This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32342d3234203d3e203532383338.roa File: 34352e3233312e3233342e302f32342d3234203d3e203532383338.roa (raw, json) Hash identifier: EadsETcRLcAbFlnQCm4/IM0aAA1EVO2KZbaB4TGhjsI= Subject key identifier: A2:1E:A5:EA:D0:24:29:18:59:3C:57:CF:4A:8E:74:A4:2C:4A:0B:82 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 2416ABCADE0A95C0834A4D5B1B7BCD2FE2A01808 Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32342d3234203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:31:22 +0000 ROA not before: Wed 03 Dec 2025 00:26:22 +0000 ROA not after: Wed 02 Dec 2026 00:31:22 +0000 asID: 52838 IP address blocks: 45.231.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:16:ab:ca:de:0a:95:c0:83:4a:4d:5b:1b:7b:cd:2f:e2:a0:18:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:26:22 2025 GMT Not After : Dec 2 00:31:22 2026 GMT Subject: CN=A21EA5EAD0242918593C57CF4A8E74A42C4A0B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:09:61:ef:31:f7:31:16:9a:05:80:78:00: 1c:b5:45:2b:44:89:84:3d:a9:ad:69:6c:be:5b:4b: 41:db:8b:6e:3c:f9:65:96:f0:af:ea:1e:bd:5e:d0: d7:b5:16:0c:28:fb:e6:06:3f:f9:c0:dd:04:3c:cb: 68:23:3d:91:22:a7:2d:c7:6e:ab:7f:5a:e3:ab:f6: 31:e6:35:f0:bc:42:0d:ab:93:d4:0e:aa:4d:21:42: 79:e5:85:e6:16:cf:e5:ba:c9:91:2b:a1:89:8a:57: b5:72:56:28:a1:e9:00:10:c1:43:dc:6f:8e:e7:12: 78:46:9a:a9:6d:ea:ad:5f:4a:59:ad:60:a1:04:15: 51:c2:d6:78:13:e3:d5:d6:96:7c:4f:e1:4c:24:af: a0:05:73:be:5c:38:fb:3b:72:d9:f8:a0:72:b9:e0: 4d:c5:43:92:17:ec:ec:75:0f:66:b1:ec:9e:5d:26: cd:9f:c1:e8:65:64:d5:6b:f5:95:a2:f3:38:84:7d: 4b:ef:23:10:0b:43:c3:af:99:df:53:6a:84:5f:ea: b2:15:86:a1:0b:31:7f:54:64:10:c1:1a:30:70:52: e6:1b:06:84:7d:d3:ee:52:22:cd:d4:37:12:f6:61: 18:0f:c9:38:33:42:25:78:8d:23:87:a5:d1:37:d0: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1E:A5:EA:D0:24:29:18:59:3C:57:CF:4A:8E:74:A4:2C:4A:0B:82 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233342e302f32342d3234203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.234.0/24 Signature Algorithm: sha256WithRSAEncryption 94:58:ca:0f:df:d5:14:9f:f5:07:09:14:31:af:d3:4f:48:b1: 00:7e:49:26:d0:09:73:8b:c5:05:cd:48:0a:3c:c2:9c:25:ea: a7:19:a4:0a:f6:bf:20:2d:9c:03:e3:d2:b2:aa:21:23:47:21: c9:39:7f:de:a7:1e:03:95:ff:83:bb:5e:c7:a1:f7:85:25:c7: df:eb:df:19:7c:f7:ae:7d:20:af:cd:a8:a7:e5:31:54:95:8c: 25:1b:56:4c:82:b2:07:a1:b1:44:f0:c8:ff:6e:17:eb:ad:ef: 88:e1:ed:ee:8d:cb:be:0f:e1:de:4e:5c:5a:3e:2d:c4:ed:6b: d6:bd:56:e3:57:c4:c6:e3:20:ff:38:a1:72:07:11:4a:59:77: ca:20:8c:fd:68:29:f1:76:00:26:2b:11:3e:47:53:02:c4:b8: 86:ee:a4:3d:01:78:f5:17:7a:b2:a0:a3:12:e1:d9:7b:01:05: f9:00:6a:e5:99:26:4d:86:cd:81:bd:1f:61:20:01:80:41:a4: a1:a5:30:f6:95:28:14:ae:9c:7a:6e:80:a7:c5:ad:ef:b8:7e: 09:90:00:af:4c:aa:7f:78:50:b9:d3:46:bb:e9:5d:80:1f:46: d6:6f:cc:45:c3:1f:00:72:b4:88:bd:00:a4:a0:1f:d4:23:fd: e9:7c:2a:63 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUJBaryt4KlcCDSk1bG3vNL+KgGAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDI2MjJaFw0yNjEyMDIwMDMxMjJaMDMxMTAvBgNV BAMTKEEyMUVBNUVBRDAyNDI5MTg1OTNDNTdDRjRBOEU3NEE0MkM0QTBCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqQlh7zH3MRaaBYB4ABy1RStE iYQ9qa1pbL5bS0Hbi248+WWW8K/qHr1e0Ne1Fgwo++YGP/nA3QQ8y2gjPZEipy3H bqt/WuOr9jHmNfC8Qg2rk9QOqk0hQnnlheYWz+W6yZEroYmKV7VyViih6QAQwUPc b47nEnhGmqlt6q1fSlmtYKEEFVHC1ngT49XWlnxP4Uwkr6AFc75cOPs7ctn4oHK5 4E3FQ5IX7Ox1D2ax7J5dJs2fwehlZNVr9ZWi8ziEfUvvIxALQ8Ovmd9TaoRf6rIV hqELMX9UZBDBGjBwUuYbBoR90+5SIs3UNxL2YRgPyTgzQiV4jSOHpdE30JtJAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUoh6l6tAkKRhZPFfPSo50pCxKC4IwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzIzMzMxMmUzMjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQALefqMA0GCSqGSIb3DQEBCwUAA4IBAQCUWMoP39UUn/UH CRQxr9NPSLEAfkkm0Alzi8UFzUgKPMKcJeqnGaQK9r8gLZwD49KyqiEjRyHJOX/e px4Dlf+Du17HofeFJcff698ZfPeufSCvzain5TFUlYwlG1ZMgrIHobFE8Mj/bhfr re+I4e3ujcu+D+HeTlxaPi3E7WvWvVbjV8TG4yD/OKFyBxFKWXfKIIz9aCnxdgAm KxE+R1MCxLiG7qQ9AXj1F3qyoKMS4dl7AQX5AGrlmSZNhs2BvR9hIAGAQaShpTD2 lSgUrpx6boCnxa3vuH4JkACvTKp/eFC500a76V2AH0bWb8xFwx8AcrSIvQCkoB/U I/3pfCpj -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:20 2025 by rpki-client