This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/34352e3232392e3235322e302f32322d3234203d3e20323731373233.roa File: 34352e3232392e3235322e302f32322d3234203d3e20323731373233.roa (raw, json) Hash identifier: v1wAbwZ5o6pxq6Thc35o51s2SsumY8Gtps1GiQNS+Pc= Subject key identifier: 11:8F:04:28:A5:A2:50:9B:03:C5:02:D0:D9:1C:A4:57:89:9E:23:F6 Certificate issuer: /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141 Certificate serial: 633AEBE38D947D73EE537E473C0D58211DDFCC3A Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer Subject info access: rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/34352e3232392e3235322e302f32322d3234203d3e20323731373233.roa Signing time: Tue 23 Dec 2025 19:38:51 +0000 ROA not before: Tue 23 Dec 2025 19:33:51 +0000 ROA not after: Tue 22 Dec 2026 19:38:51 +0000 asID: 271723 IP address blocks: 45.229.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3a:eb:e3:8d:94:7d:73:ee:53:7e:47:3c:0d:58:21:1d:df:cc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141 Validity Not Before: Dec 23 19:33:51 2025 GMT Not After : Dec 22 19:38:51 2026 GMT Subject: CN=118F0428A5A2509B03C502D0D91CA457899E23F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:a1:db:1d:b9:b3:30:5c:cf:0d:42:79:0e: 26:0a:c6:62:8c:b0:f5:1f:cd:1c:ef:30:e3:1c:92: 99:2d:64:f3:a6:bd:d3:11:28:f8:3b:06:6c:95:4c: 08:b0:3b:20:cd:59:60:fa:1f:ab:38:35:92:5a:e7: 04:8a:c1:da:95:ee:3a:26:3b:1d:29:d1:a5:e2:0b: 35:fa:c0:bc:c4:00:e9:f4:ca:ee:62:ea:35:31:38: a4:e1:51:a3:25:02:ec:9a:f6:8e:5e:2c:0d:cb:c6: b2:97:15:e1:e7:fa:92:36:84:09:ef:be:78:5a:55: 8f:e2:ea:66:22:0a:3c:b3:f2:cb:69:60:66:45:e4: 02:97:d4:56:2d:4a:63:0f:17:ac:26:9d:4a:42:40: 4e:32:31:b5:f4:72:01:8b:65:6b:c6:6f:ba:ac:90: 4f:5c:c5:20:fc:80:26:94:31:d6:49:34:b7:92:71: 1d:b3:16:54:82:ce:5d:36:de:4a:8d:43:28:63:ae: 93:cb:2c:1e:a0:ab:e4:66:8d:48:3f:a0:fc:0a:66: 86:b7:20:8c:f6:14:c0:38:d3:37:fd:a9:26:16:d4: 89:05:12:fe:a4:4e:df:88:6f:3c:89:4c:9f:a1:c4: 9d:fb:bc:b6:d0:ac:df:de:42:67:77:64:c5:41:1b: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:04:28:A5:A2:50:9B:03:C5:02:D0:D9:1C:A4:57:89:9E:23:F6 X509v3 Authority Key Identifier: keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/34352e3232392e3235322e302f32322d3234203d3e20323731373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.252.0/22 Signature Algorithm: sha256WithRSAEncryption a4:1c:83:9c:99:a4:5a:3a:58:3a:b9:18:b4:b3:a8:db:6e:6d: 5b:c4:2a:79:38:84:c6:78:d8:dd:d7:b1:8e:e2:79:53:f8:e2: