This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa File: 34352e3138382e3132302e302f32322d3332203d3e203533303035.roa (raw, json) Hash identifier: 0PNHfzBt8tBvYfgdEJuhH/ZIo3h8dHZbuFXfq72oI8E= Subject key identifier: 42:C6:5B:4C:D1:F7:DC:6A:4C:1C:43:C2:53:94:FC:DE:6D:01:12:85 Certificate issuer: /CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A Certificate serial: 2F9B32E870A0BCFC204DC829C846666C8FB5B0EA Authority key identifier: AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa Signing time: Sun 28 Dec 2025 10:02:56 +0000 ROA not before: Sun 28 Dec 2025 09:57:56 +0000 ROA not after: Sun 27 Dec 2026 10:02:56 +0000 asID: 53005 IP address blocks: 45.188.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9b:32:e8:70:a0:bc:fc:20:4d:c8:29:c8:46:66:6c:8f:b5:b0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A Validity Not Before: Dec 28 09:57:56 2025 GMT Not After : Dec 27 10:02:56 2026 GMT Subject: CN=42C65B4CD1F7DC6A4C1C43C25394FCDE6D011285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:ba:b8:a9:82:da:15:8f:d0:ea:86:a3:51: f4:5a:b9:74:19:24:17:9c:14:ed:52:65:70:80:84: e9:c8:27:49:21:f9:54:67:aa:a9:04:68:47:ea:9f: 3b:a3:22:5e:a8:8c:72:44:87:74:31:29:07:a5:39: 62:96:76:9f:91:da:36:ec:b9:c6:7a:4d:5b:25:8a: c3:ed:aa:ba:47:d8:52:8c:35:b1:fa:d7:b2:d9:31: 63:f8:3e:ea:e2:4d:bf:92:3c:b0:c4:71:47:5a:02: 10:f8:42:ec:cc:fe:a0:8d:a5:01:89:ce:e4:ee:2b: 6c:ea:15:7f:de:12:7c:52:1f:6e:49:5d:aa:aa:9c: 9b:0b:d0:78:42:a5:95:c2:e8:df:1c:2d:75:80:86: 96:98:d4:d5:08:c0:74:e3:cd:5e:10:cd:f8:d0:d1: e0:68:0b:e3:5e:a5:22:92:6b:99:a9:32:f7:20:98: ae:d6:c0:3d:1b:23:00:03:ac:4b:d3:c6:27:a0:bc: 71:44:3b:69:a3:34:43:9a:2d:b1:13:81:09:ce:e5: a9:79:f7:88:b2:b6:6f:0e:2f:ff:50:bd:7f:24:1e: 46:7c:c7:1b:a8:1b:93:02:fd:aa:fe:e4:a4:30:ad: a4:56:62:ee:77:93:f4:69:30:d5:7a:b3:12:7f:86: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:5B:4C:D1:F7:DC:6A:4C:1C:43:C2:53:94:FC:DE:6D:01:12:85 X509v3 Authority Key Identifier: keyid:AF:8C:9B:C6:ED:BF:FD:E9:8F:E3:84:11:B6:AB:6C:7B:9F:52:C5:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8C9BC6EDBFFDE98FE38411B6AB6C7B9F52C53A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:a0:e7:f0:78:21:a0:8c:30:33:7e:76:5e:16:f5:46:8f:3a: 43:bf:5b:6c:b3:ee:f6:82:99:18:d0:e8:5d:0d:b2:a3:fb:14: 1e:79:cb:a2:de:30:b5:c9:df:24:af:37:06:90:cf:d0:99:b2: 