This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa File: 34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (raw, json) Hash identifier: SFSJiklMQ/hZ4E/fSEepXakd+JWIngkS4RcBFC4jfLY= Subject key identifier: FB:12:C7:EF:2E:F0:74:5D:3E:93:0B:A6:60:D8:60:10:D2:64:F6:08 Certificate issuer: /CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7 Certificate serial: 030A6FA1959C197EEFD35578E7DB5FDF929385E8 Authority key identifier: D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer Subject info access: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa Signing time: Thu 13 Nov 2025 18:18:13 +0000 ROA not before: Thu 13 Nov 2025 18:13:13 +0000 ROA not after: Thu 12 Nov 2026 18:18:13 +0000 asID: 267125 IP address blocks: 45.228.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 00:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0a:6f:a1:95:9c:19:7e:ef:d3:55:78:e7:db:5f:df:92:93:85:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7 Validity Not Before: Nov 13 18:13:13 2025 GMT Not After : Nov 12 18:18:13 2026 GMT Subject: CN=FB12C7EF2EF0745D3E930BA660D86010D264F608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:d0:70:e6:e5:31:3d:73:f1:8c:45:51:8f: 33:c7:aa:e4:a8:1f:38:d7:de:25:4c:46:8f:a7:33: c1:1e:67:ed:07:c9:8d:da:ef:94:f2:20:f6:e4:ef: cf:73:93:61:32:ec:1c:8e:d1:b0:10:11:fb:fe:3c: 4d:63:62:71:41:e4:34:6c:42:58:6f:a0:1a:fa:67: 2d:8a:4e:08:4d:aa:0e:0b:0a:d1:6e:bb:b4:24:aa: 06:77:e1:76:ef:e3:54:f5:0c:3c:a1:02:7a:1b:64: a9:43:13:1f:75:96:a4:c4:a9:80:18:7a:9b:a2:90: e6:9d:79:d0:ae:95:53:82:35:2b:7e:ab:35:f5:ad: 0b:12:dd:26:e8:9a:80:8c:7c:0b:7f:b8:7b:24:ef: 28:d4:9a:09:44:81:50:74:3b:4f:7b:b1:35:30:23: 11:08:90:2a:e6:59:64:27:e9:be:3a:d1:34:cd:98: 66:ee:72:90:d5:1d:90:4b:35:3b:c6:b1:2e:09:8b: a7:5e:3e:9a:99:40:30:5e:0a:5b:b1:dc:f2:cd:e2: 8b:6a:53:56:90:26:d9:e4:33:f6:ea:0a:1c:63:21: f3:1b:d3:6b:c7:bf:c4:d1:9b:d6:9a:ed:55:30:09: 0b:af:fe:4d:8c:a5:d0:40:e2:7e:a3:3e:52:cd:5a: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:C7:EF:2E:F0:74:5D:3E:93:0B:A6:60:D8:60:10:D2:64:F6:08 X509v3 Authority Key Identifier: keyid:D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.236.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:b2:72:9a:32:e9:17:9d:8c:11:eb:63:4c:3e:5e:9b:34:2e: f8:a2:c8:88:97:82:2c:73:77:9b:f8:ee:cc:c7:d3:6e:9a:ac: d6:7e:07:62:bc:27:fa:a0:1d:b4:0f:06:7b:61:3f:8c:67:3a: 5e:a8:9c:3c:4f:a5:66:9a:0f:31:02:67:0a:26:dc:0d:5e:c6: 1c:07:58:f8:c5:fe:17:20:69:86:d3:a3:2e:0e:92:42:09:30: bc:40:3c:da:38:ff:ca:21:d2:18:07:6a:43:37:06:c1:a5:49: b7:7d:ad:87:69:de:7d:14:c4:38:e3:0e:0d:fa:62:c8:0d:fa: 86:f9:73:e4:db:3b:ee:87:c5:a7:79:cb:4a:82:86:ee:20:38: b6:28:6e:01:ab:d9:0c:14:3d:f9:49:d9:9c:ac:72:eb:17:35: 9b:4c:c2:37:f0:43:5f:b8:1f:22:92:12:d4:5d:da:35:e0:7e: 27:fd:9f:91:d1:7a:7a:4a:12:c4:11:01:5e:57:77:d3:28:fe: 02:85:6e:f5:45:69:04:96:7b:40:fe:62:ab:08:5e:5a:8f:b7: 3e:d0:ee:82:55:fb:41:c8:51:3a:29:90:48:bf:1d:95:4b:af: a1:8e:ed:6b:bf:1b:43:fb:92:59:30:39:e5:37:22:8f:f9:6f: 1c:f8:9a:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUAwpvoZWcGX7v01V459tf35KThegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzNzUyQURBOTJFODE5MzFDMjlDQTQ0QUJERUVEREYz NzNFOTNGNzAeFw0yNTExMTMxODEzMTNaFw0yNjExMTIxODE4MTNaMDMxMTAvBgNV BAMTKEZCMTJDN0VGMkVGMDc0NUQzRTkzMEJBNjYwRDg2MDEwRDI2NEY2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULdBw5uUxPXPxjEVRjzPHquSo HzjX3iVMRo+nM8EeZ+0HyY3a75TyIPbk789zk2Ey7ByO0bAQEfv+PE1jYnFB5DRs QlhvoBr6Zy2KTghNqg4LCtFuu7QkqgZ34Xbv41T1DDyhAnobZKlDEx91lqTEqYAY epuikOadedCulVOCNSt+qzX1rQsS3SbomoCMfAt/uHsk7yjUmglEgVB0O097sTUw IxEIkCrmWWQn6b460TTNmGbucpDVHZBLNTvGsS4Ji6dePpqZQDBeClux3PLN4otq U1aQJtnkM/bqChxjIfMb02vHv8TRm9aa7VUwCQuv/k2MpdBA4n6jPlLNWowtAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU+xLH7y7wdF0+kwumYNhgENJk9ggwHwYDVR0j BBgwFoAU1TdSrakugZMcKcpEq97t3zc+k/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkJmVUV3NzlOZVFhVWVKWU5wNUg0ZmZCTUNOcEtyR1hDVG9veXRuOTJG dnAvMS9ENTM3NTJBREE5MkU4MTkzMUMyOUNBNDRBQkRFRURERjM3M0U5M0Y3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1Mzc1MkFEQTkyRTgxOTMx QzI5Q0E0NEFCREVFRERGMzczRTkzRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JCZlVFdzc5TmVRYVVlSllOcDVINGZmQk1DTnBLckdYQ1Rvb3l0bjkyRnZwLzEv MzQzNTJlMzIzMjM4MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzczMTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt5OwwDQYJKoZIhvcNAQELBQADggEBAD2ycpoy 6RedjBHrY0w+Xps0LviiyIiXgixzd5v47szH026arNZ+B2K8J/qgHbQPBnthP4xn Ol6onDxPpWaaDzECZwom3A1exhwHWPjF/hcgaYbToy4OkkIJMLxAPNo4/8oh0hgH akM3BsGlSbd9rYdp3n0UxDjjDg36YsgN+ob5c+TbO+6Hxad5y0qChu4gOLYobgGr 2QwUPflJ2ZyscusXNZtMwjfwQ1+4HyKSEtRd2jXgfif9n5HRenpKEsQRAV5Xd9Mo /gKFbvVFaQSWe0D+YqsIXlqPtz7Q7oJV+0HIUTopkEi/HZVLr6GO7Wu/G0P7klkw OeU3Io/5bxz4mik= -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:32 2025 by rpki-client