$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS52940.roa File: AS52940.roa (raw, json) Hash identifier: 5gDbAsmuaY9s3ND3Gyo4mxt00JtezqoFahAJrFDSU7s= Subject key identifier: 6D:0D:DA:3F:9E:B2:F8:58:67:7A:B6:BE:3B:46:B9:81:D1:E1:73:50 Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Certificate serial: 20C515E9305A4AC515D214383205713270D896C3 Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS52940.roa Signing time: Wed 02 Jul 2025 11:39:59 +0000 ROA not before: Wed 02 Jul 2025 11:34:59 +0000 ROA not after: Wed 01 Jul 2026 11:39:59 +0000 asID: 52940 IP address blocks: 168.227.76.0/22 maxlen: 24 170.244.164.0/22 maxlen: 24 177.11.92.0/22 maxlen: 24 191.7.28.0/22 maxlen: 24 2804:1424::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c5:15:e9:30:5a:4a:c5:15:d2:14:38:32:05:71:32:70:d8:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Validity Not Before: Jul 2 11:34:59 2025 GMT Not After : Jul 1 11:39:59 2026 GMT Subject: CN=6D0DDA3F9EB2F858677AB6BE3B46B981D1E17350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:8b:52:f4:c4:54:e8:2a:c6:13:f6:bb:77: 88:11:3d:ec:9b:de:98:4c:b9:f9:14:a1:d5:5e:79: 16:96:d6:a4:a1:7a:87:d9:5b:9d:5e:94:ff:0e:17: ba:b9:d6:70:b1:01:22:64:8e:dc:16:38:81:35:c9: 07:bc:f3:67:63:d8:4b:a4:cb:4a:78:6c:1e:09:02: 70:54:ee:ce:1b:b4:4c:51:ba:02:60:07:95:9f:a9: 9d:2c:91:e0:1e:f1:1f:9d:90:bb:91:59:c6:61:fd: ea:d2:fd:12:1d:fc:43:b1:b7:e8:d2:23:9b:3c:be: 51:2e:95:70:6b:fe:81:88:8c:1e:14:6e:33:ab:76: 50:d3:89:f2:a1:26:50:f3:c2:45:79:1b:31:8e:a3: 7a:48:2a:37:2a:7b:a2:4f:0f:01:09:2b:d4:20:1d: ae:0a:80:df:95:95:43:37:6b:b0:ce:9c:b6:35:62: a0:37:52:90:2d:df:c2:c7:02:c4:27:cb:f9:de:e8: f7:dd:4e:b9:8e:27:5b:be:a9:72:2c:7f:d5:92:dc: 83:9c:64:1a:df:f9:a4:e3:27:63:ec:95:53:c5:b7: 74:ea:a2:cc:46:ca:8c:7d:bd:ba:a5:8f:cd:9f:05: ec:70:f4:a9:bb:96:62:d5:71:bf:89:17:d4:b3:cb: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0D:DA:3F:9E:B2:F8:58:67:7A:B6:BE:3B:46:B9:81:D1:E1:73:50 X509v3 Authority Key Identifier: keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS52940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.76.0/22 170.244.164.0/22 177.11.92.0/22 191.7.28.0/22 IPv6: 2804:1424::/32 Signature Algorithm: sha256WithRSAEncryption 34:87:7e:ce:a0:c0:29:64:a8:44:eb:40:ce:1d:c0:d3:8c:e7: 72:ed:1e:91:84:41:c9:24:43:22:49:f5:ed:12:6b:74:d6:88: 