This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134372e302f32342d3234203d3e203532383338.roa File: 34352e3136372e3134372e302f32342d3234203d3e203532383338.roa (raw, json) Hash identifier: K8Ov/lE3U0z/Eo9qvyyrHHt/a2UitpSoonF1i0Nonc0= Subject key identifier: 86:D1:C2:66:AD:AB:3B:78:BD:7E:50:E6:0E:79:01:24:BB:B4:E5:F5 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 11B73A892CF6D931235BC32BA0EB5DA12CD4EE56 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134372e302f32342d3234203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:28:23 +0000 ROA not before: Wed 03 Dec 2025 00:23:23 +0000 ROA not after: Wed 02 Dec 2026 00:28:23 +0000 asID: 52838 IP address blocks: 45.167.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b7:3a:89:2c:f6:d9:31:23:5b:c3:2b:a0:eb:5d:a1:2c:d4:ee:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:23:23 2025 GMT Not After : Dec 2 00:28:23 2026 GMT Subject: CN=86D1C266ADAB3B78BD7E50E60E790124BBB4E5F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d4:fb:50:db:7d:37:86:db:3b:85:80:77:e6: c7:2e:b3:7a:cb:f4:e1:d5:ce:73:17:58:5a:bf:0f: 2c:00:ec:9f:b6:14:c2:5e:cb:b8:e9:5f:5f:51:77: 74:95:d2:da:17:0b:8b:79:ff:af:72:aa:64:f1:e4: 46:23:d0:d2:27:f7:7a:c3:e3:c0:02:84:98:84:6b: b7:ad:3d:4f:3f:f9:2f:cd:f0:17:e3:89:64:2f:32: bf:31:e7:a0:e5:73:3a:b1:fa:e9:2d:34:9c:ac:ba: 69:a9:eb:6b:f4:00:6d:8e:26:0f:40:d7:78:66:64: b6:44:8d:f7:8b:44:c9:72:1f:fb:7d:b3:48:43:e7: 46:cd:a6:ac:75:84:eb:3e:e5:94:5c:d0:60:13:df: f8:04:a8:64:cd:2e:f7:ba:17:cf:e1:ee:61:a5:a6: 3f:ca:72:30:b6:d8:d1:a8:ff:2e:ec:a7:3e:e8:fa: 18:db:e1:a2:da:c7:03:94:43:d4:6d:0f:1c:f3:52: 54:f7:10:2d:22:5c:a4:47:7b:9e:17:27:fa:1d:a9: 17:bb:19:a9:7e:a7:0d:d9:1d:38:e3:01:dd:2c:55: ef:85:7b:54:bb:da:6b:9e:5f:fa:fe:a1:43:96:7f: fa:0a:ee:79:a3:19:a7:c7:dc:04:b3:04:fe:d1:e4: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D1:C2:66:AD:AB:3B:78:BD:7E:50:E6:0E:79:01:24:BB:B4:E5:F5 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3136372e3134372e302f32342d3234203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.147.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:16:56:4b:3c:d5:e9:85:fe:e1:b8:e2:11:4f:53:e1:9a:f2: 4e:49:52:e0:9e:ac:74:a0:a1:fb:ce:33:21:0f:41:9f:cc:27: a9:d3:00:86:00:0a:21:f2:07:16:72:94:0d:8e:ef:57:bd:b5: 70:0f:3e:6b:c0:f8:a2:67:f8:20:97:b9:c8:7a:17:99:56:82: d0:50:c0:5e:30:8a:91:39:3b:79:67:8b:8e:c2:1d:3a:76:42: e3:ad:9f:51:fa:de:b1:26:7c:da:bf:37:95:34:99:2f:0d:5a: eb:cb:dc:68:de:e7:59:22:4e:39:a1:8c:ab:92:af:83:e5:7d: 48:db:01:c5:87:a3:28:e6:c8:57:80:cb:78:3c:94:74:02:80: 54:5d:35:b5:9c:36:a6:70:94:63:c0:32:84:16:e0:81:2f:e6: aa:93:b8:1a:ed:af:04:e6:e1:eb:81:3c:00:4a:2b:15:26:38: a2:0b:2b:dc:5c:e2:1d:cb:f2:2b:7a:ec:c7:2a:12:78:63:1f: b2:03:98:73:e6:b6:4d:c0:f4:c3:37:be:b7:c1:4e:0f:a3:e4: d1:f9:6e:55:84:d9:06:ae:22:1b:83:93:07:bc:55:eb:9e:99: 82:ae:df:e4:e8:7d:a0:fb:41:ba:01:bb:14:7b:79:8f:59:55: 79:f9:d2:4a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUEbc6iSz22TEjW8MroOtdoSzU7lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDIzMjNaFw0yNjEyMDIwMDI4MjNaMDMxMTAvBgNV BAMTKDg2RDFDMjY2QURBQjNCNzhCRDdFNTBFNjBFNzkwMTI0QkJCNEU1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD11PtQ2303hts7hYB35scus3rL 9OHVznMXWFq/DywA7J+2FMJey7jpX19Rd3SV0toXC4t5/69yqmTx5EYj0NIn93rD 48AChJiEa7etPU8/+S/N8BfjiWQvMr8x56Dlczqx+uktNJysummp62v0AG2OJg9A 13hmZLZEjfeLRMlyH/t9s0hD50bNpqx1hOs+5ZRc0GAT3/gEqGTNLve6F8/h7mGl pj/KcjC22NGo/y7spz7o+hjb4aLaxwOUQ9RtDxzzUlT3EC0iXKRHe54XJ/odqRe7 Gal+pw3ZHTjjAd0sVe+Fe1S72mueX/r+oUOWf/oK7nmjGafH3ASzBP7R5GDhAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUhtHCZq2rO3i9flDmDnkBJLu05fUwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzEzNjM3MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQALaeTMA0GCSqGSIb3DQEBCwUAA4IBAQB6FlZLPNXphf7h uOIRT1PhmvJOSVLgnqx0oKH7zjMhD0GfzCep0wCGAAoh8gcWcpQNju9XvbVwDz5r wPiiZ/ggl7nIeheZVoLQUMBeMIqROTt5Z4uOwh06dkLjrZ9R+t6xJnzavzeVNJkv DVrry9xo3udZIk45oYyrkq+D5X1I2wHFh6Mo5shXgMt4PJR0AoBUXTW1nDamcJRj wDKEFuCBL+aqk7ga7a8E5uHrgTwASisVJjiiCyvcXOIdy/IreuzHKhJ4Yx+yA5hz 5rZNwPTDN763wU4Po+TR+W5VhNkGriIbg5MHvFXrnpmCrt/k6H2g+0G6AbsUe3mP WVV5+dJK -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:03 2025 by rpki-client