This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa File: 34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa (raw, json) Hash identifier: RzvhbClWxHJkiI5A5Hr0ZJlsQX1ASVQ9TqcdESobUh0= Subject key identifier: 85:F6:D8:3E:C2:46:6E:0B:52:BA:A9:3B:85:21:A8:90:6C:4F:26:46 Certificate issuer: /CN=8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D Certificate serial: 02710A30C0AFC739F2F12EBB757F9DD8B6FCE67B Authority key identifier: 8D:B9:FC:9E:FA:6C:CC:DA:5E:94:CD:F3:87:B5:C8:C4:C2:1E:99:4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa Signing time: Fri 12 Dec 2025 13:22:21 +0000 ROA not before: Fri 12 Dec 2025 13:17:21 +0000 ROA not after: Fri 11 Dec 2026 13:22:21 +0000 asID: 268067 IP address blocks: 45.167.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.crl rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:71:0a:30:c0:af:c7:39:f2:f1:2e:bb:75:7f:9d:d8:b6:fc:e6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D Validity Not Before: Dec 12 13:17:21 2025 GMT Not After : Dec 11 13:22:21 2026 GMT Subject: CN=85F6D83EC2466E0B52BAA93B8521A8906C4F2646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:33:64:a9:19:34:1c:8e:96:18:61:d1:80: 5b:51:04:00:dc:fe:64:1d:e1:50:61:00:cf:91:19: 6f:62:fa:f3:84:b3:4f:d1:b0:df:41:2e:27:5d:f6: 21:9a:68:1d:85:fd:69:80:a5:5b:e9:6a:42:1f:4b: e0:1d:a5:96:d9:20:0f:25:2e:24:3f:f5:23:ca:60: aa:68:e7:d5:13:1c:24:f9:4f:df:2d:1c:87:82:d8: 7b:c2:c1:c4:b6:82:b8:81:92:a6:d2:d4:9c:e0:85: 68:56:16:bc:69:a3:ad:3a:0c:60:96:a1:57:d1:47: 9c:42:ae:2a:dd:5e:ab:5c:55:1c:76:14:4e:46:1b: 4c:91:d9:a9:86:be:2a:e0:de:be:fa:60:ba:fa:f4: c0:4c:07:29:f4:a2:20:3c:54:8d:96:9c:ef:14:c8: 2e:71:82:b3:60:98:7b:4e:e9:c2:6d:63:4f:db:b1: 00:f0:d6:11:8c:23:d6:e7:de:7a:03:9f:95:d2:3c: 2c:58:57:92:a2:c2:fe:81:00:9a:2f:d4:a2:0d:4a: fe:5a:c8:71:dd:fc:0e:c4:df:44:43:9e:10:74:32: dc:4e:80:46:7e:dc:23:e0:50:8f:f4:33:99:ee:be: ac:4b:a5:d9:35:03:17:4c:83:93:12:07:89:ed:f2: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:D8:3E:C2:46:6E:0B:52:BA:A9:3B:85:21:A8:90:6C:4F:26:46 X509v3 Authority Key Identifier: keyid:8D:B9:FC:9E:FA:6C:CC:DA:5E:94:CD:F3:87:B5:C8:C4:C2:1E:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.136.0/22 Signature Algorithm: sha256WithRSAEncryption 44:cf:d0:ca:fa:0b:86:0b:9a:7d:6d:10:e3:bc:fc:19:6d:b9: 95:07:e1:d7:9a:9c:9c:59:b9:32:e8:f8:24:25:e3:74:5f:1c: