This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3332203d3e20323638383738.roa File: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (raw, json) Hash identifier: N0IcTOYFU5ZMMu+cgyyvQqnzYkGJv2HWossKq/fnmK8= Subject key identifier: B3:EF:09:FA:10:1E:92:F6:D4:A9:F3:92:C9:1F:85:8B:8D:D4:24:93 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 0174015C15490BAF93F6CF4558507979A1E9BC09 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3332203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:50 +0000 ROA not before: Wed 26 Nov 2025 09:57:50 +0000 ROA not after: Wed 25 Nov 2026 10:02:50 +0000 asID: 268878 IP address blocks: 45.174.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:74:01:5c:15:49:0b:af:93:f6:cf:45:58:50:79:79:a1:e9:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:50 2025 GMT Not After : Nov 25 10:02:50 2026 GMT Subject: CN=B3EF09FA101E92F6D4A9F392C91F858B8DD42493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:50:88:ad:ca:25:fe:1a:67:2d:dd:bd:d3: 04:da:ba:48:41:55:97:5b:54:3d:d4:77:c2:d0:cc: 1d:e6:15:e8:0d:2b:da:a6:52:ac:33:eb:ed:14:42: a6:9a:c5:e8:45:a2:46:cd:65:16:ae:be:ff:99:cc: 52:0f:16:e8:20:87:5d:ae:25:55:5f:70:ef:be:90: bf:f3:1d:2f:5f:f9:45:ea:12:14:19:80:61:98:17: 2b:c4:e6:52:f6:59:14:38:c8:50:91:4c:88:27:ba: 54:70:82:7f:90:48:ce:f1:b5:0d:b9:65:0a:7c:8d: 08:ba:7c:fb:8b:2f:c3:2a:d1:19:e9:62:e4:82:4e: a5:3f:27:59:3c:45:d0:f0:de:a8:54:0d:6c:d0:ac: 50:f6:b9:d9:5b:08:b0:86:fa:92:99:97:ea:82:01: e6:bb:27:5f:b6:ea:c9:cb:e8:89:5b:b9:ca:25:fc: 18:11:16:d0:0d:0b:d1:d4:09:ec:af:30:9e:14:8b: 0e:5a:03:a8:e2:8d:61:b0:6f:5f:a0:9e:46:ef:b6: 9b:cd:4c:53:6c:7b:47:66:e7:ee:81:00:32:03:4d: cc:4d:8d:dd:ca:78:b0:cf:a4:42:14:32:19:49:02: ab:be:a2:95:bb:13:8c:32:ef:40:d5:55:29:88:da: 6d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EF:09:FA:10:1E:92:F6:D4:A9:F3:92:C9:1F:85:8B:8D:D4:24:93 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3332203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.16.0/22 Signature Algorithm: sha256WithRSAEncryption 02:b6:6b:dc:46:a2:e8:5e:e8:63:9e:48:ef:4d:71:6d:d6:1c: 00:ac:e3:6e:8c:7e:7c:18:00:04:11:58:62:cc:7f:2c:75:59: 3d:bf:05:4a:44:b3:4c:86:da:d4:27:f2:1b:8f:9a:eb:b0:1e: a1:b2:81:c1:81:28:de:ab:56:27:52:ad:92:d7:62:b9:2f:7c: 94:72:86:51:c7:a5:b7:87:1d:66:dc:17:06:ef:70:95:d3:c6: e8:59:fb:52:18:d8:17:0b:b4:52:dd:4c:be:95:87:29:86:d1: f5:a4:fb:5d:f9:10:a4:ed:fb:3a:fd:fc:2b:24:d1:4e:77:e7: a7:37:6c:db:72:de:6e:fa:a3:d5:24:ea:9e:30:49:bb:73:73: fe:ca:43:04:62:20:de:43:da:99:eb:41:20:1a:1e:01:49:c5: a0:ee:1f:ff:65:7d:08:8e:a9:51:61:fe:12:a1:e5:b4:05:56: de:db:28:cb:05:48:09:03:6a:31:15:fc:cd:ee:ff:6b:b7:4d: 4c:91:97:89:4a:2c:b6:de:0d:ae:45:cc:12:cf:d9:dc:3b:b8: 7e:c8:be:24:ea:1d:ef:cb:4f:c6:ad:f2:a2:ef:3e:2c:67:2a: 87:c2:8c:75:70:e9:1b:08:6a:3f:fb:7b:b0:ac:7e:75:cf:bc: e2:98:db:1b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUAXQBXBVJC6+T9s9FWFB5eaHpvAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NTBaFw0yNjExMjUxMDAyNTBaMDMxMTAvBgNV BAMTKEIzRUYwOUZBMTAxRTkyRjZENEE5RjM5MkM5MUY4NThCOERENDI0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtblCIrcol/hpnLd290wTaukhB VZdbVD3Ud8LQzB3mFegNK9qmUqwz6+0UQqaaxehFokbNZRauvv+ZzFIPFuggh12u JVVfcO++kL/zHS9f+UXqEhQZgGGYFyvE5lL2WRQ4yFCRTIgnulRwgn+QSM7xtQ25 ZQp8jQi6fPuLL8Mq0RnpYuSCTqU/J1k8RdDw3qhUDWzQrFD2udlbCLCG+pKZl+qC Aea7J1+26snL6Ilbucol/BgRFtANC9HUCeyvMJ4Uiw5aA6jijWGwb1+gnkbvtpvN TFNse0dm5+6BADIDTcxNjd3KeLDPpEIUMhlJAqu+opW7E4wy70DVVSmI2m0ZAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUs+8J+hAekvbUqfOSyR+Fi43UJJMwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4 MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQACtmvcRqLo XuhjnkjvTXFt1hwArONujH58GAAEEVhizH8sdVk9vwVKRLNMhtrUJ/Ibj5rrsB6h soHBgSjeq1YnUq2S12K5L3yUcoZRx6W3hx1m3BcG73CV08boWftSGNgXC7RS3Uy+ lYcphtH1pPtd+RCk7fs6/fwrJNFOd+enN2zbct5u+qPVJOqeMEm7c3P+ykMEYiDe Q9qZ60EgGh4BScWg7h//ZX0IjqlRYf4SoeW0BVbe2yjLBUgJA2oxFfzN7v9rt01M kZeJSiy23g2uRcwSz9ncO7h+yL4k6h3vy0/GrfKi7z4sZyqHwox1cOkbCGo/+3uw rH51z7zimNsb -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:43 2025 by rpki-client