This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa File: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (raw, json) Hash identifier: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g= Subject key identifier: 45:C2:83:9B:AF:B1:F3:A0:34:DF:3F:2D:72:7A:59:43:85:10:07:D0 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 033150C533B0F10673DA8E7760CE6652409F8720 Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa Signing time: Thu 06 Nov 2025 18:48:45 +0000 ROA not before: Thu 06 Nov 2025 18:43:45 +0000 ROA not after: Thu 05 Nov 2026 18:48:45 +0000 asID: 269699 IP address blocks: 45.191.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:50:c5:33:b0:f1:06:73:da:8e:77:60:ce:66:52:40:9f:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Nov 6 18:43:45 2025 GMT Not After : Nov 5 18:48:45 2026 GMT Subject: CN=45C2839BAFB1F3A034DF3F2D727A5943851007D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:5b:76:28:68:3f:a1:78:f2:af:78:3f:8c: bb:89:8e:fd:10:75:7b:f5:15:31:55:89:1b:38:17: d5:44:39:77:f9:28:53:5e:4a:e3:a4:74:b5:9a:15: 1b:f7:09:6b:29:17:00:c9:5e:39:07:91:c2:d9:52: 28:b4:cd:a1:30:04:48:84:96:55:29:fa:3c:3d:66: ab:14:e3:c1:04:f7:51:ac:dd:7a:53:f7:58:36:24: 9f:be:e4:b8:5f:1e:76:5a:25:4f:b2:47:8d:0e:54: b4:3c:a4:f3:bd:af:df:69:96:04:87:b2:61:fd:3a: d2:2d:c2:fe:fb:9f:00:6f:3a:9e:ac:3d:e0:d1:38: de:d4:10:34:85:0f:6f:ca:34:ed:a8:f6:d5:bf:0e: 2f:4b:9d:81:91:a2:ba:87:e3:ab:5b:92:f5:cd:c7: 5f:b9:4d:48:ee:59:20:2b:29:52:2f:c6:7a:b9:b6: 32:97:58:86:b3:29:78:c8:e5:9a:a8:84:38:c2:9e: 4e:aa:5f:95:13:17:9c:c2:77:d0:de:34:33:a3:c1: 3c:25:fb:1d:ab:e6:57:7a:b3:91:c2:db:38:a6:d6: 8c:79:32:21:83:49:ef:73:33:1d:1e:e8:4d:17:eb: 17:f2:c7:98:b7:b2:65:0a:0f:e0:b0:12:ad:ad:b5: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C2:83:9B:AF:B1:F3:A0:34:DF:3F:2D:72:7A:59:43:85:10:07:D0 X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.252.0/22 Signature Algorithm: sha256WithRSAEncryption a7:1a:d4:09:b4:13:24:6a:69:6d:fb:76:df:d4:d0:5a:08:e9: 86:0a:79:f3:47:3d:e1:71:39:b6:7c:5d:9e:02:5d:23:49:c8: 2b:40:43:71:8b:52:e1:3a:75:6e:06:57:de:28:87:85:37:be: cc:8d:5d:d9:89:83:9f:07:44:55:cf:7f:9d:f4:c5:91:8e:be: 17:a6:3a:f9:ab:d1:26:6e:d0:e1:23:4a:b6:8d:48:b0:c8:bd: 5a:a0:24:31:09:80:85:e8:b2:47:6c:b8:da:16:78:e4:6f:68: 20:ac:90:d9:3d:38:33:a9:e8:ed:75:cd:4f:d5:1a:3e:df:03: 1b:3e:72:5f:9f:84:fa:d6:11:4d:de:a9:48:97:d4:3f:09:df: 23:1f:67:40:e9:12:43:83:dc:e7:18:72:ca:05:c3:c3:21:54: ab:fd:8a:6b:ef:2f:60:09:47:df:b7:7d:c5:a4:07:53:ee:9b: b2:7c:96:0e:ae:12:f2:a8:9a:20:2f:dd:70:24:a9:55:2f:4d: 0a:71:ad:c4:1a:43:65:a1:6f:4e:bf:03:19:d7:c9:c3:38:98: e4:7e:72:50:c6:54:8e:9c:25:8c:3d:3c:a2:0c:f4:70:c3:51: c0:bc:4a:30:6d:69:2b:41:62:5e:22:7c:6c:31:1b:19:bb:0f: ba:eb:d5:17 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUAzFQxTOw8QZz2o53YM5mUkCfhyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNTExMDYxODQzNDVaFw0yNjExMDUxODQ4NDVaMDMxMTAvBgNV BAMTKDQ1QzI4MzlCQUZCMUYzQTAzNERGM0YyRDcyN0E1OTQzODUxMDA3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHlt2KGg/oXjyr3g/jLuJjv0Q dXv1FTFViRs4F9VEOXf5KFNeSuOkdLWaFRv3CWspFwDJXjkHkcLZUii0zaEwBEiE llUp+jw9ZqsU48EE91Gs3XpT91g2JJ++5LhfHnZaJU+yR40OVLQ8pPO9r99plgSH smH9OtItwv77nwBvOp6sPeDRON7UEDSFD2/KNO2o9tW/Di9LnYGRorqH46tbkvXN x1+5TUjuWSArKVIvxnq5tjKXWIazKXjI5ZqohDjCnk6qX5UTF5zCd9DeNDOjwTwl +x2r5ld6s5HC2zim1ox5MiGDSe9zMx0e6E0X6xfyx5i3smUKD+CwEq2ttXpdAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURcKDm6+x86A03z8tcnpZQ4UQB9AwHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RnMzNtTG9qRkp0bzFlTmVGMTl0Qk1tQ3BRU0w5WWFkQ21FOEE1UnFrUmJ2LzAv MzQzNTJlMzEzOTMxMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzkzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItv/wwDQYJKoZIhvcNAQELBQADggEBAKca1Am0 EyRqaW37dt/U0FoI6YYKefNHPeFxObZ8XZ4CXSNJyCtAQ3GLUuE6dW4GV94oh4U3 vsyNXdmJg58HRFXPf530xZGOvhemOvmr0SZu0OEjSraNSLDIvVqgJDEJgIXoskds uNoWeORvaCCskNk9ODOp6O11zU/VGj7fAxs+cl+fhPrWEU3eqUiX1D8J3yMfZ0Dp EkOD3OcYcsoFw8MhVKv9imvvL2AJR9+3fcWkB1Pum7J8lg6uEvKomiAv3XAkqVUv TQpxrcQaQ2Whb06/AxnXycM4mOR+clDGVI6cJYw9PKIM9HDDUcC8SjBtaStBYl4i fGwxGxm7D7rr1Rc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:07 2025 by rpki-client