$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa File: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (raw, json) Hash identifier: VGBGRVij+ctksKjlNSRe/YexivHc1WUSGfQWYIGsIJI= Subject key identifier: 1C:FA:FE:B5:FC:B9:33:50:92:F1:D1:57:C6:19:0F:6B:48:7B:76:91 Certificate issuer: /CN=974B1286BDF6AAAF8648D23141EAB781B973C049 Certificate serial: 3AF58F8DC107A88C4DE8D54DF0F85EF85DDDF207 Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa Signing time: Wed 15 Jul 2026 18:57:28 +0000 ROA not before: Wed 15 Jul 2026 18:52:28 +0000 ROA not after: Wed 14 Jul 2027 18:57:28 +0000 asID: 268077 IP address blocks: 45.168.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 04:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f5:8f:8d:c1:07:a8:8c:4d:e8:d5:4d:f0:f8:5e:f8:5d:dd:f2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049 Validity Not Before: Jul 15 18:52:28 2026 GMT Not After : Jul 14 18:57:28 2027 GMT Subject: CN=1CFAFEB5FCB9335092F1D157C6190F6B487B7691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:f6:22:21:82:b3:66:ac:32:0d:86:57:56: c3:e3:b3:4e:8a:a1:b6:16:b3:31:55:62:7f:e9:90: 3a:2a:09:11:28:8a:af:dd:ec:35:10:5f:85:60:e1: 7f:6d:8e:39:24:9c:dc:c7:1b:f0:b7:7e:27:bd:e1: 28:9e:f6:45:95:e4:05:64:18:fa:cf:20:cb:a2:b3: a4:74:fe:18:27:8c:61:3e:a5:a5:4c:18:46:6a:38: fb:96:54:9e:8d:92:92:64:25:fc:c2:fc:ed:e2:14: ca:66:3b:75:b6:f1:70:69:ce:e1:b3:9e:b6:98:a3: b7:1b:9a:c3:de:69:ab:e1:d8:6c:e2:93:3a:4d:eb: 06:60:d7:18:45:df:94:4d:18:5c:16:8d:b7:3f:60: 67:c4:3c:15:d0:9c:42:f2:97:99:d0:0e:b5:ed:0e: 67:ad:ce:3c:88:b1:d0:7d:19:06:e6:1f:76:16:52: e5:6a:b8:20:aa:85:47:1d:13:2f:16:cb:48:79:68: 27:82:db:b5:7d:23:a2:6c:3b:0e:e0:b6:32:24:50: 20:18:08:47:6b:4a:d7:4f:27:1d:24:c1:91:34:13: 28:73:e6:9b:0f:8a:e3:7e:83:89:cf:42:3a:3d:f5: dc:b5:c2:bf:e8:23:38:2b:66:75:41:5f:48:7f:20: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:FE:B5:FC:B9:33:50:92:F1:D1:57:C6:19:0F:6B:48:7B:76:91 X509v3 Authority Key Identifier: keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.168.0/22 Signature Algorithm: sha256WithRSAEncryption 43:8b:c3:3a:fb:3c:73:3b:60:d3:80:bb:23:14:d6:f4:cb:99: 37:ef:29:8a:f7:7a:53:6d:61:8b:2a:a5:f4:0c:b4:05:4b:58: ba:f2:11:95:ec:21:7f:fc:2b:05:ea:c0:f7:09:e4:29:91:a0: fe:63:ab:98:d4:c2:26:2b:6c:72:f1:e7:03:09:21:c1:38:5a: 25:85:2a:73:e4:61:bc:61:67:2a:30:b0:7a:40:f8:a0:60:62: 33:b9:68:55:12:ba:bc:0d:c3:68:4f:95:7d:ab:1e:f8:f1:a2: 52:ac:ba:77:fb:b7:4a:32:9e:4c:bf:41:35:58:b3:f7:ab:d8: de:11:24:8c:a6:17:62:cb:30:11:bf:98:9a:1b:f1:b3:4e:6b: 39:c1:ac:47:43:f2:06:ff:90:84:ca:7a:9b:23:1d:f1:07:5d: ef:c1:84:91:8b:ad:2e:39:2e:16:b5:0e:44:89:5f:ed:a3:a8: b9:da:cc:f6:30:9f:f5:5e:db:9b:47:6c:3b:6e:8d:97:e8:84: 67:ae:f0:e7:e9:64:7d:f0:18:9d:4a:06:a0:65:d0:be:14:27: dd:bf:ef:8d:ec:2b:09:6a:3b:e9:68:52:83:df:a3:4a:32:83: 91:ab:d5:e0:c5:33:c1:00:db:eb:08:b4:db:f4:97:ee:e4:88: 26:37:10:4d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOvWPjcEHqIxN6NVN8Phe+F3d8gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc0QjEyODZCREY2QUFBRjg2NDhEMjMxNDFFQUI3ODFC OTczQzA0OTAeFw0yNjA3MTUxODUyMjhaFw0yNzA3MTQxODU3MjhaMDMxMTAvBgNV BAMTKDFDRkFGRUI1RkNCOTMzNTA5MkYxRDE1N0M2MTkwRjZCNDg3Qjc2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpo/YiIYKzZqwyDYZXVsPjs06K obYWszFVYn/pkDoqCREoiq/d7DUQX4Vg4X9tjjkknNzHG/C3fie94Sie9kWV5AVk GPrPIMuis6R0/hgnjGE+paVMGEZqOPuWVJ6NkpJkJfzC/O3iFMpmO3W28XBpzuGz nraYo7cbmsPeaavh2GzikzpN6wZg1xhF35RNGFwWjbc/YGfEPBXQnELyl5nQDrXt DmetzjyIsdB9GQbmH3YWUuVquCCqhUcdEy8Wy0h5aCeC27V9I6JsOw7gtjIkUCAY CEdrStdPJx0kwZE0Eyhz5psPiuN+g4nPQjo99dy1wr/oIzgrZnVBX0h/ID7jAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUHPr+tfy5M1CS8dFXxhkPa0h7dpEwHwYDVR0j BBgwFoAUl0sShr32qq+GSNIxQeq3gblzwEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR djcvMC85NzRCMTI4NkJERjZBQUFGODY0OEQyMzE0MUVBQjc4MUI5NzNDMDQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NEIxMjg2QkRGNkFBQUY4 NjQ4RDIzMTQxRUFCNzgxQjk3M0MwNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRDTk1iU1B1OHBNNURnTVRMZnRHdUZONUp1cGVRbm5MUTJwM283Ykh1UXY3LzAv MzQzNTJlMzEzNjM4MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItqKgwDQYJKoZIhvcNAQELBQADggEBAEOLwzr7 PHM7YNOAuyMU1vTLmTfvKYr3elNtYYsqpfQMtAVLWLryEZXsIX/8KwXqwPcJ5CmR oP5jq5jUwiYrbHLx5wMJIcE4WiWFKnPkYbxhZyowsHpA+KBgYjO5aFUSurwNw2hP lX2rHvjxolKsunf7t0oynky/QTVYs/er2N4RJIymF2LLMBG/mJob8bNOaznBrEdD 8gb/kITKepsjHfEHXe/BhJGLrS45Lha1DkSJX+2jqLnazPYwn/Ve25tHbDtujZfo hGeu8OfpZH3wGJ1KBqBl0L4UJ92/743sKwlqO+loUoPfo0oyg5Gr1eDFM8EA2+sI tNv0l+7kiCY3EE0= -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:37 2026 by rpki-client