This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa File: 34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa (raw, json) Hash identifier: ikLxmZRq9GA7l9gUwQ8KsYLPiZHYK560PCzWPT+AsQc= Subject key identifier: DE:23:48:D9:34:E3:62:A3:FC:F0:22:AC:5E:BA:F8:55:DF:4C:1A:C6 Certificate issuer: /CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4 Certificate serial: 393BE92EC855DB63FBAE4DB682519D2323419F7A Authority key identifier: 01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa Signing time: Thu 06 Nov 2025 18:00:23 +0000 ROA not before: Thu 06 Nov 2025 17:55:23 +0000 ROA not after: Thu 05 Nov 2026 18:00:23 +0000 asID: 267323 IP address blocks: 45.233.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3b:e9:2e:c8:55:db:63:fb:ae:4d:b6:82:51:9d:23:23:41:9f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01B0B0B59E86551343BE2FC7261AB5815A2454A4 Validity Not Before: Nov 6 17:55:23 2025 GMT Not After : Nov 5 18:00:23 2026 GMT Subject: CN=DE2348D934E362A3FCF022AC5EBAF855DF4C1AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:e0:76:8f:cb:a1:8e:a0:b0:66:db:fc:cb: 6c:de:80:99:87:57:ab:60:f9:19:7a:30:2c:b5:3e: 97:e7:67:81:a7:72:1c:5c:b3:0c:ed:ea:b8:e6:75: 0e:6c:06:54:21:eb:d8:4b:d4:54:22:fa:8a:7b:34: c3:3f:be:67:45:eb:30:f5:13:f4:bf:9f:d4:2d:5b: f3:78:2f:9e:e8:e6:2d:c5:ae:1d:4a:6f:66:09:80: 66:16:67:64:ed:e9:b5:af:63:9e:69:31:6d:d9:cf: 64:01:89:57:7d:3f:fc:74:ff:fd:ce:1e:0e:d7:34: ee:31:e3:23:82:23:85:40:d3:e8:38:44:fc:f7:23: 34:31:db:f7:d4:66:e6:7b:c3:87:4e:86:2f:2e:dd: 2e:1a:b6:10:f5:60:d6:d7:c6:ca:3b:d6:90:4b:c2: bf:e4:fe:cc:06:18:5b:fe:8b:ee:f1:ae:10:2c:3f: 0b:ce:a5:f9:de:66:39:1c:71:5e:c8:0e:20:dc:37: f2:96:12:f7:06:0c:1b:12:16:b6:db:6c:fc:24:d5: 0b:19:de:fd:d5:6b:70:7c:0e:3b:82:38:82:26:0a: 87:59:c2:aa:67:0a:9b:63:0b:f9:cd:a6:5e:82:ff: 9c:c0:03:3f:3c:cb:55:64:ba:22:8e:3d:ca:8b:9d: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:23:48:D9:34:E3:62:A3:FC:F0:22:AC:5E:BA:F8:55:DF:4C:1A:C6 X509v3 Authority Key Identifier: keyid:01:B0:B0:B5:9E:86:55:13:43:BE:2F:C7:26:1A:B5:81:5A:24:54:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01B0B0B59E86551343BE2FC7261AB5815A2454A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/1/34352e3233332e3132302e302f32322d3234203d3e20323637333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.120.0/22 Signature Algorithm: sha256WithRSAEncryption 89:4c:2f:a7:e9:f1:ad:d0:94:5a:3e:8a:09:b9:74:71:e2:53: 76:c4:d4:ca:bf:36:a1:d6:5a:f2:56:2c:84:19:4a:27:e7:f0: a1:ad:ec:28:33:06:7a:ed:cc:75:93:bb:9d:d8:06:a4:b6:a9: 97:d1:71:b1:be:60:f1:63:33:b4:f0:62:9f:be:87:16:0a:a3: 44:a8:6b:8f:02:bb:89:a0:b8:38:b2:62:5a:c6:8f:e9:5a:6f: 13:79:3f:25:1b:e0:cd:87:57:30:91:1d:ca:97:a9:57:b1:fd: 6b:bd:92:3d:3a:eb:c4:8b:77:dc:46:6f:5e:0a:89:a7:3f:1d: 72:27:d3:4e:ca:d3:7a:56:ea:d2:a4:40:c6:5e:6f:3b:54:78: 63:5a:1c:f8:59:ee:fc:0b:00:d7:18:ed:eb:40:6c:e7:96:c7: da:7d:90:65:ef:1b:21:15:9f:8d:c2:36:78:50:c2:7f:0c:6a: 78:1d:b1:97:e9:66:25:25:b5:de:2c:10:1e:d0:74:bb:43:73: 03:fa:96:68:aa:3c:88:fe:60:0e:1b:b7:0f:24:3a:06:e4:7b: 6e:ff:a0:ea:00:79:a5:99:d9:bd:05:df:c2:62:d5:2d:73:93: 8e:cd:ed:43:30:ef:6a:6d:a6:33:47:e2:94:e7:d2:84:19:df: 68:d5:86:b0 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUOTvpLshV22P7rk22glGdIyNBn3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFCMEIwQjU5RTg2NTUxMzQzQkUyRkM3MjYxQUI1ODE1 QTI0NTRBNDAeFw0yNTExMDYxNzU1MjNaFw0yNjExMDUxODAwMjNaMDMxMTAvBgNV BAMTKERFMjM0OEQ5MzRFMzYyQTNGQ0YwMjJBQzVFQkFGODU1REY0QzFBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvg+B2j8uhjqCwZtv8y2zegJmH V6tg+Rl6MCy1PpfnZ4Gnchxcswzt6rjmdQ5sBlQh69hL1FQi+op7NMM/vmdF6zD1 E/S/n9QtW/N4L57o5i3Frh1Kb2YJgGYWZ2Tt6bWvY55pMW3Zz2QBiVd9P/x0//3O Hg7XNO4x4yOCI4VA0+g4RPz3IzQx2/fUZuZ7w4dOhi8u3S4athD1YNbXxso71pBL wr/k/swGGFv+i+7xrhAsPwvOpfneZjkccV7IDiDcN/KWEvcGDBsSFrbbbPwk1QsZ 3v3Va3B8DjuCOIImCodZwqpnCptjC/nNpl6C/5zAAz88y1VkuiKOPcqLndQRAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU3iNI2TTjYqP88CKsXrr4Vd9MGsYwHwYDVR0j BBgwFoAUAbCwtZ6GVRNDvi/HJhq1gVokVKQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZYnVNNmk1R1FOTGk3QmJFRXFQUTFVNFRLRmJKWEt6Q1VTMnNiWGd4ZjdX LzEvMDFCMEIwQjU5RTg2NTUxMzQzQkUyRkM3MjYxQUI1ODE1QTI0NTRBNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMUIwQjBCNTlFODY1NTEzNDNC RTJGQzcyNjFBQjU4MTVBMjQ1NEE0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z YnVNNmk1R1FOTGk3QmJFRXFQUTFVNFRLRmJKWEt6Q1VTMnNiWGd4ZjdXLzEvMzQz NTJlMzIzMzMzMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzcz MzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAIt6XgwDQYJKoZIhvcNAQELBQADggEBAIlML6fp8a3Q lFo+igm5dHHiU3bE1Mq/NqHWWvJWLIQZSifn8KGt7CgzBnrtzHWTu53YBqS2qZfR cbG+YPFjM7TwYp++hxYKo0Soa48Cu4mguDiyYlrGj+labxN5PyUb4M2HVzCRHcqX qVex/Wu9kj0668SLd9xGb14Kiac/HXIn007K03pW6tKkQMZebztUeGNaHPhZ7vwL ANcY7etAbOeWx9p9kGXvGyEVn43CNnhQwn8MangdsZfpZiUltd4sEB7QdLtDcwP6 lmiqPIj+YA4btw8kOgbke27/oOoAeaWZ2b0F38Ji1S1zk47N7UMw72ptpjNH4pTn 0oQZ32jVhrA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:29 2025 by rpki-client