This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa File: 34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (raw, json) Hash identifier: WZH/FBL8KYe9RpmAeG0RzYm5SgsWKYQv6IaKTHK4Yls= Subject key identifier: E4:E4:8B:59:CD:D8:10:C1:96:18:D2:69:59:9C:7E:6E:1D:D5:64:72 Certificate issuer: /CN=5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5 Certificate serial: 553734F8BD52C62DDEEA63AE96FA3AAD1DC1DF17 Authority key identifier: 5A:DB:0C:CE:28:CF:EE:28:81:89:8D:F0:F0:0D:83:D3:9B:64:AF:C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa Signing time: Mon 22 Dec 2025 22:28:35 +0000 ROA not before: Mon 22 Dec 2025 22:23:35 +0000 ROA not after: Mon 21 Dec 2026 22:28:35 +0000 asID: 269025 IP address blocks: 45.178.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.crl rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 18:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:37:34:f8:bd:52:c6:2d:de:ea:63:ae:96:fa:3a:ad:1d:c1:df:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5 Validity Not Before: Dec 22 22:23:35 2025 GMT Not After : Dec 21 22:28:35 2026 GMT Subject: CN=E4E48B59CDD810C19618D269599C7E6E1DD56472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4a:c9:aa:8a:35:70:3a:c7:68:a2:2e:17:74: cd:39:83:51:9e:7b:cb:f9:0a:6b:46:6e:7d:be:a4: 92:63:3b:5d:f2:4d:b2:fa:e1:88:fe:89:1f:c1:14: 1b:5a:14:ff:b9:9c:cb:5f:5d:ba:7e:33:cc:58:7b: 9c:1d:8d:d7:f0:64:c9:b9:67:77:f3:a2:62:07:c3: 0f:44:6e:d0:ac:b0:f7:a3:e6:ae:06:a8:b0:3f:b5: 22:49:54:f0:7a:be:fa:c5:e1:fb:00:6c:4e:1d:36: b7:ba:fe:0a:35:99:a7:e9:21:c9:b3:fe:05:bb:9f: 30:ca:9b:ce:f7:d1:40:52:51:b7:fa:49:ec:b6:5d: 12:92:1e:d3:40:7b:8b:47:89:d7:b2:ba:85:05:6e: 3f:01:a0:24:0d:09:1e:9a:01:e6:8c:aa:ee:49:a4: ee:47:c4:56:6c:0c:5f:ee:13:e7:14:ca:cf:04:ab: 35:e9:26:15:39:d8:81:d5:7d:44:b5:d0:8b:32:7b: 6e:5d:e1:ed:32:31:8e:09:70:cc:9d:05:7d:f5:a0: b7:99:74:00:a9:5e:c3:95:f4:11:25:0a:76:47:1c: e9:81:65:67:c4:9e:65:cf:b8:76:82:ea:7c:fe:62: 54:e1:bc:a6:20:dd:5c:5f:b9:9d:85:64:f3:9d:3a: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E4:8B:59:CD:D8:10:C1:96:18:D2:69:59:9C:7E:6E:1D:D5:64:72 X509v3 Authority Key Identifier: keyid:5A:DB:0C:CE:28:CF:EE:28:81:89:8D:F0:F0:0D:83:D3:9B:64:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ADB0CCE28CFEE2881898DF0F00D83D39B64AFC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.128.0/22 Signature Algorithm: sha256WithRSAEncryption 43:99:cd:db:1b:cc:7a:97:04:64:f3:0c:bd:56:4c:5b:f2:66: 72:bb:29:88:ac:79:e2:90:b1:20:b2:6b:f7:4b:1f:dc:87:69: