This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32342d3234203d3e203631393337.roa File: 34352e37302e3130342e302f32342d3234203d3e203631393337.roa (raw, json) Hash identifier: E3sHvoj2CKPA2OPc+/pqU9V8ocSJnT//T7QpYmaI/Vo= Subject key identifier: EE:4B:0D:B5:D0:55:0F:76:B0:8A:81:DF:AB:BB:F5:43:3C:1B:4D:48 Certificate issuer: /CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303 Certificate serial: 17C974D6F035C4E4C3221C9A4153682449ABA591 Authority key identifier: DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer Subject info access: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32342d3234203d3e203631393337.roa Signing time: Mon 29 Dec 2025 20:09:43 +0000 ROA not before: Mon 29 Dec 2025 20:04:43 +0000 ROA not after: Mon 28 Dec 2026 20:09:43 +0000 asID: 61937 IP address blocks: 45.70.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 18:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:74:d6:f0:35:c4:e4:c3:22:1c:9a:41:53:68:24:49:ab:a5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303 Validity Not Before: Dec 29 20:04:43 2025 GMT Not After : Dec 28 20:09:43 2026 GMT Subject: CN=EE4B0DB5D0550F76B08A81DFABBBF5433C1B4D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:fc:02:42:78:b4:01:9a:76:34:eb:17:fe: 5a:d8:f0:f0:d3:56:7a:a0:76:3f:34:73:8b:b7:03: d6:da:4b:2d:3a:5b:2f:1b:df:4f:af:aa:a6:32:77: b1:1f:60:93:c7:cc:12:56:a4:57:74:fc:56:01:1b: 81:fe:5a:0b:98:84:f0:2e:ad:93:80:52:42:d8:29: bd:ed:23:98:65:8d:cb:0a:e4:41:e7:c3:9b:c5:7d: a1:25:75:59:a6:7a:a2:9e:d8:31:2c:2d:3c:5e:ce: 37:52:19:d2:ca:d3:46:6f:43:92:88:e1:fa:f5:aa: 4c:8b:6b:df:ad:46:27:46:b5:4a:98:27:7d:0d:b2: b9:92:af:14:5e:71:5c:e9:cc:5f:e8:d8:22:cb:cd: 02:68:ca:0a:cd:0d:25:dd:66:b1:1d:56:c4:93:e2: 66:89:ee:d1:cc:fb:e9:5c:75:72:9e:bf:0f:21:69: ca:5d:3c:e0:46:ef:77:42:2b:57:84:3d:4f:fd:69: 1b:82:da:c3:fd:69:8d:02:e0:11:c9:55:41:d2:35: d1:94:11:51:96:52:49:70:c1:8e:cd:60:2b:2b:1c: 86:ed:72:24:07:64:02:ad:d0:78:37:2f:6e:96:2f: c4:bb:13:d3:41:44:2c:7a:6e:17:90:25:4e:ea:10: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:0D:B5:D0:55:0F:76:B0:8A:81:DF:AB:BB:F5:43:3C:1B:4D:48 X509v3 Authority Key Identifier: keyid:DA:2E:3A:87:70:ED:AF:BB:8A:09:0C:D7:35:FE:54:86:A4:CF:33:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2E3A8770EDAFBB8A090CD735FE5486A4CF3303.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/0/34352e37302e3130342e302f32342d3234203d3e203631393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.104.