This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa File: 34352e3138362e35322e302f32342d3234203d3e20323639343131.roa (raw, json) Hash identifier: SpwF1BTMSPQ7xvUBLz2Dlkd4JdpQMoq0AzWqXGn0nIY= Subject key identifier: 84:86:BA:6B:8C:D0:35:87:1F:60:7D:D8:A5:E1:16:07:E9:B3:D5:8F Certificate issuer: /CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Certificate serial: 5DD15AAC81D4596C6DCE5EBCD219514CC82B70D8 Authority key identifier: DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa Signing time: Wed 12 Nov 2025 02:08:26 +0000 ROA not before: Wed 12 Nov 2025 02:03:26 +0000 ROA not after: Wed 11 Nov 2026 02:08:26 +0000 asID: 269411 IP address blocks: 45.186.52.0/24 maxlen: 24 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d1:5a:ac:81:d4:59:6c:6d:ce:5e:bc:d2:19:51:4c:c8:2b:70:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC310CCB52AD845FB80C1646A45AF6CB4203E22E Validity Not Before: Nov 12 02:03:26 2025 GMT Not After : Nov 11 02:08:26 2026 GMT Subject: CN=8486BA6B8CD035871F607DD8A5E11607E9B3D58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:80:43:21:6e:20:b8:cd:d7:2e:d0:a2:f2: 21:b1:44:a9:20:2f:a0:5e:0b:3c:90:61:52:f1:ca: 14:a3:55:b8:a4:2d:37:53:0e:2a:3d:b9:3f:c6:08: 4b:a1:f4:6a:e8:ef:5c:37:ee:0a:b7:3a:7d:93:a5: ef:6b:e0:f2:5a:f2:90:37:ae:2c:e1:d5:21:af:52: 0f:62:a8:aa:b1:e7:ef:17:88:10:a1:6a:da:5f:bc: a0:14:52:bc:5e:ac:dc:f0:4b:f6:f3:57:94:4b:d7: d3:c0:ef:84:41:56:de:d0:1a:2c:dc:bb:d6:04:b9: ca:7d:c2:ff:33:39:6c:a5:9e:6a:ff:95:bf:a4:ee: 14:1b:0f:2b:f5:bd:5a:6e:8f:ea:22:ac:03:18:5f: 96:7d:7e:0c:1e:5c:fb:7f:d7:44:9e:1f:df:3e:64: b3:e6:3c:fe:4b:c4:fb:41:85:12:46:25:d4:5c:c6: 09:3d:fb:c8:6c:ab:36:92:88:3e:2f:a8:48:0a:2e: 32:2d:26:6f:d5:d7:1d:e7:7d:b7:2a:1b:37:86:de: ec:4f:05:1a:e0:26:a5:bc:1c:ef:65:7d:78:64:75: a2:6e:2c:d3:a0:d8:f4:12:05:a3:9e:a2:f5:99:f9: 68:67:a0:2a:ae:2a:62:1f:82:97:65:7b:b6:89:02: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:BA:6B:8C:D0:35:87:1F:60:7D:D8:A5:E1:16:07:E9:B3:D5:8F X509v3 Authority Key Identifier: keyid:DC:31:0C:CB:52:AD:84:5F:B8:0C:16:46:A4:5A:F6:CB:42:03:E2:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC310CCB52AD845FB80C1646A45AF6CB4203E22E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/2/34352e3138362e35322e302f32342d3234203d3e20323639343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.52.0/24 Signature Algorithm: sha256WithRSAEncryption 