$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa File: 34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa (raw, json) Hash identifier: nGoUxy3Z/MpvqrXwnPLSoXN9QWdPvQGTMWdzwQBA2AE= Subject key identifier: 97:D2:EA:E2:FD:5D:D8:3B:DC:D7:63:83:DE:DE:D9:71:95:FD:D8:F0 Certificate issuer: /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Certificate serial: 74960F32C4F48AAB2BA82D3B2C961700D7090A3E Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa Signing time: Wed 24 Sep 2025 14:46:42 +0000 ROA not before: Wed 24 Sep 2025 14:41:42 +0000 ROA not after: Wed 23 Sep 2026 14:46:42 +0000 asID: 198949 IP address blocks: 45.234.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 18:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:96:0f:32:c4:f4:8a:ab:2b:a8:2d:3b:2c:96:17:00:d7:09:0a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Validity Not Before: Sep 24 14:41:42 2025 GMT Not After : Sep 23 14:46:42 2026 GMT Subject: CN=97D2EAE2FD5DD83BDCD76383DEDED97195FDD8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:b6:1f:9b:fc:49:19:f9:a4:4c:a0:da:1e: dc:5f:44:b2:b1:ad:69:d6:f2:bc:cf:95:1e:cb:d4: fe:40:45:d4:85:a2:de:9a:12:b3:67:33:aa:21:c2: 9f:e5:29:96:65:32:81:81:15:36:c6:92:8d:ce:97: f6:c1:ac:a6:45:f3:90:75:e3:80:57:8c:bd:2e:1e: de:94:83:1c:f6:be:2d:96:92:ca:69:e3:98:d9:8d: d4:e2:4b:a9:60:ba:28:5e:8c:2a:50:f7:4b:e3:ad: 92:ee:f7:bf:fa:60:4e:3a:7a:ac:77:8b:12:c8:70: 76:53:04:40:09:bd:65:ff:d9:e6:8b:0f:4d:52:3b: 72:ba:69:c3:f5:54:1b:44:84:0d:d7:8d:9a:7b:49: a2:ba:9a:86:56:5c:69:20:a4:88:da:9e:d5:92:01: b4:d2:8f:05:c7:98:64:51:9b:f0:75:d9:94:07:e8: 8d:56:b5:f8:78:1b:27:f4:60:3e:7e:4d:21:4c:31: bd:d1:f4:29:94:bd:16:f3:17:12:c8:24:6b:f2:af: ff:6f:04:65:47:c6:5a:68:b7:10:3d:5b:39:d3:8f: 2d:df:43:92:86:6e:84:23:2d:42:1a:01:a0:1b:c4: 2a:23:db:11:d2:38:c0:33:43:5d:30:be:96:3c:70: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D2:EA:E2:FD:5D:D8:3B:DC:D7:63:83:DE:DE:D9:71:95:FD:D8:F0 X509v3 Authority Key Identifier: keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.140.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:e0:95:6d:db:77:ac:92:c9:e6:c7:9f:cb:f4:ec:88:f2:92: f2:0c:4a:92:f0:5e:a1:8e:5c:75:a5:52:95:f6:27:cc:fc:a4: 61:b7:d8:58:91:90:29:86:ff:51:4d:d4:18:87:4a:ec:0e:95: cd:4e:6c:93:d4:4a:6c:fb:76:33:d1:21:f4:bc:de:8e:d2:98: c3:51:1d:f1:1a:3e:fc:b7:8e:6a:e1:de:c8:3c:36:b2:f5:e1: 97:d5:a9:ad:d5:da:81:ad:b3:de:22:a1:7f:d8:52:0e:21:64: 5d:e5:79:10:60:42:e9:60:08:14:b2:74:0b:b7:75:68:93:81: 68:7f:5d:3d:87:8f:46:90:4e:f5:90:2a:85:2c:e0:5f:af:4c: 23:61:02:a5:32:31:2a:e8:a7:6d:e1:a9:40:c1:f7:2d:b7:58: 49:ee:cc:fc:75:40:19:a5:72:94:b6:20:7c:e8:93:c0:81:52: 6f:6c:51:f4:38:9a:ee:8a:e5:66:d4:2a:43:96:ef:a5:28:1d: a3:79:f9:27:0a:f3:fe:b0:fa:f6:22:3b:72:01:17:2d:fd:e5: 8e:c5:cc:8d:bd:bb:e5:5f:35:f0:0f:16:50:6c:c1:3e:65:ce: 51:8a:89:c1:61:32:f5:3e:1a:3b:79:e6:bd:7f:89:7e:f4:dd: 40:ac:f1:e4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUdJYPMsT0iqsrqC07LJYXANcJCj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ5QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZD QUNGODhEOTAeFw0yNTA5MjQxNDQxNDJaFw0yNjA5MjMxNDQ2NDJaMDMxMTAvBgNV BAMTKDk3RDJFQUUyRkQ1REQ4M0JEQ0Q3NjM4M0RFREVEOTcxOTVGREQ4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfh7Yfm/xJGfmkTKDaHtxfRLKx rWnW8rzPlR7L1P5ARdSFot6aErNnM6ohwp/lKZZlMoGBFTbGko3Ol/bBrKZF85B1 44BXjL0uHt6Ugxz2vi2Wkspp45jZjdTiS6lguihejCpQ90vjrZLu97/6YE46eqx3 ixLIcHZTBEAJvWX/2eaLD01SO3K6acP1VBtEhA3XjZp7SaK6moZWXGkgpIjantWS AbTSjwXHmGRRm/B12ZQH6I1Wtfh4Gyf0YD5+TSFMMb3R9CmUvRbzFxLIJGvyr/9v BGVHxlpotxA9WznTjy3fQ5KGboQjLUIaAaAbxCoj2xHSOMAzQ10wvpY8cLJxAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUl9Lq4v1d2Dvc12OD3t7ZcZX92PAwHwYDVR0j BBgwFoAUNJvcml0tFpwT9ZKTQfjphsrPiNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRY cHovMC8zNDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OUJEQzlBNUQyRDE2OUMx M0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJYa1dGSkd5WkZWYjM0RmhhZ1NYZ2NDTFFDcFgyeU1aa1JzNWlXelpUWHB6LzAv MzQzNTJlMzIzMzM0MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM5 MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt6owwDQYJKoZIhvcNAQELBQADggEBAD/glW3b d6ySyebHn8v07IjykvIMSpLwXqGOXHWlUpX2J8z8pGG32FiRkCmG/1FN1BiHSuwO lc1ObJPUSmz7djPRIfS83o7SmMNRHfEaPvy3jmrh3sg8NrL14ZfVqa3V2oGts94i oX/YUg4hZF3leRBgQulgCBSydAu3dWiTgWh/XT2Hj0aQTvWQKoUs4F+vTCNhAqUy MSrop23hqUDB9y23WEnuzPx1QBmlcpS2IHzok8CBUm9sUfQ4mu6K5WbUKkOW76Uo HaN5+ScK8/6w+vYiO3IBFy395Y7FzI29u+VfNfAPFlBswT5lzlGKicFhMvU+Gjt5 5r1/iX703UCs8eQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:42 2025 by rpki-client