This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa File: 34352e3138362e35322e302f32332d3233203d3e20323639343131.roa (raw, json) Hash identifier: e5XVkdX3mGxXbxJbOHM7yrn1ZlCXNeAGJP4yl++qsnw= Subject key identifier: 55:8C:84:E0:3D:73:89:34:B0:94:92:AF:70:45:1E:5E:86:15:38:05 Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Certificate serial: 3086699BAE79776F4F4AFE5DC4898604C0F55DEA Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa Signing time: Wed 12 Nov 2025 02:08:30 +0000 ROA not before: Wed 12 Nov 2025 02:03:30 +0000 ROA not after: Wed 11 Nov 2026 02:08:30 +0000 asID: 269411 IP address blocks: 45.186.52.0/23 maxlen: 23 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:69:9b:ae:79:77:6f:4f:4a:fe:5d:c4:89:86:04:c0:f5:5d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Validity Not Before: Nov 12 02:03:30 2025 GMT Not After : Nov 11 02:08:30 2026 GMT Subject: CN=558C84E03D738934B09492AF70451E5E86153805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:31:54:ac:26:75:70:e1:43:32:8c:60:d5: ff:57:d0:61:51:29:01:4e:9e:6d:b6:30:dc:68:63: 94:5d:55:67:bd:3f:55:32:e0:7e:6c:7b:f5:49:a7: 4b:0d:29:99:8c:47:eb:36:80:96:41:aa:d8:30:24: 81:26:23:8a:0d:0e:5d:78:e3:bf:cf:d7:15:f7:38: 1a:d9:05:ac:95:b0:b3:3d:60:8a:a1:69:f9:fa:24: 3b:66:dd:6c:9e:d9:f5:4d:88:7b:c0:e3:4f:37:62: 38:e4:43:b6:60:dd:31:8b:df:cd:5e:41:5c:78:27: ad:47:d1:ab:71:85:2f:b7:35:89:f2:9d:f1:39:e9: 78:b5:63:ab:20:4c:ac:f2:36:aa:da:76:aa:2c:2d: fe:eb:a5:82:4c:e9:20:26:ad:64:08:77:93:0d:04: 03:26:4d:bd:8b:97:d4:13:fd:4e:ad:ae:ed:b8:4e: 46:aa:95:2e:04:bc:a2:75:43:99:24:1e:f3:30:dd: 5a:4f:fe:60:a6:f3:a6:85:d9:de:c0:b7:56:36:44: 05:65:a1:7b:e9:d3:08:8c:32:1c:c5:5c:9a:58:37: 88:be:70:58:f7:6e:06:a0:29:57:26:e0:d2:b2:7d: 8a:c2:d4:a5:95:be:95:54:c5:da:04:01:4e:cb:31: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8C:84:E0:3D:73:89:34:B0:94:92:AF:70:45:1E:5E:86:15:38:05 X509v3 Authority Key Identifier: keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.52.0/23 Signature Algorithm: sha256WithRSAEncryption b0:7e:76:f9:c3:8b:a3:2e:d0:69:df:33:48:04:fd:6d:9d:54: 71:f2:66:8c:18:67:59:2c:25:c0:fd:1c:a3:86:30:99:87:8c: 29:e1:f1:8b:36:ff:22:0e:26:31:2a:99:de:32:46:41:03:1a: 20:96:01:20:d0:38:79:59:ab:99:36:ba:c4:c7:0e:e1:6f:0e: a7:cf:a5:31:09:22:83:05:c0:45:2b:2d:4c:b5:b7:94:45:ac: a0:c3:b9:1f:67:f7:8c:ab:2a:69:74:f1:7d:31:5b:b0:f7:8f: 31:5f:bc:71:bf:25:24:9a:9f:8d:89:21:24:a6:d2:15:ae:60: 38:6a:f1:d9:b2:cd:e7:54:e7:5c:3f:c4:bd:8a:74:84:4e:81: 39:9f:d6:77:45:7d:d3:a6:3a:d6:39:62:31:a9:d7:23:55:58: 99:05:9b:0d:89:21:28:2e:0f:f5:15:3d:b2:08:33:11:e4:2f: 64:8c:83:65:9a:d6:fc:e0:d3:00:01:2f:34:38:cc:c9:72:a6: 51:66:6f:66:7f:aa:ad:87:a9:ab:04:71:85:d2:c3:e6:29:6a: 30:a0:cd:38:44:f1:5e:34:b7:75:67:21:1f:9d:a9:f1:55:41: 84:5d:8b:27:13:ef:c3:1c:61:3d:da:62:3f:df:5b:a1:6a:41: f2:ae:56:a1 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUMIZpm655d29PSv5dxImGBMD1XeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0 MjAzRTIyRTAeFw0yNTExMTIwMjAzMzBaFw0yNjExMTEwMjA4MzBaMDMxMTAvBgNV BAMTKDU1OEM4NEUwM0Q3Mzg5MzRCMDk0OTJBRjcwNDUxRTVFODYxNTM4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47zFUrCZ1cOFDMoxg1f9X0GFR KQFOnm22MNxoY5RdVWe9P1Uy4H5se/VJp0sNKZmMR+s2gJZBqtgwJIEmI4oNDl14 47/P1xX3OBrZBayVsLM9YIqhafn6JDtm3Wye2fVNiHvA4083YjjkQ7Zg3TGL381e QVx4J61H0atxhS+3NYnynfE56Xi1Y6sgTKzyNqradqosLf7rpYJM6SAmrWQId5MN BAMmTb2Ll9QT/U6tru24TkaqlS4EvKJ1Q5kkHvMw3VpP/mCm86aF2d7At1Y2RAVl oXvp0wiMMhzFXJpYN4i+cFj3bgagKVcm4NKyfYrC1KWVvpVUxdoEAU7LMZNTAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUVYyE4D1ziTSwlJKvcEUeXoYVOAUwHwYDVR0j BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5 MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLbo0MA0GCSqGSIb3DQEBCwUAA4IBAQCwfnb5w4uj LtBp3zNIBP1tnVRx8maMGGdZLCXA/RyjhjCZh4wp4fGLNv8iDiYxKpneMkZBAxog lgEg0Dh5WauZNrrExw7hbw6nz6UxCSKDBcBFKy1MtbeURaygw7kfZ/eMqyppdPF9 MVuw948xX7xxvyUkmp+NiSEkptIVrmA4avHZss3nVOdcP8S9inSEToE5n9Z3RX3T pjrWOWIxqdcjVViZBZsNiSEoLg/1FT2yCDMR5C9kjINlmtb84NMAAS80OMzJcqZR Zm9mf6qth6mrBHGF0sPmKWowoM04RPFeNLd1ZyEfnanxVUGEXYsnE+/DHGE92mI/ 31uhakHyrlah -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:54 2025 by rpki-client