This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32322d3232203d3e203532383338.roa File: 34352e3136372e3134342e302f32322d3232203d3e203532383338.roa (raw, json) Hash identifier: bdIheBbK7PlfuclCleS66Q1ceFA4DvN+kBUJgjk7fpg= Subject key identifier: 3F:EF:20:C2:99:2F:51:82:D7:4D:39:0D:39:D3:AD:A3:BB:E2:E6:B6 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 42B5E69F9006AD5AA819ACC3D460A3C636FA0516 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32322d3232203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:25:24 +0000 ROA not before: Wed 03 Dec 2025 00:20:24 +0000 ROA not after: Wed 02 Dec 2026 00:25:24 +0000 asID: 52838 IP address blocks: 45.167.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b5:e6:9f:90:06:ad:5a:a8:19:ac:c3:d4:60:a3:c6:36:fa:05:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:20:24 2025 GMT Not After : Dec 2 00:25:24 2026 GMT Subject: CN=3FEF20C2992F5182D74D390D39D3ADA3BBE2E6B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:c4:0c:50:ae:50:e8:d6:15:93:aa:49:ff: a5:92:65:02:3e:a5:c5:b4:78:25:6c:37:c6:3a:c3: 4a:4f:9d:a6:88:72:e6:18:f2:d7:16:1b:8a:46:4c: dd:0c:cf:96:e6:21:a3:8f:62:73:f4:ca:27:33:8a: 67:9e:c9:a9:8a:d3:e8:46:eb:7c:9d:15:c9:c1:d9: de:ee:ea:83:58:6a:b8:83:77:56:e7:5e:a9:9f:c3: 62:9a:10:ec:19:28:79:7c:20:f2:ff:9e:20:d2:c0: 68:44:b9:0c:15:bd:6b:2f:fc:03:11:5f:9e:af:52: 3a:dd:c4:5d:7a:fb:a9:e4:5f:7c:d5:b4:4b:99:64: 9f:d5:d6:3c:32:60:40:06:1a:ec:62:ff:45:e7:32: b9:d7:e2:8d:8a:f7:0d:54:4a:31:d2:6f:2d:59:7b: e7:c0:b3:a3:21:c7:3f:eb:ad:f0:d7:0d:76:b4:6d: dc:c1:29:8f:2b:02:d8:60:80:ba:70:4a:bc:c7:15: 0d:67:10:b9:67:80:1a:7f:2f:35:4c:93:79:d5:0c: a4:41:6c:3d:03:5d:05:36:28:e4:f2:1a:df:81:d6: 6f:54:78:5e:73:8d:c7:2b:ea:36:99:66:45:cf:2f: d3:f0:06:b6:c4:38:24:c2:a5:47:8a:c2:d2:ae:a7: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EF:20:C2:99:2F:51:82:D7:4D:39:0D:39:D3:AD:A3:BB:E2:E6:B6 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134342e302f32322d3232203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.144.0/22 Signature Algorithm: sha256WithRSAEncryption 58:10:3a:f5:a8:94:df:1e:86:41:47:2e:14:32:93:b4:cd:62: 89:18:2b:9e:f4:87:20:79:f0:6a:53:7e:72:ac:8d:cc:93:f1: 6f:fe:0f:23:c5:09:94:4a:04:55:3c:e0:34:e8:23:1b:68:47: 34:8e:d3:03:0b:4f:5b:c5:85:3f:14:15:c3:f4:bf:89:37:c8: 01:44:8d:cd:73:b6:94:ce:db:4d:7d:c0:a8:20:28:85:1d:7d: cc:6b:a9:52:97:f1:15:19:c2:7c:bf:37:23:15:e0:31:a5:51: f7:06:87:db:03:98:ea:6a:54:2c:ac:f5:8a:2f:83:cb:76:94: 12:75:e1:85:ae:04:2d:21:78:5d:6b:c9:25:49:03:00:a2:85: a8:a4:1f:b5:6b:f8:1c:75:e6:1d:7b:7a:30:b9:a3:0b:a9:29: 34:6a:e1:db:1a:8e:c8:07:af:af:c9:ae:41:62:28:f3:77:fa: 37:4d:5f:41:83:89:01:6b:8c:cf:6d:eb:b1:e7:03:48:87:d0: e5:80:a7:1e:54:88:ac:32:48:cb:7b:ce:7a:fc:07:29:3b:5c: d5:9f:cf:be:cb:70:c0:c2:4f:5e:e7:8b:00:7f:b2:4d:d4:ee: df:54:af:f7:8f:99:a2:4e:65:15:ec:ac:0b:c1:65:98:83:d8: cc:8c:e5:9c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUQrXmn5AGrVqoGazD1GCjxjb6BRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDIwMjRaFw0yNjEyMDIwMDI1MjRaMDMxMTAvBgNV BAMTKDNGRUYyMEMyOTkyRjUxODJENzREMzkwRDM5RDNBREEzQkJFMkU2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA48QMUK5Q6NYVk6pJ/6WSZQI+ pcW0eCVsN8Y6w0pPnaaIcuYY8tcWG4pGTN0Mz5bmIaOPYnP0yiczimeeyamK0+hG 63ydFcnB2d7u6oNYariDd1bnXqmfw2KaEOwZKHl8IPL/niDSwGhEuQwVvWsv/AMR X56vUjrdxF16+6nkX3zVtEuZZJ/V1jwyYEAGGuxi/0XnMrnX4o2K9w1USjHSby1Z e+fAs6Mhxz/rrfDXDXa0bdzBKY8rAthggLpwSrzHFQ1nELlngBp/LzVMk3nVDKRB bD0DXQU2KOTyGt+B1m9UeF5zjccr6jaZZkXPL9PwBrbEOCTCpUeKwtKup3vXAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUP+8gwpkvUYLXTTkNOdOto7vi5rYwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzEzNjM3MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCLaeQMA0GCSqGSIb3DQEBCwUAA4IBAQBYEDr1qJTfHoZB Ry4UMpO0zWKJGCue9IcgefBqU35yrI3Mk/Fv/g8jxQmUSgRVPOA06CMbaEc0jtMD C09bxYU/FBXD9L+JN8gBRI3Nc7aUzttNfcCoICiFHX3Ma6lSl/EVGcJ8vzcjFeAx pVH3BofbA5jqalQsrPWKL4PLdpQSdeGFrgQtIXhda8klSQMAooWopB+1a/gcdeYd e3owuaMLqSk0auHbGo7IB6+vya5BYijzd/o3TV9Bg4kBa4zPbeux5wNIh9DlgKce VIisMkjLe856/AcpO1zVn8++y3DAwk9e54sAf7JN1O7fVK/3j5miTmUV7KwLwWWY g9jMjOWc -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:06 2025 by rpki-client