This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233352e302f32342d3234203d3e203532383338.roa File: 34352e3233312e3233352e302f32342d3234203d3e203532383338.roa (raw, json) Hash identifier: N7JZOwxNFgGnuL7v5CjfK2jT9NECBGKiZSrS6PZeUrg= Subject key identifier: D0:42:7D:11:B4:AC:95:37:6C:10:EC:96:BB:5A:BE:C2:FB:E2:3F:12 Certificate issuer: /CN=24159525D9783B62253D92C07EC4EB5CB3204829 Certificate serial: 23D025148DF8CE39FC5398F24BF638CE779CD4CA Authority key identifier: 24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233352e302f32342d3234203d3e203532383338.roa Signing time: Wed 03 Dec 2025 00:31:48 +0000 ROA not before: Wed 03 Dec 2025 00:26:48 +0000 ROA not after: Wed 02 Dec 2026 00:31:48 +0000 asID: 52838 IP address blocks: 45.231.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d0:25:14:8d:f8:ce:39:fc:53:98:f2:4b:f6:38:ce:77:9c:d4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24159525D9783B62253D92C07EC4EB5CB3204829 Validity Not Before: Dec 3 00:26:48 2025 GMT Not After : Dec 2 00:31:48 2026 GMT Subject: CN=D0427D11B4AC95376C10EC96BB5ABEC2FBE23F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:9c:37:a9:3d:f1:29:36:3d:8b:60:7b:10: 14:9c:53:58:e0:49:90:6a:94:a9:f0:4b:a3:c6:55: 5a:eb:37:64:30:9f:63:9f:14:41:5a:3b:28:42:bf: 57:02:ed:9a:c2:63:e9:c7:fb:78:c1:39:f5:c0:4f: 36:e2:bd:a4:01:44:29:78:ab:56:e8:b2:21:61:2b: b0:e5:ec:da:50:17:5e:67:3a:60:16:c7:8f:c6:69: d6:89:65:0f:47:3f:7c:91:2b:6c:ee:63:4a:43:63: 53:58:63:a4:0f:51:84:f1:5f:a6:65:1b:7c:6e:0c: a3:6e:2b:4f:1c:f1:7b:d2:26:19:20:fd:73:bb:a2: 8d:4e:35:04:57:af:10:57:74:8e:77:ca:18:06:46: 72:3d:f6:82:95:d7:fc:4d:bd:3f:a4:fd:53:7c:c1: 9b:e8:0b:68:08:c8:27:f2:47:a2:d1:64:74:3e:02: 5f:79:7c:b9:cb:55:8e:6e:41:4b:23:8c:de:19:f9: 6e:84:ee:43:19:f7:26:cb:26:01:e2:19:f2:db:7f: 0c:8a:2e:6a:60:5e:2c:de:3e:e9:92:72:7f:bb:80: 90:9b:15:3a:d1:b1:67:f8:b5:86:87:15:c4:7b:1a: 2b:b5:4c:1d:09:24:5e:2c:4c:08:fe:8e:4d:36:18: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:7D:11:B4:AC:95:37:6C:10:EC:96:BB:5A:BE:C2:FB:E2:3F:12 X509v3 Authority Key Identifier: keyid:24:15:95:25:D9:78:3B:62:25:3D:92:C0:7E:C4:EB:5C:B3:20:48:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/24159525D9783B62253D92C07EC4EB5CB3204829.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24159525D9783B62253D92C07EC4EB5CB3204829.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/34352e3233312e3233352e302f32342d3234203d3e203532383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.235.