This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa File: 34352e3233312e3233322e302f32322d3232203d3e203532383338.roa (raw, json) Hash identifier: lsynPMAvkbkp+kEf1blVE4YbFeSZ9ALh7omSxSWcYO0= Subject key identifier: 8B:98:76:49:ED:78:DF:BD:7A:D5:3F:CB:BF:29:CD:88:3E:A6:FA:A0 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 75E955516F76C491B2CD1883294A8DDC6759DB8B Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:28:59 +0000 ROA not before: Wed 03 Dec 2025 00:23:59 +0000 ROA not after: Wed 02 Dec 2026 00:28:59 +0000 asID: 52838 IP address blocks: 45.231.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 10:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e9:55:51:6f:76:c4:91:b2:cd:18:83:29:4a:8d:dc:67:59:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:23:59 2025 GMT Not After : Dec 2 00:28:59 2026 GMT Subject: CN=8B987649ED78DFBD7AD53FCBBF29CD883EA6FAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:b5:33:16:c6:d6:fb:bd:2a:90:ef:ea:eb: 11:50:01:d4:fe:bf:85:00:57:95:59:99:bf:01:1a: a0:63:f8:07:93:e5:c0:8a:75:bf:ea:c7:15:1c:4b: ba:dd:74:a2:77:c2:94:88:5f:6a:4d:b5:77:72:7d: 51:83:e6:cf:b4:e1:e2:cd:cb:75:c7:90:08:f3:c4: ff:8d:7e:c5:87:72:e3:00:3b:30:8f:08:de:28:53: d6:44:b5:48:b1:9d:36:74:f6:7c:de:0a:02:f4:63: 6e:f0:a8:8a:ef:c2:84:7c:1c:2e:cf:8a:39:80:54: 99:0b:d1:16:19:60:8e:74:3f:0a:3e:6a:f7:15:c4: 41:fd:c3:bc:c7:4f:c1:88:52:89:5d:e1:48:ae:3a: 22:bb:0c:cd:ea:ec:08:95:26:df:54:0c:16:19:ca: 23:aa:9a:74:98:40:bf:3f:4e:54:cd:70:d0:2d:f2: 83:1e:aa:a1:1d:5b:f7:ed:dc:6f:1f:66:42:e1:39: a4:da:26:97:3c:47:56:f4:79:c9:e7:30:61:4c:61: b5:8a:96:94:ec:22:03:b8:e5:09:b7:cc:26:4b:3d: 47:ef:78:d4:38:e3:7d:ab:25:f6:56:33:c3:75:01: 4e:10:73:24:1f:b8:83:ad:10:4a:d6:d4:4a:ce:6a: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:76:49:ED:78:DF:BD:7A:D5:3F:CB:BF:29:CD:88:3E:A6:FA:A0 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233322e302f32322d3232203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:22:7d:53:63:7d:eb:d3:88:b3:fd:12:37:50:d8:d8:77:3e: c7:d2:6a:92:8d:f6:3d:83:d9:b3:36:fe:da:61:da:74:04:51: 94:9c:df:f1:c1:b4:e8:02:88:d2:ed:d2:79:d9:91:53:d5:f7: 6f:a5:bd:b6:1c:06:ba:35:32:c3:8e:04:ed:e3:60:dc:57:ad: 18:e3:65:b7:b1:cc:f2:85:ea:6b:bd:39:dd:23:2c:2c:49:99: 4f:f2:5c:29:69:2c:e3:4a:11:b5:34:ec:b5:fc:4a:49:8e:7a: 4e:4a:6f:26:fe:45:fe:be:d2:00:4d:d0:aa:3a:52:bc:60:e6: 46:a2:a3:1c:cc:f7:1a:46:83:9c:47:e2:de:b6:d1:41:69:03: 3e:da:ca:0c:ba:a2:04:b0:52:d1:f4:73:e3:77:90:ac:99:e5: fc:a8:ed:63:5e:e7:dd:50:ca:9e:8c:4d:23:35:d6:3d:20:7b: ef:cc:c9:0e:7c:e3:bf:14:5c:3b:55:79:4c:27:20:3d:6f:f9: 27:d0:54:26:86:d3:a0:b6:1b:54:0e:22:10:fb:0d:81:37:7f: 22:26:78:8a:73:2a:6a:2c:15:b4:5f:7b:9a:22:05:4a:f5:31: 2e:d7:50:d1:65:9c:9e:6e:5e:c0:88:3d:87:2b:09:af:0f:84: 1f:7b:3a:21 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUdelVUW92xJGyzRiDKUqN3GdZ24swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDIzNTlaFw0yNjEyMDIwMDI4NTlaMDMxMTAvBgNV BAMTKDhCOTg3NjQ5RUQ3OERGQkQ3QUQ1M0ZDQkJGMjlDRDg4M0VBNkZBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO2LUzFsbW+70qkO/q6xFQAdT+ v4UAV5VZmb8BGqBj+AeT5cCKdb/qxxUcS7rddKJ3wpSIX2pNtXdyfVGD5s+04eLN y3XHkAjzxP+NfsWHcuMAOzCPCN4oU9ZEtUixnTZ09nzeCgL0Y27wqIrvwoR8HC7P ijmAVJkL0RYZYI50Pwo+avcVxEH9w7zHT8GIUold4UiuOiK7DM3q7AiVJt9UDBYZ yiOqmnSYQL8/TlTNcNAt8oMeqqEdW/ft3G8fZkLhOaTaJpc8R1b0ecnnMGFMYbWK lpTsIgO45Qm3zCZLPUfveNQ4432rJfZWM8N1AU4QcyQfuIOtEErW1ErOavQnAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUi5h2Se1437161T/LvynNiD6m+qAwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzIzMzMxMmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCLefoMA0GCSqGSIb3DQEBCwUAA4IBAQAaIn1TY33r04iz /RI3UNjYdz7H0mqSjfY9g9mzNv7aYdp0BFGUnN/xwbToAojS7dJ52ZFT1fdvpb22 HAa6NTLDjgTt42DcV60Y42W3sczyheprvTndIywsSZlP8lwpaSzjShG1NOy1/EpJ jnpOSm8m/kX+vtIATdCqOlK8YOZGoqMczPcaRoOcR+LettFBaQM+2soMuqIEsFLR 9HPjd5CsmeX8qO1jXufdUMqejE0jNdY9IHvvzMkOfOO/FFw7VXlMJyA9b/kn0FQm htOgthtUDiIQ+w2BN38iJniKcypqLBW0X3uaIgVK9TEu11DRZZyebl7AiD2HKwmv D4Qfezoh -----END CERTIFICATE-----Generated at Sun Dec 7 17:08:04 2025 by rpki-client