48:66:91:ed:92:cc:a0:d4:21:7f:6f:1b:8f:af:5e:f9:9f:c3: dd:d3:bf:2e:44:3f:c6:e3:63:6a:6b:e1:69:84:7a:7b:42:7d: 54:fb:32:d7:e8:5a:bb:82:9c:20:6b:54:d4:d1:46:77:91:4c: 91:34:a0:c6:e3:1c:9b:bf:6d:90:f3:2a:5c:7e:57:cb:67:9f: fa:90:4b:15:49:9a:1b:2e:ce:60:1c:03:6a:3a:44:06:93:23: b5:f4:ed:e9:11:26:de:e3:33:62:c9:f8:65:1e:93:af:39:80: 88:58:5c:71:3c:a5:af:14:89:7d:f7:61:40:0d:e5:e3:35:69: d9:82:3c:81:bc:18:4f:f9:b3:59:62:59:3a:97:ee:a5:c7:43: 5d:a1:68:bf:9d:2d:91:2e:04:b7:e0:bc:1e:4e:ba:93:c7:54: 05:9a:0f:71:99:1e:4f:c4:83:c3:ca:22:dd:5d:fc:df:9b:71: 77:57:db:8c:61:8a:ae:d1:75:8a:ad:c2:1d:3b:90:c8:c4:b6: d7:6d:c6:43 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUL5sy6HCgvPwgTcgpyEZmbI+1sOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QzlCQzZFREJGRkRFOThGRTM4NDExQjZBQjZDN0I5 RjUyQzUzQTAeFw0yNTEyMjgwOTU3NTZaFw0yNjEyMjcxMDAyNTZaMDMxMTAvBgNV BAMTKDQyQzY1QjRDRDFGN0RDNkE0QzFDNDNDMjUzOTRGQ0RFNkQwMTEyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhrq4qYLaFY/Q6oajUfRauXQZ JBecFO1SZXCAhOnIJ0kh+VRnqqkEaEfqnzujIl6ojHJEh3QxKQelOWKWdp+R2jbs ucZ6TVslisPtqrpH2FKMNbH617LZMWP4PuriTb+SPLDEcUdaAhD4QuzM/qCNpQGJ zuTuK2zqFX/eEnxSH25JXaqqnJsL0HhCpZXC6N8cLXWAhpaY1NUIwHTjzV4QzfjQ 0eBoC+NepSKSa5mpMvcgmK7WwD0bIwADrEvTxiegvHFEO2mjNEOaLbETgQnO5al5 94iytm8OL/9QvX8kHkZ8xxuoG5MC/ar+5KQwraRWYu53k/RpMNV6sxJ/hpQjAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUQsZbTNH33GpMHEPCU5T83m0BEoUwHwYDVR0j BBgwFoAUr4ybxu2//emP44QRtqtse59SxTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9VSlJWeXZlTjk5VjF0QUVqaWFnWG4xaGsxV1ZGU0tuM1pXNjFvU3hZ N0MvMC9BRjhDOUJDNkVEQkZGREU5OEZFMzg0MTFCNkFCNkM3QjlGNTJDNTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGOEM5QkM2RURCRkZERTk4 RkUzODQxMUI2QUI2QzdCOUY1MkM1M0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hvVUpSVnl2ZU45OVYxdEFFamlhZ1huMWhrMVdWRlNLbjNaVzYxb1N4WTdDLzAv MzQzNTJlMzEzODM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLbx4MA0GCSqGSIb3DQEBCwUAA4IBAQBPoOfweCGg jDAzfnZeFvVGjzpDv1tss+72gpkY0OhdDbKj+xQeecui3jC1yd8krzcGkM/QmbJI ZpHtksyg1CF/bxuPr175n8Pd078uRD/G42Nqa+FphHp7Qn1U+zLX6Fq7gpwga1TU 0UZ3kUyRNKDG4xybv22Q8ypcflfLZ5/6kEsVSZobLs5gHANqOkQGkyO19O3pESbe 4zNiyfhlHpOvOYCIWFxxPKWvFIl992FADeXjNWnZgjyBvBhP+bNZYlk6l+6lx0Nd oWi/nS2RLgS34LweTrqTx1QFmg9xmR5PxIPDyiLdXfzfm3F3V9uMYYqu0XWKrcId O5DIxLbXbcZD -----END CERTIFICATE-----Generated at Mon Jan 26 02:51:16 2026 by rpki-client