This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa File: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (raw, json) Hash identifier: rvU22CtjMVT+WrAp4/Ek60tht2AR8gC5uAdYL4NT8YY= Subject key identifier: 23:93:4C:87:B8:28:8A:C2:BF:04:29:97:AE:A9:1B:28:2D:18:49:C8 Certificate issuer: /CN=3E6ECD57587D43046584479FCE47433E7399436F Certificate serial: 0E9AFCBB26F2BC2C0410B75C3F0C180B6D877B86 Authority key identifier: 3E:6E:CD:57:58:7D:43:04:65:84:47:9F:CE:47:43:3E:73:99:43:6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa Signing time: Thu 22 Jan 2026 16:39:07 +0000 ROA not before: Thu 22 Jan 2026 16:34:07 +0000 ROA not after: Thu 21 Jan 2027 16:39:07 +0000 asID: 268878 IP address blocks: 45.174.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9a:fc:bb:26:f2:bc:2c:04:10:b7:5c:3f:0c:18:0b:6d:87:7b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6ECD57587D43046584479FCE47433E7399436F Validity Not Before: Jan 22 16:34:07 2026 GMT Not After : Jan 21 16:39:07 2027 GMT Subject: CN=23934C87B8288AC2BF042997AEA91B282D1849C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:b8:f6:2e:a6:46:d3:81:4b:44:24:69:0b: dd:80:da:08:a0:22:f4:05:99:be:a5:75:12:0b:3f: 85:8e:05:8b:b1:8e:47:c9:d1:39:d9:c4:cb:1d:7e: 4e:f6:37:17:a6:ff:dd:b8:cf:cc:5a:c5:cc:b4:e1: c7:63:44:6b:71:f6:df:f6:60:6b:45:e8:ed:27:2c: 42:81:5c:af:07:1d:4c:9b:f0:18:b2:e2:e1:e6:3e: 8d:10:cb:b4:72:7d:d1:79:90:c1:d9:09:25:67:e6: 73:2d:2d:15:39:0b:f3:72:e9:f6:ee:86:5f:6c:a4: a8:d5:dd:c5:5c:b7:2b:60:9b:e1:bf:ae:8e:33:e3: 27:4e:7b:25:41:6b:6a:fc:2f:4f:c4:e2:71:54:8a: dc:87:e3:96:74:e2:57:d9:c8:b8:db:80:3d:a3:12: 21:b6:6d:08:fa:2f:7f:15:c1:5a:8b:d7:2a:4f:7e: 26:06:97:e9:9f:87:48:55:20:f6:89:96:aa:ef:bf: f0:01:73:71:85:c6:98:5f:64:1f:d7:3c:50:e7:e5: d2:54:3d:8f:8e:62:5d:00:a5:0c:31:81:05:17:a2: 62:df:a5:75:9b:22:67:01:c0:6e:7e:3f:db:94:b6: 25:06:ba:83:fa:04:7e:c3:39:0e:71:70:1a:8d:8a: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:93:4C:87:B8:28:8A:C2:BF:04:29:97:AE:A9:1B:28:2D:18:49:C8 X509v3 Authority Key Identifier: keyid:3E:6E:CD:57:58:7D:43:04:65:84:47:9F:CE:47:43:3E:73:99:43:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/3E6ECD57587D43046584479FCE47433E7399436F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E6ECD57587D43046584479FCE47433E7399436F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32332d3233203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.16.0/23 