This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20313938393439.roa File: 34352e36352e3232302e302f32322d3234203d3e20313938393439.roa (raw, json) Hash identifier: Eg8wizHyBV36tEMIqHeuEAio3682XC4xlx1HHWrzu0o= Subject key identifier: 3B:86:83:8B:4F:A7:EC:21:0B:DB:25:B1:30:16:9E:A8:89:45:40:83 Certificate issuer: /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D Certificate serial: 4C2DE85C41CFD11C09A44AB8FEB12EAC2F13F0C1 Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20313938393439.roa Signing time: Tue 09 Dec 2025 21:33:57 +0000 ROA not before: Tue 09 Dec 2025 21:28:57 +0000 ROA not after: Tue 08 Dec 2026 21:33:57 +0000 asID: 198949 IP address blocks: 45.65.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2d:e8:5c:41:cf:d1:1c:09:a4:4a:b8:fe:b1:2e:ac:2f:13:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D Validity Not Before: Dec 9 21:28:57 2025 GMT Not After : Dec 8 21:33:57 2026 GMT Subject: CN=3B86838B4FA7EC210BDB25B130169EA889454083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:d9:81:fb:16:09:83:f8:8d:ba:95:d4:20: 02:fc:0e:f9:62:99:e8:06:f5:ad:7c:fa:5c:4f:14: 24:06:ac:11:a8:d4:b2:6b:b8:c1:fa:cf:c2:7e:02: ec:60:03:5a:29:e8:22:89:54:d9:e4:49:e8:3f:6a: b9:3c:04:bb:73:fc:4a:80:d9:8f:80:9a:07:e6:53: e3:5c:bf:3b:49:b0:a4:25:f1:48:10:fa:c1:c1:aa: 24:2a:36:cd:99:44:6e:91:f7:a4:e5:a1:d9:8a:a8: 6e:9e:3b:f7:37:01:3f:13:13:2f:dd:dc:e9:11:fe: 13:1e:ff:e0:18:18:e2:bc:c8:c2:2d:53:fe:82:bd: 06:67:3d:b3:35:7b:1e:6a:ce:39:55:41:b5:bc:e4: 9f:13:1d:a0:71:72:21:98:ed:47:f3:b8:cb:43:f5: b1:06:ee:e5:e6:a5:05:9f:e0:03:01:ff:3c:09:21: d1:f6:d7:29:1f:83:8b:fc:e9:1a:ba:e0:5c:45:66: 43:92:5e:20:c0:e2:af:60:9d:31:33:6e:4f:48:68: 6e:5d:18:cb:ff:72:42:9d:32:5a:fc:a9:68:cf:67: 2d:dc:b1:41:63:83:b4:ba:cc:1b:79:c7:77:47:b2: 3b:4f:f3:b1:0a:82:e7:f5:97:f0:e3:5c:bc:c6:8b: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:86:83:8B:4F:A7:EC:21:0B:DB:25:B1:30:16:9E:A8:89:45:40:83 X509v3 Authority Key Identifier: keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.220.0/22 Signature Algorithm: sha256WithRSAEncryption 87:79:d7:63:27:ad:a6:b3:ab:a2:c6:6a:f5:e0:f0:54:ad:3c: ae:f6:ad:90:bf:84:3e:fb:16:a1:c4:42:98:c9:b9:2b:11:96: 74:0b:5b:30:8b:40:54:16:38:ef:32:8f:55:f3:08:ef:45:2f: de:ab:5b:56:ab:01:0a:70:95:c2:ea:50:92:bf:74:00:58:98: a4:bd:45:3d:b7:bb:94:f9:e8:8f:de:45:3e:25:68:06:df:c4: 1a:a0:40:e8:9c:5e:3c:33:3e:e4:62:29:cc:5d:e6:30:04:af: 3a:c4:1a:6c:82:54:e2:13:b1:2f:bb:3b:a8:94:d5:21:46:72: 59:24:be:8e:7c:1f:ed:a0:e4:da:43:9e:84:66:be:34:34:26: 9b:b7:16:ca:5f:d4:ea:d9:e6:95:60:40:8a:c6:90:47:d0:bb: f2:24:6f:c8:bb:6d:5d:28:e3:c3:2a:31:1b:72:cd:79:7b:06: ca:39:ae:7b:e4:21:fe:1c:30:3e:49:a4:4f:cc:3e:d0:99:91: 43:58:64:87:3f:18:fc:c5:c9:36:af:8d:ee:e5:88:d3:bf:43: c4:30:a3:df:59:a1:67:0f:58:e6:52:03:3b:ef:11:e4:b1:d2: 4b:e5:c6:d9:32:ae:63:49:fe:56:b4:91:d9:6c:e4:50:fb:2c: c7:da:23:ae -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUTC3oXEHP0RwJpEq4/rEurC8T8MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF N0IzQTEwRDAeFw0yNTEyMDkyMTI4NTdaFw0yNjEyMDgyMTMzNTdaMDMxMTAvBgNV BAMTKDNCODY4MzhCNEZBN0VDMjEwQkRCMjVCMTMwMTY5RUE4ODk0NTQwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8o9mB+xYJg/iNupXUIAL8Dvli megG9a18+lxPFCQGrBGo1LJruMH6z8J+AuxgA1op6CKJVNnkSeg/ark8BLtz/EqA 2Y+AmgfmU+NcvztJsKQl8UgQ+sHBqiQqNs2ZRG6R96TlodmKqG6eO/c3AT8TEy/d 3OkR/hMe/+AYGOK8yMItU/6CvQZnPbM1ex5qzjlVQbW85J8THaBxciGY7UfzuMtD 9bEG7uXmpQWf4AMB/zwJIdH21ykfg4v86Rq64FxFZkOSXiDA4q9gnTEzbk9IaG5d GMv/ckKdMlr8qWjPZy3csUFjg7S6zBt5x3dHsjtP87EKguf1l/DjXLzGiylfAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUO4aDi0+n7CEL2yWxMBaeqIlFQIMwHwYDVR0j BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2 RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0htZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIv MzQzNTJlMzYzNTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzOTM4 MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLUHcMA0GCSqGSIb3DQEBCwUAA4IBAQCHeddjJ62m s6uixmr14PBUrTyu9q2Qv4Q++xahxEKYybkrEZZ0C1swi0BUFjjvMo9V8wjvRS/e q1tWqwEKcJXC6lCSv3QAWJikvUU9t7uU+eiP3kU+JWgG38QaoEDonF48Mz7kYinM XeYwBK86xBpsglTiE7EvuzuolNUhRnJZJL6OfB/toOTaQ56EZr40NCabtxbKX9Tq 2eaVYECKxpBH0LvyJG/Iu21dKOPDKjEbcs15ewbKOa575CH+HDA+SaRPzD7QmZFD WGSHPxj8xck2r43u5YjTv0PEMKPfWaFnD1jmUgM77xHksdJL5cbZMq5jSf5WtJHZ bORQ+yzH2iOu -----END CERTIFICATE-----Generated at Sat Dec 20 09:22:03 2025 by rpki-client