This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa File: 34352e37312e3130382e302f32322d3332203d3e20323637363134.roa (raw, json) Hash identifier: 0K5JXMuCyJv8PcD3v1TzmBLRjuIHWYH2SzQ4QVaWLZ8= Subject key identifier: AB:0C:6D:E1:32:81:57:A5:36:E3:B3:25:9B:F0:F4:73:F2:6B:FA:23 Certificate issuer: /CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF Certificate serial: 67CB6C48D8827CC2F6C0C661BF2222AD9F338953 Authority key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer Subject info access: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa Signing time: Sat 08 Nov 2025 16:26:13 +0000 ROA not before: Sat 08 Nov 2025 16:21:13 +0000 ROA not after: Sat 07 Nov 2026 16:26:13 +0000 asID: 267614 IP address blocks: 45.71.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 17:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cb:6c:48:d8:82:7c:c2:f6:c0:c6:61:bf:22:22:ad:9f:33:89:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF Validity Not Before: Nov 8 16:21:13 2025 GMT Not After : Nov 7 16:26:13 2026 GMT Subject: CN=AB0C6DE1328157A536E3B3259BF0F473F26BFA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:8b:91:e7:c2:b5:ec:1a:16:79:73:35:d0: 1f:c5:76:ae:e6:8f:ec:11:a8:e0:2a:f7:5b:af:63: 91:49:63:50:22:a4:be:69:a3:97:d6:07:93:43:69: 75:0b:bb:58:70:a2:ba:ad:32:06:c1:cc:1b:0b:4d: fb:3e:ee:f9:46:f6:bd:6b:45:08:04:3b:7d:ea:50: cb:d7:94:f8:a3:0a:46:ea:37:25:82:86:0c:47:f1: fb:11:93:fd:8b:58:d6:a4:d5:b8:4f:fd:3a:09:f8: cc:9f:fb:f2:2e:6b:36:3c:6f:db:8b:ab:1e:6d:c7: eb:73:fc:90:c9:a9:55:d5:ee:13:51:e4:2b:fc:47: 1c:df:d4:79:6b:f1:ff:0a:b6:5f:09:b5:20:c9:aa: a4:4e:9d:f9:70:84:ff:73:e9:2b:0d:49:28:8a:cc: 02:fe:4a:87:33:cf:ef:6f:9b:33:3e:df:b0:9d:d2: a3:3c:5f:dd:fc:71:d1:8e:4a:7e:e3:c7:53:7e:2d: 13:1e:da:ec:03:af:10:29:3d:9d:2a:35:bf:fc:b6: fe:46:61:c6:73:2a:4d:f7:92:72:a2:a6:07:f4:20: 58:16:36:ef:83:2f:33:85:fc:51:6e:77:5a:ab:55: af:b2:cb:7a:81:87:ae:60:e3:91:6c:f1:0d:6c:3c: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:6D:E1:32:81:57:A5:36:E3:B3:25:9B:F0:F4:73:F2:6B:FA:23 X509v3 Authority Key Identifier: keyid:FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/34352e37312e3130382e302f32322d3332203d3e20323637363134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.108.0/22 Signature Algorithm: sha256WithRSAEncryption 62:80:c6:c5:42:47:1d:e5:4a:4d:9c:f7:f6:16:5e:74:1d:d8: 98:7f:93:66:20:36:3f:2c:da:9f:c6:c4:a2:6b:5e:a4:63:16: a0:4b:46:5a:b0:82:5f:ef:f0:e2:76:18:2a:9b:06:9d:a3:53: 