a2:1f:cb:cb:bb:5a:ab:74:5d:6d:9e:56:5e:c7:f7:a9:ac:2c: e5:7a:84:37:49:06:1a:9a:d0:ac:14:7c:d2:09:92:31:78:0d: 8c:a2:04:04:0a:4e:ac:08:86:de:f6:0f:de:59:e6:bd:04:7f: e8:d6:44:ce:31:82:17:b1:48:b1:10:27:60:01:e5:b3:14:9b: 64:98:20:3b:3b:0c:8a:c6:1b:57:26:2d:c2:90:21:7e:36:23: b5:8d:96:6f:4a:84:97:ef:f7:a1:91:18:32:c8:70:e2:3f:23: e8:1b:fb:ae:0f:ef:85:77:9d:a7:7c:4b:2c:b1:0e:f0:0c:38: 6b:fe:5e:db:d9:bb:83:45:b2:fd:50:d3:2b:af:cf:ef:d7:b0: 2e:fb:09:16:2e:92:6a:4b:76:63:2b:f8:cc:6f:26:ba:c5:9f: 12:28:57:ce:e9:11:27:9c:a0:b1:e4:99:56:5b:01:d9:c6:2f: 5d:ce:15:f4:9f:eb:f8:77:69:5d:5f:05:fd:88:ae:51:e4:10: 71:23:a5:02:b7:e7:13:90:0e:1f:f2:fa:5b:89:8b:29:6b:42: 98:19:8d:61 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUAnEKMMCvxzny8S67dX+d2Lb85nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCOUZDOUVGQTZDQ0NEQTVFOTRDREYzODdCNUM4QzRD MjFFOTk0RDAeFw0yNTEyMTIxMzE3MjFaFw0yNjEyMTExMzIyMjFaMDMxMTAvBgNV BAMTKDg1RjZEODNFQzI0NjZFMEI1MkJBQTkzQjg1MjFBODkwNkM0RjI2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50zNkqRk0HI6WGGHRgFtRBADc /mQd4VBhAM+RGW9i+vOEs0/RsN9BLidd9iGaaB2F/WmApVvpakIfS+AdpZbZIA8l LiQ/9SPKYKpo59UTHCT5T98tHIeC2HvCwcS2griBkqbS1JzghWhWFrxpo606DGCW oVfRR5xCrirdXqtcVRx2FE5GG0yR2amGvirg3r76YLr69MBMByn0oiA8VI2WnO8U yC5xgrNgmHtO6cJtY0/bsQDw1hGMI9bn3noDn5XSPCxYV5Kiwv6BAJov1KINSv5a yHHd/A7E30RDnhB0MtxOgEZ+3CPgUI/0M5nuvqxLpdk1AxdMg5MSB4nt8hwnAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhfbYPsJGbgtSuqk7hSGokGxPJkYwHwYDVR0j BBgwFoAUjbn8nvpszNpelM3zh7XIxMIemU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFM dWYvMC84REI5RkM5RUZBNkNDQ0RBNUU5NENERjM4N0I1QzhDNEMyMUU5OTRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQjlGQzlFRkE2Q0NDREE1 RTk0Q0RGMzg3QjVDOEM0QzIxRTk5NEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdacjV3ekg1WUY4VlNoZmJxZHhvRzl3bUNGZVdLSGVydm1MNzN3ZjJxTHVmLzAv MzQzNTJlMzEzNjM3MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItp4gwDQYJKoZIhvcNAQELBQADggEBAETP0Mr6 C4YLmn1tEOO8/BltuZUH4deanJxZuTLo+CQl43RfHKIfy8u7Wqt0XW2eVl7H96ms LOV6hDdJBhqa0KwUfNIJkjF4DYyiBAQKTqwIht72D95Z5r0Ef+jWRM4xghexSLEQ J2AB5bMUm2SYIDs7DIrGG1cmLcKQIX42I7WNlm9KhJfv96GRGDLIcOI/I+gb+64P 74V3nad8SyyxDvAMOGv+XtvZu4NFsv1Q0yuvz+/XsC77CRYukmpLdmMr+MxvJrrF nxIoV87pESecoLHkmVZbAdnGL13OFfSf6/h3aV1fBf2IrlHkEHEjpQK35xOQDh/y +luJiylrQpgZjWE= -----END CERTIFICATE-----Generated at Mon Dec 22 03:48:42 2025 by rpki-client