:66:33:50:8f:ff:f1:7a:71:e4:5e:1d: ca:67:93:99:19:7b:e9:14:97:0d:04:95:d6:47:75: c9:4a:d7:af:b9:2f:80:c8:1b:5a:f4:b3:ae:ca:9f: f7:60:aa:6a:15:04:81:f8:15:40:40:27:4d:58:04: 52:14:eb:22:79:8f:5a:64:5c:c9:43:7c:4a:f4:41: 46:a1:67:c2:7a:d2:39:20:88:33:db:48:00:5b:5f: a9:60:76:a1:09:a8:75:51:de:f3:d9:1e:23:3c:d8: 79:cf:fc:0b:ae:64:e3:16:ae:38:e9:c6:11:19:4b: fc:27:08:a6:67:eb:ac:7a:ed:39:f4:f5:eb:e2:7a: d8:57:a5:05:ab:01:aa:d0:96:42:f6:e4:5c:ad:97: 1f:e7:7c:58:1e:68:8a:db:e6:41:a7:57:68:21:ae: 57:4a:26:7e:51:24:22:d6:35:d3:12:88:68:96:4b: d4:13:56:84:50:66:8f:5d:08:51:21:50:4a:5d:24: df:d2:9a:0e:46:ec:3d:41:d9:34:4e:e4:b8:0e:9a: cc:c8:ea:e4:54:9e:b9:ed:26:21:a2:09:9e:f6:be: 97:da:57:a4:89:88:b2:25:fa:c7:9c:49:5e:de:7f: dd:70:58:64:1d:a0:d1:ef:cc:8c:7b:90:ea:41:75: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:36:E1:BD:6C:40:4D:B7:8D:CA:BC:3E:53:D8:6E:1F:BB:BF:D2:35 X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32322e302f32342d3234203d3e20323639303135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.22.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:30:5a:83:8d:22:c4:d3:63:93:8f:c8:82:d7:37:72:58:80: 2e:49:78:08:a4:e2:f5:ba:2f:f6:ee:a3:13:0b:a7:7d:c1:69: 18:79:2e:14:dc:91:15:b3:84:f7:04:36:5c:e8:93:d6:d8:71: 73:59:3e:60:22:20:23:39:d8:2b:50:f5:01:5a:1e:a4:95:5f: 3b:3a:b5:c0:87:35:4f:5e:0a:5e:3c:9f:3f:ef:83:53:97:df: cd:35:72:93:24:32:86:4c:1c:cc:02:f4:74:04:7c:56:35:57: 13:aa:9f:2f:10:3b:25:82:50:12:52:a6:ea:98:40:31:5d:1a: af:47:16:b7:07:21:67:55:46:87:ec:56:89:fb:6b:2d:a4:f0: ef:77:c0:b6:11:08:31:52:14:af:46:74:14:5a:1a:37:eb:57: 67:04:7c:25:a5:45:66:a6:de:6d:a3:29:64:ad:90:19:0c:88: 7a:0c:e9:69:20:40:f5:7d:04:2f:14:50:43:65:e8:82:cb:8d: c6:71:e1:9e:8f:e0:5a:f3:19:41:4c:97:dd:97:c4:94:59:b6: dc:f9:c4:01:e0:33:18:e7:e5:53:4c:32:02:ac:9f:9b:e4:0d: 32:07:2f:32:ad:e0:e0:bb:05:a5:40:ec:1c:f3:f7:c0:37:84: 6c:a3:3e:0b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUV93LdJoXvYkbHJt4lWHTSQlKmRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTEyMDkxMTE5MzlaFw0yNjEyMDgxMTI0MzlaMDMxMTAvBgNV BAMTKDU3MzZFMUJENkM0MDREQjc4RENBQkMzRTUzRDg2RTFGQkJCRkQyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJS5mM1CP//F6ceReHcpnk5kZ e+kUlw0EldZHdclK16+5L4DIG1r0s67Kn/dgqmoVBIH4FUBAJ01YBFIU6yJ5j1pk XMlDfEr0QUahZ8J60jkgiDPbSABbX6lgdqEJqHVR3vPZHiM82HnP/AuuZOMWrjjp xhEZS/wnCKZn66x67Tn09eviethXpQWrAarQlkL25Fytlx/nfFgeaIrb5kGnV2gh rldKJn5RJCLWNdMSiGiWS9QTVoRQZo9dCFEhUEpdJN/Smg5G7D1B2TRO5LgOmszI 6uRUnrntJiGiCZ72vpfaV6SJiLIl+secSV7ef91wWGQdoNHvzIx7kOpBdV+LAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUVzbhvWxATbeNyrw+U9huH7u/0jUwHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv MzQzNTJlMzEzNzM4MmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALbIWMA0GCSqGSIb3DQEBCwUAA4IBAQCfMFqDjSLE 02OTj8iC1zdyWIAuSXgIpOL1ui/27qMTC6d9wWkYeS4U3JEVs4T3BDZc6JPW2HFz WT5gIiAjOdgrUPUBWh6klV87OrXAhzVPXgpePJ8/74NTl9/NNXKTJDKGTBzMAvR0 BHxWNVcTqp8vEDslglASUqbqmEAxXRqvRxa3ByFnVUaH7FaJ+2stpPDvd8C2EQgx UhSvRnQUWho361dnBHwlpUVmpt5toylkrZAZDIh6DOlpIED1fQQvFFBDZeiCy43G ceGej+Ba8xlBTJfdl8SUWbbc+cQB4DMY5+VTTDICrJ+b5A0yBy8yreDguwWlQOwc 8/fAN4Rsoz4L -----END CERTIFICATE-----Generated at Tue Dec 16 00:50:44 2025 by rpki-client