This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa File: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (raw, json) Hash identifier: hrE4qbNMZ/t+HxyrgMu0+iUYmAsIKUuouY7MuX68HtQ= Subject key identifier: 71:5D:13:37:3D:4B:FB:98:9E:DE:13:FF:C7:43:9E:1A:E3:DA:F2:22 Certificate issuer: /CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D Certificate serial: 320AB6E47D9A39710912BA87BAEAC66F1141D1F2 Authority key identifier: AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa Signing time: Thu 15 Jan 2026 22:26:35 +0000 ROA not before: Thu 15 Jan 2026 22:21:35 +0000 ROA not after: Thu 14 Jan 2027 22:26:35 +0000 asID: 268151 IP address blocks: 45.170.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0a:b6:e4:7d:9a:39:71:09:12:ba:87:ba:ea:c6:6f:11:41:d1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D Validity Not Before: Jan 15 22:21:35 2026 GMT Not After : Jan 14 22:26:35 2027 GMT Subject: CN=715D13373D4BFB989EDE13FFC7439E1AE3DAF222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:07:bb:1c:23:8d:06:92:d4:24:5e:1a:3e: be:07:ef:84:94:87:7b:59:dd:ba:50:f4:90:17:d9: ef:ea:3e:a9:b9:1e:12:9a:27:81:f2:37:ef:b5:67: 1a:33:88:82:14:8c:0b:9b:77:c1:96:19:70:dd:41: 31:80:ba:78:60:5e:be:ca:50:c6:72:2b:72:de:58: bb:02:50:22:17:d0:4c:e0:50:1b:55:17:27:54:7d: 61:17:ba:d4:ad:b4:1b:4c:49:5b:aa:6f:c1:0c:48: fa:46:d8:a9:fc:ba:db:95:6b:da:11:8f:44:42:f3: bc:96:2c:00:39:ab:01:6d:ef:13:7b:77:bc:6d:a2: 5b:be:fd:6a:bd:76:f2:a7:6b:48:45:29:26:5b:d6: 21:da:4a:f0:eb:7e:e4:76:57:48:61:04:b2:f0:13: 44:42:a8:97:71:b9:4f:fd:0d:ab:f8:bb:06:20:65: 86:f7:52:48:38:3f:b7:fa:9c:49:7f:a5:a4:5b:65: 51:9c:78:5a:7d:cc:91:f4:08:e7:58:dc:34:a1:3d: 4e:92:a8:e4:3a:64:37:d7:19:3f:17:71:cf:1f:52: ba:d7:c0:c8:3c:0b:fb:01:bb:4e:bd:1b:a8:7b:68: b5:cc:f8:34:1e:74:a8:37:3e:02:d3:40:fc:dd:a1: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:13:37:3D:4B:FB:98:9E:DE:13:FF:C7:43:9E:1A:E3:DA:F2:22 X509v3 Authority Key Identifier: keyid:AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.76.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:0c:7e:15:76:e9:e2:b4:83:79:5f:a7:76:3f:3a:eb:fd:8a: 71:00:83:41:a6:b5:a2:a7:d7:d3:37:fd:50:d2:5a:6a:03:e7: f3:a1:b2:61:93:65:f6:5d:19:2e:db:b2:83:5a:0e:65:0c:bb: d1:d8:63:99:de:af:e4:0e:a6:04:11:fd:68:9f:14:17:55:8e: 41:e7:3a:40:15:a0:03:ca:31:81:6f:3c:b5:8e:c9:57:ec:3e: a4:7d:19:bf:c9:a8:5c:9d:6e:23:06:5b:89:d0:49:91:a9:1f: 0b:eb:f4:54:e2:eb:b7:2c:ae:ab:65:50:64:e1:05:d9:a4:8b: ec:7c:56:0b:47:ec:02:23:7c:1a:bc:d6:16:e1:92:d3:91:6d: 98:b6:0b:e9:6d:0c:d2:29:46:56:86:e6:82:c7:24:45:52:15: d5:6e:0a:d7:cb:64:5b:74:1a:ec:94:d3:27:56:40:3a:2d:b1: 68:36:c2:5e:9c:a9:13:e2:78:e6:7b:5f:4d:3b:50:07:70:86: 44:cd:f4:43:d1:97:cf:84:32:33:8f:be:52:16:08:1a:53:56: b2:18:07:e0:86:ff:0c:44:81:3c:03:fd:23:04:f4:89:4e:43: ea:48:d7:fe:aa:83:14:b1:9d:4a:b4:21:1e:1a:6d:33:23:ea: d5:1c:9b:6a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUMgq25H2aOXEJErqHuurGbxFB0fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3OTNFM0ZCOEUxRTdGOTE3MkU1RTlFRTU4RUI0RDIy OTM3NDQzRDAeFw0yNjAxMTUyMjIxMzVaFw0yNzAxMTQyMjI2MzVaMDMxMTAvBgNV BAMTKDcxNUQxMzM3M0Q0QkZCOTg5RURFMTNGRkM3NDM5RTFBRTNEQUYyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspQe7HCONBpLUJF4aPr4H74SU h3tZ3bpQ9JAX2e/qPqm5HhKaJ4HyN++1ZxoziIIUjAubd8GWGXDdQTGAunhgXr7K UMZyK3LeWLsCUCIX0EzgUBtVFydUfWEXutSttBtMSVuqb8EMSPpG2Kn8utuVa9oR j0RC87yWLAA5qwFt7xN7d7xtolu+/Wq9dvKna0hFKSZb1iHaSvDrfuR2V0hhBLLw E0RCqJdxuU/9Dav4uwYgZYb3Ukg4P7f6nEl/paRbZVGceFp9zJH0COdY3DShPU6S qOQ6ZDfXGT8Xcc8fUrrXwMg8C/sBu069G6h7aLXM+DQedKg3PgLTQPzdodf9AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUcV0TNz1L+5ie3hP/x0OeGuPa8iIwHwYDVR0j BBgwFoAUrnk+P7jh5/kXLl6e5Y600ik3RD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx WW0vMC9BRTc5M0UzRkI4RTFFN0Y5MTcyRTVFOUVFNThFQjREMjI5Mzc0NDNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNzkzRTNGQjhFMUU3Rjkx NzJFNUU5RUU1OEVCNEQyMjkzNzQ0M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhhRkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAv MzQzNTJlMzEzNzMwMmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4 MzEzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLapMMA0GCSqGSIb3DQEBCwUAA4IBAQB+DH4Vduni tIN5X6d2Pzrr/YpxAINBprWip9fTN/1Q0lpqA+fzobJhk2X2XRku27KDWg5lDLvR 2GOZ3q/kDqYEEf1onxQXVY5B5zpAFaADyjGBbzy1jslX7D6kfRm/yahcnW4jBluJ 0EmRqR8L6/RU4uu3LK6rZVBk4QXZpIvsfFYLR+wCI3wavNYW4ZLTkW2YtgvpbQzS KUZWhuaCxyRFUhXVbgrXy2RbdBrslNMnVkA6LbFoNsJenKkT4njme19NO1AHcIZE zfRD0ZfPhDIzj75SFggaU1ayGAfghv8MRIE8A/0jBPSJTkPqSNf+qoMUsZ1KtCEe Gm0zI+rVHJtq -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:28 2026 by rpki-client