This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa File: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (raw, json) Hash identifier: 2ZOwE2PR0CMiaImusRVey0Ti2u141VZv3wxhLAy74xo= Subject key identifier: 6D:19:67:2D:DD:15:A4:7E:51:78:54:1D:E7:6A:B4:4C:12:8B:51:D3 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 26E35C351D453A1272B2092F33AAB0E950741B3B Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:49 +0000 ROA not before: Wed 26 Nov 2025 09:57:49 +0000 ROA not after: Wed 25 Nov 2026 10:02:49 +0000 asID: 268878 IP address blocks: 45.174.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e3:5c:35:1d:45:3a:12:72:b2:09:2f:33:aa:b0:e9:50:74:1b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:49 2025 GMT Not After : Nov 25 10:02:49 2026 GMT Subject: CN=6D19672DDD15A47E5178541DE76AB44C128B51D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:d6:3c:15:9c:b4:2c:49:c5:3d:e3:45:ce: a0:2f:1c:74:0b:08:5b:d7:81:ba:25:de:cc:10:5b: 40:67:e0:31:44:5f:4d:60:b8:f9:94:b5:fb:1c:70: da:14:70:43:2d:c1:9a:60:43:4d:f3:b4:bc:af:d4: a5:4b:64:9f:0c:7f:be:0b:32:42:80:36:db:f7:b8: 89:28:a5:c8:c3:89:2e:af:be:ec:36:fc:f1:91:36: ed:cd:53:92:28:01:fc:bf:af:6d:f3:6c:1c:67:46: 98:09:97:15:dc:6b:16:8d:0e:18:70:c1:19:1a:8c: b2:44:cf:a1:e3:6e:b9:b5:62:aa:3a:b7:fc:84:c4: 91:8b:72:c4:1b:de:a9:1d:1d:c9:c1:c0:95:c3:de: a2:92:d7:30:e8:1f:8b:03:c4:a6:d3:17:73:2b:33: 26:33:2c:b4:88:bd:ca:ef:2c:59:b5:96:97:69:0b: d0:56:d7:92:2a:29:77:fb:b3:34:48:01:43:d5:b2: 59:b1:a6:21:0c:4c:77:5f:64:fc:96:c7:74:86:1e: ef:ec:7a:a1:fc:a4:d4:78:61:9d:19:e7:d9:bc:16: 71:63:6c:e4:94:46:64:b8:58:53:34:b2:00:14:a9: 1c:6a:e4:1f:e4:7c:7f:b6:35:6d:82:0a:89:08:ab: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:67:2D:DD:15:A4:7E:51:78:54:1D:E7:6A:B4:4C:12:8B:51:D3 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3232203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.16.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:55:c2:71:f5:fd:9b:6a:bc:9f:ee:9e:fa:e0:f3:86:3d:f3: 29:12:d5:59:94:d1:7a:f2:ee:ba:ac:67:a6:60:be:1b:46:e0: 40:36:78:f3:98:db:74:8c:4c:d1:a4:15:17:74:d1:3a:ce:a3: 33:3d:36:ea:2f:3e:d4:77:e8:5a:db:5d:c9:2e:7f:90:97:00: d6:d4:df:f3:8b:fe:ad:1e:9c:e3:e2:a7:13:59:88:14:09:3b: 1e:f8:2d:0d:09:03:74:a8:e3:93:32:c2:4e:c7:7b:75:66:9a: 20:4b:18:fe:9e:72:60:08:e0:85:e1:a9:c0:32:4c:0e:89:ce: 16:f6:11:3a:2f:94:60:26:48:a8:b4:10:87:50:62:e6:11:b2: 18:dc:2a:60:82:c4:d9:18:b6:67:39:8e:ff:24:97:39:33:f2: 4b:2a:22:f6:63:97:79:ba:68:ce:47:9c:82:0b:54:26:f5:8b: e1:82:92:e5:f7:ab:6f:c1:5a:64:47:bf:5b:09:f7:6f:a6:63: 69:c1:fd:f2:e5:b0:56:1a:2f:fc:bb:ac:0b:96:20:5a:63:14: 8a:7d:c2:ab:90:4a:01:0b:54:ed:38:50:74:89:3f:bc:30:17: 0b:25:ef:61:5a:cf:a5:46:51:02:1d:d8:9e:e8:ad:5b:ee:c3: 17:46:66:88 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUJuNcNR1FOhJysgkvM6qw6VB0GzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NDlaFw0yNjExMjUxMDAyNDlaMDMxMTAvBgNV BAMTKDZEMTk2NzJEREQxNUE0N0U1MTc4NTQxREU3NkFCNDRDMTI4QjUxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq49Y8FZy0LEnFPeNFzqAvHHQL CFvXgbol3swQW0Bn4DFEX01guPmUtfsccNoUcEMtwZpgQ03ztLyv1KVLZJ8Mf74L MkKANtv3uIkopcjDiS6vvuw2/PGRNu3NU5IoAfy/r23zbBxnRpgJlxXcaxaNDhhw wRkajLJEz6Hjbrm1Yqo6t/yExJGLcsQb3qkdHcnBwJXD3qKS1zDoH4sDxKbTF3Mr MyYzLLSIvcrvLFm1lpdpC9BW15IqKXf7szRIAUPVslmxpiEMTHdfZPyWx3SGHu/s eqH8pNR4YZ0Z59m8FnFjbOSURmS4WFM0sgAUqRxq5B/kfH+2NW2CCokIq8hdAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUbRlnLd0VpH5ReFQd52q0TBKLUdMwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4 MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQCfVcJx9f2b aryf7p764POGPfMpEtVZlNF68u66rGemYL4bRuBANnjzmNt0jEzRpBUXdNE6zqMz PTbqLz7Ud+ha213JLn+QlwDW1N/zi/6tHpzj4qcTWYgUCTse+C0NCQN0qOOTMsJO x3t1ZpogSxj+nnJgCOCF4anAMkwOic4W9hE6L5RgJkiotBCHUGLmEbIY3CpggsTZ GLZnOY7/JJc5M/JLKiL2Y5d5umjOR5yCC1Qm9YvhgpLl96tvwVpkR79bCfdvpmNp wf3y5bBWGi/8u6wLliBaYxSKfcKrkEoBC1TtOFB0iT+8MBcLJe9hWs+lRlECHdie 6K1b7sMXRmaI -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:45 2025 by rpki-client