$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa File: 34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (raw, json) Hash identifier: gWzg9YpbqycEBcqFyDV9C2c1ifzIdZhpIdaqvGl1vpE= Subject key identifier: 8C:04:3F:8C:B9:6D:7E:F6:C7:7F:D8:73:94:22:07:C1:27:C0:9D:E0 Certificate issuer: /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65 Certificate serial: 2EBF182098B20A5E9CD88EEE411E27DB2750C9CF Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa Signing time: Thu 04 Sep 2025 14:00:28 +0000 ROA not before: Thu 04 Sep 2025 13:55:28 +0000 ROA not after: Thu 03 Sep 2026 14:00:28 +0000 asID: 268907 IP address blocks: 45.175.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:bf:18:20:98:b2:0a:5e:9c:d8:8e:ee:41:1e:27:db:27:50:c9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65 Validity Not Before: Sep 4 13:55:28 2025 GMT Not After : Sep 3 14:00:28 2026 GMT Subject: CN=8C043F8CB96D7EF6C77FD873942207C127C09DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:22:6d:9c:c6:42:e7:0e:ff:06:d9:3b:f6: c7:45:60:1e:4f:42:ac:0a:84:6f:44:85:75:e7:90: fd:4d:80:3b:00:81:c5:05:f9:c2:92:a4:11:3b:de: 82:91:a4:58:36:4e:25:79:b9:fc:38:43:29:35:de: 54:c8:10:ca:9b:c8:4d:2f:5e:1b:01:6e:be:bc:70: 9a:d4:e7:3d:c4:d2:9c:cc:f8:c2:64:58:9a:2a:2c: 3e:f4:a8:94:e7:12:74:fe:28:b6:50:89:84:4f:85: 94:3f:10:01:ed:09:d6:6b:45:76:09:f5:6e:9d:78: 1a:91:2b:2f:d2:a2:bc:45:df:f4:48:2b:82:27:c1: 03:73:34:47:da:5a:d5:d2:27:1f:41:74:3d:99:80: 70:f0:ce:2c:eb:a9:ec:4e:07:e2:0b:2b:1c:a0:a3: 0d:0e:08:6b:6b:49:37:23:10:a0:6e:45:24:58:cf: c5:21:4e:ef:93:e7:d7:cd:56:cc:6f:ec:4a:40:af: 6b:01:36:f5:cf:42:68:18:e5:36:5b:c7:b1:8e:b4: 22:60:0f:a7:82:5b:be:42:ec:0f:34:9f:10:f0:2f: 02:3b:25:75:8d:a8:a0:77:85:10:64:e6:df:1d:69: 93:43:f8:8f:fe:fa:41:78:9b:af:1d:c9:4d:38:48: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:3F:8C:B9:6D:7E:F6:C7:7F:D8:73:94:22:07:C1:27:C0:9D:E0 X509v3 Authority Key Identifier: keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:9a:e5:b3:8b:b2:aa:b3:43:c2:59:b7:83:fa:b9:94:be:ba: ef:f7:68:61:a5:93:06:f1:5c:70:ac:67:ee:89:b4:24:3b:d2: 5e:0d:59:de:f6:a8:d3:73:32:44:86:bd:a7:9e:eb:be:cc:a6: 1d:ac:e1:5e:c4:90:29:ff:e3:9b:28:05:c9:3a:de:00:72:c2: ea:66:eb:90:1f:8c:f9:98:b7:ac:fa:1a:a5:9d:35:3d:f1:4b: 56:6d:ea:45:b1:c4:e5:57:b6:2c:6e:7b:44:e0:1c:6a:bf:79: d3:1d:f2:fe:44:79:e1:f6:3d:86:1a:7e:76:9f:f2:f7:97:18: 7a:c9:b6:55:ff:52:de:c8:38:8a:43:53:8d:5b:e0:d1:7c:0b: 3a:90:63:ac:25:24:68:ab:b4:34:75:2e:e9:3d:a5:79:c4:9f: 21:fa:9c:33:bd:99:df:e8:16:9a:ac:27:bc:06:81:91:5c:57: f7:60:7f:fb:cc:e2:00:ae:50:bf:3f:1a:8f:80:63:0f:a9:87: a8:97:37:99:65:07:47:6e:aa:f9:46:b2:9e:07:27:c0:f3:95: 56:9f:4b:99:d6:7c:35:aa:df:03:e9:81:fe:5d:61:06:53:b8: a3:19:ee:dc:21:ce:cb:35:c5:94:79:12:7d:d0:d7:4b:6c:7d: 23:1e:5b:0b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIULr8YIJiyCl6c2I7uQR4n2ydQyc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RjA3Njg1Rjc5MzIxMUNFM0Q1OEU4QUU0MEUzMzM1 RDAxQUM2NTAeFw0yNTA5MDQxMzU1MjhaFw0yNjA5MDMxNDAwMjhaMDMxMTAvBgNV BAMTKDhDMDQzRjhDQjk2RDdFRjZDNzdGRDg3Mzk0MjIwN0MxMjdDMDlERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWCJtnMZC5w7/Btk79sdFYB5P QqwKhG9EhXXnkP1NgDsAgcUF+cKSpBE73oKRpFg2TiV5ufw4Qyk13lTIEMqbyE0v XhsBbr68cJrU5z3E0pzM+MJkWJoqLD70qJTnEnT+KLZQiYRPhZQ/EAHtCdZrRXYJ 9W6deBqRKy/SorxF3/RIK4InwQNzNEfaWtXSJx9BdD2ZgHDwzizrqexOB+ILKxyg ow0OCGtrSTcjEKBuRSRYz8UhTu+T59fNVsxv7EpAr2sBNvXPQmgY5TZbx7GOtCJg D6eCW75C7A80nxDwLwI7JXWNqKB3hRBk5t8daZND+I/++kF4m68dyU04SPbDAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUjAQ/jLltfvbHf9hzlCIHwSfAneAwHwYDVR0j BBgwFoAUPI8HaF95MhHOPVjorkDjM10BrGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRjaUNUbnFUcTNic2F0REIyVVhSS1ZFUWtzeUxLWkVhWjhrUXNRc2pN NkIvMC8zQzhGMDc2ODVGNzkzMjExQ0UzRDU4RThBRTQwRTMzMzVEMDFBQzY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEYwNzY4NUY3OTMyMTFD RTNENThFOEFFNDBFMzMzNUQwMUFDNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ0Y2lDVG5xVHEzYnNhdERCMlVYUktWRVFrc3lMS1pFYVo4a1FzUXNqTTZCLzAv MzQzNTJlMzEzNzM1MmUzOTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4 MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLa9gMA0GCSqGSIb3DQEBCwUAA4IBAQBsmuWzi7Kq s0PCWbeD+rmUvrrv92hhpZMG8VxwrGfuibQkO9JeDVne9qjTczJEhr2nnuu+zKYd rOFexJAp/+ObKAXJOt4AcsLqZuuQH4z5mLes+hqlnTU98UtWbepFscTlV7YsbntE 4Bxqv3nTHfL+RHnh9j2GGn52n/L3lxh6ybZV/1LeyDiKQ1ONW+DRfAs6kGOsJSRo q7Q0dS7pPaV5xJ8h+pwzvZnf6BaarCe8BoGRXFf3YH/7zOIArlC/PxqPgGMPqYeo lzeZZQdHbqr5RrKeByfA85VWn0uZ1nw1qt8D6YH+XWEGU7ijGe7cIc7LNcWUeRJ9 0NdLbH0jHlsL -----END CERTIFICATE-----Generated at Mon Oct 20 20:02:04 2025 by rpki-client