This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa File: 34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (raw, json) Hash identifier: p7Y1iCih7zCs3aTsFN65uRTitXsI4oA7U++ckVUcDJM= Subject key identifier: 48:11:B0:C8:61:19:B5:17:21:AC:A5:E7:D7:32:37:80:03:AB:09:96 Certificate issuer: /CN=86374C9CD05310C68A67CDD68D3CA720FBD6663D Certificate serial: 54AC17104083B799B0DA3DB6DED85DA300BB0EFD Authority key identifier: 86:37:4C:9C:D0:53:10:C6:8A:67:CD:D6:8D:3C:A7:20:FB:D6:66:3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86374C9CD05310C68A67CDD68D3CA720FBD6663D.cer Subject info access: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa Signing time: Tue 25 Nov 2025 19:18:50 +0000 ROA not before: Tue 25 Nov 2025 19:13:50 +0000 ROA not after: Tue 24 Nov 2026 19:18:50 +0000 asID: 267264 IP address blocks: 45.232.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/86374C9CD05310C68A67CDD68D3CA720FBD6663D.crl rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/86374C9CD05310C68A67CDD68D3CA720FBD6663D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86374C9CD05310C68A67CDD68D3CA720FBD6663D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ac:17:10:40:83:b7:99:b0:da:3d:b6:de:d8:5d:a3:00:bb:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86374C9CD05310C68A67CDD68D3CA720FBD6663D Validity Not Before: Nov 25 19:13:50 2025 GMT Not After : Nov 24 19:18:50 2026 GMT Subject: CN=4811B0C86119B51721ACA5E7D732378003AB0996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:bc:dd:78:6c:a7:17:d6:8f:7a:99:4a:9c: 0f:b7:59:68:89:51:e9:28:64:e6:e5:2f:bd:0e:c6: 0d:c3:c0:ee:5f:bb:b7:dd:16:f9:53:7e:d6:2f:bd: 79:2a:4f:df:4a:db:d4:2e:83:6a:48:db:38:be:27: ac:8a:bd:8d:c2:de:92:04:bf:7e:8f:8f:fa:a1:6c: 05:7b:b8:96:3e:e1:62:01:3c:9b:14:4f:a2:d5:d0: 3e:b8:86:66:2d:ec:c9:4b:ab:dd:2d:b9:fd:b8:21: 30:13:c9:57:4d:96:f8:89:0a:ea:4e:5b:b6:03:c0: f3:78:df:58:84:a8:99:d1:38:05:15:ff:84:22:e8: d5:41:91:1a:86:0b:0a:a4:6a:6b:db:fa:bd:56:13: b9:c5:06:90:48:d6:34:ce:4c:a3:ac:d4:66:ad:ba: 22:92:be:ad:7e:0a:e6:98:2e:3a:9b:35:2e:af:7f: b0:15:31:be:fc:81:b3:52:41:d7:44:02:de:39:68: ca:fe:79:45:29:28:53:41:a7:4f:25:8f:40:5e:c5: 2b:37:c3:4f:64:06:c6:80:f0:f4:47:25:a5:79:82: c1:db:0a:57:1f:eb:ac:21:1c:aa:8f:ae:ed:36:53: d0:98:92:f6:89:2e:ca:e1:8b:e5:d8:05:03:94:71: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:11:B0:C8:61:19:B5:17:21:AC:A5:E7:D7:32:37:80:03:AB:09:96 X509v3 Authority Key Identifier: keyid:86:37:4C:9C:D0:53:10:C6:8A:67:CD:D6:8D:3C:A7:20:FB:D6:66:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/86374C9CD05310C68A67CDD68D3CA720FBD6663D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86374C9CD05310C68A67CDD68D3CA720FBD6663D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.124.0/22 