This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa File: 34352e3136372e35322e302f32322d3232203d3e20323637393931.roa (raw, json) Hash identifier: I+aXxgT/WzosJsNtnfBgIP+7NlSjjNf8kxLpgPb42DY= Subject key identifier: 2F:EA:26:0B:B1:66:73:52:E1:08:0B:76:A3:8A:E8:8B:45:EC:C5:11 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 22423C4D2E7C7B2F46041D903F5014375892BEA8 Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:46:57 +0000 ROA not before: Tue 09 Dec 2025 23:41:57 +0000 ROA not after: Tue 08 Dec 2026 23:46:57 +0000 asID: 267991 IP address blocks: 45.167.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:42:3c:4d:2e:7c:7b:2f:46:04:1d:90:3f:50:14:37:58:92:be:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:41:57 2025 GMT Not After : Dec 8 23:46:57 2026 GMT Subject: CN=2FEA260BB1667352E1080B76A38AE88B45ECC511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:14:31:c0:fa:1a:a8:f1:3c:9c:6d:4e:6b: 6f:ab:6e:77:24:2a:48:24:4b:f2:15:f3:de:33:7c: c1:ea:82:95:95:e0:b1:2e:e5:31:77:72:ee:bb:3e: fa:55:b6:bf:db:c5:39:1e:c9:18:91:1c:77:fa:3e: 01:00:02:e1:3c:ed:a3:56:e8:a8:65:77:48:93:5f: 52:f7:6b:65:56:5d:6d:5c:7c:64:91:2c:3f:17:3e: 10:cf:60:f5:8f:8c:c1:36:97:e4:87:09:b9:72:74: 97:bd:f6:d4:81:8f:e5:16:58:84:01:f4:1e:28:a4: 78:28:16:0c:a8:c9:f5:04:a3:e2:63:35:a0:f4:6c: 78:e7:9b:d1:92:98:8f:c5:ee:01:a4:a8:61:82:0d: 64:2f:33:f3:6f:91:15:d7:52:c1:8a:fc:ce:4f:75: 46:99:1a:f5:c0:8e:23:7b:5c:0c:28:88:ad:42:9b: ad:1b:79:4f:fc:4b:07:6a:ad:89:f3:2b:1c:df:f2: c9:ee:42:16:ed:74:ee:57:80:8f:f2:8f:ea:af:32: a8:db:6e:8e:32:a5:f7:ea:a6:fa:a7:4d:de:ea:f7: 65:c1:c9:8d:b7:62:43:7f:3b:59:fc:21:53:a8:8e: 17:45:3e:11:0d:31:27:88:f1:97:af:3f:e0:03:b0: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EA:26:0B:B1:66:73:52:E1:08:0B:76:A3:8A:E8:8B:45:EC:C5:11 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.52.0/22 Signature Algorithm: sha256WithRSAEncryption d5:a3:af:5d:ab:2a:ce:bb:06:2b:8b:22:9e:2c:29:d2:dc:0f: 2a:6e:67:20:bb:4e:3d:d8:d4:22:b4:6c:86:46:2c:6f:93:54: 03:9e:64:e4:0f:62:ab:2e:2d:25:c9:8a:1d:99:12:6a:b2:1e: 73:1c:b8:01:b8:15:bf:15:51:d8:c9:9d:2f:b0:9c:91:8c:88: a6:9c:53:59:9a:1a:fb:e6:af:6f:93:a6:72:7f:71:de:69:f1: b6:d6:ca:0a:db:4d:87:0c:d7:2d:4b:99:50:f3:0a:f8:f3:0d: 88:e1:ec:03:49:62:83:c6:47:bf:be:31:5c:03:05:8b:e3:f1: 06:33:7e:c5:97:d3:4e:c6:c8:f1:0f:9c:9b:d7:5a:ce:5d:1a: 05:da:57:87:52:ad:bd:cb:53:be:04:b3:58:2e:0a:94:a0:e4: a6:b4:a7:f3:4c:12:de:03:fc:95:73:e0:13:3b:83:4a:c1:d8: 9a:fa:67:90:5c:c0:e1:e7:b5:8b:09:1b:7f:48:70:18:f2:f5: 72:e8:d0:a0:c4:c0:85:87:b8:6f:5d:bc:d2:d9:51:95:2b:13: c5:47:eb:32:2d:7d:46:21:32:4d:64:f5:eb:10:46:e2:0f:b4: 83:b0:d5:34:0c:be:f5:fa:90:5a:f8:ef:75:53:41:72:27:53: d1:c6:a9:3a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUIkI8TS58ey9GBB2QP1AUN1iSvqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQxNTdaFw0yNjEyMDgyMzQ2NTdaMDMxMTAvBgNV BAMTKDJGRUEyNjBCQjE2NjczNTJFMTA4MEI3NkEzOEFFODhCNDVFQ0M1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpRQxwPoaqPE8nG1Oa2+rbnck KkgkS/IV894zfMHqgpWV4LEu5TF3cu67PvpVtr/bxTkeyRiRHHf6PgEAAuE87aNW 6Khld0iTX1L3a2VWXW1cfGSRLD8XPhDPYPWPjME2l+SHCblydJe99tSBj+UWWIQB 9B4opHgoFgyoyfUEo+JjNaD0bHjnm9GSmI/F7gGkqGGCDWQvM/NvkRXXUsGK/M5P dUaZGvXAjiN7XAwoiK1Cm60beU/8SwdqrYnzKxzf8snuQhbtdO5XgI/yj+qvMqjb bo4ypffqpvqnTd7q92XByY23YkN/O1n8IVOojhdFPhENMSeI8ZevP+ADsNLdAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUL+omC7Fmc1LhCAt2o4roi0XsxREwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzQzNTJlMzEzNjM3MmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3 MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLac0MA0GCSqGSIb3DQEBCwUAA4IBAQDVo69dqyrO uwYriyKeLCnS3A8qbmcgu0492NQitGyGRixvk1QDnmTkD2KrLi0lyYodmRJqsh5z HLgBuBW/FVHYyZ0vsJyRjIimnFNZmhr75q9vk6Zyf3HeafG21soK202HDNctS5lQ 8wr48w2I4ewDSWKDxke/vjFcAwWL4/EGM37Fl9NOxsjxD5yb11rOXRoF2leHUq29 y1O+BLNYLgqUoOSmtKfzTBLeA/yVc+ATO4NKwdia+meQXMDh57WLCRt/SHAY8vVy 6NCgxMCFh7hvXbzS2VGVKxPFR+syLX1GITJNZPXrEEbiD7SDsNU0DL71+pBa+O91 U0FyJ1PRxqk6 -----END CERTIFICATE-----Generated at Fri Dec 19 13:51:36 2025 by rpki-client