This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa File: 34352e3136372e39362e302f32332d3233203d3e20323637393938.roa (raw, json) Hash identifier: nq7RhRiVGDMVVgM/MoyTYLTPrn1mJ9KD/K6WgZpjXDY= Subject key identifier: FB:8F:A4:D6:39:37:D4:50:06:76:B9:F1:A4:05:D8:24:80:5B:A8:32 Certificate issuer: /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C Certificate serial: 0567D9DDD10B0DAA851663B4B79436C5E1AA6E88 Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa Signing time: Tue 23 Sep 2025 21:08:26 +0000 ROA not before: Tue 23 Sep 2025 21:03:26 +0000 ROA not after: Tue 22 Sep 2026 21:08:26 +0000 asID: 267998 IP address blocks: 45.167.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:67:d9:dd:d1:0b:0d:aa:85:16:63:b4:b7:94:36:c5:e1:aa:6e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C Validity Not Before: Sep 23 21:03:26 2025 GMT Not After : Sep 22 21:08:26 2026 GMT Subject: CN=FB8FA4D63937D4500676B9F1A405D824805BA832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:9e:b7:7c:9e:30:5a:30:c1:dc:76:da:73: 2b:d3:42:16:a1:38:ca:cb:6e:7f:91:6b:4e:33:48: c6:6d:96:19:b3:cc:13:5f:91:d3:a1:f2:df:3a:21: 99:65:a8:99:68:c5:90:cf:fa:be:1a:36:4d:57:c8: 2d:dc:89:4c:d6:57:a1:c0:47:20:4e:e6:f9:a6:c2: 4e:98:a8:a4:a9:86:cb:91:c8:a5:3c:4c:17:f7:22: 39:22:65:b5:d8:33:e1:92:ac:2c:af:07:d3:08:ae: b9:1c:13:ec:cb:4a:2a:3f:14:d1:df:fc:eb:7b:a7: ef:9d:7c:33:66:f2:98:3e:81:3a:7e:a3:68:20:ac: a4:38:f5:6f:c0:09:07:b8:05:87:74:26:4f:06:5d: a0:24:c7:b0:84:de:58:b4:f2:b2:e0:99:98:b3:b7: 2e:15:00:8a:83:31:08:15:6b:fa:e2:8e:95:0d:ac: bb:e0:47:b6:f4:ba:de:db:56:24:40:b6:57:bf:ed: 31:28:49:7d:a6:e9:45:47:e7:6b:30:e1:62:67:3b: 45:03:42:ab:dc:bd:42:9e:48:b7:b7:3a:38:e8:14: 8b:5f:61:63:b4:6d:0d:70:78:93:3a:29:12:a9:a3: a2:f6:81:94:5a:a2:c7:68:95:7a:65:a4:8e:2a:69: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:A4:D6:39:37:D4:50:06:76:B9:F1:A4:05:D8:24:80:5B:A8:32 X509v3 Authority Key Identifier: keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39362e302f32332d3233203d3e20323637393938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.96.0/23 Signature Algorithm: sha256WithRSAEncryption 18:b1:19:24:78:87:34:f7:81:e3:af:de:6e:3c:9b:11:37:92: fb:18:eb:56:c9:a2:63:8a:be:95:24:01:41:4c:89:bd:bb:14: 7f:0b:1f:5f:f1:42:cc:65:ac:34:bb:72:b0:4e:82:5c:a1:ba: 1b:c3:92:19:e4:80:1f:27:66:07:04:ce:b3:16:eb:e2:14:f2: 4d:11:2f:8a:30:e7:54:97:e3:1e:49:19:df:89:5e:fe:c8:9a: 2d:12:7d:53:62:75:d2:c6:9b:6b:a5:89:db:31:34:41:9e:5e: 3e:b9:87:16:06:fd:8e:45:f0:e6:86:89:27:1e:b8:33:35:38: 81:0e:c6:30:0c:e5:c6:6d:2d:33:8d:37:c0:27:70:03:16:a3: 79:6e:b2:83:7e:b1:59:97:2c:b2:99:d0:5d:7c:26:df:b3:5a: c0:c0:f4:b2:14:8b:35:02:ec:ff:88:0e:02:4b:fe:01:56:e0: ff:b2:1e:d1:34:46:05:92:dd:59:b2:32:07:4f:75:5a:69:7f: d8:d1:39:80:34:02:97:e6:c2:37:e8:e0:cf:ef:4b:d0:4b:3e: a6:d2:c2:0a:2f:06:db:f4:00:b6:f3:cd:68:2d:a9:f4:51:47: 4e:e9:9b:17:f7:00:4f:53:ba:b8:a0:f6:c1:83:1f:aa:41:96: 82:8a:96:9b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUBWfZ3dELDaqFFmO0t5Q2xeGqbogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFGQjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5 NDRENDIxQzAeFw0yNTA5MjMyMTAzMjZaFw0yNjA5MjIyMTA4MjZaMDMxMTAvBgNV BAMTKEZCOEZBNEQ2MzkzN0Q0NTAwNjc2QjlGMUE0MDVEODI0ODA1QkE4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5Z63fJ4wWjDB3HbacyvTQhah OMrLbn+Ra04zSMZtlhmzzBNfkdOh8t86IZllqJloxZDP+r4aNk1XyC3ciUzWV6HA RyBO5vmmwk6YqKSphsuRyKU8TBf3IjkiZbXYM+GSrCyvB9MIrrkcE+zLSio/FNHf /Ot7p++dfDNm8pg+gTp+o2ggrKQ49W/ACQe4BYd0Jk8GXaAkx7CE3li08rLgmZiz ty4VAIqDMQgVa/rijpUNrLvgR7b0ut7bViRAtle/7TEoSX2m6UVH52sw4WJnO0UD QqvcvUKeSLe3OjjoFItfYWO0bQ1weJM6KRKpo6L2gZRaosdolXplpI4qaZKtAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU+4+k1jk31FAGdrnxpAXYJIBbqDIwHwYDVR0j BBgwFoAUEfse1aiJTadJp/WtTxDoDJRNQhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl SmovMC8xMUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkIxRUQ1QTg4OTREQTc0 OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4emhRWW5ZN0tSZEVMbjV0VEpjRkVTTGdVeWV0dXBqSHlWeTJodTJRZUpqLzAv MzQzNTJlMzEzNjM3MmUzOTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3 MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLadgMA0GCSqGSIb3DQEBCwUAA4IBAQAYsRkkeIc0 94Hjr95uPJsRN5L7GOtWyaJjir6VJAFBTIm9uxR/Cx9f8ULMZaw0u3KwToJcobob w5IZ5IAfJ2YHBM6zFuviFPJNES+KMOdUl+MeSRnfiV7+yJotEn1TYnXSxptrpYnb MTRBnl4+uYcWBv2ORfDmhoknHrgzNTiBDsYwDOXGbS0zjTfAJ3ADFqN5brKDfrFZ lyyymdBdfCbfs1rAwPSyFIs1Auz/iA4CS/4BVuD/sh7RNEYFkt1ZsjIHT3VaaX/Y 0TmANAKX5sI36ODP70vQSz6m0sIKLwbb9AC2881oLan0UUdO6ZsX9wBPU7q4oPbB gx+qQZaCipab -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:20 2025 by rpki-client