b8:5f:ec:2d:df:4b:79:d8:6a:21:31:4b:7d:09:9c:17:36:82: 30:5d:9a:1c:30:d2:2f:a5:27:11:ea:55:33:1b:d6:45:9a:f2: 3e:9a:7c:11:c1:74:7d:72:7a:35:46:31:ce:81:bf:9f:5e:16: e6:a7:f4:51:53:c5:3d:91:0a:13:eb:22:31:b1:da:97:b0:46: e0:93:55:fb:1a:f4:9d:1e:97:5c:f2:69:13:3d:7d:ba:71:69: f3:a8:27:6c:14:82:62:2d:cb:77:45:56:42:b2:ed:df:3f:dd: a4:6d:03:e3:7d:4d:2b:71:4a:69:32:76:92:66:98:f0:ec:27: 84:69:79:1a:25:06:b8:36:e3:70:79:af:30:61:c8:96:7c:25: 36:fe:59:a7:a2:12:3c:52:47:7c:f2:d1:e9:a9:a6:d1:ce:35: 3d:bb:2f:36:39:0c:89:ce:c4:88:f7:a4:48:ed:85:cd:4d:c5: fa:ab:9d:11:0e:a3:c9:5e:fc:0a:8c:ac:04:d0:56:58:02:4d: cd:36:77:d0:90:0e:2f:d2:db:82:3a:5b:4c:2c:d4:6d:f8:18: 67:c5:87:30 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVTc0+L1Sxi3e6mOulvo6rR3B3xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEQjBDQ0UyOENGRUUyODgxODk4REYwRjAwRDgzRDM5 QjY0QUZDNTAeFw0yNTEyMjIyMjIzMzVaFw0yNjEyMjEyMjI4MzVaMDMxMTAvBgNV BAMTKEU0RTQ4QjU5Q0REODEwQzE5NjE4RDI2OTU5OUM3RTZFMURENTY0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzSsmqijVwOsdooi4XdM05g1Ge e8v5CmtGbn2+pJJjO13yTbL64Yj+iR/BFBtaFP+5nMtfXbp+M8xYe5wdjdfwZMm5 Z3fzomIHww9EbtCssPej5q4GqLA/tSJJVPB6vvrF4fsAbE4dNre6/go1mafpIcmz /gW7nzDKm8730UBSUbf6Sey2XRKSHtNAe4tHideyuoUFbj8BoCQNCR6aAeaMqu5J pO5HxFZsDF/uE+cUys8EqzXpJhU52IHVfUS10Isye25d4e0yMY4JcMydBX31oLeZ dACpXsOV9BElCnZHHOmBZWfEnmXPuHaC6nz+YlThvKYg3VxfuZ2FZPOdOqn5AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU5OSLWc3YEMGWGNJpWZx+bh3VZHIwHwYDVR0j BBgwFoAUWtsMzijP7iiBiY3w8A2D05tkr8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHFmVHRLd2QxWUhNSFVwRjV3MjhCc2k4YmdDRFBzeUtITlBiOXkxNkhR cWQvMC81QURCMENDRTI4Q0ZFRTI4ODE4OThERjBGMDBEODNEMzlCNjRBRkM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBREIwQ0NFMjhDRkVFMjg4 MTg5OERGMEYwMEQ4M0QzOUI2NEFGQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hxZlR0S3dkMVlITUhVcEY1dzI4QnNpOGJnQ0RQc3lLSE5QYjl5MTZIUXFkLzAv MzQzNTJlMzEzNzM4MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzkzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItsoAwDQYJKoZIhvcNAQELBQADggEBAEOZzdsb zHqXBGTzDL1WTFvyZnK7KYiseeKQsSCya/dLH9yHabhf7C3fS3nYaiExS30JnBc2 gjBdmhww0i+lJxHqVTMb1kWa8j6afBHBdH1yejVGMc6Bv59eFuan9FFTxT2RChPr IjGx2pewRuCTVfsa9J0el1zyaRM9fbpxafOoJ2wUgmIty3dFVkKy7d8/3aRtA+N9 TStxSmkydpJmmPDsJ4RpeRolBrg243B5rzBhyJZ8JTb+WaeiEjxSR3zy0empptHO NT27LzY5DInOxIj3pEjthc1NxfqrnREOo8le/AqMrATQVlgCTc02d9CQDi/S24I6 W0ws1G34GGfFhzA= -----END CERTIFICATE-----Generated at Tue Dec 23 18:13:57 2025 by rpki-client