This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa File: 34352e3139312e34302e302f32322d3332203d3e20323730323534.roa (raw, json) Hash identifier: Wh+8PpyFnt6Y+1Cirsm18ocijBUn9wh5IMomJldhMcs= Subject key identifier: 9D:B0:7E:EA:AD:27:B5:90:08:34:E1:46:22:D5:46:EE:1C:17:EE:95 Certificate issuer: /CN=7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240 Certificate serial: 347B8CEA659622CD184D6FEF6C7D65852EE2D353 Authority key identifier: 7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa Signing time: Wed 31 Dec 2025 13:15:10 +0000 ROA not before: Wed 31 Dec 2025 13:10:10 +0000 ROA not after: Wed 30 Dec 2026 13:15:10 +0000 asID: 270254 IP address blocks: 45.191.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 07:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7b:8c:ea:65:96:22:cd:18:4d:6f:ef:6c:7d:65:85:2e:e2:d3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240 Validity Not Before: Dec 31 13:10:10 2025 GMT Not After : Dec 30 13:15:10 2026 GMT Subject: CN=9DB07EEAAD27B5900834E14622D546EE1C17EE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:63:c9:fe:c9:38:34:e4:52:87:e3:8b:06: ee:64:70:6a:d5:66:8f:c2:50:99:f4:4e:25:58:9b: 2d:01:af:88:13:a3:54:a8:e5:08:a5:93:36:ba:08: 4d:f8:38:8a:59:e9:02:b9:4c:11:08:c4:bb:61:02: d9:41:20:43:e8:d9:ff:42:ad:68:85:6c:87:0c:5e: da:3c:3f:0c:e4:69:a6:f4:1b:11:41:1f:3c:b2:a9: 40:ee:01:60:c6:50:bc:05:50:b1:2b:88:96:32:dc: 4a:d9:fd:cb:41:91:a4:af:57:1a:72:58:25:dc:80: 4d:3f:ed:36:a1:a5:b2:b6:bb:71:d4:dc:1d:c5:bc: fc:0a:a2:ac:fb:16:46:40:aa:0b:25:0c:d9:77:d5: 5f:23:af:dc:ab:20:fb:e9:c4:0e:6a:32:a9:61:bf: 50:46:16:86:54:6b:b3:75:8b:3b:1d:37:0a:7b:f4: 1b:05:21:4e:ec:96:58:fb:b5:ac:06:56:35:18:fa: 61:12:66:38:2d:a2:74:55:18:5a:59:04:23:f7:ed: d8:76:f5:02:16:57:81:94:62:cf:1f:2e:ea:fa:92: 9e:4c:16:e3:93:1d:1e:3e:bd:50:f5:85:86:a3:85: 56:98:1c:67:0e:50:85:e6:07:8e:89:8c:60:e7:20: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:7E:EA:AD:27:B5:90:08:34:E1:46:22:D5:46:EE:1C:17:EE:95 X509v3 Authority Key Identifier: keyid:7B:04:A8:9A:0E:FB:0F:63:26:A5:EC:37:FB:B8:AF:F4:24:8B:62:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B04A89A0EFB0F6326A5EC37FBB8AFF4248B6240.