This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa File: 34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (raw, json) Hash identifier: XZ2SONjmw/3D2IHKCfuHVoguJdkKkUo79Ed7oj6wOjE= Subject key identifier: 9E:47:6F:73:94:77:CD:36:3A:6B:5A:04:8F:E8:C4:87:B0:3C:0E:B9 Certificate issuer: /CN=94DD58D6AED72AF912BF4195FC6702C5C9BEA075 Certificate serial: 54C97F88E0F5AC64FF40A6B03A12A9AFC566A896 Authority key identifier: 94:DD:58:D6:AE:D7:2A:F9:12:BF:41:95:FC:67:02:C5:C9:BE:A0:75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa Signing time: Fri 21 Nov 2025 17:07:39 +0000 ROA not before: Fri 21 Nov 2025 17:02:39 +0000 ROA not after: Fri 20 Nov 2026 17:07:39 +0000 asID: 268737 IP address blocks: 45.171.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.crl rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 18:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c9:7f:88:e0:f5:ac:64:ff:40:a6:b0:3a:12:a9:af:c5:66:a8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94DD58D6AED72AF912BF4195FC6702C5C9BEA075 Validity Not Before: Nov 21 17:02:39 2025 GMT Not After : Nov 20 17:07:39 2026 GMT Subject: CN=9E476F739477CD363A6B5A048FE8C487B03C0EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:81:bd:2e:ad:6c:9f:c5:8c:1b:3b:57:0d: ca:04:15:b5:6f:21:9a:e4:14:6f:dc:f0:6b:2f:3a: a6:7f:8b:1b:b2:d5:40:27:30:de:9f:bb:d6:0d:13: 1c:6e:ec:e3:78:d9:b0:07:4a:01:58:c5:cc:c6:7b: 93:16:0c:e1:3d:15:ac:26:f7:18:25:ef:eb:0c:25: 1e:00:02:61:3e:91:a6:52:3f:65:d9:1c:fd:27:1d: 4f:af:32:93:c5:1c:18:f2:85:42:ad:21:00:ec:ff: da:56:f5:b5:d3:ed:dc:d1:f8:33:de:e4:3e:1a:fc: 1a:04:de:70:06:63:2a:3d:d5:3f:a7:d8:4d:01:d3: 1e:da:4c:80:ca:eb:aa:ef:97:55:d0:d0:87:43:2f: 75:9f:39:d5:6b:7a:72:f9:6d:80:2f:d3:4a:47:f0: 82:f3:98:a7:11:80:fd:aa:d2:6f:17:4e:39:48:0c: cb:b2:9f:9d:ba:1a:bb:e2:69:9b:93:6f:4a:45:b0: df:d0:64:f0:13:5e:37:25:8f:10:c0:da:32:4e:2e: 96:aa:97:19:e9:92:bc:73:14:61:27:fb:6c:44:9c: 92:15:40:37:97:57:da:21:76:09:d1:0e:b3:b7:81: 1c:38:26:ae:03:89:5f:2c:2e:46:8b:4b:3b:c3:62: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:6F:73:94:77:CD:36:3A:6B:5A:04:8F:E8:C4:87:B0:3C:0E:B9 X509v3 Authority Key Identifier: keyid:94:DD:58:D6:AE:D7:2A:F9:12:BF:41:95:FC:67:02:C5:C9:BE:A0:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DD58D6AED72AF912BF4195FC6702C5C9BEA075.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.252.