$ rpki-client -vvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa File: 3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa (raw, json) Hash identifier: Wy4Ry1ZA9FPvRYH89gfnwxpCe6RaloAIsmjVnStQvQs= Subject key identifier: A2:18:16:DE:D7:AF:88:30:E3:6F:35:C2:44:C4:62:1E:8B:18:01:A0 Certificate issuer: /CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5 Certificate serial: 54D204D36438DA9E66FB46A2EA1F563EC2F1F773 Authority key identifier: F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa Signing time: Fri 22 Aug 2025 18:39:11 +0000 ROA not before: Fri 22 Aug 2025 18:34:11 +0000 ROA not after: Fri 21 Aug 2026 18:39:11 +0000 asID: 264403 IP address blocks: 131.161.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 15:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d2:04:d3:64:38:da:9e:66:fb:46:a2:ea:1f:56:3e:c2:f1:f7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5 Validity Not Before: Aug 22 18:34:11 2025 GMT Not After : Aug 21 18:39:11 2026 GMT Subject: CN=A21816DED7AF8830E36F35C244C4621E8B1801A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:22:4f:0d:ad:4e:eb:72:33:c8:b4:04:68: df:26:c5:9f:04:9f:d2:12:1a:75:49:9a:f0:ab:00: f3:f2:e4:f9:30:f9:d5:ed:5a:4d:df:b5:6a:6b:8b: 33:21:0d:14:ba:bb:20:93:5b:bd:78:22:a1:4c:b2: dd:7b:58:c9:ec:3c:da:cd:a9:70:2a:b7:93:7b:ad: f6:26:a5:e1:d5:83:e5:43:63:3d:55:3f:55:a0:a2: 5f:90:41:f7:de:49:5f:2a:10:13:c8:11:75:a9:32: 17:b1:33:49:e3:06:e5:d9:bc:47:93:ee:fd:64:0b: c6:fd:5f:e1:ff:66:5d:69:1b:0a:d8:86:71:42:ed: 68:1b:d7:7b:a3:60:f2:e1:03:ab:99:75:01:da:07: 53:c5:75:7c:a1:df:a1:a5:cb:c7:e7:fb:1f:f6:20: 15:12:22:7c:7c:30:07:90:61:39:d9:e2:98:ab:95: fc:61:21:af:0a:0b:10:8e:67:12:53:be:f7:83:9d: e5:1b:86:b1:a5:6d:4a:4d:ab:fc:50:39:17:04:16: 33:70:75:9e:c0:a8:bc:32:1d:6a:70:cb:6c:95:28: 48:9e:0d:66:c5:78:3d:9e:24:54:1e:bd:29:3d:aa: bb:4b:e3:17:5d:6c:84:15:4d:95:7e:34:ac:d9:87: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:16:DE:D7:AF:88:30:E3:6F:35:C2:44:C4:62:1E:8B:18:01:A0 X509v3 Authority Key Identifier: keyid:F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.250.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:7c:5e:4f:04:de:6e:9b:45:9b:2f:b6:cc:a7:d3:2b:91:df: b4:81:6f:f3:ca:6e:ba:3f:08:2d:c4:bb:fc:00:6b:fb:61:8a: 74:65:a3:72:5c:10:06:c7:86:fd:c3:9f:0a:59:4b:b1:13:28: 63:75:b9:88:f2:ba:1d:83:bd:71:5e:b2:b7:3e:34:89:3b:29: 4a:c9:e8:2d:13:10:93:f9:57:40:97:11:20:d3:86:4b:3f:43: 34:d7:11:09:ba:43:a8:a9:f4:4e:9c:f1:6c:1c:e5:d9:e1:d5: ea:73:0e:e3:f5:5a:ad:e0:0c:dc:6d:44:14:f5:bf:93:d6:c7: e8:3f:c0:a8:15:46:39:9d:29:1e:49:35:ff:43:0e:87:32:98: 11:68:07:c8:22:6f:47:e4:89:2e:81:6d:02:3f:dc:26:59:24: bc:e2:b0:46:4c:dc:33:6f:74:3a:9a:78:50:18:ad:e3:74:be: a0:d1:61:66:33:56:5d:5c:81:c2:16:22:9a:b7:86:d0:9c:15: 74:e7:11:61:2e:48:27:74:cf:34:f9:33:43:94:f8:e9:85:15: 93:23:29:9f:2c:53:80:77:19:03:8f:11:69:00:ab:36:c2:03: 26:56:16:5a:ea:05:4c:8d:8d:45:7d:fc:9b:db:61:36:6b:7e: e1:ab:52:29 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVNIE02Q42p5m+0ai6h9WPsLx93MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg2RDBCRUM4MENDNjVDODc1RTlGNzYwQzg5QkJFODVC NUREOENBNTAeFw0yNTA4MjIxODM0MTFaFw0yNjA4MjExODM5MTFaMDMxMTAvBgNV BAMTKEEyMTgxNkRFRDdBRjg4MzBFMzZGMzVDMjQ0QzQ2MjFFOEIxODAxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6yJPDa1O63IzyLQEaN8mxZ8E n9ISGnVJmvCrAPPy5Pkw+dXtWk3ftWprizMhDRS6uyCTW714IqFMst17WMnsPNrN qXAqt5N7rfYmpeHVg+VDYz1VP1Wgol+QQffeSV8qEBPIEXWpMhexM0njBuXZvEeT 7v1kC8b9X+H/Zl1pGwrYhnFC7Wgb13ujYPLhA6uZdQHaB1PFdXyh36Gly8fn+x/2 IBUSInx8MAeQYTnZ4pirlfxhIa8KCxCOZxJTvveDneUbhrGlbUpNq/xQORcEFjNw dZ7AqLwyHWpwy2yVKEieDWbFeD2eJFQevSk9qrtL4xddbIQVTZV+NKzZh6f5AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUohgW3teviDDjbzXCRMRiHosYAaAwHwYDVR0j BBgwFoAU+G0L7IDMZch16fdgyJu+hbXdjKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVZb3dTaWRuQWp1S0x4eFVRZUpEc0NETU14YXBveGVGYWZjQXJnSnZL amUvMS9GODZEMEJFQzgwQ0M2NUM4NzVFOUY3NjBDODlCQkU4NUI1REQ4Q0E1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NkQwQkVDODBDQzY1Qzg3 NUU5Rjc2MEM4OUJCRTg1QjVERDhDQTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzM1WW93U2lkbkFqdUtMeHhVUWVKRHNDRE1NeGFwb3hlRmFmY0FyZ0p2S2plLzEv MzEzMzMxMmUzMTM2MzEyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM0MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIOh+jANBgkqhkiG9w0BAQsFAAOCAQEAj3xe TwTebptFmy+2zKfTK5HftIFv88puuj8ILcS7/ABr+2GKdGWjclwQBseG/cOfCllL sRMoY3W5iPK6HYO9cV6ytz40iTspSsnoLRMQk/lXQJcRINOGSz9DNNcRCbpDqKn0 TpzxbBzl2eHV6nMO4/VareAM3G1EFPW/k9bH6D/AqBVGOZ0pHkk1/0MOhzKYEWgH yCJvR+SJLoFtAj/cJlkkvOKwRkzcM290Opp4UBit43S+oNFhZjNWXVyBwhYimreG 0JwVdOcRYS5IJ3TPNPkzQ5T46YUVkyMpnyxTgHcZA48RaQCrNsIDJlYWWuoFTI2N RX38m9thNmt+4atSKQ== -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:20 2025 by rpki-client