$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53080.roa File: AS53080.roa (raw, json) Hash identifier: M4yiwCsRUvODR0jcl01EmHH3avSxQLHidlJSx+FeOw0= Subject key identifier: BF:11:43:AF:A1:69:96:9E:A1:03:15:11:CC:CA:AC:E0:F3:1C:64:2D Certificate issuer: /CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Certificate serial: 7751970E55BFC77190DAFE27BD08DB18ADACB510 Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53080.roa Signing time: Wed 02 Jul 2025 11:40:13 +0000 ROA not before: Wed 02 Jul 2025 11:35:13 +0000 ROA not after: Wed 01 Jul 2026 11:40:13 +0000 asID: 53080 IP address blocks: 45.175.80.0/22 maxlen: 24 138.186.36.0/22 maxlen: 24 170.82.64.0/22 maxlen: 24 170.150.4.0/22 maxlen: 24 186.194.176.0/20 maxlen: 24 187.95.0.0/20 maxlen: 24 191.253.0.0/20 maxlen: 24 201.216.100.0/22 maxlen: 24 2804:71c::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 06:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:51:97:0e:55:bf:c7:71:90:da:fe:27:bd:08:db:18:ad:ac:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8 Validity Not Before: Jul 2 11:35:13 2025 GMT Not After : Jul 1 11:40:13 2026 GMT Subject: CN=BF1143AFA169969EA1031511CCCAACE0F31C642D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:59:c1:a0:c5:98:27:e0:d0:a6:34:54:63:44: 56:6e:04:87:94:5a:02:58:86:7b:ec:f7:5e:7b:2a: 36:c4:4a:12:84:2d:7e:8a:6b:12:de:72:3d:35:b5: 30:84:25:1b:7b:b5:76:e0:5d:83:69:0c:51:2b:1d: 70:f0:1c:8e:08:68:af:bd:a7:84:0f:99:56:3a:e3: a3:07:80:e9:3c:34:61:55:af:30:ed:a5:1a:db:90: 93:68:28:89:71:f3:58:4d:bf:91:d5:2a:f2:79:98: 8b:a7:9d:63:26:4d:06:69:76:63:6b:86:fa:71:ed: 9e:9b:dd:3a:7a:ab:c0:29:85:6b:76:ec:f1:e7:ea: b1:ba:79:93:d2:e0:dd:6d:14:ea:35:44:5c:67:04: af:dc:b0:de:16:e3:e0:bd:17:27:a4:d5:04:10:7c: a7:38:d1:e2:fa:ad:fe:55:10:28:59:6f:a6:24:63: 9e:24:a6:b9:f2:56:e0:96:ef:2e:3a:b6:64:87:33: ce:c7:59:c6:71:1c:c7:bc:08:af:2e:2f:27:01:ad: ae:4b:61:2f:27:78:86:b8:75:02:95:7c:3f:93:d8: 7e:ae:50:7f:a5:59:d8:a5:f1:c5:fd:dd:d0:c8:d8: 25:e3:fc:d0:ba:8e:18:92:5f:7a:92:ed:50:27:28: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:11:43:AF:A1:69:96:9E:A1:03:15:11:CC:CA:AC:E0:F3:1C:64:2D X509v3 Authority Key Identifier: keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS53080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.80.0/22 138.186.36.0/22 170.82.64.0/22 170.150.4.0/22 186.194.176.0/20 187.95.0.0/20 191.253.0.0/20 201.216.100.0/22 IPv6: 2804:71c::/32 Signature Algorithm: sha256WithRSAEncryption 