This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa File: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (raw, json) Hash identifier: B4gsqalww0dlIMwP17NQDWnEssmAF5DwJk52DCBpJFg= Subject key identifier: 76:30:2E:A6:B0:75:D6:E1:BF:5D:81:C6:EE:96:6A:73:F4:16:B1:42 Certificate issuer: /CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA Certificate serial: 0B6018937C4BBFF3F7174B0D762490203638787A Authority key identifier: 17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa Signing time: Wed 19 Nov 2025 07:08:04 +0000 ROA not before: Wed 19 Nov 2025 07:03:04 +0000 ROA not after: Wed 18 Nov 2026 07:08:04 +0000 asID: 267578 IP address blocks: 45.70.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:60:18:93:7c:4b:bf:f3:f7:17:4b:0d:76:24:90:20:36:38:78:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA Validity Not Before: Nov 19 07:03:04 2025 GMT Not After : Nov 18 07:08:04 2026 GMT Subject: CN=76302EA6B075D6E1BF5D81C6EE966A73F416B142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:66:3b:f4:b8:b9:6b:90:db:58:b9:fb:b4: a4:e6:dd:7c:88:6b:19:63:65:10:7f:86:1b:aa:58: e9:d2:fb:a1:7f:9e:d1:7c:06:75:3d:ea:c0:6f:38: 2f:1f:9b:28:bc:78:12:c5:47:7e:27:a0:ba:26:3f: 3f:20:6b:2e:8f:89:c5:3f:0e:b8:d2:f0:5c:0b:25: 6a:bd:43:2a:c4:57:fe:84:fb:83:be:a4:c1:0d:6f: a8:96:bc:a5:d7:59:8a:ed:f7:55:c7:c6:f7:15:99: a9:e4:15:fc:76:dc:88:55:41:bc:1a:18:55:ca:5b: 38:17:9e:71:2f:8c:62:50:a1:8f:7d:83:df:58:8b: 9f:5e:f4:9b:68:91:26:32:71:4c:a8:c9:45:e6:60: 47:26:79:81:59:3c:2b:24:cc:87:6e:df:d2:da:07: c7:b2:74:80:06:85:da:83:d5:86:9e:8a:bc:b2:2b: 5d:21:ef:3d:ca:e3:c8:86:35:66:07:00:88:af:0d: 55:5d:80:3b:1e:b5:28:b5:24:cf:1e:6f:ff:af:28: cf:ea:79:84:c2:43:1d:73:8e:dd:66:b8:30:20:c8: 05:57:0e:6f:ba:ec:99:9a:30:6e:22:73:7e:93:73: 3e:05:65:a7:4a:e3:f5:70:1d:55:70:c0:be:f3:33: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:30:2E:A6:B0:75:D6:E1:BF:5D:81:C6:EE:96:6A:73:F4:16:B1:42 X509v3 Authority Key Identifier: keyid:17:C7:13:07:F1:DF:86:AC:7C:70:AD:AE:83:3E:C5:B7:3C:8D:BE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C71307F1DF86AC7C70ADAE833EC5B73C8DBEBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.164.0/22 Signature Algorithm: sha256WithRSAEncryption 57:4d:1d:dd:e3:27:f3:75:57:13:43:bf:a1:b5:a6:4b:67:f9: 26:95:12:28:32:80:8a:61:5d:be:ca:2d:02:a0:7a:47:ef:1d: 63:33:22:b5:4f:d1:bf:86:a6:29:88:dd:d9:f8:56:c7:de:8b: bb:31:ae:8d:2e:74:2b:f1:2d:68:2c:75:6c:c3:93:ca:1d:78: 0d:6b:8a:6c:60:a3:31:94:fc:ad:f3:98:bb:1c:98:22:0b:2d: 5f:fe:1f:f8:94:12:6f:52:9d:c9:ca:88:28:bd:5a:d4:f5:2f: 30:b7:eb:7e:47:55:a6:ac:bc:8c:96:66:41:b8:ed:24:1e:54: 1a:b8:ad:30:43:1f:ec:29:bd:8a:64:e3:7a:f2:b0:45:a2:b4: 12:94:58:87:e1:19:7c:47:ee:98:85:fc:f5:60:c3:2f:a5:02: 51:39:61:3d:49:4b:38:e0:c1:a6:1d:90:af:67:fc:d3:cd:dc: 25:4a:ed:f9:d3:8c:8d:14:01:20:10:f0:53:df:b1:a8:f4:d6: 55:e0:16:cc:c3:85:0d:3a:ee:da:00:70:e8:13:33:d7:ae:3d: ce:7b:54:09:40:a7:2d:c0:9a:21:bb:bf:37:2f:35:17:75:a1: 62:ea:a1:9f:14:d5:56:04:19:bc:93:84:90:83:a2:af:b9:45: 68:ef:16:1b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUC2AYk3xLv/P3F0sNdiSQIDY4eHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDNzEzMDdGMURGODZBQzdDNzBBREFFODMzRUM1Qjcz QzhEQkVCQTAeFw0yNTExMTkwNzAzMDRaFw0yNjExMTgwNzA4MDRaMDMxMTAvBgNV BAMTKDc2MzAyRUE2QjA3NUQ2RTFCRjVEODFDNkVFOTY2QTczRjQxNkIxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M2Y79Li5a5DbWLn7tKTm3XyI axljZRB/hhuqWOnS+6F/ntF8BnU96sBvOC8fmyi8eBLFR34noLomPz8gay6PicU/ DrjS8FwLJWq9QyrEV/6E+4O+pMENb6iWvKXXWYrt91XHxvcVmankFfx23IhVQbwa GFXKWzgXnnEvjGJQoY99g99Yi59e9JtokSYycUyoyUXmYEcmeYFZPCskzIdu39La B8eydIAGhdqD1YaeiryyK10h7z3K48iGNWYHAIivDVVdgDsetSi1JM8eb/+vKM/q eYTCQx1zjt1muDAgyAVXDm+67JmaMG4ic36Tcz4FZadK4/VwHVVwwL7zMwiJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUdjAuprB11uG/XYHG7pZqc/QWsUIwHwYDVR0j BBgwFoAUF8cTB/Hfhqx8cK2ugz7FtzyNvrowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1k4VWtnZ0NDQjJjYmNQaDZtcUhaVldlWTNXSllOVnJxdFVqZ1BCcUFt WVQvMC8xN0M3MTMwN0YxREY4NkFDN0M3MEFEQUU4MzNFQzVCNzNDOERCRUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QzcxMzA3RjFERjg2QUM3 QzcwQURBRTgzM0VDNUI3M0M4REJFQkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NZOFVrZ2dDQ0IyY2JjUGg2bXFIWlZXZVkzV0pZTlZycXRVamdQQnFBbVlULzAv MzQzNTJlMzczMDJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3 MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLUakMA0GCSqGSIb3DQEBCwUAA4IBAQBXTR3d4yfz dVcTQ7+htaZLZ/kmlRIoMoCKYV2+yi0CoHpH7x1jMyK1T9G/hqYpiN3Z+FbH3ou7 Ma6NLnQr8S1oLHVsw5PKHXgNa4psYKMxlPyt85i7HJgiCy1f/h/4lBJvUp3Jyogo vVrU9S8wt+t+R1WmrLyMlmZBuO0kHlQauK0wQx/sKb2KZON68rBForQSlFiH4Rl8 R+6Yhfz1YMMvpQJROWE9SUs44MGmHZCvZ/zTzdwlSu3504yNFAEgEPBT37Go9NZV 4BbMw4UNOu7aAHDoEzPXrj3Oe1QJQKctwJohu783LzUXdaFi6qGfFNVWBBm8k4SQ g6KvuUVo7xYb -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:21 2025 by rpki-client