This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32342d3234203d3e20323636333839.roa File: 34352e3138392e35322e302f32342d3234203d3e20323636333839.roa (raw, json) Hash identifier: s7a0+qEEGcQ2fvrKsJHIhj+KwsB4gUidpEyBNUFz8ec= Subject key identifier: 25:9B:22:82:2A:A9:8D:40:D2:EB:D2:24:20:F9:20:E2:55:96:F0:20 Certificate issuer: /CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6 Certificate serial: 2CEDDA27CD13BA72C589F73528B49525B0B664F0 Authority key identifier: EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer Subject info access: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32342d3234203d3e20323636333839.roa Signing time: Wed 31 Dec 2025 12:08:50 +0000 ROA not before: Wed 31 Dec 2025 12:03:50 +0000 ROA not after: Wed 30 Dec 2026 12:08:50 +0000 asID: 266389 IP address blocks: 45.189.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 03:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ed:da:27:cd:13:ba:72:c5:89:f7:35:28:b4:95:25:b0:b6:64:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAE913716A10B8F01C023B3043FADFBB19E31B6 Validity Not Before: Dec 31 12:03:50 2025 GMT Not After : Dec 30 12:08:50 2026 GMT Subject: CN=259B22822AA98D40D2EBD22420F920E25596F020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:5c:54:ad:87:21:dc:60:30:b4:50:5f:7c: 89:98:d5:c2:97:f0:6a:a0:0d:96:fe:c6:62:9c:0e: ee:22:a6:d1:fc:c7:63:e3:00:8b:c9:c1:66:54:e4: 86:5a:ff:49:0a:cb:ab:7a:5c:22:32:bf:56:e5:79: 39:92:8a:81:c9:ef:89:6f:f9:9e:42:02:61:c3:06: 7a:dc:4a:73:de:d1:13:13:51:75:c9:d6:77:b3:57: ad:0b:72:14:1e:cc:33:eb:40:8d:c8:53:43:29:61: 30:d6:e8:23:cb:d0:f5:c5:a9:a6:6f:87:3a:56:cb: 4f:d5:c8:a6:44:51:a1:4a:7a:41:91:54:85:06:09: ab:a0:4b:72:5e:f6:73:b6:a2:f6:4d:95:3c:96:47: e9:04:91:62:b0:fd:14:fa:a7:18:92:b0:84:60:bf: 9b:67:59:68:95:23:f1:2a:78:49:0c:e3:82:dc:3c: 7b:96:92:77:79:33:b3:59:f1:75:03:49:11:c1:cb: 28:46:7f:93:b7:6b:c4:05:67:01:b7:94:a9:92:f7: b2:c9:fc:f7:3c:a1:99:b1:b3:4e:32:61:a3:e3:a6: d2:f5:73:0e:04:ab:30:e8:a3:64:de:66:cb:11:80: b9:0e:e4:ea:81:7f:c7:83:88:82:a5:1b:af:63:74: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9B:22:82:2A:A9:8D:40:D2:EB:D2:24:20:F9:20:E2:55:96:F0:20 X509v3 Authority Key Identifier: keyid:EF:AE:91:37:16:A1:0B:8F:01:C0:23:B3:04:3F:AD:FB:B1:9E:31:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/EFAE913716A10B8F01C023B3043FADFBB19E31B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAE913716A10B8F01C023B3043FADFBB19E31B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED9rjEL6tmEiD9xF7BJJTVqtGHWm5VWMN7QZRnmmvdVp/0/34352e3138392e35322e302f32342d3234203d3e20323636333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.52.0/24 