This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3232203d3e203631393337.roa File: 34352e37302e3130342e302f32322d3232203d3e203631393337.roa (raw, json) Hash identifier: C1MWe0TX9We0IxaHAOR0ueNCk/0ZC6oDnBvWMHEz6VQ= Subject key identifier: 0A:14:4A:0F:4E:8C:A3:23:6C:C2:D5:E9:B7:F3:0A:66:C1:B8:FA:F0 Certificate issuer: /CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303 Certificate serial: 08C8F4453B73D539AEF184F2BF548DC80B478A09 Authority key identifier: DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer Subject info access: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3232203d3e203631393337.roa Signing time: Mon 29 Dec 2025 20:09:42 +0000 ROA not before: Mon 29 Dec 2025 20:04:42 +0000 ROA not after: Mon 28 Dec 2026 20:09:42 +0000 asID: 61937 IP address blocks: 45.70.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 18:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c8:f4:45:3b:73:d5:39:ae:f1:84:f2:bf:54:8d:c8:0b:47:8a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303 Validity Not Before: Dec 29 20:04:42 2025 GMT Not After : Dec 28 20:09:42 2026 GMT Subject: CN=0A144A0F4E8CA3236CC2D5E9B7F30A66C1B8FAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:4a:5d:5d:e3:3d:c5:41:79:d9:0b:73:9c: 8b:c8:dc:e2:1e:f8:92:29:19:8b:87:55:46:5d:3a: 27:87:be:73:e6:db:98:ff:6f:1b:a8:dd:8b:81:64: 7d:d3:f3:2c:be:01:9c:13:37:c1:1f:f1:4e:96:db: f3:3c:2a:c1:70:8d:1d:81:be:3a:e5:8e:87:18:0f: ee:74:30:e8:71:e0:62:49:00:fb:55:37:f5:64:27: 51:c7:e3:65:18:35:c4:63:6f:95:7e:1f:25:ee:99: 23:d8:da:c0:7b:5a:7e:ed:e7:f9:b4:a5:27:d5:76: 8f:c2:47:c4:2a:a1:5b:7b:dc:e9:23:e0:be:92:d6: e0:0b:aa:15:c9:b3:bb:de:7b:83:a0:1a:4a:c3:34: fd:8e:ba:20:c5:2a:47:f5:5e:ad:20:6e:99:4a:6b: 24:07:d8:5a:5e:f8:8d:79:9d:26:13:e8:f4:92:de: 52:51:9a:3c:b0:c5:41:ee:b0:90:3b:e6:26:ea:20: f8:34:60:f9:0b:89:a3:d9:f8:43:28:b8:af:92:7a: c6:4b:f7:bb:ed:41:02:04:45:d9:84:9d:57:d4:2c: 17:04:d3:33:91:7c:07:09:23:49:89:73:87:e6:a8: 95:a9:51:6a:02:0c:d1:b2:4a:ad:4e:62:1f:2a:d4: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:14:4A:0F:4E:8C:A3:23:6C:C2:D5:E9:B7:F3:0A:66:C1:B8:FA:F0 X509v3 Authority Key Identifier: keyid:DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32322d3232203d3e203631393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.104.0/22 Signature Algorithm: sha256WithRSAEncryption 41:58:17:15:7f:3d:07:f5:b3:b5:ba:6a:93:a1:73:e7:b2:4d: 8b:2b:4e:b6:96:1b:56:06:d2:a4:29:c4:0d:9a:17:74:70:de: