This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa File: 34352e3136372e35352e302f32342d3234203d3e20323637393931.roa (raw, json) Hash identifier: GdKWxwuNIyGD4JsuQVGEZwAvo2O7++yp6nP5dcdEfKc= Subject key identifier: 9C:93:67:2D:F7:A9:65:EA:94:7E:28:9E:4C:75:59:4B:3C:7B:96:82 Certificate issuer: /CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Certificate serial: 705B8C1CD1669AA7BCA5F595FA41396E13F7282C Authority key identifier: 70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa Signing time: Tue 09 Dec 2025 23:46:57 +0000 ROA not before: Tue 09 Dec 2025 23:41:57 +0000 ROA not after: Tue 08 Dec 2026 23:46:57 +0000 asID: 267991 IP address blocks: 45.167.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5b:8c:1c:d1:66:9a:a7:bc:a5:f5:95:fa:41:39:6e:13:f7:28:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB Validity Not Before: Dec 9 23:41:57 2025 GMT Not After : Dec 8 23:46:57 2026 GMT Subject: CN=9C93672DF7A965EA947E289E4C75594B3C7B9682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:86:d2:cf:ba:46:f0:ff:43:23:98:09:4c: f9:e4:23:e3:73:5a:80:ec:7b:25:b4:ef:0a:5d:1d: 67:6b:ad:5a:6f:86:e9:27:3f:81:3c:fd:e1:a0:cc: 0a:1e:55:0c:4d:e3:40:b0:38:fb:b4:1c:58:eb:71: dc:42:7d:d3:31:80:d3:35:41:88:93:37:e5:8a:00: d4:0c:29:05:16:9c:56:8d:53:51:70:6d:6d:f1:aa: a9:b3:cb:81:74:83:3e:50:65:97:55:af:34:d0:dd: 7e:02:69:b8:6e:7c:c5:6c:f1:0f:ac:8d:03:be:d3: f5:18:4a:e0:2d:b6:99:c9:07:e1:15:3b:38:02:47: 9d:15:36:b6:6b:05:45:b3:62:b9:aa:d4:18:a6:36: 6e:c7:59:d6:da:a5:4f:22:e7:de:76:70:1d:cd:f4: 34:f3:89:ec:7c:b9:aa:32:12:b9:f4:17:e8:38:cf: 51:55:18:d6:c7:bb:d4:21:e9:67:59:1c:f5:bd:6b: ff:72:92:e7:e8:7d:b6:0c:10:f2:f3:a3:52:6c:74: 5a:92:ed:57:f3:8e:d6:5a:e9:0c:8d:5a:9a:97:dc: cf:78:b9:66:e7:e6:5c:94:b1:1b:fa:cc:be:8a:d5: d6:dc:b7:e3:0f:55:3c:b4:7d:25:96:9b:5e:b4:60: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:93:67:2D:F7:A9:65:EA:94:7E:28:9E:4C:75:59:4B:3C:7B:96:82 X509v3 Authority Key Identifier: keyid:70:EC:9B:11:EA:E1:B7:BF:F0:E1:E8:63:56:5B:18:2D:5B:90:F1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EC9B11EAE1B7BFF0E1E863565B182D5B90F1AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.55.0/24 Signature Algorithm: sha256WithRSAEncryption 68:57:e3:fb:00:b9:ac:c0:16:66:7d:0e:2b:d1:3a:53:05:bc: 4f:dd:7c:4f:23:9d:5e:cd:f2:e4:b6:b4:dc:b3:11:e1:4c:57: