This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa File: 34352e3136372e35322e302f32342d3234203d3e20323637393931.roa (raw, json) Hash identifier: HWgYDJPNCCgkl9eSCNqzfyAqqZpoDh5Oax6vp1RkYaU= Subject key identifier: B7:68:91:09:E1:0F:A6:AF:AE:58:EF:F7:4F:F5:48:04:72:77:1B:C0 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 670F81D5DA3AF07E971142A5A9F8E3704D525CD9 Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:47:04 +0000 ROA not before: Tue 09 Dec 2025 23:42:04 +0000 ROA not after: Tue 08 Dec 2026 23:47:04 +0000 asID: 267991 IP address blocks: 45.167.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0f:81:d5:da:3a:f0:7e:97:11:42:a5:a9:f8:e3:70:4d:52:5c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:42:04 2025 GMT Not After : Dec 8 23:47:04 2026 GMT Subject: CN=B7689109E10FA6AFAE58EFF74FF5480472771BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:2e:b1:34:84:4b:cf:e7:7e:0d:51:0c:de: a9:92:c8:fe:22:da:79:2d:d8:ed:0b:16:8e:f4:a0: df:7c:86:20:1e:3a:1f:d7:8d:d7:27:7a:c5:39:ac: 42:f7:ce:02:d9:ca:73:8a:c4:e5:00:38:74:cf:ea: fd:cf:c5:e3:b7:ef:97:ea:aa:c9:43:9e:7f:9b:95: 33:47:8d:5c:6b:36:0f:c6:5b:17:91:6b:52:10:94: ce:08:7a:91:e9:66:28:27:79:f6:16:c2:fb:c0:c6: 38:85:cf:c2:c2:2d:5f:27:67:76:2d:96:61:49:3b: 1e:82:1c:90:01:6f:9d:a5:ee:b6:db:38:7d:f3:d8: 53:98:c0:90:d3:d9:2e:5f:67:3f:cd:44:d6:5c:5d: 9a:f8:ec:26:40:e4:88:46:ca:96:54:05:23:6d:68: 6a:14:c8:58:94:df:6c:04:8d:16:e1:d4:88:a1:03: bb:b3:c0:f1:8d:c4:30:32:56:70:cd:7d:34:94:82: 61:d3:9f:d8:f3:bf:2a:0a:a7:c8:97:56:45:dd:3a: 96:d8:b3:e4:e5:88:54:f9:bc:2a:74:23:4a:66:d2: 34:03:bd:c9:fd:87:ba:5d:13:40:55:e2:1f:26:ae: 7e:80:55:82:72:89:a6:40:a3:0e:d1:20:24:6b:a6: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:68:91:09:E1:0F:A6:AF:AE:58:EF:F7:4F:F5:48:04:72:77:1B:C0 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.52.0/24 Signature Algorithm: sha256WithRSAEncryption d9:e0:f1:e2:4d:e0:45:f9:08:5d:9f:3f:e2:3c:37:4d:f7:92: 9d:a0:fa:4a:d9:3d:a3:0e:18:fe:22:5c:d4:1c:5c:4d:7e:59: 90:9b:b2:3a:19:f4:ef:f6:f5:0b:9c:c4:6e:d6:d8:5a:ed:4e: c6:f4:8a:ce:17:85:c2:18:8b:6c:fd:4e:ba:ab:46:7f:40:d8: 31:0b:53:64:53:e1:87:09:b9:f2:98:e6:71:37:97:01:33:e5: 37:a7:3a:93:ed:c8:25:7d:59:86:f7:7a:ed:21:67:d4:d2:45: 83:de:c5:ed:b5:36:61:a0:bc:52:6d:90:1e:b2:f6:a9:9f:10: b5:63:7b:ac:c0:e3:5d:9a:d3:51:41:96:a5:bd:13:b2:fc:c5: f8:c4:2c:d6:4d:97:a3:15:85:f1:b8:cd:70:7f:63:fd:fa:7d: c7:48:cf:70:a0:b4:cc:06:84:34:45:c8:65:ce:15:18:85:8f: 7b:43:dd:33:67:cb:d5:91:b8:d3:23:1a:0e:1f:6a:5c:5b:0f: 54:8d:e2:2b:16:1d:bb:24:7f:e5:95:e9:55:b6:dc:3b:e0:37: 89:82:6c:40:e4:2b:99:c9:76:9c:74:5e:6d:f1:f2:6e:88:b7: 3e:12:5f:af:c9:b1:1d:a8:3b:fb:e7:4b:0e:fb:82:6b:f9:7b: 12:49:21:dd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZw+B1do68H6XEUKlqfjjcE1SXNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQyMDRaFw0yNjEyMDgyMzQ3MDRaMDMxMTAvBgNV BAMTKEI3Njg5MTA5RTEwRkE2QUZBRTU4RUZGNzRGRjU0ODA0NzI3NzFCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxi6xNIRLz+d+DVEM3qmSyP4i 2nkt2O0LFo70oN98hiAeOh/XjdcnesU5rEL3zgLZynOKxOUAOHTP6v3PxeO375fq qslDnn+blTNHjVxrNg/GWxeRa1IQlM4IepHpZignefYWwvvAxjiFz8LCLV8nZ3Yt lmFJOx6CHJABb52l7rbbOH3z2FOYwJDT2S5fZz/NRNZcXZr47CZA5IhGypZUBSNt aGoUyFiU32wEjRbh1IihA7uzwPGNxDAyVnDNfTSUgmHTn9jzvyoKp8iXVkXdOpbY s+TliFT5vCp0I0pm0jQDvcn9h7pdE0BV4h8mrn6AVYJyiaZAow7RICRrpl3dAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUt2iRCeEPpq+uWO/3T/VIBHJ3G8AwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzQzNTJlMzEzNjM3MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3 MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALac0MA0GCSqGSIb3DQEBCwUAA4IBAQDZ4PHiTeBF +Qhdnz/iPDdN95KdoPpK2T2jDhj+IlzUHFxNflmQm7I6GfTv9vULnMRu1tha7U7G 9IrOF4XCGIts/U66q0Z/QNgxC1NkU+GHCbnymOZxN5cBM+U3pzqT7cglfVmG93rt IWfU0kWD3sXttTZhoLxSbZAesvapnxC1Y3uswONdmtNRQZalvROy/MX4xCzWTZej FYXxuM1wf2P9+n3HSM9woLTMBoQ0RchlzhUYhY97Q90zZ8vVkbjTIxoOH2pcWw9U jeIrFh27JH/llelVttw74DeJgmxA5CuZyXacdF5t8fJuiLc+El+vybEdqDv750sO +4Jr+XsSSSHd -----END CERTIFICATE-----Generated at Fri Dec 19 13:51:23 2025 by rpki-client