This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33342e302f32332d3233203d3e20323636393238.roa File: 34352e3232352e33342e302f32332d3233203d3e20323636393238.roa (raw, json) Hash identifier: +hGZ/Pu/mun9b8QkI8pljE1dYEHMEEpNSG0wGesrZ2E= Subject key identifier: 33:21:BD:8A:B1:CF:85:33:EE:08:A0:EA:A3:9B:20:B4:30:9B:B8:7E Certificate issuer: /CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A Certificate serial: 73F703E25FB9E9AC4B03061D3377336FF856617F Authority key identifier: 6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer Subject info access: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33342e302f32332d3233203d3e20323636393238.roa Signing time: Mon 26 Jun 2023 11:53:44 +0000 ROA not before: Mon 26 Jun 2023 11:48:44 +0000 ROA not after: Mon 24 Jun 2024 11:53:44 +0000 asID: 266928 IP address blocks: 45.225.34.0/23 maxlen: 23 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 73:f7:03:e2:5f:b9:e9:ac:4b:03:06:1d:33:77:33:6f:f8:56:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A Validity Not Before: Jun 26 11:48:44 2023 GMT Not After : Jun 24 11:53:44 2024 GMT Subject: CN=3321BD8AB1CF8533EE08A0EAA39B20B4309BB87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:07:72:d8:2d:08:3b:a3:3f:18:90:a8:7d: 25:99:95:b7:5e:5d:23:1a:15:53:7a:3e:63:a4:82: 00:ae:04:00:ca:19:b6:8d:5a:56:5b:c2:f5:0b:4b: de:45:28:dc:fd:39:07:c3:f1:1f:4a:ae:1e:5e:44: a7:bb:f2:f3:b7:66:34:21:74:e2:88:f4:15:7b:a2: 3c:09:38:84:f3:89:28:21:85:3d:ef:d4:19:c0:ce: 91:75:f9:1c:98:2a:61:0a:b5:34:64:bc:57:61:5a: 09:99:f4:26:61:c7:d5:59:e1:4e:47:a1:92:13:a2: fd:d0:75:be:49:4e:20:ca:2f:c2:4e:8b:31:f0:03: cc:6b:d6:b4:de:47:9a:0e:90:95:9c:85:cf:91:63: a2:ff:fe:17:8a:0e:09:52:dd:e2:30:b5:91:15:c3: 10:04:42:39:29:28:8b:86:16:92:e6:d0:ba:71:6f: cd:f9:70:11:66:48:99:55:1c:45:4d:ae:f0:f3:e0: 1c:a3:7f:96:70:57:62:e1:63:18:d9:99:7a:d0:60: 63:c7:49:47:dc:3c:d3:3e:87:6d:04:55:84:b1:41: da:b9:eb:f6:ca:23:c7:24:b8:da:d1:d5:c1:8b:e1: 7b:ed:c2:18:57:3f:ae:93:d7:94:93:63:7c:c9:4c: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:21:BD:8A:B1:CF:85:33:EE:08:A0:EA:A3:9B:20:B4:30:9B:B8:7E X509v3 Authority Key Identifier: keyid:6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33342e302f32332d3233203d3e20323636393238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.34.