Signature Algorithm: sha256WithRSAEncryption 70:d1:2f:90:2a:07:a9:27:12:6f:a1:67:d2:05:ba:88:34:fb: a8:ea:77:33:9b:a1:40:73:03:86:24:8a:02:e8:d4:3a:d5:d2: a2:76:0a:08:74:51:9b:27:4d:06:d4:87:2f:d3:97:ef:a4:50: 8f:1f:b6:d8:ed:82:66:e5:6f:74:83:79:ac:6d:e4:c7:d9:19: f4:4c:34:17:95:1a:f3:cb:10:66:73:31:f6:5f:bd:d9:56:fa: 57:38:68:7c:65:c6:13:35:8f:75:0f:b0:67:04:17:63:47:20: 5a:61:c2:c6:14:e1:a3:f6:19:4c:e1:74:49:24:cc:b8:89:98: 4c:dc:5c:93:64:ae:0a:82:13:8a:f7:1d:34:0b:d9:cd:f8:c9: ab:07:9a:d7:bc:7e:e4:81:96:42:89:ec:2d:3a:f1:80:e2:88: e0:ff:a6:7b:f8:f5:8f:e0:9f:70:f2:36:be:73:58:e8:bf:6f: eb:ea:13:35:2c:66:5f:a7:bd:db:a8:1b:53:a0:da:a4:ec:6a: 41:94:84:7f:88:04:cf:9a:1a:a8:97:59:f8:16:74:fa:a8:66: 6b:6e:0c:a8:8b:02:87:a6:42:c2:b6:a7:81:f6:2d:fc:b6:f0: d9:eb:e8:4e:94:21:53:fc:b3:13:05:e2:54:f8:23:56:27:38: 60:88:39:b9 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVKwXEECDt5mw2j223thdowC7Dv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzNzRDOUNEMDUzMTBDNjhBNjdDREQ2OEQzQ0E3MjBG QkQ2NjYzRDAeFw0yNTExMjUxOTEzNTBaFw0yNjExMjQxOTE4NTBaMDMxMTAvBgNV BAMTKDQ4MTFCMEM4NjExOUI1MTcyMUFDQTVFN0Q3MzIzNzgwMDNBQjA5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31bzdeGynF9aPeplKnA+3WWiJ UekoZOblL70Oxg3DwO5fu7fdFvlTftYvvXkqT99K29Qug2pI2zi+J6yKvY3C3pIE v36Pj/qhbAV7uJY+4WIBPJsUT6LV0D64hmYt7MlLq90tuf24ITATyVdNlviJCupO W7YDwPN431iEqJnROAUV/4Qi6NVBkRqGCwqkamvb+r1WE7nFBpBI1jTOTKOs1Gat uiKSvq1+CuaYLjqbNS6vf7AVMb78gbNSQddEAt45aMr+eUUpKFNBp08lj0BexSs3 w09kBsaA8PRHJaV5gsHbClcf66whHKqPru02U9CYkvaJLsrhi+XYBQOUccAPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSBGwyGEZtRchrKXn1zI3gAOrCZYwHwYDVR0j BBgwFoAUhjdMnNBTEMaKZ83WjTynIPvWZj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh RW4vMC84NjM3NEM5Q0QwNTMxMEM2OEE2N0NERDY4RDNDQTcyMEZCRDY2NjNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Mzc0QzlDRDA1MzEwQzY4 QTY3Q0RENjhEM0NBNzIwRkJENjY2M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM4SnMyMkJzNmd0MlhnNXFENW00WkFvN25YWER2U2s0aFdEb204U2N1YUVuLzAv MzQzNTJlMzIzMzMyMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzczMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt6HwwDQYJKoZIhvcNAQELBQADggEBAHDRL5Aq B6knEm+hZ9IFuog0+6jqdzOboUBzA4YkigLo1DrV0qJ2Cgh0UZsnTQbUhy/Tl++k UI8fttjtgmblb3SDeaxt5MfZGfRMNBeVGvPLEGZzMfZfvdlW+lc4aHxlxhM1j3UP sGcEF2NHIFphwsYU4aP2GUzhdEkkzLiJmEzcXJNkrgqCE4r3HTQL2c34yasHmte8 fuSBlkKJ7C068YDiiOD/pnv49Y/gn3DyNr5zWOi/b+vqEzUsZl+nvduoG1Og2qTs akGUhH+IBM+aGqiXWfgWdPqoZmtuDKiLAoemQsK2p4H2Lfy28Nnr6E6UIVP8sxMF 4lT4I1YnOGCIObk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:29 2025 by rpki-client