27:8c:ee:3e:85:b4:2b:21:2e:7b:08:3a:92:09:4c:83:20:37: 2f:7b:e2:fc:5d:5c:1a:f2:1c:43:62:71:48:02:a9:49:0c:b2: f1:90:30:ab:99:01:d4:c5:e8:d8:29:ac:3b:c9:c4:92:57:79: e4:dc:f4:1e:88:49:4f:f4:46:2c:25:b3:dd:37:e3:ec:43:cd: c0:07:7f:5f:18:1e:e2:eb:8a:f5:63:bf:f0:6d:a5:03:e4:84: 33:51:bd:40:3b:48:e6:c9:e4:6f:fc:3a:57:2d:50:d3:7f:30: f7:16:18:1f:58:14:e1:44:5b:1e:b5:ef:01:6b:82:33:ef:af: f5:2a:b9:86:d2:8d:63:d3:e1:b8:f3:ba:5f:98:ae:52:c6:68: 20:1c:63:9e:02:76:bc:5f:e8:04:bf:8c:e0:4c:1b:e6:c3:c1: 29:2e:22:71:61:82:92:e8:6f:65:32:3e:ff:70:e4:60:9a:4a: 13:fa:04:c7:76:fb:ca:95:4d:e3:c3:64:9b:94:e3:3a:74:85: 7a:2f:3e:fe:0f:1b:2f:c0:bc:c4:38:06:f6:b4:69:42:69:cb: d1:2e:15:36:ed:18:e5:83:5b:e3:60:15:32:b0:ae:bc:5d:dc: ca:fa:9c:42:f3:91:3e:09:16:1e:bc:73:91:b5:fe:c4:71:7e: 21:fd:4b:20 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXdFarIHUWWxtzl680hlRTMgrcNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzMTBDQ0I1MkFEODQ1RkI4MEMxNjQ2QTQ1QUY2Q0I0 MjAzRTIyRTAeFw0yNTExMTIwMjAzMjZaFw0yNjExMTEwMjA4MjZaMDMxMTAvBgNV BAMTKDg0ODZCQTZCOENEMDM1ODcxRjYwN0REOEE1RTExNjA3RTlCM0Q1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QoBDIW4guM3XLtCi8iGxRKkg L6BeCzyQYVLxyhSjVbikLTdTDio9uT/GCEuh9Gro71w37gq3On2Tpe9r4PJa8pA3 rizh1SGvUg9iqKqx5+8XiBChatpfvKAUUrxerNzwS/bzV5RL19PA74RBVt7QGizc u9YEucp9wv8zOWylnmr/lb+k7hQbDyv1vVpuj+oirAMYX5Z9fgweXPt/10SeH98+ ZLPmPP5LxPtBhRJGJdRcxgk9+8hsqzaSiD4vqEgKLjItJm/V1x3nfbcqGzeG3uxP BRrgJqW8HO9lfXhkdaJuLNOg2PQSBaOeovWZ+WhnoCquKmIfgpdle7aJAmg/AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUhIa6a4zQNYcfYH3YpeEWB+mz1Y8wHwYDVR0j BBgwFoAU3DEMy1KthF+4DBZGpFr2y0ID4i4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR eEUvMi9EQzMxMENDQjUyQUQ4NDVGQjgwQzE2NDZBNDVBRjZDQjQyMDNFMjJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzEwQ0NCNTJBRDg0NUZC ODBDMTY0NkE0NUFGNkNCNDIwM0UyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzIv MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALbo0MA0GCSqGSIb3DQEBCwUAA4IBAQAnjO4+hbQr IS57CDqSCUyDIDcve+L8XVwa8hxDYnFIAqlJDLLxkDCrmQHUxejYKaw7ycSSV3nk 3PQeiElP9EYsJbPdN+PsQ83AB39fGB7i64r1Y7/wbaUD5IQzUb1AO0jmyeRv/DpX LVDTfzD3FhgfWBThRFsete8Ba4Iz76/1KrmG0o1j0+G487pfmK5SxmggHGOeAna8 X+gEv4zgTBvmw8EpLiJxYYKS6G9lMj7/cORgmkoT+gTHdvvKlU3jw2SblOM6dIV6 Lz7+DxsvwLzEOAb2tGlCacvRLhU27Rjlg1vjYBUysK68XdzK+pxC85E+CRYevHOR tf7EcX4h/Usg -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:07 2025 by rpki-client