Signature Algorithm: sha256WithRSAEncryption 83:e3:4d:8c:a6:99:11:0f:1d:df:9f:f3:a5:e3:0d:57:eb:fe: bc:d1:f5:2c:a9:f9:c3:8a:c8:c7:88:0c:ef:47:09:7d:06:e0: ab:01:9b:0e:a3:c7:1d:64:40:4d:29:1e:db:47:4c:7d:9f:df: 7e:2d:7a:2d:cd:21:fc:a9:da:50:52:ab:3d:bf:56:13:1d:43: ae:0d:02:d7:f1:66:04:94:5b:8e:99:b4:2a:8d:52:f9:cd:f1: dc:1c:6a:2e:19:a4:05:a1:66:0e:eb:b1:d4:b5:32:91:88:9c: 6f:40:ac:86:10:58:42:37:e9:90:d5:a5:39:f6:43:44:fc:6b: 4b:61:51:e8:55:13:fc:3a:11:93:d2:3a:c1:a3:04:8a:a0:2c: 00:86:aa:38:dc:72:cd:db:f4:b8:6b:df:79:e9:17:c4:af:fc: b6:e1:94:d0:20:b8:66:a9:17:21:3e:ac:d0:ff:a5:8b:a8:cc: ed:31:18:0b:45:4f:b7:ba:98:f4:13:48:f4:e8:dd:ee:53:90: 48:ec:9e:a8:db:1d:07:de:6d:01:cd:29:37:eb:65:bc:61:a3: 64:ca:f5:06:e9:f0:50:b2:28:bf:3e:19:3a:6a:91:e7:6f:76: 57:58:ad:58:fe:d7:81:0c:0a:e4:d7:b1:f9:24:f1:4d:da:60: f2:58:21:e0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIULO3aJ80TunLFifc1KLSVJbC2ZPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRTkxMzcxNkExMEI4RjAxQzAyM0IzMDQzRkFERkJC MTlFMzFCNjAeFw0yNTEyMzExMjAzNTBaFw0yNjEyMzAxMjA4NTBaMDMxMTAvBgNV BAMTKDI1OUIyMjgyMkFBOThENDBEMkVCRDIyNDIwRjkyMEUyNTU5NkYwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c1xUrYch3GAwtFBffImY1cKX 8GqgDZb+xmKcDu4iptH8x2PjAIvJwWZU5IZa/0kKy6t6XCIyv1bleTmSioHJ74lv +Z5CAmHDBnrcSnPe0RMTUXXJ1nezV60LchQezDPrQI3IU0MpYTDW6CPL0PXFqaZv hzpWy0/VyKZEUaFKekGRVIUGCaugS3Je9nO2ovZNlTyWR+kEkWKw/RT6pxiSsIRg v5tnWWiVI/EqeEkM44LcPHuWknd5M7NZ8XUDSRHByyhGf5O3a8QFZwG3lKmS97LJ /Pc8oZmxs04yYaPjptL1cw4EqzDoo2TeZssRgLkO5OqBf8eDiIKlG69jdKobAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUJZsigiqpjUDS69IkIPkg4lWW8CAwHwYDVR0j BBgwFoAU766RNxahC48BwCOzBD+t+7GeMbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUQ5cmpFTDZ0bUVpRDl4RjdCSkpUVnF0R0hXbTVWV01ON1FaUm5tbXZk VnAvMC9FRkFFOTEzNzE2QTEwQjhGMDFDMDIzQjMwNDNGQURGQkIxOUUzMUI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGQUU5MTM3MTZBMTBCOEYw MUMwMjNCMzA0M0ZBREZCQjE5RTMxQjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VEOXJqRUw2dG1FaUQ5eEY3QkpKVFZxdEdIV201VldNTjdRWlJubW12ZFZwLzAv MzQzNTJlMzEzODM5MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2 MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALb00MA0GCSqGSIb3DQEBCwUAA4IBAQCD402MppkR Dx3fn/Ol4w1X6/680fUsqfnDisjHiAzvRwl9BuCrAZsOo8cdZEBNKR7bR0x9n99+ LXotzSH8qdpQUqs9v1YTHUOuDQLX8WYElFuOmbQqjVL5zfHcHGouGaQFoWYO67HU tTKRiJxvQKyGEFhCN+mQ1aU59kNE/GtLYVHoVRP8OhGT0jrBowSKoCwAhqo43HLN 2/S4a9956RfEr/y24ZTQILhmqRchPqzQ/6WLqMztMRgLRU+3upj0E0j06N3uU5BI 7J6o2x0H3m0BzSk362W8YaNkyvUG6fBQsii/Phk6apHnb3ZXWK1Y/teBDArk17H5 JPFN2mDyWCHg -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:56 2026 by rpki-client