d6:8d:c3:3d:4a:96:cf:ec:38:48:f1:5f:ac:1a:7a:18:57:4c: 36:1b:08:10:56:56:4c:f5:c0:73:45:3c:85:f0:c9:16:07:0a: dc:62:4e:f6:53:0e:75:02:9b:ef:c0:bb:d1:57:70:e7:cb:74: 2d:48:71:d4:e0:7b:61:b9:ca:cd:d9:58:3b:38:dd:b5:0d:1a: 65:86:0b:a1:bf:e1:ed:9d:6e:1d:92:b6:3b:7a:90:f7:b8:c0: 70:e8:fa:71:e2:58:4a:e9:78:20:2f:b9:23:85:d8:55:d0:34: 85:a9:a3:f5:a4:8e:c9:4b:3d:f2:7d:63:6c:92:7e:39:1b:b7: db:f2:fb:53:d7:fa:50:31:8d:a3:99:aa:6c:df:2d:a6:2d:9c: 93:eb:e2:b5:fb:88:64:c2:1b:cc:d7:3a:36:e1:d0:38:e2:4f: 04:1b:91:e6:59:a2:cf:1c:25:23:08:8a:bd:0a:b8:79:71:f8: ca:e5:f5:16:66:1c:f1:af:c3:d9:fb:63:5e:dc:e2:b3:e8:97: 64:01:9f:16:97:ed:e7:0b:a8:5c:62:4c:0f:e7:ea:be:ab:9e: fb:22:c5:2f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYzrr442UfXPuU35HPA1YIR3fzDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGQUM4ODNGNTI5OTlBQ0Y3NThCNEUyQjk3RjIzNjQx RTBCMTE0MTAeFw0yNTEyMjMxOTMzNTFaFw0yNjEyMjIxOTM4NTFaMDMxMTAvBgNV BAMTKDExOEYwNDI4QTVBMjUwOUIwM0M1MDJEMEQ5MUNBNDU3ODk5RTIzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iKHbHbmzMFzPDUJ5DiYKxmKM sPUfzRzvMOMckpktZPOmvdMRKPg7BmyVTAiwOyDNWWD6H6s4NZJa5wSKwdqV7jom Ox0p0aXiCzX6wLzEAOn0yu5i6jUxOKThUaMlAuya9o5eLA3LxrKXFeHn+pI2hAnv vnhaVY/i6mYiCjyz8stpYGZF5AKX1FYtSmMPF6wmnUpCQE4yMbX0cgGLZWvGb7qs kE9cxSD8gCaUMdZJNLeScR2zFlSCzl023kqNQyhjrpPLLB6gq+RmjUg/oPwKZoa3 IIz2FMA40zf9qSYW1IkFEv6kTt+IbzyJTJ+hxJ37vLbQrN/eQmd3ZMVBG1ODAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUEY8EKKWiUJsDxQLQ2RykV4meI/YwHwYDVR0j BBgwFoAUxfrIg/Upmaz3WLTiuX8jZB4LEUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0hzUk5lOWdoVEZDZ0xiY3p5aEx0RENtcTF5NzZQakxzQTVoTDVGM0U3 U2svMC9DNUZBQzg4M0Y1Mjk5OUFDRjc1OEI0RTJCOTdGMjM2NDFFMEIxMTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RkFDODgzRjUyOTk5QUNG NzU4QjRFMkI5N0YyMzY0MUUwQjExNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdIc1JOZTlnaFRGQ2dMYmN6eWhMdERDbXExeTc2UGpMc0E1aEw1RjNFN1NrLzAv MzQzNTJlMzIzMjM5MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3 MzEzNzMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt5fwwDQYJKoZIhvcNAQELBQADggEBAKQcg5yZ pFo6WDq5GLSzqNtubVvEKnk4hMZ42N3XsY7ieVP44taNwz1Kls/sOEjxX6waehhX TDYbCBBWVkz1wHNFPIXwyRYHCtxiTvZTDnUCm+/Au9FXcOfLdC1IcdTge2G5ys3Z WDs43bUNGmWGC6G/4e2dbh2Stjt6kPe4wHDo+nHiWErpeCAvuSOF2FXQNIWpo/Wk jslLPfJ9Y2ySfjkbt9vy+1PX+lAxjaOZqmzfLaYtnJPr4rX7iGTCG8zXOjbh0Dji TwQbkeZZos8cJSMIir0KuHlx+Mrl9RZmHPGvw9n7Y17c4rPol2QBnxaX7ecLqFxi TA/n6r6rnvsixS8= -----END CERTIFICATE-----Generated at Mon Jan 12 04:05:32 2026 by rpki-client