This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa File: 34352e342e33312e302f32342d3234203d3e20323636303336.roa (raw, json) Hash identifier: 5Q+ii0da105XKLtyKHrvOPNF+5xC2VXCvNGZdDjLtkA= Subject key identifier: AB:2B:A3:BD:70:93:0E:CA:33:B1:70:3D:2D:D0:FC:BB:D3:58:5E:86 Certificate issuer: /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6 Certificate serial: 5F9051B26744249B6DFA9F33F55BA134237F9371 Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa Signing time: Mon 05 Jan 2026 21:13:52 +0000 ROA not before: Mon 05 Jan 2026 21:08:52 +0000 ROA not after: Mon 04 Jan 2027 21:13:52 +0000 asID: 266036 IP address blocks: 45.4.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:90:51:b2:67:44:24:9b:6d:fa:9f:33:f5:5b:a1:34:23:7f:93:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6 Validity Not Before: Jan 5 21:08:52 2026 GMT Not After : Jan 4 21:13:52 2027 GMT Subject: CN=AB2BA3BD70930ECA33B1703D2DD0FCBBD3585E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:e8:2b:e7:b7:e6:b7:93:99:c9:78:c6:04: 65:d2:5c:3a:de:cc:a8:87:1b:6a:2e:d5:7e:7c:d9: dd:9c:e3:3e:6f:70:ab:49:db:90:00:05:91:9f:5c: dc:ce:b3:a2:ed:47:51:68:74:cb:a1:5e:1f:7c:17: 4f:b5:59:cb:dc:2e:cc:84:ed:24:46:77:25:45:f7: e1:53:22:52:e1:40:e3:51:34:d1:6d:49:dc:63:7d: 4f:4c:7c:c7:a2:29:2b:33:84:f8:42:43:07:3e:09: e4:e4:e9:fc:01:62:b4:ad:83:a5:fc:f4:c4:63:e0: cb:2b:56:84:27:54:87:f5:99:1c:71:ec:ee:8c:65: 8a:46:02:ed:ec:6f:39:46:22:a2:85:56:c4:4f:36: b6:f6:23:1f:4b:1d:7d:28:a0:23:48:11:8e:ba:95: 9b:06:c4:07:e0:e5:bb:af:69:21:5b:92:ea:89:dd: ca:d1:be:a2:be:a7:88:b7:f9:b0:74:bf:82:82:49: 70:81:c4:d6:8a:d5:e7:e4:3b:b5:12:b4:a8:7d:e0: 59:eb:1b:4c:e6:1b:bd:aa:52:46:ba:9c:e6:cf:ad: 49:10:43:3f:80:33:9c:6f:b6:7d:66:f8:ec:16:91: e2:27:0a:c9:d0:5d:8b:a7:5a:f0:40:cb:9e:63:f3: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2B:A3:BD:70:93:0E:CA:33:B1:70:3D:2D:D0:FC:BB:D3:58:5E:86 X509v3 Authority Key Identifier: keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.31.0/24 Signature Algorithm: sha256WithRSAEncryption 79:8a:a0:91:60:d6:7f:0a:25:9b:85:13:e0:f6:fd:d8:57:5d: c2:2d:85:3d:06:77:ae:85:00:a2:8e:42:f7:5c:9a:ab:d0:7e: 36:1c:6b:59:73:b0:84:ae:4a:52:06:06:45:a0:c8:c2:56:41: 4e:60:4a:cc:35:86:73:ab:78:ee:e2:d4:4f:ed:a2:80:b7:20: 1a:3b:75:bb:8b:6b:d0:43:b0:09:08:ad:58:d3:2e:94:6c:d9: bc:c4:da:34:66:91:b8:60:44:80:d4:f2:e3:ea:86:ff:db:d2: 41:18:f9:d6:f3:28:8b:ad:81:ed:a7:57:64:65:52:5e:bf:61: fd:54:0d:d9:00:d8:20:00:0e:d9:11:05:01:0d:69:62:34:53: a9:ba:d2:ea:5e:72:eb:d6:5c:9b:6f:a2:a6:2b:3d:78:5b:ca: 17:03:cd:e4:f2:33:c4:4c:71:09:5a:d5:c8:0f:3d:ac:f6:4e: 71:f6:2b:d4:5a:6f:ea:1e:0c:8e:2e:04:2a:57:0b:82:cb:06: 04:f5:55:17:3f:9c:aa:db:e1:72:02:ba:4d:59:c8:1c:98:cb: 77:d5:08:0e:e4:09:2f:06:31:61:fd:8d:fa:c5:82:64:3f:53: 12:d3:34:d8:f9:88:14:48:03:9b:39:6d:08:57:c2:9f:4f:41: ca:d7:34:d2 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUX5BRsmdEJJtt+p8z9VuhNCN/k3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNDNDdFQjEzOUIzNTc3MDA4NEQ1RDZCQjRDNjU3MDdC QzJFRENDNjAeFw0yNjAxMDUyMTA4NTJaFw0yNzAxMDQyMTEzNTJaMDMxMTAvBgNV BAMTKEFCMkJBM0JENzA5MzBFQ0EzM0IxNzAzRDJERDBGQ0JCRDM1ODVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsM+gr57fmt5OZyXjGBGXSXDre zKiHG2ou1X582d2c4z5vcKtJ25AABZGfXNzOs6LtR1FodMuhXh98F0+1WcvcLsyE 7SRGdyVF9+FTIlLhQONRNNFtSdxjfU9MfMeiKSszhPhCQwc+CeTk6fwBYrStg6X8 9MRj4MsrVoQnVIf1mRxx7O6MZYpGAu3sbzlGIqKFVsRPNrb2Ix9LHX0ooCNIEY66 lZsGxAfg5buvaSFbkuqJ3crRvqK+p4i3+bB0v4KCSXCBxNaK1efkO7UStKh94Fnr G0zmG72qUka6nObPrUkQQz+AM5xvtn1m+OwWkeInCsnQXYunWvBAy55j82BpAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUqyujvXCTDsozsXA9LdD8u9NYXoYwHwYDVR0j BBgwFoAUU8R+sTmzV3AITV1rtMZXB7wu3MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkdDWXZCTXdpQmllV1B3cTE5ODhBQVE4R0pqYTlVTEh4M1ZxUEdZZjZk ZFQvMC81M0M0N0VCMTM5QjM1NzcwMDg0RDVENkJCNEM2NTcwN0JDMkVEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQzQ3RUIxMzlCMzU3NzAw ODRENUQ2QkI0QzY1NzA3QkMyRURDQzYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JHQ1l2Qk13aUJpZVdQd3ExOTg4QUFROEdKamE5VUxIeDNWcVBHWWY2ZGRULzAv MzQzNTJlMzQyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDMz MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtBB8wDQYJKoZIhvcNAQELBQADggEBAHmKoJFg1n8KJZuF E+D2/dhXXcIthT0Gd66FAKKOQvdcmqvQfjYca1lzsISuSlIGBkWgyMJWQU5gSsw1 hnOreO7i1E/tooC3IBo7dbuLa9BDsAkIrVjTLpRs2bzE2jRmkbhgRIDU8uPqhv/b 0kEY+dbzKIutge2nV2RlUl6/Yf1UDdkA2CAADtkRBQENaWI0U6m60upecuvWXJtv oqYrPXhbyhcDzeTyM8RMcQla1cgPPaz2TnH2K9Rab+oeDI4uBCpXC4LLBgT1VRc/ nKrb4XICuk1ZyByYy3fVCA7kCS8GMWH9jfrFgmQ/UxLTNNj5iBRIA5s5bQhXwp9P QcrXNNI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:50:46 2026 by rpki-client