This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38362e302f32342d3234203d3e20323639363039.roa File: 34352e3138392e38362e302f32342d3234203d3e20323639363039.roa (raw, json) Hash identifier: aqYPVwHaN0Ek6Xv4pt4SPeM9bMkKJnGm0jcx8fb+qM4= Subject key identifier: 87:66:DA:4E:4B:CB:6D:F1:A5:F0:41:F4:B4:B4:05:C0:B0:D2:0C:3D Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 124EAE27E73857E0D3ACDAADB9465DCC3328566B Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38362e302f32342d3234203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:31 +0000 ROA not before: Fri 12 Dec 2025 15:05:31 +0000 ROA not after: Fri 11 Dec 2026 15:10:31 +0000 asID: 269609 IP address blocks: 45.189.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4e:ae:27:e7:38:57:e0:d3:ac:da:ad:b9:46:5d:cc:33:28:56:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:31 2025 GMT Not After : Dec 11 15:10:31 2026 GMT Subject: CN=8766DA4E4BCB6DF1A5F041F4B4B405C0B0D20C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:ac:71:40:58:e1:20:03:b2:81:ea:9b:f5: f4:10:b4:77:f8:3a:26:dc:11:a2:0b:df:5b:4a:55: 89:b2:ee:38:6e:ba:fd:c2:25:38:49:e3:d2:49:71: 58:cb:2d:51:51:79:ac:ae:3d:d5:44:2d:15:ce:8a: 15:9f:5b:53:6a:aa:f0:af:1c:75:95:81:00:79:be: 0e:d9:d0:f8:fd:6e:79:dd:af:6c:85:14:4c:da:b8: 8c:08:9a:1f:83:4d:1f:6a:d4:cd:cf:7e:7d:6f:bd: 1d:83:fb:a4:ae:13:80:62:7c:67:c2:e1:1a:bb:ad: 9b:71:03:ee:1b:8a:fb:cb:41:fc:e3:36:fe:59:06: 15:90:96:14:d5:cc:1b:06:9c:71:ae:87:ec:0c:0c: af:b8:b3:d9:48:33:fc:d3:f6:0b:80:a9:e7:0c:b5: 27:77:fa:12:79:38:a4:65:a0:a3:7b:52:3b:9f:45: 6c:1f:ea:3d:67:81:9f:ce:34:fd:35:01:e8:41:40: 78:5f:b0:7b:0c:04:da:62:4a:1b:9d:14:3d:a3:e0: 28:2b:9c:1d:23:3f:c5:53:dd:4e:80:ab:46:32:34: 3a:73:03:72:87:4d:1d:22:ac:5c:71:ae:94:12:f3: 3d:b8:50:2f:02:01:79:9d:86:da:d9:ce:95:cd:e8: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:66:DA:4E:4B:CB:6D:F1:A5:F0:41:F4:B4:B4:05:C0:B0:D2:0C:3D X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38362e302f32342d3234203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.86.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:9d:06:fc:61:3a:5f:e3:aa:87:cf:dc:b6:a8:52:e7:fe:8f: 43:d4:ec:7e:d7:cc:bc:86:04:20:87:37:b8:3f:6c:0f:7f:c4: 57:c8:8f:c4:78:83:81:52:9b:3d:4c:fd:ea:c1:b2:a7:6a:c5: 9a:6c:72:e5:80:1d:af:e6:0a:a4:65:ca:9e:00:0a:f6:68:7a: cd:d5:0b:20:d7:a7:99:d3:72:a4:0c:cb:0b:e4:2d:bd:49:87: e2:25:12:1c:b9:40:a2:a7:c1:b7:fc:56:45:63:85:3a:e6:ae: 9c:8e:38:f7:7b:e7:6f:5b:d5:23:92:c2:61:c8:e4:e2:d7:76: d3:d9:fb:72:3d:8e:7c:85:62:96:f8:ee:d6:6c:07:ae:d2:28: cd:14:e5:a8:71:4e:25:29:be:0e:3f:b0:64:89:74:4b:b6:c9: 0d:de:72:58:2b:f1:ff:68:66:84:af:f3:28:71:32:9c:41:6b: c5:b7:96:e7:7e:69:08:23:52:4b:96:4b:b9:d6:ab:1e:f6:28: 68:d7:dc:bc:1e:8d:cf:ba:bb:3b:8f:09:ad:ff:f6:1c:97:e2: 28:60:62:7a:33:48:8c:b5:0e:12:ae:17:2b:18:9a:76:10:fa: ba:a2:85:b9:bf:ea:b1:58:38:0f:02:3f:6d:26:df:23:eb:06: 3c:b7:90:a2 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUEk6uJ+c4V+DTrNqtuUZdzDMoVmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MzFaFw0yNjEyMTExNTEwMzFaMDMxMTAvBgNV BAMTKDg3NjZEQTRFNEJDQjZERjFBNUYwNDFGNEI0QjQwNUMwQjBEMjBDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1KxxQFjhIAOygeqb9fQQtHf4 OibcEaIL31tKVYmy7jhuuv3CJThJ49JJcVjLLVFReayuPdVELRXOihWfW1NqqvCv HHWVgQB5vg7Z0Pj9bnndr2yFFEzauIwImh+DTR9q1M3Pfn1vvR2D+6SuE4BifGfC 4Rq7rZtxA+4bivvLQfzjNv5ZBhWQlhTVzBsGnHGuh+wMDK+4s9lIM/zT9guAqecM tSd3+hJ5OKRloKN7UjufRWwf6j1ngZ/ONP01AehBQHhfsHsMBNpiShudFD2j4Cgr nB0jP8VT3U6Aq0YyNDpzA3KHTR0irFxxrpQS8z24UC8CAXmdhtrZzpXN6NnxAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUh2baTkvLbfGl8EH0tLQFwLDSDD0wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzQzNTJlMzEzODM5MmUzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALb1WMA0GCSqGSIb3DQEBCwUAA4IBAQBdnQb8YTpf 46qHz9y2qFLn/o9D1Ox+18y8hgQghze4P2wPf8RXyI/EeIOBUps9TP3qwbKnasWa bHLlgB2v5gqkZcqeAAr2aHrN1Qsg16eZ03KkDMsL5C29SYfiJRIcuUCip8G3/FZF Y4U65q6cjjj3e+dvW9UjksJhyOTi13bT2ftyPY58hWKW+O7WbAeu0ijNFOWocU4l Kb4OP7BkiXRLtskN3nJYK/H/aGaEr/MocTKcQWvFt5bnfmkII1JLlku51qse9iho 19y8Ho3Purs7jwmt//Ycl+IoYGJ6M0iMtQ4SrhcrGJp2EPq6ooW5v+qxWDgPAj9t Jt8j6wY8t5Ci -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:38 2025 by rpki-client