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:56:71:79:48:af:62:35:73:6b:69:ed:06:ed:17:30:dd:50: 6e:a3:ef:bc:52:49:d8:31:a3:43:76:06:5c:ef:f3:b5:cd:70: 1a:3f:fa:c6:6d:9f:54:e0:7a:59:d0:a2:e8:e8:d8:ab:84:14: 16:bb:10:43:f7:fa:6d:3f:5c:1c:bf:80:00:fb:1b:90:dd:2f: 52:bc:38:28:77:94:4b:8d:29:33:71:ea:7f:42:58:c4:e9:cf: 65:d0:42:50:80:f3:42:99:71:bf:6c:76:fb:9b:4d:16:70:e0: c1:d9:23:6d:14:be:10:98:e8:9c:08:06:54:0c:11:55:3d:99: 93:2e:84:55:6e:ac:ae:78:63:f9:95:03:28:31:97:6c:bd:50: 39:73:84:d0:67:1d:74:ee:7f:40:bb:31:42:01:0b:1c:4d:16: 68:15:4b:54:83:7a:8e:84:3c:e4:e2:96:bb:7f:75:2b:48:df: 08:6a:7b:cf:8e:70:13:53:fc:ac:43:e0:40:be:a3:63:e2:e1: 67:5c:5f:4c:e5:83:74:3b:3e:8f:8d:90:aa:27:18:69:94:29: 18:3e:7d:9f:07:cc:8f:6d:c2:2d:f1:03:1b:e8:79:4b:ff:77: a0:c3:44:35:f5:0b:61:a1:ea:16:f1:3f:bd:5e:12:a2:b2:6c: d6:5c:b3:a5 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUF8l01vA1xOTDIhyaQVNoJEmrpZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEyRTNBODc3MEVEQUZCQjhBMDkwQ0Q3MzVGRTU0ODZB NENGMzMwMzAeFw0yNTEyMjkyMDA0NDNaFw0yNjEyMjgyMDA5NDNaMDMxMTAvBgNV BAMTKEVFNEIwREI1RDA1NTBGNzZCMDhBODFERkFCQkJGNTQzM0MxQjRENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hPwCQni0AZp2NOsX/lrY8PDT Vnqgdj80c4u3A9baSy06Wy8b30+vqqYyd7EfYJPHzBJWpFd0/FYBG4H+WguYhPAu rZOAUkLYKb3tI5hljcsK5EHnw5vFfaEldVmmeqKe2DEsLTxezjdSGdLK00ZvQ5KI 4fr1qkyLa9+tRidGtUqYJ30NsrmSrxRecVzpzF/o2CLLzQJoygrNDSXdZrEdVsST 4maJ7tHM++lcdXKevw8hacpdPOBG73dCK1eEPU/9aRuC2sP9aY0C4BHJVUHSNdGU EVGWUklwwY7NYCsrHIbtciQHZAKt0Hg3L26WL8S7E9NBRCx6bheQJU7qELt/AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU7ksNtdBVD3awioHfq7v1QzwbTUgwHwYDVR0j BBgwFoAU2i46h3Dtr7uKCQzXNf5UhqTPMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW eVovMC9EQTJFM0E4NzcwRURBRkJCOEEwOTBDRDczNUZFNTQ4NkE0Q0YzMzAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkUzQTg3NzBFREFGQkI4 QTA5MENENzM1RkU1NDg2QTRDRjMzMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzllcmZ3TFlLcnFrUEVpcTFpVmg0VEUzeWVXU0NnV28xNXZiZTZ6RXc0VnlaLzAv MzQzNTJlMzczMDJlMzEzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM5 MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAC1GaDANBgkqhkiG9w0BAQsFAAOCAQEAXlZxeUivYjVz a2ntBu0XMN1QbqPvvFJJ2DGjQ3YGXO/ztc1wGj/6xm2fVOB6WdCi6OjYq4QUFrsQ Q/f6bT9cHL+AAPsbkN0vUrw4KHeUS40pM3Hqf0JYxOnPZdBCUIDzQplxv2x2+5tN FnDgwdkjbRS+EJjonAgGVAwRVT2Zky6EVW6srnhj+ZUDKDGXbL1QOXOE0GcddO5/ QLsxQgELHE0WaBVLVIN6joQ85OKWu391K0jfCGp7z45wE1P8rEPgQL6jY+LhZ1xf TOWDdDs+j42QqicYaZQpGD59nwfMj23CLfEDG+h5S/93oMNENfULYaHqFvE/vV4S orJs1lyzpQ== -----END CERTIFICATE-----Generated at Fri Jan 9 21:01:22 2026 by rpki-client