This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32332d3233203d3e20323639363039.roa File: 34352e3138392e38342e302f32332d3233203d3e20323639363039.roa (raw, json) Hash identifier: UuV3WmyZZRHMziVxKBlYq0V9Driu4vY2f2tJEydDpdU= Subject key identifier: B6:5E:3D:B7:A2:40:72:2F:5C:AC:97:70:A9:6C:6F:0A:5F:3D:AD:11 Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 7B60B95A751DACC0C3D8388FB60D485C48A0D14F Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32332d3233203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:28 +0000 ROA not before: Fri 12 Dec 2025 15:05:28 +0000 ROA not after: Fri 11 Dec 2026 15:10:28 +0000 asID: 269609 IP address blocks: 45.189.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:60:b9:5a:75:1d:ac:c0:c3:d8:38:8f:b6:0d:48:5c:48:a0:d1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:28 2025 GMT Not After : Dec 11 15:10:28 2026 GMT Subject: CN=B65E3DB7A240722F5CAC9770A96C6F0A5F3DAD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:c8:c5:f2:61:3d:f0:5d:28:a8:82:83:87: a7:a2:56:34:1b:8e:8d:f6:d1:2c:3e:38:20:4d:4c: 9f:88:aa:f3:62:e9:b2:c8:41:9a:79:d0:24:26:f9: 15:af:88:74:0e:90:8f:84:22:81:78:3c:36:75:32: a2:54:6f:e8:32:56:17:e8:de:2a:a2:5b:6e:27:0e: 27:dd:ba:d6:21:ac:a9:77:4a:09:27:60:cb:77:a6: ea:7b:be:ed:5d:11:68:91:91:d4:b9:09:05:79:08: 36:d4:d8:91:ac:18:87:0b:44:e1:49:ac:0a:bf:ee: 5c:5a:3b:fb:bd:5d:2d:a0:72:10:50:87:e1:87:b1: 78:08:9c:38:35:85:ad:f8:14:3d:12:92:af:83:29: 9a:36:1e:57:44:fb:66:23:98:5f:3b:71:ae:95:f1: 53:14:f0:62:4b:38:b0:6f:8c:7e:67:36:5c:3f:58: 42:7b:e6:e1:f8:10:c8:72:c7:38:9f:5b:5b:c3:62: 14:8d:7c:01:03:2f:6d:8b:35:4e:e5:bf:f1:23:18: 49:c3:db:a4:81:f7:77:08:fa:d7:6f:43:78:db:58: 28:c7:3d:24:e4:a9:d8:8e:6c:31:36:06:b4:cb:9b: 93:b4:2e:b8:2a:95:33:8b:ee:6c:67:f8:d7:67:92: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5E:3D:B7:A2:40:72:2F:5C:AC:97:70:A9:6C:6F:0A:5F:3D:AD:11 X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32332d3233203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.84.0/23 Signature Algorithm: sha256WithRSAEncryption 52:10:97:d5:55:7a:e2:78:c3:0a:e3:c5:14:32:31:8d:71:25: d5:27:c4:c7:37:5e:94:d3:82:6b:36:50:04:c9:72:98:3b:bb: f4:76:43:1a:1b:28:d7:50:b3:e1:48:0f:c0:cf:d7:8a:2b:eb: 40:30:81:31:73:0d:68:b7:0e:2f:c8:0f:21:da:a7:01:37:66: 41:66:ff:33:59:50:c1:45:82:a9:aa:58:a2:10:c6:f9:25:98: 59:8d:22:29:24:6a:d0:4c:61:99:ef:a0:3a:72:e6:c2:87:79: 52:0c:b7:30:c3:d9:c3:d7:7b:4f:71:59:4f:1a:8f:2e:cc:f2: eb:ec:09:39:0b:c5:14:63:4e:22:a8:f7:26:5b:a4:95:be:62: 68:0c:6b:c6:36:dd:50:bf:c3:1e:a9:be:0f:eb:64:da:a0:0c: db:2a:71:55:16:76:f2:66:0c:b8:46:d4:1f:d5:36:fa:02:15: 88:ce:80:86:77:c2:95:f4:d8:ec:8f:2b:b2:df:7c:12:82:e1: 64:67:69:d0:f1:2f:62:56:4d:96:f1:59:48:00:ae:f1:c8:ae: 7c:3a:47:71:d5:19:da:2f:a9:da:c3:8f:6f:cb:72:c3:cf:64: fd:2a:9a:dd:08:9b:2d:42:fb:1e:b8:a0:b0:bf:cf:a0:0e:1e: 5c:9b:6e:61 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUe2C5WnUdrMDD2DiPtg1IXEig0U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MjhaFw0yNjEyMTExNTEwMjhaMDMxMTAvBgNV BAMTKEI2NUUzREI3QTI0MDcyMkY1Q0FDOTc3MEE5NkM2RjBBNUYzREFEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TcjF8mE98F0oqIKDh6eiVjQb jo320Sw+OCBNTJ+IqvNi6bLIQZp50CQm+RWviHQOkI+EIoF4PDZ1MqJUb+gyVhfo 3iqiW24nDifdutYhrKl3SgknYMt3pup7vu1dEWiRkdS5CQV5CDbU2JGsGIcLROFJ rAq/7lxaO/u9XS2gchBQh+GHsXgInDg1ha34FD0Skq+DKZo2HldE+2YjmF87ca6V 8VMU8GJLOLBvjH5nNlw/WEJ75uH4EMhyxzifW1vDYhSNfAEDL22LNU7lv/EjGEnD 26SB93cI+tdvQ3jbWCjHPSTkqdiObDE2BrTLm5O0LrgqlTOL7mxn+Ndnkp5zAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUtl49t6JAci9crJdwqWxvCl89rREwHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzQzNTJlMzEzODM5MmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBLb1UMA0GCSqGSIb3DQEBCwUAA4IBAQBSEJfVVXri eMMK48UUMjGNcSXVJ8THN16U04JrNlAEyXKYO7v0dkMaGyjXULPhSA/Az9eKK+tA MIExcw1otw4vyA8h2qcBN2ZBZv8zWVDBRYKpqliiEMb5JZhZjSIpJGrQTGGZ76A6 cubCh3lSDLcww9nD13tPcVlPGo8uzPLr7Ak5C8UUY04iqPcmW6SVvmJoDGvGNt1Q v8Meqb4P62TaoAzbKnFVFnbyZgy4RtQf1Tb6AhWIzoCGd8KV9Njsjyuy33wSguFk Z2nQ8S9iVk2W8VlIAK7xyK58Okdx1RnaL6naw49vy3LDz2T9KprdCJstQvseuKCw v8+gDh5cm25h -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:30 2025 by rpki-client