This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38352e302f32342d3234203d3e20323639363039.roa File: 34352e3138392e38352e302f32342d3234203d3e20323639363039.roa (raw, json) Hash identifier: +5RGMqylqh7QBD38OAeEFpAAzkRsyde500oaiqvDNo4= Subject key identifier: 88:2D:34:A5:23:A4:72:AA:52:9A:34:94:26:3A:47:B3:69:95:28:B2 Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 5EAA43FDA95D66AD045C071CE875F576C0B9D751 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38352e302f32342d3234203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:30 +0000 ROA not before: Fri 12 Dec 2025 15:05:30 +0000 ROA not after: Fri 11 Dec 2026 15:10:30 +0000 asID: 269609 IP address blocks: 45.189.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:aa:43:fd:a9:5d:66:ad:04:5c:07:1c:e8:75:f5:76:c0:b9:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:30 2025 GMT Not After : Dec 11 15:10:30 2026 GMT Subject: CN=882D34A523A472AA529A3494263A47B3699528B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:1a:ff:47:de:fd:db:ba:0b:3c:dc:36:bf: 8a:56:01:0c:01:79:09:70:6c:f8:76:aa:95:fe:1e: 6d:73:18:d6:1e:78:52:78:1e:c1:dd:c0:2f:0d:66: dc:3d:be:29:e8:47:da:83:77:14:fa:8d:4f:48:2f: 16:a7:63:e3:99:9d:f8:8f:91:45:d5:fb:7a:8c:c5: 33:a1:c6:d5:7b:bf:1e:e9:f5:03:36:d1:05:6e:d8: 05:b1:fd:a6:02:47:a1:c1:7f:a1:8f:be:c1:61:fd: 89:7c:c0:67:b9:6b:ae:46:7f:46:b9:d6:eb:7a:04: 8f:f3:4f:65:0d:98:84:37:94:7e:f9:d3:85:26:10: 72:16:59:78:6e:d8:b3:19:a5:02:85:52:7c:73:4d: ca:91:12:7b:8e:d7:8b:01:d1:6f:3d:42:26:e7:45: a8:2f:0b:5f:da:9e:07:a8:89:dc:36:f1:6a:b7:37: 9c:7e:b8:73:a6:29:f3:a7:82:0d:ef:a9:cb:17:20: 4c:40:f5:c7:68:2d:93:51:91:f1:a6:45:3e:bc:e0: 7e:0b:40:f1:ac:f9:e2:88:37:aa:2d:e3:da:23:c1: 5e:d7:dd:05:72:b4:31:bc:54:d0:c2:7d:ce:00:7e: be:04:11:7d:38:4e:f9:95:8e:1d:7d:ac:10:cb:ee: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:34:A5:23:A4:72:AA:52:9A:34:94:26:3A:47:B3:69:95:28:B2 X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38352e302f32342d3234203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.85.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:b1:91:c0:ef:ef:a3:db:78:4c:d4:eb:03:98:12:d4:6d:63: 9e:db:ee:b8:b7:54:35:21:db:ba:13:88:41:00:36:89:1b:66: b4:fa:2d:b9:00:0c:70:7c:0b:92:12:44:87:27:40:ae:3a:0e: 35:ac:3b:13:b1:49:3a:83:28:26:7f:fc:68:56:72:db:47:a2: 18:f0:ef:b9:58:c2:4b:a6:cb:2a:aa:1a:ed:19:8e:5e:2f:d9: b6:0d:5b:a2:df:cf:01:01:05:93:d3:0b:8b:44:d3:74:58:c6: 61:b7:6d:fa:a5:22:17:d8:92:8b:e6:4f:59:1f:6f:6c:fa:1d: 96:d2:9e:74:d6:df:5f:1c:81:af:b5:32:7d:67:68:91:c1:cd: b0:bd:f0:37:66:19:eb:d7:58:15:a3:a6:07:b5:83:eb:79:29: 7a:2d:99:00:9c:0c:29:a3:8c:a4:f5:37:42:97:c9:3a:02:fe: 91:0e:60:e5:34:fa:24:11:7d:88:55:09:1d:08:dd:0d:25:33: 67:f1:c5:6e:b1:a0:eb:64:02:d8:28:ad:62:d9:bb:a5:72:ec: f9:07:c4:73:29:f6:00:4d:91:f4:1f:5d:85:93:1a:71:bc:36: 08:53:d1:09:4b:30:1c:99:55:a1:6c:3d:e5:91:3c:d8:0d:24: 17:13:7d:af -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXqpD/aldZq0EXAcc6HX1dsC511EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzBaFw0yNjEyMTExNTEwMzBaMDMxMTAvBgNV BAMTKDg4MkQzNEE1MjNBNDcyQUE1MjlBMzQ5NDI2M0E0N0IzNjk5NTI4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSERr/R97927oLPNw2v4pWAQwB eQlwbPh2qpX+Hm1zGNYeeFJ4HsHdwC8NZtw9vinoR9qDdxT6jU9ILxanY+OZnfiP kUXV+3qMxTOhxtV7vx7p9QM20QVu2AWx/aYCR6HBf6GPvsFh/Yl8wGe5a65Gf0a5 1ut6BI/zT2UNmIQ3lH7504UmEHIWWXhu2LMZpQKFUnxzTcqREnuO14sB0W89Qibn RagvC1/angeoidw28Wq3N5x+uHOmKfOngg3vqcsXIExA9cdoLZNRkfGmRT684H4L QPGs+eKIN6ot49ojwV7X3QVytDG8VNDCfc4Afr4EEX04TvmVjh19rBDL7qCdAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUiC00pSOkcqpSmjSUJjpHs2mVKLIwHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzQzNTJlMzEzODM5MmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALb1VMA0GCSqGSIb3DQEBCwUAA4IBAQBasZHA7++j 23hM1OsDmBLUbWOe2+64t1Q1Idu6E4hBADaJG2a0+i25AAxwfAuSEkSHJ0CuOg41 rDsTsUk6gygmf/xoVnLbR6IY8O+5WMJLpssqqhrtGY5eL9m2DVui388BAQWT0wuL RNN0WMZht236pSIX2JKL5k9ZH29s+h2W0p501t9fHIGvtTJ9Z2iRwc2wvfA3Zhnr 11gVo6YHtYPreSl6LZkAnAwpo4yk9TdCl8k6Av6RDmDlNPokEX2IVQkdCN0NJTNn 8cVusaDrZALYKK1i2bulcuz5B8RzKfYATZH0H12FkxpxvDYIU9EJSzAcmVWhbD3l kTzYDSQXE32v -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:46 2025 by rpki-client