This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa File: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (raw, json) Hash identifier: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA= Subject key identifier: DA:68:6C:7E:68:D5:B4:F7:07:D0:C0:5D:31:A1:56:AD:1E:31:F9:4E Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 42203CD051161E8276A7A8C48488735C24D9E30D Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa Signing time: Fri 21 Nov 2025 12:20:51 +0000 ROA not before: Fri 21 Nov 2025 12:15:51 +0000 ROA not after: Fri 20 Nov 2026 12:20:51 +0000 asID: 53427 IP address blocks: 45.165.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 01:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:20:3c:d0:51:16:1e:82:76:a7:a8:c4:84:88:73:5c:24:d9:e3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Nov 21 12:15:51 2025 GMT Not After : Nov 20 12:20:51 2026 GMT Subject: CN=DA686C7E68D5B4F707D0C05D31A156AD1E31F94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:c7:30:0c:d2:1b:01:46:b7:41:ac:d9:cd: 8b:34:50:5f:b5:33:20:69:fa:8b:93:ab:b8:63:14: bb:38:ab:15:e5:a1:e9:27:b4:c4:be:f2:ba:7e:9a: 59:53:71:d4:c8:82:c6:f2:c9:b1:02:12:f6:a9:99: ee:f1:f3:2e:2e:03:5f:4a:00:98:13:dd:db:05:75: 6b:8f:ce:d2:1f:87:71:07:b4:dc:9c:ec:b6:67:99: a8:86:45:16:c1:62:60:f6:1f:1d:34:55:35:3d:c0: 19:ac:0e:9b:ae:f3:1d:ec:a8:34:a7:af:c6:b5:31: c4:da:a2:74:24:a2:18:80:ce:7d:be:37:ce:b2:8f: e6:40:8b:26:61:37:47:9a:e2:02:85:8f:3a:50:c2: 50:17:0c:48:05:40:88:20:ec:ce:0b:8d:f5:82:d5: d8:29:f7:54:a5:4a:6a:e8:22:02:e6:8b:19:80:f5: cd:d3:2c:35:66:e0:65:ef:39:9c:6a:ba:5e:23:16: 55:a1:ff:2a:45:58:87:9e:e2:64:9f:70:46:db:ba: 53:a1:01:54:a5:51:35:4d:c2:e2:72:10:32:96:e3: 90:e6:7e:c2:97:2f:2f:ec:8a:79:a6:a7:a1:ea:78: e5:f8:84:86:13:cf:f4:3e:47:f7:89:ad:13:57:af: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:6C:7E:68:D5:B4:F7:07:D0:C0:5D:31:A1:56:AD:1E:31:F9:4E X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203533343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.80.0/22 Signature Algorithm: sha256WithRSAEncryption 16:99:4a:ef:47:67:7a:ce:80:6e:ab:d1:68:4e:55:56:f0:00: 56:95:0f:f4:2d:cd:1e:8c:76:8c:76:30:e7:63:b4:f7:f6:52: aa:d6:57:92:9b:24:fe:8e:88:1e:0e:14:65:6c:ae:06:35:68: 8f:73:e7:f9:7c:73:c9:72:d6:62:19:84:96:9a:a9:c1:cd:0b: 42:37:c7:94:34:ab:b7:ff:b7:51:8a:34:61:b8:2a:cc:f4:58: 6c:d6:2c:fa:7c:7e:9f:c1:56:80:6d:62:e3:10:ba:00:95:34: a3:f3:76:b1:1a:5c:bf:2d:b0:55:6e:50:b4:8c:d1:77:50:9d: 3a:46:bf:b0:8d:dd:c8:57:70:3f:aa:0d:64:bf:f5:46:e7:ae: 6d:6d:87:d3:0a:dd:1d:1a:3c:25:b8:df:c0:37:a7:05:aa:b5: 58:c6:f4:b3:aa:81:85:09:5d:0c:22:ca:cf:a2:2d:6d:27:22: 26:68:b4:ce:64:ae:73:a6:44:9d:df:32:c7:61:fb:8b:c7:52: 04:76:ef:f3:b3:17:4a:6f:2d:8c:0e:36:a1:54:6a:e8:ca:ec: 5f:3f:8b:e2:98:21:d9:be:e5:18:4e:ec:cc:6b:79:01:14:37: 0c:1c:2d:2f:80:74:9d:28:d5:4e:08:25:4e:c9:c7:ed:e9:b9: 00:9b:27:d5 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQiA80FEWHoJ2p6jEhIhzXCTZ4w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTExMjExMjE1NTFaFw0yNjExMjAxMjIwNTFaMDMxMTAvBgNV BAMTKERBNjg2QzdFNjhENUI0RjcwN0QwQzA1RDMxQTE1NkFEMUUzMUY5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIM8cwDNIbAUa3QazZzYs0UF+1 MyBp+ouTq7hjFLs4qxXloekntMS+8rp+mllTcdTIgsbyybECEvapme7x8y4uA19K AJgT3dsFdWuPztIfh3EHtNyc7LZnmaiGRRbBYmD2Hx00VTU9wBmsDpuu8x3sqDSn r8a1McTaonQkohiAzn2+N86yj+ZAiyZhN0ea4gKFjzpQwlAXDEgFQIgg7M4LjfWC 1dgp91SlSmroIgLmixmA9c3TLDVm4GXvOZxqul4jFlWh/ypFWIee4mSfcEbbulOh AVSlUTVNwuJyEDKW45DmfsKXLy/sinmmp6HqeOX4hIYTz/Q+R/eJrRNXr6GFAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU2mhsfmjVtPcH0MBdMaFWrR4x+U4wHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JIZ3hOc0FKZkE0aVM5NFprRmYyeVp5UUJ5Um96YkoxRVBVQUtMZjVwYnlGLzAv MzQzNTJlMzEzNjM1MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzM0 MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAi2lUDANBgkqhkiG9w0BAQsFAAOCAQEAFplK70dnes6A bqvRaE5VVvAAVpUP9C3NHox2jHYw52O09/ZSqtZXkpsk/o6IHg4UZWyuBjVoj3Pn +XxzyXLWYhmElpqpwc0LQjfHlDSrt/+3UYo0YbgqzPRYbNYs+nx+n8FWgG1i4xC6 AJU0o/N2sRpcvy2wVW5QtIzRd1CdOka/sI3dyFdwP6oNZL/1RueubW2H0wrdHRo8 JbjfwDenBaq1WMb0s6qBhQldDCLKz6ItbSciJmi0zmSuc6ZEnd8yx2H7i8dSBHbv 87MXSm8tjA42oVRq6MrsXz+L4pgh2b7lGE7szGt5ARQ3DBwtL4B0nSjVTgglTsnH 7em5AJsn1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:03 2025 by rpki-client