This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa File: 34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa (raw, json) Hash identifier: NQsSa+zC8ge44twG5XmqbQZpXCSt2h9ZZTOmQhrEx+E= Subject key identifier: 1D:12:CD:1A:DC:C3:23:C6:A1:9A:6F:C0:D5:77:63:99:ED:D4:1F:5A Certificate issuer: /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4 Certificate serial: 405B8FC68443EC44FC4678B76E830EB0CF482ECB Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa Signing time: Fri 14 Nov 2025 18:41:22 +0000 ROA not before: Fri 14 Nov 2025 18:36:22 +0000 ROA not after: Fri 13 Nov 2026 18:41:22 +0000 asID: 269258 IP address blocks: 45.239.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5b:8f:c6:84:43:ec:44:fc:46:78:b7:6e:83:0e:b0:cf:48:2e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4 Validity Not Before: Nov 14 18:36:22 2025 GMT Not After : Nov 13 18:41:22 2026 GMT Subject: CN=1D12CD1ADCC323C6A19A6FC0D5776399EDD41F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:8a:45:65:fe:d3:21:df:8c:08:58:46:f0: de:2a:8a:a6:ea:42:23:cb:b4:64:39:02:24:d5:cb: fc:2f:cc:e0:0d:db:e0:8b:7a:4c:a6:1a:1d:de:5f: 86:8e:a3:94:9c:ec:43:93:83:18:75:23:85:45:0b: bc:05:35:45:4b:e8:ec:fb:c9:1f:fa:19:4b:ba:a5: 95:00:a4:15:82:61:72:07:26:d3:0a:e2:2d:bf:52: 90:c5:55:51:49:31:fe:c4:47:4a:bf:aa:df:b8:92: 14:d5:8d:db:44:e0:9b:89:18:cf:bb:3e:d5:59:f4: 99:da:dc:3e:ea:8e:e2:73:8a:60:d8:21:1e:37:bd: 4a:77:8e:8a:a5:d0:50:4c:6e:25:11:c0:cf:09:8b: d8:f3:d0:1f:67:33:07:35:d8:d5:f7:d0:c3:77:a8: 75:27:7b:4c:66:d2:9a:61:46:c5:c9:44:c6:61:db: e3:4d:04:3c:e6:eb:5d:ad:46:7c:9d:93:99:73:f1: c2:4c:85:6b:76:bc:f9:c9:9b:1f:a8:64:cd:e7:31: 8a:1d:00:85:d1:32:eb:1f:f5:70:8a:91:7e:16:38: be:88:e7:c5:91:6a:5c:f0:46:11:72:3e:5f:d2:32: 6e:9b:fe:73:11:e3:e0:38:1b:f0:ea:2c:d4:05:db: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:12:CD:1A:DC:C3:23:C6:A1:9A:6F:C0:D5:77:63:99:ED:D4:1F:5A X509v3 Authority Key Identifier: keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.143.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:0e:46:ff:55:a2:0b:4b:a5:63:2c:ba:0e:dc:7b:bf:63:17: bf:fd:a7:90:50:33:23:9d:a7:73:67:8f:ae:f4:57:64:91:2e: 12:2c:b6:f7:05:81:72:ab:4a:42:da:84:c0:05:8b:fe:69:de: c5:51:a3:48:07:ea:18:02:a3:84:32:3e:82:01:73:61:9f:6b: 7c:db:36:71:0e:7b:c3:03:80:6f:01:aa:02:6c:2a:d4:c2:5c: 33:e6:04:74:54:7c:8d:1f:bc:a9:cc:ac:e1:a5:b0:29:93:42: 3c:db:6e:8c:52:75:88:be:b6:20:b4:e8:32:63:64:9c:17:50: 48:8d:ad:73:56:01:78:6e:b4:53:99:77:49:09:c6:75:e8:09: 4b:65:19:1d:a3:0c:6a:84:37:b6:95:5f:75:6d:49:f1:43:d5: 45:c1:53:24:85:f2:3b:e9:ed:f8:19:df:a7:82:1b:f3:af:ac: df:bb:98:c1:4e:04:4e:27:57:f8:e4:c6:7f:63:ae:83:a3:61: ad:d4:5a:0e:c1:94:bd:aa:6e:95:36:2b:0e:3f:75:65:82:f2: cf:a7:69:e9:5a:7e:62:39:28:b4:26:bd:8e:c5:df:ff:83:2e: 51:f8:b1:13:23:fe:e6:06:e8:e4:2f:de:9b:48:b1:ec:98:c3: d3:11:00:b0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQFuPxoRD7ET8Rni3boMOsM9ILsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThEREJCQTQzNURENkE5RTQ4RDJGRUVBOTM1NEE3NzhE RUYxNzZDNDAeFw0yNTExMTQxODM2MjJaFw0yNjExMTMxODQxMjJaMDMxMTAvBgNV BAMTKDFEMTJDRDFBRENDMzIzQzZBMTlBNkZDMEQ1Nzc2Mzk5RURENDFGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVopFZf7TId+MCFhG8N4qiqbq QiPLtGQ5AiTVy/wvzOAN2+CLekymGh3eX4aOo5Sc7EOTgxh1I4VFC7wFNUVL6Oz7 yR/6GUu6pZUApBWCYXIHJtMK4i2/UpDFVVFJMf7ER0q/qt+4khTVjdtE4JuJGM+7 PtVZ9Jna3D7qjuJzimDYIR43vUp3joql0FBMbiURwM8Ji9jz0B9nMwc12NX30MN3 qHUne0xm0pphRsXJRMZh2+NNBDzm612tRnydk5lz8cJMhWt2vPnJmx+oZM3nMYod AIXRMusf9XCKkX4WOL6I58WRalzwRhFyPl/SMm6b/nMR4+A4G/DqLNQF2xwXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUHRLNGtzDI8ahmm/A1Xdjme3UH1owHwYDVR0j BBgwFoAUmN27pDXdap5I0v7qk1SneN7xdsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHRmeHJ3UFUxRllNUXBWTGZyeHk0MWVYc3FRZ3RvUWR0UTkyV2VGN2Y1 MXUvMC85OEREQkJBNDM1REQ2QTlFNDhEMkZFRUE5MzU0QTc3OERFRjE3NkM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RERCQkE0MzVERDZBOUU0 OEQyRkVFQTkzNTRBNzc4REVGMTc2QzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0h0Znhyd1BVMUZZTVFwVkxmcnh5NDFlWHNxUWd0b1FkdFE5MldlRjdmNTF1LzAv MzQzNTJlMzIzMzM5MmUzMTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzkzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt748wDQYJKoZIhvcNAQELBQADggEBAJ8ORv9V ogtLpWMsug7ce79jF7/9p5BQMyOdp3Nnj670V2SRLhIstvcFgXKrSkLahMAFi/5p 3sVRo0gH6hgCo4QyPoIBc2Gfa3zbNnEOe8MDgG8BqgJsKtTCXDPmBHRUfI0fvKnM rOGlsCmTQjzbboxSdYi+tiC06DJjZJwXUEiNrXNWAXhutFOZd0kJxnXoCUtlGR2j DGqEN7aVX3VtSfFD1UXBUySF8jvp7fgZ36eCG/OvrN+7mMFOBE4nV/jkxn9jroOj Ya3UWg7BlL2qbpU2Kw4/dWWC8s+naelafmI5KLQmvY7F3/+DLlH4sRMj/uYG6OQv 3ptIseyYw9MRALA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:24:53 2025 by rpki-client