Signature Algorithm: sha256WithRSAEncryption a5:3c:33:6d:06:e8:32:e0:2d:ab:5e:1c:e2:39:71:68:ee:2d: d6:1e:74:4d:2d:ad:6d:7e:14:ca:5d:aa:6c:fb:9a:c6:ce:49: 9a:ae:75:bb:0b:5d:e1:49:77:d4:4e:d1:3a:55:f5:31:76:24: 3c:31:c1:be:9c:04:39:3d:3f:df:08:57:6f:02:e7:da:0b:57: 9a:07:b0:99:cf:80:ec:86:8c:ae:2a:b1:53:89:2b:68:f5:10: 09:6a:75:b7:ea:f3:a9:b9:d1:1a:91:83:a5:49:2f:c3:6f:d7: a3:dc:ee:32:40:5f:de:27:45:fb:17:49:37:2d:61:46:e4:47: ed:07:45:ba:ae:0b:2b:87:bd:3a:2b:c1:b0:52:0a:f6:54:2e: 0e:54:f0:4b:3d:a4:12:29:39:78:f5:f6:c0:48:7a:b3:4e:61: ed:8c:6d:96:d8:9a:0d:ff:30:d9:ae:0c:79:58:88:64:99:8a: b1:db:ae:22:09:ca:a4:88:99:4b:71:0a:5e:e1:66:35:33:34: 39:42:f2:78:47:2d:20:94:85:4d:92:3d:a0:58:69:4c:4e:9c: d4:4e:41:ff:68:00:1e:f7:4a:f9:64:d2:9c:e2:43:c6:ff:1a: 1f:9a:6d:8a:bb:5a:8e:a9:49:b2:38:1e:19:a8:d6:d9:11:fd: db:b3:da:e1 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUDpr8uybyvCwEELdcPwwYC22He4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RUNENTc1ODdENDMwNDY1ODQ0NzlGQ0U0NzQzM0U3 Mzk5NDM2RjAeFw0yNjAxMjIxNjM0MDdaFw0yNzAxMjExNjM5MDdaMDMxMTAvBgNV BAMTKDIzOTM0Qzg3QjgyODhBQzJCRjA0Mjk5N0FFQTkxQjI4MkQxODQ5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMW7j2LqZG04FLRCRpC92A2gig IvQFmb6ldRILP4WOBYuxjkfJ0TnZxMsdfk72Nxem/924z8xaxcy04cdjRGtx9t/2 YGtF6O0nLEKBXK8HHUyb8Biy4uHmPo0Qy7RyfdF5kMHZCSVn5nMtLRU5C/Ny6fbu hl9spKjV3cVctytgm+G/ro4z4ydOeyVBa2r8L0/E4nFUityH45Z04lfZyLjbgD2j EiG2bQj6L38VwVqL1ypPfiYGl+mfh0hVIPaJlqrvv/ABc3GFxphfZB/XPFDn5dJU PY+OYl0ApQwxgQUXomLfpXWbImcBwG5+P9uUtiUGuoP6BH7DOQ5xcBqNisbZAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUI5NMh7goisK/BCmXrqkbKC0YScgwHwYDVR0j BBgwFoAUPm7NV1h9QwRlhEefzkdDPnOZQ28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC8zRTZFQ0Q1NzU4N0Q0MzA0NjU4NDQ3OUZDRTQ3NDMzRTczOTk0MzZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNkVDRDU3NTg3RDQzMDQ2 NTg0NDc5RkNFNDc0MzNFNzM5OTQzNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4 MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQClPDNtBugy 4C2rXhziOXFo7i3WHnRNLa1tfhTKXaps+5rGzkmarnW7C13hSXfUTtE6VfUxdiQ8 McG+nAQ5PT/fCFdvAufaC1eaB7CZz4DshoyuKrFTiSto9RAJanW36vOpudEakYOl SS/Db9ej3O4yQF/eJ0X7F0k3LWFG5EftB0W6rgsrh706K8GwUgr2VC4OVPBLPaQS KTl49fbASHqzTmHtjG2W2JoN/zDZrgx5WIhkmYqx264iCcqkiJlLcQpe4WY1MzQ5 QvJ4Ry0glIVNkj2gWGlMTpzUTkH/aAAe90r5ZNKc4kPG/xofmm2Ku1qOqUmyOB4Z qNbZEf3bs9rh -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:36 2026 by rpki-client