f4:a7:73:77:dd:6b:99:75:c1:a7:68:9f:66:e3:67:f3:d0:70: 5e:a4:e0:04:48:dd:68:16:0c:b5:04:83:30:1d:6f:54:b2:da: 51:5a:96:a2:88:98:cd:02:e1:ed:77:97:5a:6f:be:38:b4:00: c2:0b:a6:0d:9d:82:7a:ab:e0:9e:e7:9f:5c:5d:19:16:1d:ed: 91:c7:18:14:fd:06:54:38:a3:b1:e5:7f:c4:60:ed:35:7a:05: 0e:f1:b3:31:06:a6:d4:c2:db:6d:10:84:27:c5:8e:ec:cf:32: 5a:41:80:a1:54:28:df:a0:f6:4c:ed:d6:aa:6b:8a:a8:40:f0: f1:59:45:8f:06:f1:7f:bb:ca:16:16:62:6b:45:0d:e2:18:53: 7a:cb:ee:f8:2d:ca:ca:db:e9:17:a7:43:17:dc:9c:dd:62:ee: 65:e9:82:ba:4e:11:49:34:66:a0:e4:44:4a:1b:38:44:91:c8: 98:81:8f:13:00:a8:68:3d:84:c0:1b:cb:e2:aa:65:84:d6:f2: ad:12:f1:02:7e:2e:d7:3f:49:da:ad:03:c8:ee:6a:87:b6:2d: fe:23:f9:0a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUcFuMHNFmmqe8pfWV+kE5bhP3KCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFQzlCMTFFQUUxQjdCRkYwRTFFODYzNTY1QjE4MkQ1 QjkwRjFBQjAeFw0yNTEyMDkyMzQxNTdaFw0yNjEyMDgyMzQ2NTdaMDMxMTAvBgNV BAMTKDlDOTM2NzJERjdBOTY1RUE5NDdFMjg5RTRDNzU1OTRCM0M3Qjk2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjL4bSz7pG8P9DI5gJTPnkI+Nz WoDseyW07wpdHWdrrVpvhuknP4E8/eGgzAoeVQxN40CwOPu0HFjrcdxCfdMxgNM1 QYiTN+WKANQMKQUWnFaNU1FwbW3xqqmzy4F0gz5QZZdVrzTQ3X4CabhufMVs8Q+s jQO+0/UYSuAttpnJB+EVOzgCR50VNrZrBUWzYrmq1BimNm7HWdbapU8i5952cB3N 9DTziex8uaoyErn0F+g4z1FVGNbHu9Qh6WdZHPW9a/9ykufofbYMEPLzo1JsdFqS 7VfzjtZa6QyNWpqX3M94uWbn5lyUsRv6zL6K1dbct+MPVTy0fSWWm160YCKVAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUnJNnLfepZeqUfiieTHVZSzx7loIwHwYDVR0j BBgwFoAUcOybEerht7/w4ehjVlsYLVuQ8aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5 Mk4vMC83MEVDOUIxMUVBRTFCN0JGRjBFMUU4NjM1NjVCMTgyRDVCOTBGMUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUM5QjExRUFFMUI3QkZG MEUxRTg2MzU2NUIxODJENUI5MEYxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv MzQzNTJlMzEzNjM3MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3 MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALac3MA0GCSqGSIb3DQEBCwUAA4IBAQBoV+P7ALms wBZmfQ4r0TpTBbxP3XxPI51ezfLktrTcsxHhTFf0p3N33WuZdcGnaJ9m42fz0HBe pOAESN1oFgy1BIMwHW9UstpRWpaiiJjNAuHtd5dab744tADCC6YNnYJ6q+Ce559c XRkWHe2RxxgU/QZUOKOx5X/EYO01egUO8bMxBqbUwtttEIQnxY7szzJaQYChVCjf oPZM7daqa4qoQPDxWUWPBvF/u8oWFmJrRQ3iGFN6y+74LcrK2+kXp0MX3JzdYu5l 6YK6ThFJNGag5ERKGzhEkciYgY8TAKhoPYTAG8viqmWE1vKtEvECfi7XP0narQPI 7mqHti3+I/kK -----END CERTIFICATE-----Generated at Fri Dec 19 13:51:52 2025 by rpki-client