$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa File: 34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa (raw, json) Hash identifier: w1a2LCC4hQc0RPNVmKfvItCl8GgNaYXtVfSCDlKVpSI= Subject key identifier: CB:C0:F2:9E:AD:B6:05:79:16:45:93:82:58:7E:90:33:40:19:36:3A Certificate issuer: /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Certificate serial: 11961FBE17CA092E87CF08EF0277151DA07A599D Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa Signing time: Wed 24 Sep 2025 14:46:18 +0000 ROA not before: Wed 24 Sep 2025 14:41:18 +0000 ROA not after: Wed 23 Sep 2026 14:46:18 +0000 asID: 267382 IP address blocks: 45.234.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:96:1f:be:17:ca:09:2e:87:cf:08:ef:02:77:15:1d:a0:7a:59:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Validity Not Before: Sep 24 14:41:18 2025 GMT Not After : Sep 23 14:46:18 2026 GMT Subject: CN=CBC0F29EADB6057916459382587E90334019363A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:3f:44:8f:9d:40:68:c2:dc:27:33:ff:84: db:9c:f2:b6:75:09:04:46:c1:cc:a1:66:61:13:64: 55:93:f1:ce:f2:f2:0f:89:61:f2:67:ee:7f:eb:82: 77:a1:f9:ad:c2:a9:cc:f1:26:ed:b5:4e:6d:aa:c1: 42:1e:18:0c:bd:63:81:7c:2f:6f:0c:2d:a1:00:6f: 54:c5:e3:25:7e:60:91:95:a7:f0:20:a2:c3:49:b5: e7:f0:e5:1d:b9:e5:6f:14:90:83:6b:18:5c:1d:6e: 05:2b:09:59:fb:fb:fc:69:e7:71:63:c0:e0:fb:ed: ae:47:63:e2:ed:58:9b:2f:64:00:84:56:25:98:52: 3b:9e:23:1e:73:aa:8e:fc:07:e5:bb:10:b5:16:91: a5:14:e5:49:37:33:60:bf:95:45:79:58:9f:62:ab: d9:36:9e:a0:f2:99:26:d9:d4:b2:72:f2:e7:e7:f5: 45:4f:4f:f4:9a:9e:00:22:da:ba:ae:b8:7f:37:7d: c6:04:a3:83:f3:55:3a:ea:67:fd:b6:dd:e4:bc:6d: 71:68:ba:b6:5c:68:39:6f:61:94:77:7b:a2:5f:d0: 61:fb:3a:d3:f7:f1:2e:88:d1:cf:be:6a:ef:8f:41: 6f:8c:9c:48:8d:8f:d2:34:e7:c5:b0:c3:7a:88:94: 3f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C0:F2:9E:AD:B6:05:79:16:45:93:82:58:7E:90:33:40:19:36:3A X509v3 Authority Key Identifier: keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.140.0/22 Signature Algorithm: sha256WithRSAEncryption 52:a6:f4:c7:51:7b:67:1f:e4:d6:fc:9d:d7:45:a1:83:12:dc: c6:a4:3e:58:c7:b7:29:99:49:72:b5:ab:e5:d6:22:41:3e:7e: eb:27:e5:c8:94:45:66:b8:e9:ba:76:b8:b8:a3:3c:38:b1:c5: 6a:d6:ec:ca:81:4d:16:1b:80:90:6c:62:c1:84:09:a6:f9:c6: df:c6:dd:6e:3e:26:94:2a:ae:a6:e5:b6:6b:0e:7d:bf:7c:04: 86:6c:68:04:ea:84:5b:c3:41:eb:0c:3f:f7:93:d0:30:c6:a5: c0:c2:9f:76:c1:b5:51:54:67:d0:93:33:ce:c5:b0:46:80:b2: 0f:04:b3:9c:f5:33:f5:c5:ed:33:3c:0d:57:bd:28:31:a1:41: 97:6b:f1:d2:11:7d:b5:8d:44:9a:dd:59:25:d0:4d:95:3d:c7: ce:ca:64:68:b0:29:6b:a1:ff:f0:3e:2a:a2:9a:b3:7a:db:eb: 69:81:72:74:3a:99:36:ea:db:95:f1:d0:ee:94:9a:fb:6a:77: 02:ca:ef:7f:da:a3:65:ef:11:9a:c7:21:ce:4e:53:41:3e:90: 0a:72:0a:2a:4e:c4:b9:47:28:1d:0a:ec:62:b1:d7:be:7b:21: ed:2d:4f:45:63:1f:1b:8b:99:15:69:47:81:88:e0:6d:96:3e: 2d:80:95:39 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEZYfvhfKCS6HzwjvAncVHaB6WZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ5QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZD QUNGODhEOTAeFw0yNTA5MjQxNDQxMThaFw0yNjA5MjMxNDQ2MThaMDMxMTAvBgNV BAMTKENCQzBGMjlFQURCNjA1NzkxNjQ1OTM4MjU4N0U5MDMzNDAxOTM2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Kz9Ej51AaMLcJzP/hNuc8rZ1 CQRGwcyhZmETZFWT8c7y8g+JYfJn7n/rgneh+a3CqczxJu21Tm2qwUIeGAy9Y4F8 L28MLaEAb1TF4yV+YJGVp/AgosNJtefw5R255W8UkINrGFwdbgUrCVn7+/xp53Fj wOD77a5HY+LtWJsvZACEViWYUjueIx5zqo78B+W7ELUWkaUU5Uk3M2C/lUV5WJ9i q9k2nqDymSbZ1LJy8ufn9UVPT/SangAi2rquuH83fcYEo4PzVTrqZ/223eS8bXFo urZcaDlvYZR3e6Jf0GH7OtP38S6I0c++au+PQW+MnEiNj9I058Www3qIlD8PAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUy8Dynq22BXkWRZOCWH6QM0AZNjowHwYDVR0j BBgwFoAUNJvcml0tFpwT9ZKTQfjphsrPiNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRY cHovMC8zNDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OUJEQzlBNUQyRDE2OUMx M0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJYa1dGSkd5WkZWYjM0RmhhZ1NYZ2NDTFFDcFgyeU1aa1JzNWlXelpUWHB6LzAv MzQzNTJlMzIzMzM0MmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzczMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt6owwDQYJKoZIhvcNAQELBQADggEBAFKm9MdR e2cf5Nb8nddFoYMS3MakPljHtymZSXK1q+XWIkE+fusn5ciURWa46bp2uLijPDix xWrW7MqBTRYbgJBsYsGECab5xt/G3W4+JpQqrqbltmsOfb98BIZsaATqhFvDQesM P/eT0DDGpcDCn3bBtVFUZ9CTM87FsEaAsg8Es5z1M/XF7TM8DVe9KDGhQZdr8dIR fbWNRJrdWSXQTZU9x87KZGiwKWuh//A+KqKas3rb62mBcnQ6mTbq25Xx0O6Umvtq dwLK73/ao2XvEZrHIc5OU0E+kApyCipOxLlHKB0K7GKx1757Ie0tT0VjHxuLmRVp R4GI4G2WPi2AlTk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:00:43 2025 by rpki-client