This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa File: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (raw, json) Hash identifier: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs= Subject key identifier: 68:B7:03:B2:D8:71:1D:36:91:E6:60:FD:A6:64:77:42:65:78:33:87 Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 374BBE1DF38DA78D0AA5C549DA783433E39382C0 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa Signing time: Thu 20 Nov 2025 20:20:50 +0000 ROA not before: Thu 20 Nov 2025 20:15:50 +0000 ROA not after: Thu 19 Nov 2026 20:20:50 +0000 asID: 268084 IP address blocks: 45.168.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 22:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4b:be:1d:f3:8d:a7:8d:0a:a5:c5:49:da:78:34:33:e3:93:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Nov 20 20:15:50 2025 GMT Not After : Nov 19 20:20:50 2026 GMT Subject: CN=68B703B2D8711D3691E660FDA664774265783387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:57:1e:c6:ae:79:97:75:dd:f5:5c:a4:8d: 4c:af:90:06:8e:d7:91:0d:a2:06:dd:f5:51:1b:db: 51:c6:44:f1:55:a6:b6:f0:05:b5:1f:98:66:19:91: 59:87:88:d3:da:3b:79:1c:49:e8:e0:61:c3:f4:83: d3:03:9f:17:73:e8:b9:d9:96:56:30:cf:ac:f4:73: 11:bd:c4:67:cc:4d:37:b2:53:6e:3f:5c:49:98:a5: 35:aa:fc:ed:37:97:28:cd:7b:c3:a9:13:da:93:88: 41:40:47:c7:2b:44:ec:66:29:3e:63:4e:b0:4e:ee: a2:88:90:8f:7a:03:90:a1:c7:e6:63:d1:f8:79:02: 85:54:82:c5:2c:10:82:b9:e6:33:fe:e9:60:ee:9a: 5c:d7:57:95:de:1b:08:f9:a3:0d:23:fb:32:16:12: bc:0f:f1:f5:4a:00:28:5b:3b:cb:39:26:a8:ad:ae: 55:f2:67:27:62:3a:91:95:a8:86:cf:8c:33:33:4d: b4:72:c2:f4:9c:3c:ff:c7:6e:98:65:2e:a6:5c:38: be:45:4e:f8:4a:97:5e:01:1c:d1:e1:62:ed:3e:97: 4d:e1:26:20:39:86:c6:2a:5b:68:82:e8:05:78:90: 40:b1:f9:6d:b3:1a:62:8b:71:24:08:f2:8c:7f:86: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:03:B2:D8:71:1D:36:91:E6:60:FD:A6:64:77:42:65:78:33:87 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 07:d6:29:e9:a7:4f:3f:d2:e0:c0:5e:9c:d7:a1:53:e4:e2:27: 1b:8f:8b:19:aa:f7:af:4f:cc:4e:26:51:32:3e:e1:b2:52:4c: 24:0d:87:3b:67:e2:25:d9:a4:a0:99:45:ab:e7:9b:94:6f:d9: a8:ac:3f:48:b4:99:a4:e2:3f:2e:5c:db:be:20:27:af:55:73: 94:ba:5a:2d:ad:ac:98:a5:92:a7:fb:f5:e6:31:f3:69:0d:98: e9:95:b8:4c:b3:90:9e:c8:1a:04:a9:13:dd:27:a0:bd:64:e2: 5b:d9:a4:b2:f3:00:87:a4:80:7a:61:d9:ac:f2:ee:e9:f9:03: 8a:25:e9:58:af:bd:b0:70:ac:36:21:4d:f0:86:97:b1:85:fe: fb:06:01:9c:1a:44:b0:5f:42:1e:2a:e1:d1:60:90:b0:fb:10: 75:29:71:b9:02:4a:07:c8:f3:c0:c4:86:5c:b6:77:db:02:89: 0d:67:25:dd:13:5c:a7:85:1b:6f:6a:67:21:3c:06:df:17:e2: e1:40:94:79:50:f6:c1:97:fe:78:47:8a:de:00:38:46:15:55: 89:d4:51:e2:99:f9:a2:a5:97:ba:67:3b:9b:c5:f9:b0:77:fd: 63:83:79:e1:53:de:fb:86:2a:69:39:4c:fa:8d:06:9d:64:92: 70:72:14:37 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUN0u+HfONp40KpcVJ2ng0M+OTgsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTExMjAyMDE1NTBaFw0yNjExMTkyMDIwNTBaMDMxMTAvBgNV BAMTKDY4QjcwM0IyRDg3MTFEMzY5MUU2NjBGREE2NjQ3NzQyNjU3ODMzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAVcexq55l3Xd9VykjUyvkAaO 15ENogbd9VEb21HGRPFVprbwBbUfmGYZkVmHiNPaO3kcSejgYcP0g9MDnxdz6LnZ llYwz6z0cxG9xGfMTTeyU24/XEmYpTWq/O03lyjNe8OpE9qTiEFAR8crROxmKT5j TrBO7qKIkI96A5Chx+Zj0fh5AoVUgsUsEIK55jP+6WDumlzXV5XeGwj5ow0j+zIW ErwP8fVKAChbO8s5JqitrlXyZydiOpGVqIbPjDMzTbRywvScPP/HbphlLqZcOL5F TvhKl14BHNHhYu0+l03hJiA5hsYqW2iC6AV4kECx+W2zGmKLcSQI8ox/hpW/AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUaLcDsthxHTaR5mD9pmR3QmV4M4cwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c1d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzAv MzQzNTJlMzEzNjM4MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItqPQwDQYJKoZIhvcNAQELBQADggEBAAfWKemn Tz/S4MBenNehU+TiJxuPixmq969PzE4mUTI+4bJSTCQNhztn4iXZpKCZRavnm5Rv 2aisP0i0maTiPy5c274gJ69Vc5S6Wi2trJilkqf79eYx82kNmOmVuEyzkJ7IGgSp E90noL1k4lvZpLLzAIekgHph2azy7un5A4ol6VivvbBwrDYhTfCGl7GF/vsGAZwa RLBfQh4q4dFgkLD7EHUpcbkCSgfI88DEhly2d9sCiQ1nJd0TXKeFG29qZyE8Bt8X 4uFAlHlQ9sGX/nhHit4AOEYVVYnUUeKZ+aKll7pnO5vF+bB3/WODeeFT3vuGKmk5 TPqNBp1kknByFDc= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:08 2025 by rpki-client