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.40.0/22 Signature Algorithm: sha256WithRSAEncryption b7:1a:b2:fd:e3:71:ea:98:a6:af:e0:55:f3:35:21:bd:e7:aa: 50:26:f9:67:7b:37:10:f8:55:fd:e5:68:8a:15:92:ce:d2:91: aa:fc:a8:1e:36:ac:ad:c9:25:9e:21:fc:31:e1:f3:26:23:24: e5:e5:55:87:7f:2e:6b:c3:0e:75:90:18:46:c4:a4:c1:54:d5: ea:fe:aa:42:b1:ba:d9:fd:a9:5d:ec:c3:77:0b:21:92:51:cb: 94:2a:71:e7:76:56:6b:6e:9e:93:6f:ce:1e:41:5c:1a:8b:0f: 79:a3:92:11:70:54:bc:90:77:86:62:d7:90:97:d7:ea:d0:08: 49:10:fd:09:83:56:8c:28:76:96:85:8e:a5:f9:45:9a:c1:3f: 53:0a:5c:98:6c:ad:ea:14:8f:0c:2e:cb:31:98:27:b9:49:a2: e0:84:0d:c2:e0:a0:7a:0e:b3:11:13:73:c5:5f:72:cb:4a:16: c3:cc:4f:10:e7:bd:22:7d:ff:b6:43:c1:83:78:ef:71:62:67: 62:64:9b:e1:1e:2f:b8:20:5b:70:a9:1d:ce:2e:98:61:01:e3: 9b:58:a8:25:78:af:3b:34:d3:f9:1b:e1:44:c5:5f:b8:56:b2: 2e:aa:f7:6a:3b:97:78:ed:bb:04:25:b2:f5:2c:c8:33:8c:eb: 85:26:ea:c0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUNHuM6mWWIs0YTW/vbH1lhS7i01MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNEE4OUEwRUZCMEY2MzI2QTVFQzM3RkJCOEFGRjQy NDhCNjI0MDAeFw0yNTEyMzExMzEwMTBaFw0yNjEyMzAxMzE1MTBaMDMxMTAvBgNV BAMTKDlEQjA3RUVBQUQyN0I1OTAwODM0RTE0NjIyRDU0NkVFMUMxN0VFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtWPJ/sk4NORSh+OLBu5kcGrV Zo/CUJn0TiVYmy0Br4gTo1So5Qilkza6CE34OIpZ6QK5TBEIxLthAtlBIEPo2f9C rWiFbIcMXto8Pwzkaab0GxFBHzyyqUDuAWDGULwFULEriJYy3ErZ/ctBkaSvVxpy WCXcgE0/7TahpbK2u3HU3B3FvPwKoqz7FkZAqgslDNl31V8jr9yrIPvpxA5qMqlh v1BGFoZUa7N1izsdNwp79BsFIU7sllj7tawGVjUY+mESZjgtonRVGFpZBCP37dh2 9QIWV4GUYs8fLur6kp5MFuOTHR4+vVD1hYajhVaYHGcOUIXmB46JjGDnIKwRAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUnbB+6q0ntZAINOFGItVG7hwX7pUwHwYDVR0j BBgwFoAUewSomg77D2Mmpew3+7iv9CSLYkAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvN0IwNEE4OUEwRUZCMEY2MzI2QTVFQzM3RkJCOEFGRjQyNDhCNjI0MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QjA0QTg5QTBFRkIwRjYzMjZB NUVDMzdGQkI4QUZGNDI0OEI2MjQwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y RHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktzLzAvMzQz NTJlMzEzOTMxMmUzNDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzIz NTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCLb8oMA0GCSqGSIb3DQEBCwUAA4IBAQC3GrL943HqmKav 4FXzNSG956pQJvlnezcQ+FX95WiKFZLO0pGq/KgeNqytySWeIfwx4fMmIyTl5VWH fy5rww51kBhGxKTBVNXq/qpCsbrZ/ald7MN3CyGSUcuUKnHndlZrbp6Tb84eQVwa iw95o5IRcFS8kHeGYteQl9fq0AhJEP0Jg1aMKHaWhY6l+UWawT9TClyYbK3qFI8M LssxmCe5SaLghA3C4KB6DrMRE3PFX3LLShbDzE8Q570iff+2Q8GDeO9xYmdiZJvh Hi+4IFtwqR3OLphhAeObWKgleK87NNP5G+FExV+4VrIuqvdqO5d47bsEJbL1LMgz jOuFJurA -----END CERTIFICATE-----Generated at Thu Jan 1 09:09:39 2026 by rpki-client