This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa File: 34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (raw, json) Hash identifier: y1DOoRZ2jRrfbJDP3KGlI04eqvq1vu59qC0FEwtqWO4= Subject key identifier: 16:09:0B:17:00:21:1B:00:69:A3:94:53:54:BC:54:F2:7C:E2:CE:5F Certificate issuer: /CN=208F84112F1A4B695E56F4EB839321D9C18D523D Certificate serial: 5E278F7890331975BDE560DD11757132382D5FC5 Authority key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa Signing time: Thu 27 Nov 2025 11:56:50 +0000 ROA not before: Thu 27 Nov 2025 11:51:50 +0000 ROA not after: Thu 26 Nov 2026 11:56:50 +0000 asID: 270258 IP address blocks: 45.191.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:27:8f:78:90:33:19:75:bd:e5:60:dd:11:75:71:32:38:2d:5f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208F84112F1A4B695E56F4EB839321D9C18D523D Validity Not Before: Nov 27 11:51:50 2025 GMT Not After : Nov 26 11:56:50 2026 GMT Subject: CN=16090B1700211B0069A3945354BC54F27CE2CE5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:ba:01:fb:29:08:d7:43:8f:71:88:d4:9b: dd:e1:06:80:96:c5:55:2f:d9:72:a2:6c:38:36:c1: b2:b5:bf:f4:96:27:24:31:44:73:57:47:2b:c8:61: 8f:ca:42:0d:21:54:54:01:c3:7e:52:df:aa:22:b0: aa:83:a4:a4:81:3c:f6:dc:af:3f:0c:59:34:3c:87: 55:e1:1d:a9:94:93:93:39:15:2d:b2:f5:50:ab:19: 2d:d5:16:6a:39:0a:95:38:10:45:35:52:98:7c:ee: da:b6:83:c8:5a:42:10:73:c9:88:ec:d9:52:b8:ea: 4f:9a:f0:f3:9a:34:7a:60:8e:8d:8d:ee:b0:41:07: 61:7c:52:5d:c8:80:52:17:b8:d1:88:d6:b2:32:ec: c0:5a:3f:4e:a5:da:9d:4e:95:95:9e:f7:4f:86:d6: 54:05:48:9c:df:c8:9f:21:77:52:4a:77:91:17:a8: 38:2f:17:a7:8b:86:e7:74:ce:27:b5:87:c5:2d:58: 8c:f0:2a:3f:c5:fc:c5:51:d0:dc:67:ea:62:5b:e5: 78:bd:4d:02:6c:92:64:3a:3b:07:fb:b6:cf:16:1a: 12:70:e3:ad:90:d3:49:89:6b:af:f9:df:79:80:b1: 68:a7:7b:aa:a0:1b:ae:0f:4a:a6:61:e9:15:b6:8c: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:09:0B:17:00:21:1B:00:69:A3:94:53:54:BC:54:F2:7C:E2:CE:5F X509v3 Authority Key Identifier: keyid:20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/34352e3139312e31322e302f32322d3332203d3e20323730323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.12.0/22 Signature Algorithm: sha256WithRSAEncryption 90:11:da:03:63:67:cc:eb:66:c3:ab:78:7c:bb:56:44:18:a6: 32:97:bd:e2:a9:d1:9f:56:91:24:2c:e2:88:82:1e:52:81:98: 4f:98:21:d8:4a:96:0d:68:6f:17:eb:9b:49:65:5e:c0:91:04: 97:92:0b:bb:73:15:5f:e9:7f:f2:72:1f:ba:43:23:02:85:02: dc:be:d9:c9:94:6d:e6:9f:c3:76:89:11:77:97:d7:bc:5f:f0: dc:be:cd:74:66:e2:9f:a4:54:04:9f:4b:0e:3c:10:72:7e:d5: e5:ff:93:f1:80:51:f0:2b:a2:6b:b3:4f:97:70:dd:6e:59:3f: bb:ad:ca:c2:37:77:4c:14:23:65:57:30:77:5d:b5:1e:24:be: 90:97:fd:7f:8a:26:9d:75:d4:d9:79:20:f1:f1:22:96:40:7e: 09:27:94:2b:7d:46:30:6a:28:a0:d5:e4:48:24:b0:4e:25:23: 6c:7f:ba:46:80:c8:42:3f:60:07:40:0e:40:8f:01:14:88:b0: 20:55:8d:b3:ed:b9:cb:af:9f:a6:e0:02:76:f1:ec:37:d5:4f: c1:0a:07:cb:bc:6b:35:15:39:fa:76:e1:d3:d2:cc:20:90:d9: c8:36:4a:c1:52:ca:9a:19:17:8c:06:e1:29:8a:7b:bc:c0:9c: 4d:dc:6a:43 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXiePeJAzGXW95WDdEXVxMjgtX8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4Rjg0MTEyRjFBNEI2OTVFNTZGNEVCODM5MzIxRDlD MThENTIzRDAeFw0yNTExMjcxMTUxNTBaFw0yNjExMjYxMTU2NTBaMDMxMTAvBgNV BAMTKDE2MDkwQjE3MDAyMTFCMDA2OUEzOTQ1MzU0QkM1NEYyN0NFMkNFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30roB+ykI10OPcYjUm93hBoCW xVUv2XKibDg2wbK1v/SWJyQxRHNXRyvIYY/KQg0hVFQBw35S36oisKqDpKSBPPbc rz8MWTQ8h1XhHamUk5M5FS2y9VCrGS3VFmo5CpU4EEU1Uph87tq2g8haQhBzyYjs 2VK46k+a8POaNHpgjo2N7rBBB2F8Ul3IgFIXuNGI1rIy7MBaP06l2p1OlZWe90+G 1lQFSJzfyJ8hd1JKd5EXqDgvF6eLhud0zie1h8UtWIzwKj/F/MVR0Nxn6mJb5Xi9 TQJskmQ6Owf7ts8WGhJw462Q00mJa6/533mAsWine6qgG64PSqZh6RW2jBWrAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUFgkLFwAhGwBpo5RTVLxU8nzizl8wHwYDVR0j BBgwFoAUII+EES8aS2leVvTrg5Mh2cGNUj0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlNRVEZoRktwUTVVSHNzOHNQRFRlVWhaTndXQTlEdlZFZVljSHU0RkRF ZHMvMC8yMDhGODQxMTJGMUE0QjY5NUU1NkY0RUI4MzkzMjFEOUMxOEQ1MjNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwOEY4NDExMkYxQTRCNjk1 RTU2RjRFQjgzOTMyMUQ5QzE4RDUyM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JTUVRGaEZLcFE1VUhzczhzUERUZVVoWk53V0E5RHZWRWVZY0h1NEZERWRzLzAv MzQzNTJlMzEzOTMxMmUzMTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw MzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLb8MMA0GCSqGSIb3DQEBCwUAA4IBAQCQEdoDY2fM 62bDq3h8u1ZEGKYyl73iqdGfVpEkLOKIgh5SgZhPmCHYSpYNaG8X65tJZV7AkQSX kgu7cxVf6X/ych+6QyMChQLcvtnJlG3mn8N2iRF3l9e8X/Dcvs10ZuKfpFQEn0sO PBByftXl/5PxgFHwK6Jrs0+XcN1uWT+7rcrCN3dMFCNlVzB3XbUeJL6Ql/1/iiad ddTZeSDx8SKWQH4JJ5QrfUYwaiig1eRIJLBOJSNsf7pGgMhCP2AHQA5AjwEUiLAg VY2z7bnLr5+m4AJ28ew31U/BCgfLvGs1FTn6duHT0swgkNnINkrBUsqaGReMBuEp inu8wJxN3GpD -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:58 2025 by rpki-client