This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa File: 34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (raw, json) Hash identifier: zA4Sem/ipxAl9HM6XJ0oHnu0b0nO4oCEN3MoQ5oi8nU= Subject key identifier: 23:8A:CC:60:15:2E:AB:AA:B4:8A:C3:8F:92:7D:0B:F1:D2:9A:3D:CB Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 5E8B0A41891914BB080DAC7FF9F06DD96E066411 Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa Signing time: Tue 09 Dec 2025 11:25:42 +0000 ROA not before: Tue 09 Dec 2025 11:20:42 +0000 ROA not after: Tue 08 Dec 2026 11:25:42 +0000 asID: 269015 IP address blocks: 45.178.23.0/24 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8b:0a:41:89:19:14:bb:08:0d:ac:7f:f9:f0:6d:d9:6e:06:64:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: Dec 9 11:20:42 2025 GMT Not After : Dec 8 11:25:42 2026 GMT Subject: CN=238ACC60152EABAAB48AC38F927D0BF1D29A3DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:23:4e:6e:22:21:23:d5:09:2d:ca:b1:5a: bc:f2:ed:0b:85:cf:8f:b2:4c:80:06:2a:a2:f2:af: 4f:12:81:a5:11:8b:97:52:49:15:90:67:34:0f:f0: 15:34:d8:32:d7:bb:52:63:97:be:a9:cf:b1:93:04: 3e:e5:e6:1e:6c:ae:d4:f4:81:33:81:b4:b0:d3:78: c4:62:81:06:03:f8:e8:c1:13:ee:88:4b:f1:d7:83: 90:e8:07:33:08:26:ad:27:a4:32:a8:f2:aa:82:f0: 86:49:69:27:b4:21:1e:fe:c6:b3:2d:96:d7:1d:5a: 6c:63:8f:d3:70:24:f8:b4:4d:95:7b:fe:d6:0a:24: b2:6a:76:cd:06:03:4c:4b:41:93:bd:88:fd:5d:e5: 06:e9:ea:7f:4c:9c:5a:b9:b9:d4:08:19:34:5b:81: 81:a7:c4:1f:0e:69:b5:f1:4c:11:15:51:1b:cf:99: 03:e3:02:62:fc:78:6f:36:dd:4a:35:e7:9f:b4:27: 66:e0:f8:f0:78:3e:e0:27:4f:c8:5e:fd:0d:51:c2: 6d:ef:64:73:4b:ac:15:f2:f9:e3:5a:2c:4e:50:04: 88:c6:b4:9f:3b:46:c5:46:dc:64:60:95:63:ec:dc: be:47:78:53:ed:0f:ad:42:e7:d8:75:99:1a:35:9d: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8A:CC:60:15:2E:AB:AA:B4:8A:C3:8F:92:7D:0B:F1:D2:9A:3D:CB X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.23.0/24 Signature Algorithm: sha256WithRSAEncryption 61:31:fa:19:91:93:ba:26:30:1c:df:db:e0:bc:a4:c5:d6:d0: 07:a1:a8:d1:a2:3c:af:b8:66:5d:c5:96:88:70:bc:41:9d:c9: a7:20:36:ca:6f:9d:2c:bc:c4:6d:b2:e8:e8:19:4a:d6:e4:ca: 72:97:2a:8f:82:fa:03:ef:5d:41:c8:5c:f7:98:bf:81:23:97: 8b:07:f5:52:a7:21:54:0e:2b:f0:df:ce:0d:29:0d:29:fb:82: 0e:50:35:ba:11:ba:70:08:20:c9:76:7b:86:cd:4e:f6:97:90: 08:99:2f:47:3d:99:13:e9:2f:0e:fc:46:88:bb:e7:c2:e7:13: e4:48:23:24:72:37:28:34:f5:fd:02:5d:25:e7:0d:fe:58:ec: 08:18:b9:65:e2:0f:d8:88:46:78:a7:ec:c3:eb:f9:18:e9:10: 5a:d2:55:f1:df:4b:4a:6d:fa:96:4d:1e:36:ca:38:57:d3:b9: d9:64:46:49:a1:d1:2c:06:fa:4f:a3:a9:d2:d5:67:fb:bc:d7: 25:10:94:5a:b2:d3:a2:f0:4f:84:3e:ea:70:b4:1c:21:7f:97: 07:37:31:fa:c9:86:3f:5f:77:c5:af:d0:f2:7e:26:85:24:47: 6f:da:af:78:50:60:a2:a5:ee:5a:cc:ef:a6:99:2d:2f:b2:30: dc:be:5a:1b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXosKQYkZFLsIDax/+fBt2W4GZBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTEyMDkxMTIwNDJaFw0yNjEyMDgxMTI1NDJaMDMxMTAvBgNV BAMTKDIzOEFDQzYwMTUyRUFCQUFCNDhBQzM4RjkyN0QwQkYxRDI5QTNEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qyNObiIhI9UJLcqxWrzy7QuF z4+yTIAGKqLyr08SgaURi5dSSRWQZzQP8BU02DLXu1Jjl76pz7GTBD7l5h5srtT0 gTOBtLDTeMRigQYD+OjBE+6IS/HXg5DoBzMIJq0npDKo8qqC8IZJaSe0IR7+xrMt ltcdWmxjj9NwJPi0TZV7/tYKJLJqds0GA0xLQZO9iP1d5Qbp6n9MnFq5udQIGTRb gYGnxB8OabXxTBEVURvPmQPjAmL8eG823Uo155+0J2bg+PB4PuAnT8he/Q1Rwm3v ZHNLrBXy+eNaLE5QBIjGtJ87RsVG3GRglWPs3L5HeFPtD61C59h1mRo1neqxAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUI4rMYBUuq6q0isOPkn0L8dKaPcswHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv MzQzNTJlMzEzNzM4MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALbIXMA0GCSqGSIb3DQEBCwUAA4IBAQBhMfoZkZO6 JjAc39vgvKTF1tAHoajRojyvuGZdxZaIcLxBncmnIDbKb50svMRtsujoGUrW5Mpy lyqPgvoD711ByFz3mL+BI5eLB/VSpyFUDivw384NKQ0p+4IOUDW6EbpwCCDJdnuG zU72l5AImS9HPZkT6S8O/EaIu+fC5xPkSCMkcjcoNPX9Al0l5w3+WOwIGLll4g/Y iEZ4p+zD6/kY6RBa0lXx30tKbfqWTR42yjhX07nZZEZJodEsBvpPo6nS1Wf7vNcl EJRastOi8E+EPupwtBwhf5cHNzH6yYY/X3fFr9DyfiaFJEdv2q94UGCipe5azO+m mS0vsjDcvlob -----END CERTIFICATE-----Generated at Tue Dec 16 00:50:44 2025 by rpki-client