This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32342d3234203d3e20323639363039.roa File: 34352e3138392e38342e302f32342d3234203d3e20323639363039.roa (raw, json) Hash identifier: GUoBBSdoX2KRAD3Blar1vVC0TnMpWwki30M5GHfjaGQ= Subject key identifier: EA:FC:68:B9:F6:82:E4:04:16:6D:EC:ED:09:93:06:AC:FD:AF:34:9E Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 1A5014164CB0B65BFD4322BDB60CCE24AFD2A343 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32342d3234203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:31 +0000 ROA not before: Fri 12 Dec 2025 15:05:31 +0000 ROA not after: Fri 11 Dec 2026 15:10:31 +0000 asID: 269609 IP address blocks: 45.189.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:50:14:16:4c:b0:b6:5b:fd:43:22:bd:b6:0c:ce:24:af:d2:a3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:31 2025 GMT Not After : Dec 11 15:10:31 2026 GMT Subject: CN=EAFC68B9F682E404166DECED099306ACFDAF349E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:a7:df:b3:23:7e:3d:a3:c0:8f:aa:21:97: be:5a:fd:cd:52:04:7e:3d:d4:a8:f5:dc:9a:07:be: 2a:88:5d:6a:a0:7c:9a:ad:a5:1c:8f:62:7f:83:39: fc:32:a3:09:66:f4:92:05:34:02:cf:93:76:14:fa: 80:11:b3:50:e7:8e:72:f4:b5:c2:8b:cd:86:01:91: ec:e7:17:81:21:27:97:7f:4c:48:12:92:e2:c3:34: c0:97:31:18:4e:13:63:06:e0:2e:32:40:98:52:55: d4:c9:29:80:d8:59:4a:24:3e:f8:df:b6:8a:fd:1e: 48:69:70:ee:59:e8:44:c9:f8:8b:72:c0:9d:c4:19: 8a:af:14:7e:ee:47:29:1b:d5:a3:04:58:44:33:18: 10:55:54:46:63:52:92:31:de:56:11:d8:65:d3:3f: 66:e5:a3:12:19:25:93:69:57:e8:6a:bf:93:b9:68: 3b:d8:29:e5:c5:92:10:51:00:4d:ee:0a:2b:c9:45: 4f:d4:1f:6a:da:68:c4:8e:9a:63:fc:59:16:f8:9d: 79:89:b2:20:f4:d4:28:16:ff:ce:0c:98:86:93:61: 80:1a:ce:c6:75:68:97:4c:ad:65:eb:e2:db:f4:fa: eb:38:30:f9:0a:82:12:ec:c8:eb:9b:de:f1:72:a8: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:68:B9:F6:82:E4:04:16:6D:EC:ED:09:93:06:AC:FD:AF:34:9E X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38342e302f32342d3234203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.84.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:01:32:eb:64:ff:d7:d7:a6:f6:d9:b7:4b:83:8a:01:bb:3c: 2b:c6:02:7e:cb:31:fe:89:46:89:d8:2e:a8:09:4a:b8:19:e0: 61:05:60:2f:06:c7:c8:8d:16:7c:c1:4e:71:8e:44:1d:12:ca: fe:ad:f1:03:a8:8b:a4:99:4a:c8:68:61:be:23:23:1d:86:d1: ad:89:48:14:43:3c:37:fe:9c:0d:72:2e:4b:d8:1b:1e:41:d0: 8a:f5:19:ce:82:79:38:10:99:de:fb:02:96:bd:d4:f7:14:2a: 38:60:fa:f6:f3:0d:54:91:9f:bf:66:50:57:f6:a0:e3:8f:64: 06:f3:69:64:71:8e:0f:54:10:d2:79:7e:48:27:32:dd:6d:fa: 63:7a:0e:ab:b6:ba:e2:97:29:24:6b:b7:bb:53:a0:7b:98:67: 32:fb:b6:10:43:0b:07:a3:72:72:15:0a:30:ad:1c:af:ed:dd: 56:7d:96:76:e9:18:5c:2d:63:7b:40:2a:d5:ca:d1:70:75:05: 27:d8:6b:3a:ea:36:b9:e9:ee:de:b6:a1:9b:0c:cf:cf:93:e9: f3:bf:d3:2f:27:cf:68:7c:df:ff:6b:b6:bb:b6:88:51:49:65: 94:4f:d3:2c:c6:a5:2f:8a:d6:5e:6a:5c:9b:0f:c9:68:73:d5: 71:8e:61:35 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUGlAUFkywtlv9QyK9tgzOJK/So0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzFaFw0yNjEyMTExNTEwMzFaMDMxMTAvBgNV BAMTKEVBRkM2OEI5RjY4MkU0MDQxNjZERUNFRDA5OTMwNkFDRkRBRjM0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuKffsyN+PaPAj6ohl75a/c1S BH491Kj13JoHviqIXWqgfJqtpRyPYn+DOfwyowlm9JIFNALPk3YU+oARs1DnjnL0 tcKLzYYBkeznF4EhJ5d/TEgSkuLDNMCXMRhOE2MG4C4yQJhSVdTJKYDYWUokPvjf tor9HkhpcO5Z6ETJ+ItywJ3EGYqvFH7uRykb1aMEWEQzGBBVVEZjUpIx3lYR2GXT P2bloxIZJZNpV+hqv5O5aDvYKeXFkhBRAE3uCivJRU/UH2raaMSOmmP8WRb4nXmJ siD01CgW/84MmIaTYYAazsZ1aJdMrWXr4tv0+us4MPkKghLsyOub3vFyqAStAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU6vxoufaC5AQWbeztCZMGrP2vNJ4wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzQzNTJlMzEzODM5MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALb1UMA0GCSqGSIb3DQEBCwUAA4IBAQANATLrZP/X 16b22bdLg4oBuzwrxgJ+yzH+iUaJ2C6oCUq4GeBhBWAvBsfIjRZ8wU5xjkQdEsr+ rfEDqIukmUrIaGG+IyMdhtGtiUgUQzw3/pwNci5L2BseQdCK9RnOgnk4EJne+wKW vdT3FCo4YPr28w1UkZ+/ZlBX9qDjj2QG82lkcY4PVBDSeX5IJzLdbfpjeg6rtrri lykka7e7U6B7mGcy+7YQQwsHo3JyFQowrRyv7d1WfZZ26RhcLWN7QCrVytFwdQUn 2Gs66ja56e7etqGbDM/Pk+nzv9MvJ89ofN//a7a7tohRSWWUT9MsxqUvitZealyb D8loc9VxjmE1 -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:48 2025 by rpki-client