This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32342d3234203d3e203532383338.roa File: 34352e3136372e3134362e302f32342d3234203d3e203532383338.roa (raw, json) Hash identifier: tDo25m8NnBt8ytCKxl0QU8tvW8gBsP36QzN+D3N6nqE= Subject key identifier: D6:86:8B:1A:11:AB:B0:60:C9:ED:8E:5C:69:17:3B:98:43:56:CC:0A Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 33C050669E85C809EDECB57C6098642783CC5007 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32342d3234203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:28:00 +0000 ROA not before: Wed 03 Dec 2025 00:23:00 +0000 ROA not after: Wed 02 Dec 2026 00:28:00 +0000 asID: 52838 IP address blocks: 45.167.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c0:50:66:9e:85:c8:09:ed:ec:b5:7c:60:98:64:27:83:cc:50:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:23:00 2025 GMT Not After : Dec 2 00:28:00 2026 GMT Subject: CN=D6868B1A11ABB060C9ED8E5C69173B984356CC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:f8:57:60:c3:ad:ac:ca:bf:52:df:14:29: 20:8f:8b:33:77:f3:f2:1b:80:3f:e1:e4:f2:43:b3: 3f:b4:1a:aa:32:f7:aa:d8:62:22:c9:ba:78:05:66: 55:5a:c3:52:81:59:5c:39:0b:dc:38:5f:74:fe:4b: ed:cb:81:9d:3d:51:bf:75:40:7f:f9:48:af:5c:f1: c6:da:67:31:16:6a:a2:8c:85:10:cd:56:97:f4:bb: 2b:a6:4d:fa:76:e4:25:49:b9:64:a0:b5:e5:7e:9f: 72:15:a5:31:dc:54:22:12:47:2a:f6:70:45:d2:aa: 4a:ee:06:7e:d4:19:23:32:4e:90:05:fa:1e:5b:1f: cc:f8:7c:f5:ba:c2:56:fa:a5:c6:96:e0:b5:26:9d: 60:95:27:31:34:35:ce:19:2a:33:b3:f6:f3:dc:4d: d8:e7:f3:4f:89:74:a5:66:fe:1d:c3:48:1a:8c:cb: a7:c8:93:97:bb:a3:4f:47:e2:03:bd:50:af:d3:c8: 21:f6:12:63:91:d2:7d:5c:03:be:5b:d5:d8:85:6c: b0:22:ee:10:85:f4:4b:71:b7:71:df:5a:0e:66:88: 9f:c3:10:a6:e4:e6:48:5c:a3:57:f0:ee:87:38:b2: a8:16:69:e7:1a:71:09:f8:15:7d:8f:9b:ad:5b:78: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:8B:1A:11:AB:B0:60:C9:ED:8E:5C:69:17:3B:98:43:56:CC:0A X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134362e302f32342d3234203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.146.0/24 Signature Algorithm: sha256WithRSAEncryption 05:21:cc:3a:c7:4b:0d:28:f5:ba:c4:85:f6:c7:c1:eb:d4:91: 63:41:61:ee:fd:79:73:48:af:11:68:f5:e7:c8:76:d8:2d:13: 40:80:7a:a8:16:11:11:91:1a:c0:65:bd:ce:16:b4:7d:ee:ac: 45:86:fb:88:9f:8a:bf:38:69:be:4d:e3:11:d7:c6:82:a5:b6: be:1b:7d:9c:af:e8:93:4c:7e:1a:69:92:28:a6:9b:75:bc:dc: e6:95:f8:a5:5c:67:02:b0:70:5e:e7:a9:c8:75:56:b5:57:cf: 02:16:4e:99:61:31:54:41:c5:ee:a4:a6:ca:36:71:60:7c:db: d3:b2:94:14:42:be:05:d6:e4:a9:b6:bd:e3:e5:82:4c:72:3f: 7d:2e:c9:dc:da:b0:0f:98:07:d4:a6:ca:74:27:aa:d4:1a:5e: 93:1b:5c:9c:94:b5:63:1a:94:ce:4a:ff:d5:2c:ca:f4:fc:85: ec:bc:0b:fc:a8:76:16:b9:80:2f:1a:c0:68:33:a8:98:6e:fc: 6b:26:9b:26:91:1f:58:a7:0e:8f:bd:11:9e:74:55:30:a0:db: 6e:3d:73:c6:0b:e5:fa:8a:6e:48:cd:10:9f:42:15:d6:f3:6b: 31:63:d1:3f:6e:12:b6:b5:95:55:6a:9b:79:48:ca:ac:42:16: 3c:e8:b4:66 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUM8BQZp6FyAnt7LV8YJhkJ4PMUAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDIzMDBaFw0yNjEyMDIwMDI4MDBaMDMxMTAvBgNV BAMTKEQ2ODY4QjFBMTFBQkIwNjBDOUVEOEU1QzY5MTczQjk4NDM1NkNDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJPhXYMOtrMq/Ut8UKSCPizN3 8/IbgD/h5PJDsz+0Gqoy96rYYiLJungFZlVaw1KBWVw5C9w4X3T+S+3LgZ09Ub91 QH/5SK9c8cbaZzEWaqKMhRDNVpf0uyumTfp25CVJuWSgteV+n3IVpTHcVCISRyr2 cEXSqkruBn7UGSMyTpAF+h5bH8z4fPW6wlb6pcaW4LUmnWCVJzE0Nc4ZKjOz9vPc Tdjn80+JdKVm/h3DSBqMy6fIk5e7o09H4gO9UK/TyCH2EmOR0n1cA75b1diFbLAi 7hCF9Etxt3HfWg5miJ/DEKbk5khco1fw7oc4sqgWaecacQn4FX2Pm61beLnzAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU1oaLGhGrsGDJ7Y5caRc7mENWzAowHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzEzNjM3MmUzMTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQALaeSMA0GCSqGSIb3DQEBCwUAA4IBAQAFIcw6x0sNKPW6 xIX2x8Hr1JFjQWHu/XlzSK8RaPXnyHbYLRNAgHqoFhERkRrAZb3OFrR97qxFhvuI n4q/OGm+TeMR18aCpba+G32cr+iTTH4aaZIoppt1vNzmlfilXGcCsHBe56nIdVa1 V88CFk6ZYTFUQcXupKbKNnFgfNvTspQUQr4F1uSptr3j5YJMcj99Lsnc2rAPmAfU psp0J6rUGl6TG1yclLVjGpTOSv/VLMr0/IXsvAv8qHYWuYAvGsBoM6iYbvxrJpsm kR9Ypw6PvRGedFUwoNtuPXPGC+X6im5IzRCfQhXW82sxY9E/bhK2tZVVapt5SMqs QhY86LRm -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:03 2025 by rpki-client