This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa File: 34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa (raw, json) Hash identifier: DbHV5aNkSuftS00+nOpeYItU6/riOPpLJszqkNXh2xU= Subject key identifier: 67:B4:78:3C:91:79:57:2A:28:99:39:38:C0:65:4C:78:19:92:C0:2D Certificate issuer: /CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF Certificate serial: 25BF7382793353100A5A3EF9DF4C8EB64950FDA0 Authority key identifier: AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa Signing time: Fri 12 Dec 2025 12:39:03 +0000 ROA not before: Fri 12 Dec 2025 12:34:03 +0000 ROA not after: Fri 11 Dec 2026 12:39:03 +0000 asID: 268060 IP address blocks: 45.168.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 02:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:73:82:79:33:53:10:0a:5a:3e:f9:df:4c:8e:b6:49:50:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF Validity Not Before: Dec 12 12:34:03 2025 GMT Not After : Dec 11 12:39:03 2026 GMT Subject: CN=67B4783C9179572A28993938C0654C781992C02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:62:0b:f0:6e:15:dc:74:bc:d2:cd:dc:ed: 93:e7:0a:a1:2e:5e:0c:89:ed:53:17:1e:48:40:18: e1:34:ea:b8:c5:bc:37:a5:dc:80:e0:e3:22:32:91: 04:dd:92:43:46:ea:9e:f9:18:e7:d2:bb:94:a9:8c: 09:e7:05:df:aa:d4:64:ba:9a:7b:a3:a9:87:13:04: 30:11:76:38:ad:aa:db:99:22:a3:97:23:ea:2e:5d: 5b:b8:e1:6e:49:bc:75:e9:3e:6d:4c:d4:04:bf:9f: 6d:c4:a3:90:f9:99:a9:17:fb:bb:49:4e:90:4f:3d: d0:10:43:a7:2f:ac:40:f0:6c:79:e2:ee:55:e6:aa: bb:78:d8:e6:ee:4a:9d:3f:09:bb:e9:5f:ed:5e:77: 58:78:c3:c8:75:55:9b:b1:e3:73:e2:fc:36:54:be: 66:17:e0:1b:ed:bd:74:b0:5d:0f:30:db:99:3c:8c: 67:11:0b:df:8a:16:c5:47:0f:3a:20:42:a3:a9:ac: 4d:81:df:a0:c8:76:f8:c9:5f:7a:25:d5:c7:3e:e3: e7:63:ad:1f:e6:33:0b:df:2c:f5:c0:94:35:71:17: 38:0d:72:cd:b5:61:80:0c:be:b1:7f:38:0e:27:54: 7e:86:1f:5a:27:5e:93:86:d7:48:fb:15:94:05:ae: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B4:78:3C:91:79:57:2A:28:99:39:38:C0:65:4C:78:19:92:C0:2D X509v3 Authority Key Identifier: keyid:AA:DF:2B:4E:B4:DA:1D:ED:92:09:01:1C:2A:3B:BA:C3:32:76:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADF2B4EB4DA1DED9209011C2A3BBAC3327683CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/34352e3136382e3132302e302f32322d3332203d3e20323638303630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.120.