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:41:bd:45:18:8f:5c:8a:3a:1a:ed:19:66:4e:ef:42:6b:cb: b5:aa:a9:29:c0:38:38:f1:f1:64:12:31:4f:d9:62:16:b4:fe: 55:e0:d4:b3:c5:01:f8:ab:57:0a:6c:b6:cb:7d:a2:2a:92:a5: a6:dd:1a:97:76:37:33:86:75:f3:68:2b:58:09:96:3c:55:0d: b9:0b:2e:90:0b:6f:46:b5:72:a1:e9:a7:d5:98:fb:f7:8e:47: ee:88:5b:20:ea:3a:6c:ce:f5:c3:96:78:9f:ba:d8:7c:c5:c3: d7:53:9f:db:f4:a6:3d:e7:90:be:7c:59:34:62:0f:a0:d9:ee: 34:42:0a:7b:f6:ca:c0:93:c8:3c:36:58:01:5d:75:ae:21:2f: c6:0c:bc:34:3a:64:52:82:17:cc:f1:04:b1:e0:81:6b:21:44: cf:fd:39:fb:91:af:bd:75:5a:31:12:13:a5:c9:45:3c:f7:46: 70:2d:80:69:6e:df:53:18:19:02:64:81:01:49:bb:ae:d6:1c: a7:70:12:76:c7:1e:58:67:96:3f:6f:bb:fb:c0:fb:f2:a9:df: e4:2e:55:2b:d8:73:c3:db:82:ca:7b:5c:1f:77:29:f1:7c:4f: 7e:f9:ba:c4:d9:09:21:0a:07:71:50:af:64:f6:17:11:7c:07: 5a:b0:f4:0f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUc/cD4l+56axLAwYdM3czb/hWYX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTg3RUU5QkNDNzc5QUY3RjEyRUIwNUE5MURDQUMw MkNCNjExQTAeFw0yMzA2MjYxMTQ4NDRaFw0yNDA2MjQxMTUzNDRaMDMxMTAvBgNV BAMTKDMzMjFCRDhBQjFDRjg1MzNFRTA4QTBFQUEzOUIyMEI0MzA5QkI4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywAdy2C0IO6M/GJCofSWZlbde XSMaFVN6PmOkggCuBADKGbaNWlZbwvULS95FKNz9OQfD8R9Krh5eRKe78vO3ZjQh dOKI9BV7ojwJOITziSghhT3v1BnAzpF1+RyYKmEKtTRkvFdhWgmZ9CZhx9VZ4U5H oZITov3Qdb5JTiDKL8JOizHwA8xr1rTeR5oOkJWchc+RY6L//heKDglS3eIwtZEV wxAEQjkpKIuGFpLm0Lpxb835cBFmSJlVHEVNrvDz4Byjf5ZwV2LhYxjZmXrQYGPH SUfcPNM+h20EVYSxQdq56/bKI8ckuNrR1cGL4XvtwhhXP66T15STY3zJTBthAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUMyG9irHPhTPuCKDqo5sgtDCbuH4wHwYDVR0j BBgwFoAUajmH7pvMd5r38S6wWpHcrALLYRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9kak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1 LzEvNkEzOTg3RUU5QkNDNzc5QUY3RjEyRUIwNUE5MURDQUMwMkNCNjExQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82QTM5ODdFRTlCQ0M3NzlBRjdG MTJFQjA1QTkxRENBQzAyQ0I2MTFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k ak1YM2VyaUJtUUJtNmNGV3JydVlpbVlzUzdjeXE0enN4QW84dFVCRVR1LzEvMzQz NTJlMzIzMjM1MmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2Mzkz MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBLeEiMA0GCSqGSIb3DQEBCwUAA4IBAQALQb1FGI9cijoa 7RlmTu9Ca8u1qqkpwDg48fFkEjFP2WIWtP5V4NSzxQH4q1cKbLbLfaIqkqWm3RqX djczhnXzaCtYCZY8VQ25Cy6QC29GtXKh6afVmPv3jkfuiFsg6jpszvXDlnifuth8 xcPXU5/b9KY955C+fFk0Yg+g2e40Qgp79srAk8g8NlgBXXWuIS/GDLw0OmRSghfM 8QSx4IFrIUTP/Tn7ka+9dVoxEhOlyUU890ZwLYBpbt9TGBkCZIEBSbuu1hyncBJ2 xx5YZ5Y/b7v7wPvyqd/kLlUr2HPD24LKe1wfdynxfE9++brE2QkhCgdxUK9k9hcR fAdasPQP -----END CERTIFICATE-----Generated at Tue Dec 23 08:20:18 2025 by rpki-client