This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa File: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (raw, json) Hash identifier: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38= Subject key identifier: E5:9B:67:C5:53:55:84:7A:40:1F:FB:70:08:A4:A6:70:D1:3C:10:D8 Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 6529D75C56724EC647511C9EBC4A42E07EE30D Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa Signing time: Thu 20 Nov 2025 23:56:49 +0000 ROA not before: Thu 20 Nov 2025 23:51:49 +0000 ROA not after: Thu 19 Nov 2026 23:56:49 +0000 asID: 269707 IP address blocks: 45.191.160.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:29:d7:5c:56:72:4e:c6:47:51:1c:9e:bc:4a:42:e0:7e:e3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Nov 20 23:51:49 2025 GMT Not After : Nov 19 23:56:49 2026 GMT Subject: CN=E59B67C55355847A401FFB7008A4A670D13C10D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1f:d2:e9:5c:b9:16:c6:52:6b:2e:d3:ac:fa: 2f:fb:d7:1d:44:47:15:89:aa:ab:fe:44:38:f2:51: de:43:a4:11:7f:d5:e6:8d:c8:1d:8b:2b:00:8a:15: 45:bf:33:44:c5:d8:69:71:dd:55:e3:7a:7e:f5:ae: fa:0a:fb:d6:2f:bc:14:6c:c6:92:31:a0:41:c9:1f: a7:24:a9:03:a2:6c:4c:98:5b:38:1b:aa:c1:7e:af: 75:9a:b7:f1:e9:7c:fc:17:61:af:24:4b:95:18:ad: 61:ef:0b:5c:8f:0a:e3:80:ee:7a:50:3c:53:1f:29: 55:bc:b4:83:7e:eb:9a:ac:3e:70:95:62:ee:a3:09: b4:9d:0b:90:b0:d1:15:02:7f:aa:1f:cf:52:1a:39: 44:c3:09:7e:d9:63:44:d3:e3:80:66:9f:a6:2f:61: c0:07:38:46:07:f0:58:65:0f:26:52:82:27:65:0d: ac:19:c5:41:19:17:8c:52:6e:f9:f5:19:21:6c:0a: a4:84:64:32:59:c3:68:39:8c:e5:52:4a:f6:64:27: 70:6b:d3:7d:a6:87:00:a3:6a:89:ba:b3:da:85:10: 7f:3a:4c:bb:33:45:8d:be:0d:49:b1:d3:32:6c:31: dd:2f:82:d6:56:44:39:ce:bd:c0:1c:e9:4c:e9:3f: a8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:67:C5:53:55:84:7A:40:1F:FB:70:08:A4:A6:70:D1:3C:10:D8 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.160.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:96:7f:7c:42:ee:f0:02:2a:67:59:7f:ac:ac:81:2f:1d:54: 86:de:b4:8f:5a:97:eb:e9:6b:b2:02:19:86:15:13:3c:f4:b6: 6d:76:a2:47:a4:b7:05:f3:58:8d:df:d1:6a:46:6f:fa:f7:f1: 72:2e:80:42:b6:0e:a8:54:eb:94:f0:f1:ec:92:e8:37:ae:f7: 12:e5:2a:1c:0e:43:8c:66:b4:71:38:5d:b9:ea:f3:87:88:74: 7e:68:16:1d:d9:67:22:58:72:33:e9:6c:4b:f6:42:ad:a7:a3: 19:48:03:8e:23:1e:07:20:f8:42:0e:ff:1e:94:3e:19:05:65: ea:08:4b:6b:02:ed:05:04:9b:2a:1e:01:d0:2f:25:f0:48:8d: 9f:bd:fc:98:e2:7f:f0:7d:ac:f9:4d:ae:6f:fc:c3:cf:b1:ad: 73:a8:84:c0:2b:40:96:1d:fd:a1:d2:74:5a:8f:32:5c:13:7a: 29:75:fe:30:10:35:04:bc:06:b6:ef:8f:53:ce:14:f0:ce:bf: 5f:6b:a6:23:b8:6a:6a:62:98:62:a5:16:3c:6b:55:7d:28:6d: fc:18:ce:a7:da:35:ad:16:c9:87:dc:0f:a7:55:2d:b6:03:61: 44:54:aa:bf:1e:00:82:25:cb:4a:49:b4:cf:80:2d:60:99:d7: 6a:88:3e:a1 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgITZSnXXFZyTsZHURyevEpC4H7jDTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0 QzhCQTFEMB4XDTI1MTEyMDIzNTE0OVoXDTI2MTExOTIzNTY0OVowMzExMC8GA1UE AxMoRTU5QjY3QzU1MzU1ODQ3QTQwMUZGQjcwMDhBNEE2NzBEMTNDMTBEODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPAf0ulcuRbGUmsu06z6L/vXHURH FYmqq/5EOPJR3kOkEX/V5o3IHYsrAIoVRb8zRMXYaXHdVeN6fvWu+gr71i+8FGzG kjGgQckfpySpA6JsTJhbOBuqwX6vdZq38el8/BdhryRLlRitYe8LXI8K44DuelA8 Ux8pVby0g37rmqw+cJVi7qMJtJ0LkLDRFQJ/qh/PUho5RMMJftljRNPjgGafpi9h wAc4RgfwWGUPJlKCJ2UNrBnFQRkXjFJu+fUZIWwKpIRkMlnDaDmM5VJK9mQncGvT faaHAKNqibqz2oUQfzpMuzNFjb4NSbHTMmwx3S+C1lZEOc69wBzpTOk/qJ8CAwEA AaOCAlEwggJNMB0GA1UdDgQWBBTlm2fFU1WEekAf+3AIpKZw0TwQ2DAfBgNVHSME GDAWgBSdT5nFC85iLCX2z0CDs8vjZMi6HTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8yYVBDbmdMa2NMb2NrckFOc0tYdXV0VW9OcmQ0Tm81RFZ4NjNCZmhDTDZN Ry8wLzlENEY5OUM1MEJDRTYyMkMyNUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOUQ0Rjk5QzUwQkNFNjIyQzI1 RjZDRjQwODNCM0NCRTM2NEM4QkExRC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC8z NDM1MmUzMTM5MzEyZTMxMzYzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYz OTM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAi2/oDANBgkqhkiG9w0BAQsFAAOCAQEAa5Z/fELu 8AIqZ1l/rKyBLx1Uht60j1qX6+lrsgIZhhUTPPS2bXaiR6S3BfNYjd/RakZv+vfx ci6AQrYOqFTrlPDx7JLoN673EuUqHA5DjGa0cThduerzh4h0fmgWHdlnIlhyM+ls S/ZCraejGUgDjiMeByD4Qg7/HpQ+GQVl6ghLawLtBQSbKh4B0C8l8EiNn738mOJ/ 8H2s+U2ub/zDz7Gtc6iEwCtAlh39odJ0Wo8yXBN6KXX+MBA1BLwGtu+PU84U8M6/ X2umI7hqamKYYqUWPGtVfSht/BjOp9o1rRbJh9wPp1UttgNhRFSqvx4AgiXLSkm0 z4AtYJnXaog+oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:02:09 2025 by rpki-client