77:1a:cc:24:f9:15:42:68:e5:51:55:cf:89:63:69:1e:1e:ea: 1d:eb:20:0f:c2:41:0f:91:30:f9:6a:a5:bc:58:ec:7a:5b:0f: 28:12:9c:7f:8d:03:de:57:43:c5:34:14:02:32:ac:37:44:0e: da:8b:96:b6:dc:a9:8e:d4:ac:53:db:76:88:6b:e7:91:12:27: df:dd:82:95:e8:d8:e8:45:7c:e5:88:59:bb:9b:3e:9a:b6:5a: e1:bb:44:ce:8d:4c:36:40:46:34:c6:21:ce:ae:95:67:e7:d7: 8e:1c:57:23:5b:78:11:4b:a9:ae:ec:a2:6c:ad:4b:a0:51:59: 09:d9:72:18:ee:26:16:18:e5:6f:6e:17:10:75:40:08:4b:c3: f7:39:e5:02:b9:5c:30:8a:c3:ba:68:0e:d1:43:a6:02:bc:b2: 87:b8:31:31:fd:da:7c:3c:7b:31:2b:c2:7a:54:78:c6:70:a4: 05:f7:38:45:64:cd:7a:ce:fe:ed:e5:f1:cc:a4:18:c7:ec:42: 7d:f8:6a:32:ae:1f:3c:09:71:cc:89:db:c6:7b:b3:71:84:b8: bc:3c:c8:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMUV6TBaSsUV0hQ4MgVxMnDYlsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQyMDZDMTBGNTg3MDg0RTMyNjZDOTdFREEwRjY1NjQz Mjk5RTFCODAeFw0yNTA3MDIxMTM0NTlaFw0yNjA3MDExMTM5NTlaMDMxMTAvBgNV BAMTKDZEMEREQTNGOUVCMkY4NTg2NzdBQjZCRTNCNDZCOTgxRDFFMTczNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6otS9MRU6CrGE/a7d4gRPeyb 3phMufkUodVeeRaW1qSheofZW51elP8OF7q51nCxASJkjtwWOIE1yQe882dj2Euk y0p4bB4JAnBU7s4btExRugJgB5WfqZ0skeAe8R+dkLuRWcZh/erS/RId/EOxt+jS I5s8vlEulXBr/oGIjB4UbjOrdlDTifKhJlDzwkV5GzGOo3pIKjcqe6JPDwEJK9Qg Ha4KgN+VlUM3a7DOnLY1YqA3UpAt38LHAsQny/ne6PfdTrmOJ1u+qXIsf9WS3IOc ZBrf+aTjJ2PslVPFt3TqosxGyox9vbqlj82fBexw9Km7lmLVcb+JF9Szy1ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbQ3aP56y+Fhnera+O0a5gdHhc1AwHwYDVR0j BBgwFoAU1CBsEPWHCE4yZsl+2g9lZDKZ4bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMy9ENDIwNkMxMEY1ODcwODRFMzI2NkM5N0VEQTBGNjU2NDMyOTlFMUI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MjA2QzEwRjU4NzA4NEUz MjY2Qzk3RURBMEY2NTY0MzI5OUUxQjguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8zL0FTNTI5 NDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAKo40wDBAKq9KQDBAKxC1wDBAK/BxwwDQQCAAIwBwMFACgE FCQwDQYJKoZIhvcNAQELBQADggEBADSHfs6gwClkqETrQM4dwNOM53LtHpGEQckk QyJJ9e0Sa3TWiHcazCT5FUJo5VFVz4ljaR4e6h3rIA/CQQ+RMPlqpbxY7HpbDygS nH+NA95XQ8U0FAIyrDdEDtqLlrbcqY7UrFPbdohr55ESJ9/dgpXo2OhFfOWIWbub Ppq2WuG7RM6NTDZARjTGIc6ulWfn144cVyNbeBFLqa7somytS6BRWQnZchjuJhYY 5W9uFxB1QAhLw/c55QK5XDCKw7poDtFDpgK8soe4MTH92nw8ezErwnpUeMZwpAX3 OEVkzXrO/u3l8cykGMfsQn34ajKuHzwJccyJ28Z7s3GEuLw8yP0= -----END CERTIFICATE-----Generated at Thu Jul 3 08:06:56 2025 by rpki-client