92:ff:e6:2e:8e:d5:4f:a4:18:96:f6:fc:e3:ec:89:c5:37:1e: ca:c6:1c:c6:72:ef:1f:d9:4b:ab:21:45:b0:a1:3f:59:aa:42: ad:c6:30:b9:65:23:07:71:05:8e:de:7e:97:3e:b5:bb:d3:90: 87:30:07:bd:d2:d1:58:6b:83:9e:17:f4:85:e9:cd:db:46:7e: 07:be:e7:95:1a:68:c7:ff:64:3a:63:7c:b0:99:00:f7:1f:c3: 4e:a7:c1:a9:57:a1:bb:a4:ae:56:2c:8e:e1:f8:22:f9:bc:0b: 9f:d3:fb:ad:4b:04:bd:e3:58:06:39:45:d9:65:92:2f:84:de: b6:05:3d:4b:17:92:ba:c1:65:e8:6e:69:1c:e4:49:f6:fc:6f: ae:11:7b:c8:d0:50:06:20:4f:79:31:7d:f9:83:5f:7b:d6:bc: cb:f6:6a:a5:09:bf:3b:39:d3:2c:d7:30:64:7c:59:83:62:40: d6:33:2b:5a:69:83:d0:fa:78:8f:39:a5:94:dc:ac:d0:f1:e5: 5c:07:11:37:5b:08:a8:6f:43:fd:50:86:05:39:76:e8:de:7c: bc:e3:23:8e:0b:b2:9c:f7:b8:65:bc:24:70:66:86:e2:90:f9: 65:97:23:42:dd:4e:de:0f:85:03:74:fb:53:35:9a:58:7e:6c: a2:60:12:3f -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUd1GXDlW/x3GQ2v4nvQjbGK2stRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQyMDZDMTBGNTg3MDg0RTMyNjZDOTdFREEwRjY1NjQz Mjk5RTFCODAeFw0yNTA3MDIxMTM1MTNaFw0yNjA3MDExMTQwMTNaMDMxMTAvBgNV BAMTKEJGMTE0M0FGQTE2OTk2OUVBMTAzMTUxMUNDQ0FBQ0UwRjMxQzY0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWcGgxZgn4NCmNFRjRFZuBIeU WgJYhnvs9157KjbEShKELX6KaxLecj01tTCEJRt7tXbgXYNpDFErHXDwHI4IaK+9 p4QPmVY646MHgOk8NGFVrzDtpRrbkJNoKIlx81hNv5HVKvJ5mIunnWMmTQZpdmNr hvpx7Z6b3Tp6q8AphWt27PHn6rG6eZPS4N1tFOo1RFxnBK/csN4W4+C9Fyek1QQQ fKc40eL6rf5VEChZb6YkY54kprnyVuCW7y46tmSHM87HWcZxHMe8CK8uLycBra5L YS8neIa4dQKVfD+T2H6uUH+lWdil8cX93dDI2CXj/NC6jhiSX3qS7VAnKHK3AgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUvxFDr6Fplp6hAxURzMqs4PMcZC0wHwYDVR0j BBgwFoAU1CBsEPWHCE4yZsl+2g9lZDKZ4bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU Y3kvMy9ENDIwNkMxMEY1ODcwODRFMzI2NkM5N0VEQTBGNjU2NDMyOTlFMUI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MjA2QzEwRjU4NzA4NEUz MjY2Qzk3RURBMEY2NTY0MzI5OUUxQjguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8zL0FTNTMw ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAItr1ADBAKKuiQDBAKqUkADBAKqlgQDBAS6wrADBAS7XwAD BAS//QADBALJ2GQwDQQCAAIwBwMFACgEBxwwDQYJKoZIhvcNAQELBQADggEBAJL/ 5i6O1U+kGJb2/OPsicU3HsrGHMZy7x/ZS6shRbChP1mqQq3GMLllIwdxBY7efpc+ tbvTkIcwB73S0Vhrg54X9IXpzdtGfge+55UaaMf/ZDpjfLCZAPcfw06nwalXobuk rlYsjuH4Ivm8C5/T+61LBL3jWAY5Rdllki+E3rYFPUsXkrrBZehuaRzkSfb8b64R e8jQUAYgT3kxffmDX3vWvMv2aqUJvzs50yzXMGR8WYNiQNYzK1ppg9D6eI85pZTc rNDx5VwHETdbCKhvQ/1QhgU5dujefLzjI44Lspz3uGW8JHBmhuKQ+WWXI0LdTt4P hQN0+1M1mlh+bKJgEj8= -----END CERTIFICATE-----Generated at Thu Jul 3 08:16:01 2025 by rpki-client