$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa File: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (raw, json) Hash identifier: xJ1/xwhDeT/nk0Rr/KZSIn5XGX1IHarJIhB6lmq9MGQ= Subject key identifier: E2:59:47:42:5E:7A:5B:70:9F:E0:E4:50:A5:F3:0A:DE:1A:09:09:BF Certificate issuer: /CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Certificate serial: 75605147195EE41B5C31668B294002EEA91F2F4A Authority key identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa Signing time: Wed 08 Oct 2025 18:22:21 +0000 ROA not before: Wed 08 Oct 2025 18:17:21 +0000 ROA not after: Wed 07 Oct 2026 18:22:21 +0000 asID: 273311 IP address blocks: 45.170.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:60:51:47:19:5e:e4:1b:5c:31:66:8b:29:40:02:ee:a9:1f:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Validity Not Before: Oct 8 18:17:21 2025 GMT Not After : Oct 7 18:22:21 2026 GMT Subject: CN=E25947425E7A5B709FE0E450A5F30ADE1A0909BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:13:35:3a:a7:e9:48:76:53:e9:fb:e8:3e: 11:89:e8:67:7a:33:e9:e9:9a:1e:cd:af:f2:ba:ef: a7:35:3d:0f:d2:6d:e3:f1:fb:e4:05:ec:03:b6:56: f8:79:28:fb:37:3c:90:ca:e7:c5:36:ce:bc:92:fe: 42:51:5a:c7:f6:b7:70:ac:40:2b:f1:08:e1:ac:63: 6f:e0:d3:11:4d:fb:de:c7:7f:d5:34:cb:a4:bc:11: 12:8c:ee:a8:e4:50:48:43:b4:a9:de:58:20:35:a3: 83:36:95:54:30:56:22:79:80:c5:0c:96:8d:c2:9d: 20:9e:4c:80:fa:30:f9:45:33:a4:44:2f:54:3a:57: 35:09:3f:b1:7c:37:59:15:8c:81:7c:5f:88:cd:24: 43:d7:70:9f:52:8e:84:d1:26:2a:4c:3a:88:03:88: 0c:56:d8:c6:23:f9:3c:11:ff:c6:fc:9f:e3:c2:cb: 0b:d5:a7:a8:1b:be:d5:95:1e:d9:37:9d:aa:59:d2: 57:4c:2d:53:27:73:89:db:33:9d:93:0f:23:4c:fa: c0:11:90:a9:fc:64:ba:67:ed:bb:c1:8e:6a:fd:eb: b9:c8:bf:51:bd:a5:50:d8:7f:c3:f7:88:e0:a1:ac: c3:29:c1:58:d1:2f:e4:36:27:9f:a9:a5:97:a1:ae: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:47:42:5E:7A:5B:70:9F:E0:E4:50:A5:F3:0A:DE:1A:09:09:BF X509v3 Authority Key Identifier: keyid:8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.137.0/24 Signature Algorithm: sha256WithRSAEncryption b0:a3:ac:14:4f:fd:0e:19:87:97:b9:a9:a6:7f:0f:ee:29:c1: 41:eb:5e:41:19:70:f4:aa:40:44:fd:e4:ae:6c:b4:fc:a0:3b: ad:93:d6:6e:5c:35:23:39:7f:16:95:83:bf:3e:e1:da:3e:3d: fc:91:a7:9e:bc:0f:38:9a:fe:cf:26:25:71:13:10:a4:58:d0: 3d:85:14:74:12:c2:a8:ae:b9:a9:40:8f:c5:41:1c:3c:b9:2b: 81:01:4b:2e:f0:11:cd:05:51:40:83:b6:74:4c:7f:20:82:bf: bd:c2:59:85:ba:31:19:a6:a1:98:11:de:f0:c8:79:a2:e8:24: 42:41:08:08:3c:c6:f5:06:08:64:e8:10:eb:85:90:32:e8:c8: 85:c2:7b:f7:65:62:9d:67:83:88:1e:2a:01:77:90:bd:28:d7: 94:d6:2e:e3:b4:36:99:70:69:7d:8d:df:7b:4e:24:6d:b3:30: b8:1c:26:1e:7d:e2:42:86:3b:9b:ce:50:bd:1b:c2:c2:ab:a3: 07:34:3e:17:88:50:d9:c9:75:71:49:53:b7:ca:ca:28:ef:2f: e4:8f:d8:a2:d1:a8:f8:17:1f:e3:a3:b9:44:85:db:30:33:49: e3:cc:74:2b:a2:16:c0:58:16:a5:bf:62:87:9c:53:d8:33:c5: 23:39:db:03 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUdWBRRxle5BtcMWaLKUAC7qkfL0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI5RjZCMkM5ODdDRURGMkMwQTU4MTM3RTg1Q0RCQjc2 NzlFNkJCMDAeFw0yNTEwMDgxODE3MjFaFw0yNjEwMDcxODIyMjFaMDMxMTAvBgNV BAMTKEUyNTk0NzQyNUU3QTVCNzA5RkUwRTQ1MEE1RjMwQURFMUEwOTA5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78RM1OqfpSHZT6fvoPhGJ6Gd6 M+npmh7Nr/K676c1PQ/SbePx++QF7AO2Vvh5KPs3PJDK58U2zryS/kJRWsf2t3Cs QCvxCOGsY2/g0xFN+97Hf9U0y6S8ERKM7qjkUEhDtKneWCA1o4M2lVQwViJ5gMUM lo3CnSCeTID6MPlFM6REL1Q6VzUJP7F8N1kVjIF8X4jNJEPXcJ9SjoTRJipMOogD iAxW2MYj+TwR/8b8n+PCywvVp6gbvtWVHtk3napZ0ldMLVMnc4nbM52TDyNM+sAR kKn8ZLpn7bvBjmr967nIv1G9pVDYf8P3iOChrMMpwVjRL+Q2J5+ppZehrjMXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU4llHQl56W3Cf4ORQpfMK3hoJCb8wHwYDVR0j BBgwFoAUi59rLJh87fLApYE36Fzbt2eea7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI VEMvMC84QjlGNkIyQzk4N0NFREYyQzBBNTgxMzdFODVDREJCNzY3OUU2QkIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOUY2QjJDOTg3Q0VERjJD MEE1ODEzN0U4NUNEQkI3Njc5RTZCQjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR6M3lpakQxQkJoaVNGUDdkVzhGc0doc00zRnJGdkVtREw5Y0JhbUpSSFRDLzAv MzQzNTJlMzEzNzMwMmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3 MzMzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqokwDQYJKoZIhvcNAQELBQADggEBALCjrBRP /Q4Zh5e5qaZ/D+4pwUHrXkEZcPSqQET95K5stPygO62T1m5cNSM5fxaVg78+4do+ PfyRp568Dzia/s8mJXETEKRY0D2FFHQSwqiuualAj8VBHDy5K4EBSy7wEc0FUUCD tnRMfyCCv73CWYW6MRmmoZgR3vDIeaLoJEJBCAg8xvUGCGToEOuFkDLoyIXCe/dl Yp1ng4geKgF3kL0o15TWLuO0NplwaX2N33tOJG2zMLgcJh594kKGO5vOUL0bwsKr owc0PheIUNnJdXFJU7fKyijvL+SP2KLRqPgXH+OjuUSF2zAzSePMdCuiFsBYFqW/ YoecU9gzxSM52wM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:06 2025 by rpki-client