This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38372e302f32342d3234203d3e20323639363039.roa File: 34352e3138392e38372e302f32342d3234203d3e20323639363039.roa (raw, json) Hash identifier: h8CVzhbbnAgJofLZ04PqSEhuWd/avSFMdOe4x8e0LGs= Subject key identifier: AD:BB:72:83:57:FE:DC:19:D1:63:AB:63:09:9D:5A:0E:A6:1D:DE:2D Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 21185EA742209ECD65044881D6E4168FD92209E4 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38372e302f32342d3234203d3e20323639363039.roa Signing time: Fri 12 Dec 2025 15:10:28 +0000 ROA not before: Fri 12 Dec 2025 15:05:28 +0000 ROA not after: Fri 11 Dec 2026 15:10:28 +0000 asID: 269609 IP address blocks: 45.189.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:18:5e:a7:42:20:9e:cd:65:04:48:81:d6:e4:16:8f:d9:22:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Dec 12 15:05:28 2025 GMT Not After : Dec 11 15:10:28 2026 GMT Subject: CN=ADBB728357FEDC19D163AB63099D5A0EA61DDE2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:1d:ec:23:36:f3:b0:30:36:40:10:42:ea: f4:ac:18:33:d7:9d:2d:d9:37:9d:21:d3:a1:61:fd: 38:c7:e3:0d:88:62:d9:70:23:d4:fc:88:1e:3f:93: 8c:d3:a2:4b:ae:40:2d:c8:48:d6:61:55:be:9e:4e: 52:b9:cc:8f:2f:d0:b6:a8:2d:93:df:ed:16:66:68: eb:e9:6e:2c:4d:78:0f:d2:5f:c5:a3:19:f3:a5:56: c8:f6:cf:88:4d:bb:e8:92:34:bf:99:73:95:83:02: 32:ba:76:04:0d:5b:e7:0c:60:cd:8a:04:71:ca:d7: db:79:30:70:a5:59:8b:6d:fb:48:91:81:47:3b:12: c0:e5:7d:68:b2:95:5d:e3:d0:51:d4:51:55:1a:6c: 51:97:4b:50:12:56:e5:46:b7:99:a3:95:16:b3:08: 39:b4:9b:0f:0c:d0:15:5e:1f:55:fb:42:d6:76:4b: 8e:bb:c0:1a:a4:ed:45:32:8f:b2:67:a0:c6:0d:d4: 94:29:01:4c:7e:e3:85:b6:c4:62:4f:0f:66:8f:78: 95:40:32:9f:c7:bc:4f:fb:c3:53:4e:f8:27:98:5b: 79:67:c0:7c:d2:d0:ef:57:6f:40:51:d2:ca:31:a9: cf:bc:4b:6d:b4:ce:f8:62:96:21:8f:82:04:37:16: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:72:83:57:FE:DC:19:D1:63:AB:63:09:9D:5A:0E:A6:1D:DE:2D X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/34352e3138392e38372e302f32342d3234203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.87.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:d7:a2:e2:af:b2:f6:c7:49:4d:ec:fd:05:bf:b8:21:b6:0c: 14:f3:e9:7c:d9:a1:d5:9f:26:9f:e7:5b:96:36:ce:e1:2d:93: e2:79:e3:b0:d4:03:59:ec:dc:e0:00:ab:5b:15:2e:5d:94:d7: 39:3b:fe:a0:18:e7:6d:ce:72:d5:5a:64:ec:db:21:29:36:46: bc:42:36:a5:69:8f:f6:9a:0e:27:1c:98:c0:8c:d6:4e:60:71: 27:2c:1c:7c:76:bb:7c:e1:d8:09:d7:24:f7:0c:b4:2b:64:04: a8:5f:da:38:e4:98:c6:f1:8d:bb:d4:32:b2:4b:41:17:c7:01: d4:0f:37:58:6d:3a:62:5a:85:be:66:ed:3a:3e:06:5f:a8:d8: 2a:42:5a:d1:8c:d1:7f:35:84:2b:e0:a5:bd:f6:fd:2e:59:2f: 8e:8c:f0:3f:c9:6b:20:78:f5:58:fb:2c:d3:33:b4:29:bc:0e: 1a:71:42:70:9c:0b:9a:0d:ad:49:18:fd:af:2b:a5:22:46:bb: e2:b9:7c:66:a7:7b:8c:59:1f:e8:96:94:ad:3f:d2:5c:35:73: 4d:c6:8b:95:8a:9e:84:51:ed:95:48:27:04:79:a4:93:ad:d2: b0:f6:11:71:3d:f3:33:92:83:5f:12:98:8a:23:f9:e7:c4:bb: cb:71:28:da -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUIRhep0Igns1lBEiB1uQWj9kiCeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNTEyMTIxNTA1MjhaFw0yNjEyMTExNTEwMjhaMDMxMTAvBgNV BAMTKEFEQkI3MjgzNTdGRURDMTlEMTYzQUI2MzA5OUQ1QTBFQTYxRERFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eh3sIzbzsDA2QBBC6vSsGDPX nS3ZN50h06Fh/TjH4w2IYtlwI9T8iB4/k4zTokuuQC3ISNZhVb6eTlK5zI8v0Lao LZPf7RZmaOvpbixNeA/SX8WjGfOlVsj2z4hNu+iSNL+Zc5WDAjK6dgQNW+cMYM2K BHHK19t5MHClWYtt+0iRgUc7EsDlfWiylV3j0FHUUVUabFGXS1ASVuVGt5mjlRaz CDm0mw8M0BVeH1X7QtZ2S467wBqk7UUyj7JnoMYN1JQpAUx+44W2xGJPD2aPeJVA Mp/HvE/7w1NO+CeYW3lnwHzS0O9Xb0BR0soxqc+8S220zvhiliGPggQ3Fp77AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUrbtyg1f+3BnRY6tjCZ1aDqYd3i0wHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzQzNTJlMzEzODM5MmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5 MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALb1XMA0GCSqGSIb3DQEBCwUAA4IBAQA916Lir7L2 x0lN7P0Fv7ghtgwU8+l82aHVnyaf51uWNs7hLZPieeOw1ANZ7NzgAKtbFS5dlNc5 O/6gGOdtznLVWmTs2yEpNka8QjalaY/2mg4nHJjAjNZOYHEnLBx8drt84dgJ1yT3 DLQrZASoX9o45JjG8Y271DKyS0EXxwHUDzdYbTpiWoW+Zu06PgZfqNgqQlrRjNF/ NYQr4KW99v0uWS+OjPA/yWsgePVY+yzTM7QpvA4acUJwnAuaDa1JGP2vK6UiRrvi uXxmp3uMWR/olpStP9JcNXNNxouVip6EUe2VSCcEeaSTrdKw9hFxPfMzkoNfEpiK I/nnxLvLcSja -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:42 2025 by rpki-client