This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa File: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (raw, json) Hash identifier: r+Ce4bAI52p7w4milCYkcttrWEjX2kGjkA82VJ3Espc= Subject key identifier: 4B:8A:99:A2:1D:E6:DE:96:39:6E:54:14:70:26:1D:64:1E:F6:E8:02 Certificate issuer: /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Certificate serial: 5826420ADCD28FD4E535039E453A27A578F1A387 Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa Signing time: Wed 26 Nov 2025 10:02:49 +0000 ROA not before: Wed 26 Nov 2025 09:57:49 +0000 ROA not after: Wed 25 Nov 2026 10:02:49 +0000 asID: 268878 IP address blocks: 45.174.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:26:42:0a:dc:d2:8f:d4:e5:35:03:9e:45:3a:27:a5:78:f1:a3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820 Validity Not Before: Nov 26 09:57:49 2025 GMT Not After : Nov 25 10:02:49 2026 GMT Subject: CN=4B8A99A21DE6DE96396E541470261D641EF6E802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:84:21:e7:74:1e:b6:8f:65:21:cb:7b:19: bc:be:9d:47:41:58:5f:0b:75:c3:98:eb:0d:43:75: eb:c2:69:73:d0:5f:41:20:07:1c:24:da:ba:08:26: 9f:5d:db:5d:09:f7:b2:91:16:10:35:93:7b:4e:9a: 92:44:b6:df:20:2d:56:c6:f8:9c:82:a3:fc:1f:14: 14:1d:6a:ce:ae:d3:e5:60:ea:70:43:c9:53:e3:51: 12:9d:6b:c5:13:11:7f:24:47:79:52:a0:e9:46:c2: 33:a9:1d:47:ba:4b:3e:ee:9b:8a:ee:2d:af:1a:ec: 2b:73:52:87:0b:f9:41:4d:37:1c:c0:ff:2f:dd:70: 9a:40:47:a7:97:50:59:1c:81:88:d3:8f:90:27:c3: 28:48:da:36:62:da:ce:68:8b:1c:07:ec:1d:c1:b4: a2:16:ec:ad:8d:3a:6a:45:0c:4f:ab:2c:8c:9b:15: b3:59:19:ed:2d:4d:7e:24:13:83:f2:a0:2b:d9:e5: 08:06:d1:8c:bb:dc:b7:f7:89:af:35:fe:32:0a:af: 0c:41:dc:7d:57:23:51:82:ec:19:dc:49:3d:48:64: 71:1c:87:d4:1d:d9:b7:dc:4c:1c:86:5f:94:db:8e: a5:48:05:b9:7d:a4:93:03:71:d3:81:3f:63:32:8a: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:99:A2:1D:E6:DE:96:39:6E:54:14:70:26:1D:64:1E:F6:E8:02 X509v3 Authority Key Identifier: keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.18.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:ba:ff:98:7e:0f:29:c4:c7:ee:4a:f1:57:34:8a:01:64:27: 4d:42:1f:fe:7c:50:9a:99:f1:ff:4d:b5:e8:1a:65:f3:9c:d8: 19:54:6c:e8:b1:95:b4:cb:ed:e9:6d:48:d9:13:da:93:c4:8f: 17:8d:96:28:b7:95:76:0f:e1:b2:d1:2a:8b:29:18:b7:cd:81: f4:47:c5:45:0f:41:ea:1a:54:72:21:b3:95:c8:40:0a:bc:0a: 0c:9e:c7:02:b8:e1:ad:45:c8:dd:33:cf:21:47:0c:5b:c3:74: aa:49:f7:d2:51:a4:2d:6a:db:47:b2:2e:f8:0f:36:78:0b:c5: 42:bb:00:33:df:30:c2:33:2e:8d:14:f8:6b:3a:93:f6:d7:65: 8c:f3:ea:b4:e1:f7:77:23:e8:a0:49:a7:2d:31:40:ff:64:8d: aa:b8:0c:32:4f:7a:07:15:7b:5c:65:d5:97:5b:e8:2b:05:94: a4:0a:d3:85:0c:29:2d:57:da:9d:88:b0:df:d7:80:9c:c5:31: ed:bc:15:cf:9a:06:d6:57:32:d1:f5:9a:15:d9:f1:02:97:60: 0e:0b:e2:66:0a:7b:61:cf:2b:e6:3e:e5:81:16:6d:15:3c:68: 9a:9c:13:fb:23:9c:79:02:be:83:85:fb:fb:a2:70:b5:53:04: 56:80:c1:83 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWCZCCtzSj9TlNQOeRTonpXjxo4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNTkwRkE3QTA0QzE1QTA3RTgwMjU5M0M0NDcyRDc3 RkFCNzgyMDAeFw0yNTExMjYwOTU3NDlaFw0yNjExMjUxMDAyNDlaMDMxMTAvBgNV BAMTKDRCOEE5OUEyMURFNkRFOTYzOTZFNTQxNDcwMjYxRDY0MUVGNkU4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSIQh53Qeto9lIct7Gby+nUdB WF8LdcOY6w1DdevCaXPQX0EgBxwk2roIJp9d210J97KRFhA1k3tOmpJEtt8gLVbG +JyCo/wfFBQdas6u0+Vg6nBDyVPjURKda8UTEX8kR3lSoOlGwjOpHUe6Sz7um4ru La8a7CtzUocL+UFNNxzA/y/dcJpAR6eXUFkcgYjTj5AnwyhI2jZi2s5oixwH7B3B tKIW7K2NOmpFDE+rLIybFbNZGe0tTX4kE4PyoCvZ5QgG0Yy73Lf3ia81/jIKrwxB 3H1XI1GC7BncST1IZHEch9Qd2bfcTByGX5TbjqVIBbl9pJMDcdOBP2MyipnHAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUS4qZoh3m3pY5blQUcCYdZB726AIwHwYDVR0j BBgwFoAUv7WQ+noEwVoH6AJZPERy13+reCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr Ym8vMC9CRkI1OTBGQTdBMDRDMTVBMDdFODAyNTkzQzQ0NzJENzdGQUI3ODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjU5MEZBN0EwNEMxNUEw N0U4MDI1OTNDNDQ3MkQ3N0ZBQjc4MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv MzQzNTJlMzEzNzM0MmUzMTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4 MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLa4SMA0GCSqGSIb3DQEBCwUAA4IBAQA8uv+Yfg8p xMfuSvFXNIoBZCdNQh/+fFCamfH/TbXoGmXznNgZVGzosZW0y+3pbUjZE9qTxI8X jZYot5V2D+Gy0SqLKRi3zYH0R8VFD0HqGlRyIbOVyEAKvAoMnscCuOGtRcjdM88h Rwxbw3SqSffSUaQtattHsi74DzZ4C8VCuwAz3zDCMy6NFPhrOpP212WM8+q04fd3 I+igSactMUD/ZI2quAwyT3oHFXtcZdWXW+grBZSkCtOFDCktV9qdiLDf14CcxTHt vBXPmgbWVzLR9ZoV2fECl2AOC+JmCnthzyvmPuWBFm0VPGianBP7I5x5Ar6Dhfv7 onC1UwRWgMGD -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:02 2025 by rpki-client