This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa File: 34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (raw, json) Hash identifier: rjgHGsCTBPDTDg7X203IEk5P4TNzu4bDNSIY277SePk= Subject key identifier: 87:FF:4A:3A:35:C7:1D:BB:F8:E1:4D:14:BB:81:AC:33:CC:2C:17:44 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 4B6D7529540CDD2AEAE98928EF54D2E8EAF9F7AB Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:47:04 +0000 ROA not before: Tue 09 Dec 2025 23:42:04 +0000 ROA not after: Tue 08 Dec 2026 23:47:04 +0000 asID: 267991 IP address blocks: 45.167.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6d:75:29:54:0c:dd:2a:ea:e9:89:28:ef:54:d2:e8:ea:f9:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:42:04 2025 GMT Not After : Dec 8 23:47:04 2026 GMT Subject: CN=87FF4A3A35C71DBBF8E14D14BB81AC33CC2C1744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:54:5f:88:8f:11:8e:9d:94:13:58:dc:4a: 6e:fc:96:15:86:1b:62:8f:c8:be:37:b4:f1:3e:06: 20:cb:af:67:c1:52:0a:5c:9e:bd:99:fc:3c:3b:1e: a6:b3:f1:9e:0b:3a:b3:5e:bc:45:14:eb:31:e0:2c: 8a:29:5c:4f:cb:0e:71:94:e0:1a:58:a5:63:47:b1: 14:fd:69:e1:d9:0f:c9:58:0a:0d:03:0b:d4:36:1d: 9d:af:84:b9:01:ab:cc:49:80:03:ce:ca:f8:6b:74: fa:05:5d:84:30:7f:e5:89:9e:d8:f3:53:12:64:d8: 24:be:45:81:bc:17:8d:f8:36:ae:49:12:90:91:e2: 42:2e:7a:1f:b2:09:8d:13:5d:05:f3:3b:95:c4:74: 69:dc:92:d0:aa:ab:d4:d8:32:b5:71:2f:3b:93:a6: 5a:6c:c0:da:42:50:64:7a:b5:ab:c6:7c:46:a1:4b: 25:aa:5d:48:8e:7d:cf:58:75:9c:1a:0a:15:d0:53: 18:f7:48:98:4c:5c:96:71:9d:ec:a5:6d:c4:b4:f2: 2d:a3:f6:e4:57:b8:e9:4f:99:98:8e:86:6f:18:1d: d1:aa:95:c1:5d:33:90:fc:dc:b9:0b:e6:f6:1a:a5: a2:6e:8c:87:cd:e3:5e:67:44:d5:80:28:90:8f:ae: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FF:4A:3A:35:C7:1D:BB:F8:E1:4D:14:BB:81:AC:33:CC:2C:17:44 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.54.0/24 Signature Algorithm: sha256WithRSAEncryption 72:9d:f1:4b:20:44:84:54:cf:b8:63:a3:0a:96:a3:38:a8:6d: 3a:12:ee:ff:0c:90:28:ac:15:5c:d7:aa:a4:09:66:47:1d:02: de:c9:8e:5d:78:b4:da:25:6c:2b:b7:fc:1f:23:85:a4:8b:25: 29:8f:fd:b1:ff:33:fc:aa:72:7c:b8:5f:d7:58:1e:4b:b1:30: f4:78:f8:90:a5:8e:61:5f:bd:57:51:84:0d:c3:fc:de:54:a8: 03:af:a0:ad:e4:eb:66:ac:9a:8f:b7:25:e5:5c:5b:e8:21:4c: 3c:7d:fc:cd:d9:3d:81:33:e5:c2:27:36:7d:3a:13:39:51:f8: 06:77:7b:57:5c:c4:f3:05:9e:d3:d3:8e:11:64:64:78:4c:e1: 0a:3b:d5:5b:61:c4:70:f7:4e:0b:53:62:c8:3c:c1:83:a9:c1: c0:44:3f:95:11:a0:18:aa:98:dc:33:3f:be:8e:b3:56:a3:3e: 83:4b:01:e6:7d:00:f1:61:1c:cd:ee:ad:7b:51:9c:31:af:99: e5:da:58:69:58:2b:4a:3e:0f:4c:86:ad:be:5e:9f:92:db:ac: 12:14:c9:78:12:4f:92:d5:ef:a1:e9:95:f8:a3:92:6a:eb:8c: 3d:6c:1e:de:ed:b1:9f:c3:af:7d:62:52:b9:34:48:e7:73:f5: 9a:85:d2:6c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUS211KVQM3Srq6Yko71TS6Or596swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQyMDRaFw0yNjEyMDgyMzQ3MDRaMDMxMTAvBgNV BAMTKDg3RkY0QTNBMzVDNzFEQkJGOEUxNEQxNEJCODFBQzMzQ0MyQzE3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYVRfiI8Rjp2UE1jcSm78lhWG G2KPyL43tPE+BiDLr2fBUgpcnr2Z/Dw7Hqaz8Z4LOrNevEUU6zHgLIopXE/LDnGU 4BpYpWNHsRT9aeHZD8lYCg0DC9Q2HZ2vhLkBq8xJgAPOyvhrdPoFXYQwf+WJntjz UxJk2CS+RYG8F434Nq5JEpCR4kIueh+yCY0TXQXzO5XEdGncktCqq9TYMrVxLzuT plpswNpCUGR6tavGfEahSyWqXUiOfc9YdZwaChXQUxj3SJhMXJZxneylbcS08i2j 9uRXuOlPmZiOhm8YHdGqlcFdM5D83LkL5vYapaJujIfN415nRNWAKJCPrr2zAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUh/9KOjXHHbv44U0Uu4GsM8wsF0QwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzQzNTJlMzEzNjM3MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3 MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALac2MA0GCSqGSIb3DQEBCwUAA4IBAQBynfFLIESE VM+4Y6MKlqM4qG06Eu7/DJAorBVc16qkCWZHHQLeyY5deLTaJWwrt/wfI4WkiyUp j/2x/zP8qnJ8uF/XWB5LsTD0ePiQpY5hX71XUYQNw/zeVKgDr6Ct5OtmrJqPtyXl XFvoIUw8ffzN2T2BM+XCJzZ9OhM5UfgGd3tXXMTzBZ7T044RZGR4TOEKO9VbYcRw 904LU2LIPMGDqcHARD+VEaAYqpjcMz++jrNWoz6DSwHmfQDxYRzN7q17UZwxr5nl 2lhpWCtKPg9Mhq2+Xp+S26wSFMl4Ek+S1e+h6ZX4o5Jq64w9bB7e7bGfw699YlK5 NEjnc/WahdJs -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:07 2025 by rpki-client