This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa File: 34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa (raw, json) Hash identifier: 2uSeXbd5DGQPU5nQRrriLig6ufMl/FLGgQ4j1Jfq4Go= Subject key identifier: 89:8A:4D:E4:20:1B:BC:A1:9B:FC:F6:02:34:53:7F:9E:CF:5E:E0:F1 Certificate issuer: /CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Certificate serial: 42F610F3C230A2E362FEB21C079FD1B3DEB18B02 Authority key identifier: E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa Signing time: Sun 04 Jan 2026 02:59:50 +0000 ROA not before: Sun 04 Jan 2026 02:54:50 +0000 ROA not after: Sun 03 Jan 2027 02:59:50 +0000 asID: 269506 IP address blocks: 45.170.176.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 09:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f6:10:f3:c2:30:a2:e3:62:fe:b2:1c:07:9f:d1:b3:de:b1:8b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Validity Not Before: Jan 4 02:54:50 2026 GMT Not After : Jan 3 02:59:50 2027 GMT Subject: CN=898A4DE4201BBCA19BFCF60234537F9ECF5EE0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:26:0b:f3:40:ea:8d:54:d0:f7:df:8f:fb:3f: b3:64:86:19:5c:91:e4:2f:71:dc:01:a6:78:78:67: 0e:76:6c:2f:4c:5d:09:da:a3:bb:e5:58:d9:71:b9: 1d:ad:fa:ff:df:1f:a7:cc:74:e1:f0:39:29:74:8b: 75:35:76:ec:52:58:41:67:9f:37:7b:6e:e8:83:ac: 0a:47:9b:d7:8a:79:7f:fe:34:ee:1b:62:f0:ca:40: 00:08:b7:28:24:99:48:38:e9:3c:f9:98:da:8b:0f: ed:0b:23:0f:9a:78:a6:83:46:ed:77:0f:fb:b2:f7: 87:0e:75:3a:3d:3d:38:d8:69:c3:a2:44:6f:8c:b3: e2:30:5c:65:af:b7:f2:8c:c4:26:c0:c2:aa:58:cb: a0:b2:8b:8e:9a:ac:d4:a1:d0:50:ab:3f:73:a9:e8: 2e:3e:64:b2:4f:38:50:d4:a4:10:f9:c3:d2:16:2d: 76:cc:93:e6:8a:d9:86:a1:fb:bb:6d:16:f3:17:3a: 39:54:fd:a4:d4:d7:11:c7:99:6a:ff:09:27:3c:6c: e1:94:f1:ec:6e:ec:b5:71:68:5c:42:35:2c:88:33: 7d:38:31:17:30:ca:92:38:9c:45:ef:8b:91:df:a9: 1b:d9:86:a6:26:7b:5d:9b:0c:07:31:08:f9:f1:94: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:4D:E4:20:1B:BC:A1:9B:FC:F6:02:34:53:7F:9E:CF:5E:E0:F1 X509v3 Authority Key Identifier: keyid:E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.176.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:fc:96:02:1f:09:e3:9b:9f:55:52:09:44:2d:cd:18:70:75: 1a:3a:44:e3:a8:4c:d9:5b:4a:1b:09:6b:6b:80:d7:f8:75:18: 54:bb:00:97:93:17:fe:29:8a:49:52:0f:e4:7d:40:05:29:0f: f8:24:75:7c:6d:46:eb:2a:b7:a7:2e:10:c1:f6:45:ed:25:2a: 16:18:10:44:62:89:81:51:05:35:64:a7:5e:79:a8:db:d1:28: 02:91:89:f7:de:5c:c6:76:9c:68:c7:58:c7:15:94:a2:c6:b6: 30:e3:0d:7d:fd:8e:c2:dc:d9:fa:24:78:09:38:44:48:50:b6: 4f:77:ea:50:13:48:86:58:6b:94:38:08:5e:b6:05:50:56:44: 89:2e:db:54:f2:4d:c7:83:9a:fd:76:0c:9d:ea:ec:18:ef:40: a9:ba:e0:8b:21:ff:87:db:32:c4:73:0b:6b:29:c4:55:bf:96: 57:43:37:20:d6:69:82:06:5a:01:4a:9d:b0:d1:e9:0a:08:a9: 13:ed:c5:b0:5e:4c:38:31:c9:32:88:c1:28:e6:84:d7:10:f5: db:68:4b:63:a7:92:d1:4f:8f:8b:6a:fa:09:89:0f:64:3d:44: 98:5e:d6:a2:87:9a:44:0b:11:c1:a3:d6:9d:cf:e3:c9:9b:31: 81:d4:11:88 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQvYQ88IwouNi/rIcB5/Rs96xiwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUyQ0ZERDc5QUJCNEI5QjI2QThBQUMzODQ2Qzk2MzI2 QTAzRUUwRTAeFw0yNjAxMDQwMjU0NTBaFw0yNzAxMDMwMjU5NTBaMDMxMTAvBgNV BAMTKDg5OEE0REU0MjAxQkJDQTE5QkZDRjYwMjM0NTM3RjlFQ0Y1RUUwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJgvzQOqNVND334/7P7Nkhhlc keQvcdwBpnh4Zw52bC9MXQnao7vlWNlxuR2t+v/fH6fMdOHwOSl0i3U1duxSWEFn nzd7buiDrApHm9eKeX/+NO4bYvDKQAAItygkmUg46Tz5mNqLD+0LIw+aeKaDRu13 D/uy94cOdTo9PTjYacOiRG+Ms+IwXGWvt/KMxCbAwqpYy6Cyi46arNSh0FCrP3Op 6C4+ZLJPOFDUpBD5w9IWLXbMk+aK2Yah+7ttFvMXOjlU/aTU1xHHmWr/CSc8bOGU 8exu7LVxaFxCNSyIM304MRcwypI4nEXvi5HfqRvZhqYme12bDAcxCPnxlEB1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUiYpN5CAbvKGb/PYCNFN/ns9e4PEwHwYDVR0j BBgwFoAU5Sz915q7S5smqKrDhGyWMmoD7g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJK TEsvMC9FNTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkNGREQ3OUFCQjRCOUIy NkE4QUFDMzg0NkM5NjMyNkEwM0VFMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhINXRtZEZlQ1ZidFM0MUdhOG5ObnJ3MTVUckFOb0Q2a1hRVGU4cTQySkxLLzAv MzQzNTJlMzEzNzMwMmUzMTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzkzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItqrAwDQYJKoZIhvcNAQELBQADggEBAIr8lgIf CeObn1VSCUQtzRhwdRo6ROOoTNlbShsJa2uA1/h1GFS7AJeTF/4piklSD+R9QAUp D/gkdXxtRusqt6cuEMH2Re0lKhYYEERiiYFRBTVkp155qNvRKAKRiffeXMZ2nGjH WMcVlKLGtjDjDX39jsLc2fokeAk4REhQtk936lATSIZYa5Q4CF62BVBWRIku21Ty TceDmv12DJ3q7BjvQKm64Ish/4fbMsRzC2spxFW/lldDNyDWaYIGWgFKnbDR6QoI qRPtxbBeTDgxyTKIwSjmhNcQ9dtoS2OnktFPj4tq+gmJD2Q9RJhe1qKHmkQLEcGj 1p3P48mbMYHUEYg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:31:31 2026 by rpki-client