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:3f:95:b5:c7:be:76:bb:4d:48:26:db:77:7e:72:6e:6d:6f: 03:51:ea:c2:83:a9:bd:ea:66:1f:3f:5d:0f:62:f5:df:4c:a3: 28:e7:9e:c0:03:df:9e:a3:fc:55:b2:b2:14:d9:ca:ff:d3:03: 55:b9:11:c0:1e:96:8d:8e:e7:3a:fa:e1:03:f7:30:7e:90:de: df:c9:3a:98:c7:6c:53:22:3a:b8:e6:76:16:38:91:ed:ea:8e: c9:f6:6e:b1:b3:45:7a:58:eb:de:50:53:0d:c0:de:9c:e5:92: 5a:b5:4a:e7:6e:d6:74:7f:80:1c:1c:32:4f:90:40:72:cb:43: 31:dc:60:21:99:84:06:42:e5:ab:8a:b2:24:8d:8b:b0:e5:93: c7:8d:92:27:b1:e0:94:2e:20:bd:1d:f0:bb:eb:69:dc:be:62: 81:52:95:37:8c:fc:90:b6:9b:10:85:fa:76:f9:7c:c0:dd:cb: fb:8b:7b:14:52:06:eb:fe:4f:ea:6a:b8:c5:4e:61:06:36:9a: c6:7a:d8:66:f1:4e:0b:a9:ce:dc:49:08:5f:b7:1d:f6:20:68: 21:da:58:a5:9c:e1:e4:a6:32:f0:15:da:c1:a5:df:34:fa:3e: a9:35:a0:e0:dc:cf:ff:8a:86:20:22:34:00:86:6b:da:7c:df: 40:29:68:da -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJb9zgnkzUxAKWj7530yOtklQ/aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFERjJCNEVCNERBMURFRDkyMDkwMTFDMkEzQkJBQzMz Mjc2ODNDRjAeFw0yNTEyMTIxMjM0MDNaFw0yNjEyMTExMjM5MDNaMDMxMTAvBgNV BAMTKDY3QjQ3ODNDOTE3OTU3MkEyODk5MzkzOEMwNjU0Qzc4MTk5MkMwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT12IL8G4V3HS80s3c7ZPnCqEu XgyJ7VMXHkhAGOE06rjFvDel3IDg4yIykQTdkkNG6p75GOfSu5SpjAnnBd+q1GS6 mnujqYcTBDARdjitqtuZIqOXI+ouXVu44W5JvHXpPm1M1AS/n23Eo5D5makX+7tJ TpBPPdAQQ6cvrEDwbHni7lXmqrt42ObuSp0/CbvpX+1ed1h4w8h1VZux43Pi/DZU vmYX4BvtvXSwXQ8w25k8jGcRC9+KFsVHDzogQqOprE2B36DIdvjJX3ol1cc+4+dj rR/mMwvfLPXAlDVxFzgNcs21YYAMvrF/OA4nVH6GH1onXpOG10j7FZQFrkVjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUZ7R4PJF5VyoomTk4wGVMeBmSwC0wHwYDVR0j BBgwFoAUqt8rTrTaHe2SCQEcKju6wzJ2g88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkdHRGo3OWFxcE1TZTFRM3VySllKZnVSeFNNWmhLb3VYaU1CUVBaQmtN UU4vMC9BQURGMkI0RUI0REExREVEOTIwOTAxMUMyQTNCQkFDMzMyNzY4M0NGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBREYyQjRFQjREQTFERUQ5 MjA5MDExQzJBM0JCQUMzMzI3NjgzQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JHR0RqNzlhcXBNU2UxUTN1ckpZSmZ1UnhTTVpoS291WGlNQlFQWkJrTVFOLzAv MzQzNTJlMzEzNjM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzgzMDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItqHgwDQYJKoZIhvcNAQELBQADggEBAB8/lbXH vna7TUgm23d+cm5tbwNR6sKDqb3qZh8/XQ9i9d9MoyjnnsAD356j/FWyshTZyv/T A1W5EcAelo2O5zr64QP3MH6Q3t/JOpjHbFMiOrjmdhY4ke3qjsn2brGzRXpY695Q Uw3A3pzlklq1Sudu1nR/gBwcMk+QQHLLQzHcYCGZhAZC5auKsiSNi7Dlk8eNkiex 4JQuIL0d8Lvrady+YoFSlTeM/JC2mxCF+nb5fMDdy/uLexRSBuv+T+pquMVOYQY2 msZ62GbxTgupztxJCF+3HfYgaCHaWKWc4eSmMvAV2sGl3zT6Pqk1oODcz/+KhiAi NACGa9p830ApaNo= -----END CERTIFICATE-----Generated at Fri Dec 19 13:51:45 2025 by rpki-client