This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa File: 34352e36352e3230382e302f32322d3232203d3e20323636323638.roa (raw, json) Hash identifier: U78xsBur0UnXc6jGBpEqYo2XF0rER3ak4mLIxypIfbE= Subject key identifier: 9E:79:F3:EE:EE:11:EB:F1:A9:E1:8E:6C:63:38:22:B5:F3:E8:76:74 Certificate issuer: /CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15 Certificate serial: 7ACEE5D6E9D5E9908A47E2AA57463A40EF5856CD Authority key identifier: A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer Subject info access: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa Signing time: Mon 22 Dec 2025 19:16:39 +0000 ROA not before: Mon 22 Dec 2025 19:11:39 +0000 ROA not after: Mon 21 Dec 2026 19:16:39 +0000 asID: 266268 IP address blocks: 45.65.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 15:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ce:e5:d6:e9:d5:e9:90:8a:47:e2:aa:57:46:3a:40:ef:58:56:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D736841B0638B3DFAB8971EEBB4AEEF2561F15 Validity Not Before: Dec 22 19:11:39 2025 GMT Not After : Dec 21 19:16:39 2026 GMT Subject: CN=9E79F3EEEE11EBF1A9E18E6C633822B5F3E87674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:36:0c:3e:2e:3f:87:55:6c:76:a2:37:0c: d4:18:30:3a:e2:1d:ed:73:6c:f3:56:35:ba:a6:c8: f3:f1:5b:a6:4a:6e:7e:f8:10:e1:54:99:d8:cf:ee: e1:ac:83:53:8b:a5:4b:cf:75:a7:b8:70:d6:d9:12: 00:95:2c:e6:ef:4e:4d:27:0f:29:3b:71:a7:8e:19: 44:5a:2c:70:0b:c6:b9:32:89:5e:91:ac:18:93:5c: a3:76:f1:ef:0d:f9:85:82:5d:bb:f1:be:6d:30:34: bc:fc:47:19:32:e5:eb:c0:94:48:ef:27:3c:03:fd: 77:e8:f0:71:1c:96:19:f7:99:35:7b:21:da:60:97: 68:69:b5:0e:41:e4:14:ff:d6:4e:02:97:c4:f6:85: f0:9f:6c:f2:4c:51:0a:5e:5e:08:54:89:4f:d4:0d: 17:8f:ac:43:0a:90:36:74:92:e7:8f:36:3d:66:f5: e0:74:0c:b8:63:0a:b8:8a:67:02:0a:c4:d8:f8:9c: 2f:81:54:f6:c1:92:22:ab:0f:2a:64:15:9a:93:bc: a9:b7:96:a5:92:ed:d6:da:57:19:47:60:14:7a:66: 26:1c:4e:d1:03:10:b7:05:69:d3:f5:99:39:12:91: 81:62:ae:d5:88:73:bb:54:82:d8:70:c8:07:c2:84: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:79:F3:EE:EE:11:EB:F1:A9:E1:8E:6C:63:38:22:B5:F3:E8:76:74 X509v3 Authority Key Identifier: keyid:A9:D7:36:84:1B:06:38:B3:DF:AB:89:71:EE:BB:4A:EE:F2:56:1F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9D736841B0638B3DFAB8971EEBB4AEEF2561F15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3230382e302f32322d3232203d3e20323636323638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.208.0/22 Signature Algorithm: sha256WithRSAEncryption 