This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32332d3233203d3e20323838333438.roa File: 34352e3233392e302e302f32332d3233203d3e20323838333438.roa (raw, json) Hash identifier: DN8o/Y3M59ykkigzBUfkwWPTeoFJ08MJqrmxw50jkUU= Subject key identifier: 5E:5B:89:87:D3:17:21:DC:D0:C1:D9:C4:5A:42:0D:5B:11:A4:64:AF Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Certificate serial: 21C66FB41B7E0042D245BBEB09F6641614C2F2BE Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32332d3233203d3e20323838333438.roa Signing time: Fri 12 Dec 2025 15:03:47 +0000 ROA not before: Fri 12 Dec 2025 14:58:47 +0000 ROA not after: Fri 11 Dec 2026 15:03:47 +0000 asID: 288348 IP address blocks: 45.239.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 14:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c6:6f:b4:1b:7e:00:42:d2:45:bb:eb:09:f6:64:16:14:c2:f2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Validity Not Before: Dec 12 14:58:47 2025 GMT Not After : Dec 11 15:03:47 2026 GMT Subject: CN=5E5B8987D31721DCD0C1D9C45A420D5B11A464AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:fe:f1:a1:a8:f7:93:c1:5a:9f:f4:00:68: 9d:2c:ec:0c:01:fa:d6:81:ff:94:97:d5:ec:a9:d0: db:a6:65:ff:ef:38:bf:eb:36:25:68:79:ec:9d:5f: a3:86:c0:73:3a:78:ca:68:f8:89:eb:4f:cf:8a:4b: ca:7b:83:61:c5:27:67:a7:9c:fa:c2:e2:15:d0:3a: aa:97:3b:f7:d7:e7:32:da:18:58:b8:c6:3c:d7:5a: 69:ed:2e:ab:57:ea:ef:5b:bd:4f:0f:5f:91:08:d3: 0d:95:0e:67:b4:82:1e:35:5d:34:68:bf:dd:68:12: d1:c4:8e:cd:95:3e:42:07:c4:0d:b4:68:b9:c5:53: bd:79:c8:0e:40:68:6c:2b:39:e9:ab:fb:43:3c:41: 12:c2:13:35:cb:5b:b2:e3:1d:37:1b:b1:a2:7a:d4: 93:7b:2f:e8:01:de:b6:e9:33:b2:06:cb:43:56:00: 29:76:cf:ae:e4:c1:7f:bd:6b:6d:c7:e2:f0:63:51: 92:ad:6b:f7:f6:b8:28:43:97:43:fe:40:7e:55:36: 58:00:c4:a3:05:4a:ca:53:39:94:6a:98:0c:cd:af: b2:e2:c6:01:c4:9d:8b:fe:57:c8:ea:d3:50:97:5c: ad:90:14:0d:14:10:fa:ff:b7:22:99:ad:0b:ad:0e: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:89:87:D3:17:21:DC:D0:C1:D9:C4:5A:42:0D:5B:11:A4:64:AF X509v3 Authority Key Identifier: keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/34352e3233392e302e302f32332d3233203d3e20323838333438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.0.0/23 Signature Algorithm: sha256WithRSAEncryption d6:89:e5:ed:97:c0:12:fa:44:9b:7a:55:90:91:19:9a:01:d0: b5:bc:50:bb:93:65:fc:7d:b0:4d:17:29:9a:e7:83:2a:b7:c9: 66:cd:8b:a5:ca:f6:ca:71:f8:9c:3e:c5:0e:fd:43:42:01:76: 76:51:ea:f4:ff:29:f9:95:7f:6b:99:b4:57:df:69:0b:31:e8: 34:12:3c:7c:dc:e8:19:01:d5:f2:ed:14:2b:32:91:35:6f:15: 64:55:1b:96:bb:03:74:d4:e8:9d:32:f3:d4:cb:91:df:8c:04: 04:d7:82:8b:82:89:22:67:50:a5:5f:9a:5d:af:d5:4d:de:b9: be:16:48:26:e7:8d:3c:80:5c:1a:ae:d6:9c:b4:58:88:42:4c: 77:6c:b2:68:4a:9f:f2:c5:c0:55:94:7a:3c:ff:11:38:6f:bb: 9b:31:91:a6:3b:0e:52:ff:f6:37:9c:9f:f9:c5:53:7d:da:be: b8:0e:e5:80:2a:5b:28:b6:dd:03:7e:15:31:5b:fb:63:0e:36: f0:14:2b:50:47:09:ce:ce:34:f3:4e:02:86:28:d0:60:c4:ce: 9f:ec:f4:29:ce:9e:8c:22:d1:c6:19:98:7d:ff:42:bb:ed:60: a1:c5:09:73:ce:e6:b2:54:a3:be:90:b3:4b:d4:7d:85:7d:ad: b2:5e:fa:da -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUIcZvtBt+AELSRbvrCfZkFhTC8r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1NEE0N0U1RjkxMEFFOTIxRUFFRTlCOUJFNTEwOUMz MjUwMTQ0NjAeFw0yNTEyMTIxNDU4NDdaFw0yNjEyMTExNTAzNDdaMDMxMTAvBgNV BAMTKDVFNUI4OTg3RDMxNzIxRENEMEMxRDlDNDVBNDIwRDVCMTFBNDY0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuv7xoaj3k8Fan/QAaJ0s7AwB +taB/5SX1eyp0NumZf/vOL/rNiVoeeydX6OGwHM6eMpo+InrT8+KS8p7g2HFJ2en nPrC4hXQOqqXO/fX5zLaGFi4xjzXWmntLqtX6u9bvU8PX5EI0w2VDme0gh41XTRo v91oEtHEjs2VPkIHxA20aLnFU715yA5AaGwrOemr+0M8QRLCEzXLW7LjHTcbsaJ6 1JN7L+gB3rbpM7IGy0NWACl2z67kwX+9a23H4vBjUZKta/f2uChDl0P+QH5VNlgA xKMFSspTOZRqmAzNr7LixgHEnYv+V8jq01CXXK2QFA0UEPr/tyKZrQutDvppAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUXluJh9MXIdzQwdnEWkINWxGkZK8wHwYDVR0j BBgwFoAUulSkfl+RCukh6u6bm+UQnDJQFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V eFQvMS9CQTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTRBNDdFNUY5MTBBRTky MUVBRUU5QjlCRTUxMDlDMzI1MDE0NDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlTV3FTWVlBc0Zrc05wY3JoZ0REdDVvOWMyaVk4am9lNWlHVHVwN0NNVXhULzEv MzQzNTJlMzIzMzM5MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzODMz MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAS3vADANBgkqhkiG9w0BAQsFAAOCAQEA1onl7ZfAEvpE m3pVkJEZmgHQtbxQu5Nl/H2wTRcpmueDKrfJZs2Lpcr2ynH4nD7FDv1DQgF2dlHq 9P8p+ZV/a5m0V99pCzHoNBI8fNzoGQHV8u0UKzKRNW8VZFUblrsDdNTonTLz1MuR 34wEBNeCi4KJImdQpV+aXa/VTd65vhZIJueNPIBcGq7WnLRYiEJMd2yyaEqf8sXA VZR6PP8ROG+7mzGRpjsOUv/2N5yf+cVTfdq+uA7lgCpbKLbdA34VMVv7Yw428BQr UEcJzs40804ChijQYMTOn+z0Kc6ejCLRxhmYff9Cu+1gocUJc87mslSjvpCzS9R9 hX2tsl762g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:05:10 2025 by rpki-client