f8:f2:13:59:7d:42:e5:32:68:7a:0d:c9:cb:32:77:fa:9e:55: 29:26:93:b8:a3:8c:2b:37:97:d8:0a:aa:af:d4:9f:dc:5d:26: eb:15:00:7c:f4:29:26:b9:23:77:c9:4d:83:5b:97:5a:22:81: 5d:55:e2:5b:8e:d3:6b:a3:fc:84:3b:ac:52:cf:3b:b0:4f:8a: 31:25:97:c3:e6:13:de:b6:31:fd:e4:bc:2d:b8:d8:80:f1:83: a8:b1:8e:ac:15:a4:79:c4:43:90:5a:86:ec:5c:b3:c2:c1:66: 00:7a:5c:b8:36:a3:c8:95:99:d3:3e:5d:70:e3:fd:62:2e:6f: a2:fa:ee:ba:f4:28:b2:fc:c2:f0:68:bf:8c:c0:1f:37:22:97: 14:55:90:8f:aa:86:0f:20:6a:1f:a4:c9:dc:fd:02:8f:e8:f9: 2c:40:bb:52:34:96:89:dc:6b:7f:be:60:b1:52:a0:02:ad:f8: 4e:e1:62:f5:66:b7:9f:81:b7:e4:c4:2b:45:17:c5:18:28:83: ab:39:09:b2:8a:f4:b3:0d:29:53:af:52:e9:5b:7f:a9:38:9b: ec:3f:7c:14 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUCMj0RTtz1Tmu8YTyv1SNyAtHigkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEyRTNBODc3MEVEQUZCQjhBMDkwQ0Q3MzVGRTU0ODZB NENGMzMwMzAeFw0yNTEyMjkyMDA0NDJaFw0yNjEyMjgyMDA5NDJaMDMxMTAvBgNV BAMTKDBBMTQ0QTBGNEU4Q0EzMjM2Q0MyRDVFOUI3RjMwQTY2QzFCOEZBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcykpdXeM9xUF52QtznIvI3OIe +JIpGYuHVUZdOieHvnPm25j/bxuo3YuBZH3T8yy+AZwTN8Ef8U6W2/M8KsFwjR2B vjrljocYD+50MOhx4GJJAPtVN/VkJ1HH42UYNcRjb5V+HyXumSPY2sB7Wn7t5/m0 pSfVdo/CR8QqoVt73Okj4L6S1uALqhXJs7vee4OgGkrDNP2OuiDFKkf1Xq0gbplK ayQH2Fpe+I15nSYT6PSS3lJRmjywxUHusJA75ibqIPg0YPkLiaPZ+EMouK+SesZL 97vtQQIERdmEnVfULBcE0zORfAcJI0mJc4fmqJWpUWoCDNGySq1OYh8q1D69AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUChRKD06MoyNswtXpt/MKZsG4+vAwHwYDVR0j BBgwFoAU2i46h3Dtr7uKCQzXNf5UhqTPMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW eVovMC9EQTJFM0E4NzcwRURBRkJCOEEwOTBDRDczNUZFNTQ4NkE0Q0YzMzAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkUzQTg3NzBFREFGQkI4 QTA5MENENzM1RkU1NDg2QTRDRjMzMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzllcmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzAv MzQzNTJlMzczMDJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM5 MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAi1GaDANBgkqhkiG9w0BAQsFAAOCAQEAQVgXFX89B/Wz tbpqk6Fz57JNiytOtpYbVgbSpCnEDZoXdHDe+PITWX1C5TJoeg3JyzJ3+p5VKSaT uKOMKzeX2Aqqr9Sf3F0m6xUAfPQpJrkjd8lNg1uXWiKBXVXiW47Ta6P8hDusUs87 sE+KMSWXw+YT3rYx/eS8LbjYgPGDqLGOrBWkecRDkFqG7FyzwsFmAHpcuDajyJWZ 0z5dcOP9Yi5vovruuvQosvzC8Gi/jMAfNyKXFFWQj6qGDyBqH6TJ3P0Cj+j5LEC7 UjSWidxrf75gsVKgAq34TuFi9Wa3n4G35MQrRRfFGCiDqzkJsor0sw0pU69S6Vt/ qTib7D98FA== -----END CERTIFICATE-----Generated at Fri Jan 9 21:01:22 2026 by rpki-client