87:f1:ff:16:82:27:3e:6a:2c:c8:5c:f1:35:d2:d3:1c:e6:42: 1a:20:3b:9f:af:66:6d:c8:7e:4b:cb:c0:91:09:bd:b1:43:42: 9b:67:f6:9f:92:b6:10:08:9d:bf:d5:f6:55:bb:1a:b4:a6:9c: ee:ed:81:bb:0c:44:f2:b6:a5:f8:3e:09:a4:53:5a:b4:a0:16: 99:a1:e2:5e:9c:93:5d:c9:c8:5d:53:a0:7d:8e:b8:66:30:c9: ba:e0:b3:52:be:c1:b7:b1:b2:af:9c:68:fa:5b:48:48:25:7f: ef:dc:f3:6e:64:3f:ed:5c:d5:a1:06:7b:6a:8c:80:ca:5f:b6: e0:b8:8f:c6:d2:56:be:b2:15:dd:5b:95:e3:93:b5:65:43:e5: 95:e3:cc:ac:91:53:bf:7a:94:22:3d:72:cb:16:72:d1:b7:67: f7:9a:6d:10:b9:31:2b:7e:eb:be:77:70:f0:02:a8:28:7c:cf: 17:be:2a:9f:3d:d7:76:02:03:d2:bd:ce:f8:d0:a2:63:78:17: 64:17:96:a9 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZ8tsSNiCfML2wMZhvyIirZ8ziVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyN0VBMzg4QTc5NDExQkJCMjJGMzJGNUZDRDVBRUEw ODQ0QkZBRjAeFw0yNTExMDgxNjIxMTNaFw0yNjExMDcxNjI2MTNaMDMxMTAvBgNV BAMTKEFCMEM2REUxMzI4MTU3QTUzNkUzQjMyNTlCRjBGNDczRjI2QkZBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjouR58K17BoWeXM10B/Fdq7m j+wRqOAq91uvY5FJY1AipL5po5fWB5NDaXULu1hworqtMgbBzBsLTfs+7vlG9r1r RQgEO33qUMvXlPijCkbqNyWChgxH8fsRk/2LWNak1bhP/ToJ+Myf+/IuazY8b9uL qx5tx+tz/JDJqVXV7hNR5Cv8Rxzf1Hlr8f8Ktl8JtSDJqqROnflwhP9z6SsNSSiK zAL+Soczz+9vmzM+37Cd0qM8X938cdGOSn7jx1N+LRMe2uwDrxApPZ0qNb/8tv5G YcZzKk33knKipgf0IFgWNu+DLzOF/FFud1qrVa+yy3qBh65g45Fs8Q1sPFibAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUqwxt4TKBV6U247Mlm/D0c/Jr+iMwHwYDVR0j BBgwFoAU+yfqOIp5QRu7IvMvX81a6ghEv68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1NNNzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFi SEIvMS9GQjI3RUEzODhBNzk0MTFCQkIyMkYzMkY1RkNENUFFQTA4NDRCRkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjdFQTM4OEE3OTQxMUJC QjIyRjMyRjVGQ0Q1QUVBMDg0NEJGQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NTTTcyemNoVzR0YW5pb3hicHk3OFBSZEpnbnNpTk5KY2tCRnRHYTExYkhCLzEv MzQzNTJlMzczMTJlMzEzMDM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3 MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLUdsMA0GCSqGSIb3DQEBCwUAA4IBAQBigMbFQkcd 5UpNnPf2Fl50HdiYf5NmIDY/LNqfxsSia16kYxagS0ZasIJf7/Didhgqmwado1OH 8f8Wgic+aizIXPE10tMc5kIaIDufr2ZtyH5Ly8CRCb2xQ0KbZ/afkrYQCJ2/1fZV uxq0ppzu7YG7DETytqX4PgmkU1q0oBaZoeJenJNdychdU6B9jrhmMMm64LNSvsG3 sbKvnGj6W0hIJX/v3PNuZD/tXNWhBntqjIDKX7bguI/G0la+shXdW5Xjk7VlQ+WV 48yskVO/epQiPXLLFnLRt2f3mm0QuTErfuu+d3DwAqgofM8XviqfPdd2AgPSvc74 0KJjeBdkF5ap -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:55 2025 by rpki-client