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c7:c8:46:fe:6b:f3:36:e2:b6:f5:6b:cd:a3:1e:f0:8e:b8: 1b:8e:f2:0a:2b:0a:68:92:37:fc:ab:b7:ec:e4:8a:99:ae:f3: 1d:ee:4e:94:3d:0f:8b:62:00:5a:c5:60:8c:3e:80:85:2c:6d: 01:ac:d4:c3:9b:3f:b8:2c:fe:91:f6:d7:b1:be:f6:94:39:04: a0:95:e6:cd:4d:32:b7:2a:ea:d7:bf:21:9d:e5:17:4c:d9:21: 4b:c1:44:b8:d0:8c:d1:34:49:17:3a:18:0b:e0:59:80:14:16: da:f8:25:31:af:41:9e:9c:26:7f:db:6b:11:70:0c:35:85:34: 3b:de:f8:22:da:c0:d2:49:17:d9:85:2c:0d:2e:d1:de:7a:4c: ec:0b:ae:16:85:91:78:cd:0b:d7:e8:96:e0:45:2e:12:72:5f: 5f:3c:ec:e6:79:c0:d0:58:d1:3b:16:c7:85:5a:7c:e0:04:9e: ac:56:6a:63:5d:b0:e4:10:0d:a7:7c:9e:0e:c4:a0:82:50:fc: 71:58:18:1d:b4:7e:d1:a1:a4:27:25:6e:4c:bd:1c:7a:bb:dd: ca:29:cc:d8:a3:32:c5:76:11:67:98:3e:87:dc:e3:60:e0:23: 25:51:83:a0:a3:78:8a:15:4f:44:ef:56:ed:bb:d8:05:da:97: b4:be:ec:12 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUI9AlFI34zjn8U5jyS/Y4znec1MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNC MzIwNDgyOTAeFw0yNTEyMDMwMDI2NDhaFw0yNjEyMDIwMDMxNDhaMDMxMTAvBgNV BAMTKEQwNDI3RDExQjRBQzk1Mzc2QzEwRUM5NkJCNUFCRUMyRkJFMjNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Tpw3qT3xKTY9i2B7EBScU1jg SZBqlKnwS6PGVVrrN2Qwn2OfFEFaOyhCv1cC7ZrCY+nH+3jBOfXATzbivaQBRCl4 q1bosiFhK7Dl7NpQF15nOmAWx4/GadaJZQ9HP3yRK2zuY0pDY1NYY6QPUYTxX6Zl G3xuDKNuK08c8XvSJhkg/XO7oo1ONQRXrxBXdI53yhgGRnI99oKV1/xNvT+k/VN8 wZvoC2gIyCfyR6LRZHQ+Al95fLnLVY5uQUsjjN4Z+W6E7kMZ9ybLJgHiGfLbfwyK LmpgXizePumScn+7gJCbFTrRsWf4tYaHFcR7Giu1TB0JJF4sTAj+jk02GKZvAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU0EJ9EbSslTdsEOyWu1q+wvviPxIwHwYDVR0j BBgwFoAUJBWVJdl4O2IlPZLAfsTrXLMgSCkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YNG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhG LzAvMjQxNTk1MjVEOTc4M0I2MjI1M0Q5MkMwN0VDNEVCNUNCMzIwNDgyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNDE1OTUyNUQ5NzgzQjYyMjUz RDkyQzA3RUM0RUI1Q0IzMjA0ODI5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y NG0ydmtuWnBiY3pERjZvem5BZ2dQMkdhZWt3ZU4xS3U5ZGtXNlh6VVhGLzAvMzQz NTJlMzIzMzMxMmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzgz MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQALefrMA0GCSqGSIb3DQEBCwUAA4IBAQBox8hG/mvzNuK2 9WvNox7wjrgbjvIKKwpokjf8q7fs5IqZrvMd7k6UPQ+LYgBaxWCMPoCFLG0BrNTD mz+4LP6R9texvvaUOQSglebNTTK3KurXvyGd5RdM2SFLwUS40IzRNEkXOhgL4FmA FBba+CUxr0GenCZ/22sRcAw1hTQ73vgi2sDSSRfZhSwNLtHeekzsC64WhZF4zQvX 6JbgRS4Scl9fPOzmecDQWNE7FseFWnzgBJ6sVmpjXbDkEA2nfJ4OxKCCUPxxWBgd tH7RoaQnJW5MvRx6u93KKczYozLFdhFnmD6H3ONg4CMlUYOgo3iKFU9E71btu9gF 2pe0vuwS -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:19 2025 by rpki-client