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:f9:61:54:32:2a:89:48:4d:f4:5a:44:9d:a6:a4:e1:f9:dc: aa:25:52:8c:21:8c:9f:48:8b:c1:66:13:57:2a:77:dd:36:4e: 7b:78:72:4a:2c:83:40:b1:f6:8f:dd:7c:9d:1d:13:ec:f1:08: 93:8e:09:12:ab:d1:5e:bd:1a:31:74:b6:68:d3:80:e0:3f:1a: 9d:9c:44:93:35:91:b8:2c:07:da:25:c0:74:57:13:68:4c:52: 7b:28:08:4c:4c:56:b0:7f:f1:fd:3e:45:3c:41:2b:76:5e:81: 6a:a0:40:73:03:9c:b4:28:58:95:21:27:97:fd:65:03:d0:4d: 43:5e:36:c2:6b:1b:cc:9a:dd:8e:1c:fb:d1:01:a1:37:53:ed: 37:5f:6e:d4:f8:c8:fa:86:a0:86:2b:af:7e:0b:83:20:7d:b7: 70:56:6e:78:3b:b8:05:79:75:f9:fd:f0:41:16:e6:c9:5a:0b: c4:72:83:f6:a7:3a:f6:7a:33:e8:08:d9:76:b7:62:d4:5f:58: 0a:5c:02:05:bd:11:5f:10:df:09:ce:9b:25:b0:84:23:d0:4d: 47:78:72:b7:ae:96:c4:8c:02:56:7d:ec:f9:fe:73:1e:f0:01: 21:af:37:6d:ba:8e:49:1e:7d:0f:89:81:7e:62:f7:26:fd:14: 5e:3b:b1:bb -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVMl/iOD1rGT/QKawOhKpr8VmqJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRERDU4RDZBRUQ3MkFGOTEyQkY0MTk1RkM2NzAyQzVD OUJFQTA3NTAeFw0yNTExMjExNzAyMzlaFw0yNjExMjAxNzA3MzlaMDMxMTAvBgNV BAMTKDlFNDc2RjczOTQ3N0NEMzYzQTZCNUEwNDhGRThDNDg3QjAzQzBFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX4G9Lq1sn8WMGztXDcoEFbVv IZrkFG/c8GsvOqZ/ixuy1UAnMN6fu9YNExxu7ON42bAHSgFYxczGe5MWDOE9Fawm 9xgl7+sMJR4AAmE+kaZSP2XZHP0nHU+vMpPFHBjyhUKtIQDs/9pW9bXT7dzR+DPe 5D4a/BoE3nAGYyo91T+n2E0B0x7aTIDK66rvl1XQ0IdDL3WfOdVrenL5bYAv00pH 8ILzmKcRgP2q0m8XTjlIDMuyn526GrviaZuTb0pFsN/QZPATXjcljxDA2jJOLpaq lxnpkrxzFGEn+2xEnJIVQDeXV9ohdgnRDrO3gRw4Jq4DiV8sLkaLSzvDYugDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUnkdvc5R3zTY6a1oEj+jEh7A8DrkwHwYDVR0j BBgwFoAUlN1Y1q7XKvkSv0GV/GcCxcm+oHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEtuOHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2 aUsvMC85NERENThENkFFRDcyQUY5MTJCRjQxOTVGQzY3MDJDNUM5QkVBMDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0REQ1OEQ2QUVENzJBRjkx MkJGNDE5NUZDNjcwMkM1QzlCRUEwNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhLbjh3Z1FhcnBvMzZnb2hSM3N4YXV1VmdDUjZnR1dkTEZYZVZjYTR3dmlLLzAv MzQzNTJlMzEzNzMxMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItq/wwDQYJKoZIhvcNAQELBQADggEBAE75YVQy KolITfRaRJ2mpOH53KolUowhjJ9Ii8FmE1cqd902Tnt4ckosg0Cx9o/dfJ0dE+zx CJOOCRKr0V69GjF0tmjTgOA/Gp2cRJM1kbgsB9olwHRXE2hMUnsoCExMVrB/8f0+ RTxBK3ZegWqgQHMDnLQoWJUhJ5f9ZQPQTUNeNsJrG8ya3Y4c+9EBoTdT7TdfbtT4 yPqGoIYrr34LgyB9t3BWbng7uAV5dfn98EEW5slaC8Ryg/anOvZ6M+gI2Xa3YtRf WApcAgW9EV8Q3wnOmyWwhCPQTUd4creulsSMAlZ97Pn+cx7wASGvN226jkkefQ+J gX5i9yb9FF47sbs= -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:46 2025 by rpki-client