This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20313938393439.roa File: 34352e3137322e3235322e302f32322d3234203d3e20313938393439.roa (raw, json) Hash identifier: OSQco0uciTZz93yEcW/l3xJMOgPf1CSgPp7tFMkxCQI= Subject key identifier: 4F:D2:6A:F9:D6:1A:FD:13:80:FA:D2:87:C4:58:F5:D1:D2:76:8B:20 Certificate issuer: /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE Certificate serial: 2CA3DDC2AA6894A299D321C7C988C73734D8CC5F Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20313938393439.roa Signing time: Tue 06 Jan 2026 16:58:08 +0000 ROA not before: Tue 06 Jan 2026 16:53:08 +0000 ROA not after: Tue 05 Jan 2027 16:58:08 +0000 asID: 198949 IP address blocks: 45.172.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 Jan 2026 13:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a3:dd:c2:aa:68:94:a2:99:d3:21:c7:c9:88:c7:37:34:d8:cc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE Validity Not Before: Jan 6 16:53:08 2026 GMT Not After : Jan 5 16:58:08 2027 GMT Subject: CN=4FD26AF9D61AFD1380FAD287C458F5D1D2768B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:07:c4:82:8b:6c:e5:fd:c0:aa:30:a1:c8: b3:6d:0d:66:74:76:cd:f5:cb:65:01:69:2f:de:cb: f9:ee:fe:18:a9:1d:a7:aa:77:6d:fa:93:2a:5f:ca: f1:7d:25:87:2b:20:63:79:1d:7c:1d:2d:78:bb:24: 80:a4:ef:02:c5:39:c2:8f:85:5c:d1:a6:59:2c:ff: 74:9d:86:c7:67:40:bb:a6:9d:a5:b1:6b:ef:ba:12: 1a:2e:21:5c:36:4a:47:a4:81:4f:b5:58:9e:c1:f6: bf:5d:c8:da:8a:43:cf:f0:30:4f:49:ae:78:50:8d: 4a:45:04:aa:8c:4f:f0:f2:c4:5a:b0:5e:8c:0e:06: 2a:7b:c2:c4:4f:a4:98:1a:ab:1b:e2:dd:61:9b:2c: 8d:4d:c2:ef:8d:1b:9e:69:63:74:55:a5:e4:dc:7a: 78:34:30:e5:3d:98:2d:9f:db:f6:b8:bc:f3:0e:1b: 65:65:ce:b7:a1:4c:5e:ca:5a:ab:90:59:5d:df:45: 8c:03:cc:81:5b:e2:15:7d:6c:46:8d:90:91:47:a2: f5:82:4b:cf:a8:f0:8f:c8:c8:a1:f6:3d:41:59:9e: 79:51:78:05:df:46:91:c0:2f:1c:91:58:86:6c:0e: 4d:64:0c:a8:11:14:e1:cf:f4:da:84:32:38:6e:ab: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:6A:F9:D6:1A:FD:13:80:FA:D2:87:C4:58:F5:D1:D2:76:8B:20 X509v3 Authority Key Identifier: keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3137322e3235322e302f32322d3234203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.252.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:e3:ab:06:8a:9b:08:f3:c1:94:49:f0:f1:60:24:21:9d:80: fd:bf:ea:01:72:c0:d5:ac:d8:51:a0:d5:4a:a9:10:84:88:1e: f0:bb:df:31:d6:82:48:d5:fe:dd:05:10:ca:d0:eb:8e:2b:55: 18:6d:f5:73:c9:e0:30:2f:4e:98:67:4d:58:77:bb:95:6a:29: 16:b2:e4:95:bc:88:96:80:d9:1b:1d:34:57:0c:30:ec:a2:68: b5:59:6d:51:9f:44:4f:01:6b:80:3f:59:b8:c7:1b:85:5e:d9: 60:bc:1f:15:87:74:98:6e:f2:d1:ec:69:86:93:8a:63:a9:96: 10:bb:76:dc:21:e8:10:1b:5b:de:3a:ee:c6:d7:45:31:0c:90: 68:1f:c0:a2:98:0a:a0:24:a1:d1:7c:a6:d0:0e:09:c2:3c:5e: 59:b0:08:cc:17:11:0e:90:58:92:7f:55:be:db:1f:11:02:be: ac:56:e8:91:01:ff:1f:4c:b5:54:60:cf:9e:38:93:81:f1:b7: 3b:e2:42:01:a5:9e:46:43:f0:b9:83:d8:c5:53:b0:b3:ed:e3: e2:31:c6:57:c8:23:5c:ab:70:a7:f3:fc:b6:5b:59:ed:7b:0b: 5e:7e:65:56:88:b0:fd:5e:0c:2a:6a:da:c4:41:3b:fd:a3:44: 66:3f:bf:88 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULKPdwqpolKKZ0yHHyYjHNzTYzF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4Njk4QzFDMTNFQTNDNjY0NDJDN0Y3N0JDMzc1MDlD NDhBMUJBRTAeFw0yNjAxMDYxNjUzMDhaFw0yNzAxMDUxNjU4MDhaMDMxMTAvBgNV BAMTKDRGRDI2QUY5RDYxQUZEMTM4MEZBRDI4N0M0NThGNUQxRDI3NjhCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKwfEgots5f3AqjChyLNtDWZ0 ds31y2UBaS/ey/nu/hipHaeqd236kypfyvF9JYcrIGN5HXwdLXi7JICk7wLFOcKP hVzRplks/3SdhsdnQLumnaWxa++6EhouIVw2SkekgU+1WJ7B9r9dyNqKQ8/wME9J rnhQjUpFBKqMT/DyxFqwXowOBip7wsRPpJgaqxvi3WGbLI1Nwu+NG55pY3RVpeTc eng0MOU9mC2f2/a4vPMOG2VlzrehTF7KWquQWV3fRYwDzIFb4hV9bEaNkJFHovWC S8+o8I/IyKH2PUFZnnlReAXfRpHALxyRWIZsDk1kDKgRFOHP9NqEMjhuq5nZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUT9Jq+dYa/ROA+tKHxFj10dJ2iyAwHwYDVR0j BBgwFoAUtIaYwcE+o8ZkQsf3e8N1CcSKG64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM WHgvMC9CNDg2OThDMUMxM0VBM0M2NjQ0MkM3Rjc3QkMzNzUwOUM0OEExQkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODY5OEMxQzEzRUEzQzY2 NDQyQzdGNzdCQzM3NTA5QzQ4QTFCQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAv MzQzNTJlMzEzNzMyMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM5 MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItrPwwDQYJKoZIhvcNAQELBQADggEBAG3jqwaK mwjzwZRJ8PFgJCGdgP2/6gFywNWs2FGg1UqpEISIHvC73zHWgkjV/t0FEMrQ644r VRht9XPJ4DAvTphnTVh3u5VqKRay5JW8iJaA2RsdNFcMMOyiaLVZbVGfRE8Ba4A/ WbjHG4Ve2WC8HxWHdJhu8tHsaYaTimOplhC7dtwh6BAbW9467sbXRTEMkGgfwKKY CqAkodF8ptAOCcI8XlmwCMwXEQ6QWJJ/Vb7bHxECvqxW6JEB/x9MtVRgz544k4Hx tzviQgGlnkZD8LmD2MVTsLPt4+IxxlfII1yrcKfz/LZbWe17C15+ZVaIsP1eDCpq 2sRBO/2jRGY/v4g= -----END CERTIFICATE-----Generated at Wed Jan 7 22:31:06 2026 by rpki-client