25:29:cc:aa:df:b2:eb:5f:88:4e:10:f1:12:5e:46:0c:02:02: ac:75:99:d3:ad:58:f3:a2:d8:e5:59:31:be:1b:99:46:92:0b: 6a:02:9e:ae:04:79:42:bd:55:35:04:15:84:66:9b:02:e6:0a: 9e:10:09:14:c1:35:99:2b:87:03:86:b6:dd:d8:5b:89:d7:0f: 08:4c:1d:e3:30:89:a6:85:30:bb:65:73:15:27:f9:2d:a9:37: 1f:aa:fb:fa:b7:a4:b2:05:0b:7b:f5:4f:31:4f:d0:ed:cf:9d: 2e:40:6e:e1:c1:27:0b:f0:a8:d1:02:dc:c2:2a:63:45:d6:47: 5d:b3:6e:25:a3:92:57:ef:ce:b0:33:95:24:7a:53:8c:b2:e0: 79:17:e5:1f:91:1f:3e:49:5f:8c:2b:1f:74:64:9f:34:55:07: d1:b1:a6:16:8a:18:67:88:a7:03:08:54:51:22:36:79:99:1f: c2:eb:b8:19:eb:80:64:5d:1a:45:99:e7:33:6b:01:ec:b4:67: 81:d8:b5:8e:19:29:ae:e2:9b:21:09:94:85:3e:f5:31:3b:eb: d0:9f:db:ee:b0:18:1f:d5:b4:fb:92:c9:71:b5:85:a3:75:6d: c1:3c:f4:f7:db:ea:d6:a3:ac:ef:07:d7:e8:35:85:4e:4c:d5: af:8e:a8:83 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUes7l1unV6ZCKR+KqV0Y6QO9YVs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENzM2ODQxQjA2MzhCM0RGQUI4OTcxRUVCQjRBRUVG MjU2MUYxNTAeFw0yNTEyMjIxOTExMzlaFw0yNjEyMjExOTE2MzlaMDMxMTAvBgNV BAMTKDlFNzlGM0VFRUUxMUVCRjFBOUUxOEU2QzYzMzgyMkI1RjNFODc2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKDYMPi4/h1VsdqI3DNQYMDri He1zbPNWNbqmyPPxW6ZKbn74EOFUmdjP7uGsg1OLpUvPdae4cNbZEgCVLObvTk0n Dyk7caeOGURaLHALxrkyiV6RrBiTXKN28e8N+YWCXbvxvm0wNLz8Rxky5evAlEjv JzwD/Xfo8HEclhn3mTV7Idpgl2hptQ5B5BT/1k4Cl8T2hfCfbPJMUQpeXghUiU/U DRePrEMKkDZ0kuePNj1m9eB0DLhjCriKZwIKxNj4nC+BVPbBkiKrDypkFZqTvKm3 lqWS7dbaVxlHYBR6ZiYcTtEDELcFadP1mTkSkYFirtWIc7tUgthwyAfChMk9AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUnnnz7u4R6/Gp4Y5sYzgitfPodnQwHwYDVR0j BBgwFoAUqdc2hBsGOLPfq4lx7rtK7vJWHxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi TXAvMC9BOUQ3MzY4NDFCMDYzOEIzREZBQjg5NzFFRUJCNEFFRUYyNTYxRjE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RDczNjg0MUIwNjM4QjNE RkFCODk3MUVFQkI0QUVFRjI1NjFGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv MzQzNTJlMzYzNTJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2 MzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLUHQMA0GCSqGSIb3DQEBCwUAA4IBAQAlKcyq37Lr X4hOEPESXkYMAgKsdZnTrVjzotjlWTG+G5lGkgtqAp6uBHlCvVU1BBWEZpsC5gqe EAkUwTWZK4cDhrbd2FuJ1w8ITB3jMImmhTC7ZXMVJ/ktqTcfqvv6t6SyBQt79U8x T9Dtz50uQG7hwScL8KjRAtzCKmNF1kdds24lo5JX786wM5UkelOMsuB5F+UfkR8+ SV+MKx90ZJ80VQfRsaYWihhniKcDCFRRIjZ5mR/C67gZ64BkXRpFmeczawHstGeB 2LWOGSmu4pshCZSFPvUxO+vQn9vusBgf1bT7kslxtYWjdW3BPPT32+rWo6zvB9fo NYVOTNWvjqiD -----END CERTIFICATE-----Generated at Tue Dec 23 18:36:20 2025 by rpki-client