$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32332d3233203d3e20323638333431.roa File: 34352e3233382e3137302e302f32332d3233203d3e20323638333431.roa (raw, json) Hash identifier: kvl9yOdn84LcYmIAso+1FoNV8FOdDf9Ik5IY/9fgi1I= Subject key identifier: 2B:1E:FE:09:3B:F0:5C:A6:41:05:2D:5B:47:C6:94:04:DA:78:69:C5 Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Certificate serial: 41FD4224A0B15DF0A1753801E47D9E525F9FCF3C Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32332d3233203d3e20323638333431.roa Signing time: Mon 22 Sep 2025 18:40:53 +0000 ROA not before: Mon 22 Sep 2025 18:35:53 +0000 ROA not after: Mon 21 Sep 2026 18:40:53 +0000 asID: 268341 IP address blocks: 45.238.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fd:42:24:a0:b1:5d:f0:a1:75:38:01:e4:7d:9e:52:5f:9f:cf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Validity Not Before: Sep 22 18:35:53 2025 GMT Not After : Sep 21 18:40:53 2026 GMT Subject: CN=2B1EFE093BF05CA641052D5B47C69404DA7869C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:e8:b4:2d:46:01:25:db:ea:5e:71:84:e5: e6:5d:dc:be:c3:2b:8c:e1:45:5d:cb:6d:03:85:9a: f4:59:b0:b0:9d:0d:6b:89:32:d5:cf:b1:39:0c:fd: ae:01:0c:e8:95:eb:4c:4f:44:d2:b2:04:9d:b2:ef: 0c:b6:d2:96:f0:a1:27:41:9b:bc:4e:58:40:e8:d0: 37:fa:4f:bf:f8:20:78:2b:ee:7e:8f:44:27:55:0f: 62:de:d0:58:26:4c:bf:95:2f:0a:aa:37:2d:6d:3e: 45:27:06:f5:52:f4:94:e6:ee:44:62:63:40:75:4b: a5:e4:08:74:47:da:98:1a:36:0a:e2:8e:4e:42:f3: d0:ec:40:14:a5:67:93:ad:b2:ac:51:12:51:a4:8e: 62:41:cc:78:5c:fd:57:28:7f:00:4e:b7:1c:ff:0a: a4:60:ef:94:fc:fb:6e:13:c8:2a:f2:8b:e0:e9:fe: a3:9b:24:3b:9d:ed:e5:21:b2:8a:84:5d:a6:0b:6c: 42:84:7c:37:16:3b:ec:e2:c3:7d:f5:37:31:18:c8: e8:68:8e:63:cb:25:3b:04:bf:66:77:ef:26:0f:31: b0:40:e0:2b:19:6f:ae:76:e4:ca:94:c2:99:ce:9c: c4:62:56:80:05:d2:c6:fa:1a:07:e2:bc:91:71:7b: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1E:FE:09:3B:F0:5C:A6:41:05:2D:5B:47:C6:94:04:DA:78:69:C5 X509v3 Authority Key Identifier: keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32332d3233203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.170.0/23 Signature Algorithm: sha256WithRSAEncryption 17:60:d3:e5:08:c8:0f:98:16:ad:fd:c5:b0:13:83:4b:2b:bb: 7c:a5:b1:32:19:67:4b:b0:22:f6:93:63:f8:c0:d9:da:b9:e3: e9:d0:7b:ae:a7:a0:99:a1:a5:4a:4c:e1:f6:eb:21:c9:05:a4: e3:89:c1:03:17:64:d5:c0:af:b5:a6:4f:45:74:3a:67:e1:c3: 36:d3:5e:5d:1b:8b:d6:17:28:52:ef:b0:b7:f0:04:f4:18:28: b5:0e:30:1b:03:ae:e5:77:9c:e2:9f:ce:9f:dc:fd:65:41:f1: 15:25:d2:03:bc:ae:e3:d8:26:f8:52:81:13:53:b0:91:94:aa: 30:44:61:b4:2d:f0:45:3c:72:16:7a:e2:45:43:60:8f:fe:1e: b6:7b:4d:c3:7f:f3:09:50:0c:a6:91:fd:5b:3d:11:83:a7:d9: 81:15:2f:0e:58:f5:ca:58:69:08:b2:d1:30:63:c8:a1:5c:e1: c4:4f:d4:c0:d6:43:71:95:d0:37:9a:6e:64:8b:68:2e:27:33: cd:34:72:d2:af:06:5c:0a:e9:f5:ac:a1:cb:23:23:72:67:d1: 65:9a:f5:38:b7:e9:fd:6e:f0:ec:0e:05:86:f9:bb:43:5d:6d: 9a:7d:84:e5:25:1a:e5:ff:8a:fa:80:48:f7:92:90:35:52:4f: a4:73:fb:a6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQf1CJKCxXfChdTgB5H2eUl+fzzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx NzM4QzlCQTAeFw0yNTA5MjIxODM1NTNaFw0yNjA5MjExODQwNTNaMDMxMTAvBgNV BAMTKDJCMUVGRTA5M0JGMDVDQTY0MTA1MkQ1QjQ3QzY5NDA0REE3ODY5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0ei0LUYBJdvqXnGE5eZd3L7D K4zhRV3LbQOFmvRZsLCdDWuJMtXPsTkM/a4BDOiV60xPRNKyBJ2y7wy20pbwoSdB m7xOWEDo0Df6T7/4IHgr7n6PRCdVD2Le0FgmTL+VLwqqNy1tPkUnBvVS9JTm7kRi Y0B1S6XkCHRH2pgaNgrijk5C89DsQBSlZ5OtsqxRElGkjmJBzHhc/VcofwBOtxz/ CqRg75T8+24TyCryi+Dp/qObJDud7eUhsoqEXaYLbEKEfDcWO+ziw331NzEYyOho jmPLJTsEv2Z37yYPMbBA4CsZb6525MqUwpnOnMRiVoAF0sb6GgfivJFxezEnAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUKx7+CTvwXKZBBS1bR8aUBNp4acUwHwYDVR0j BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzQzNTJlMzIzMzM4MmUzMTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEt7qowDQYJKoZIhvcNAQELBQADggEBABdg0+UI yA+YFq39xbATg0sru3ylsTIZZ0uwIvaTY/jA2dq54+nQe66noJmhpUpM4fbrIckF pOOJwQMXZNXAr7WmT0V0OmfhwzbTXl0bi9YXKFLvsLfwBPQYKLUOMBsDruV3nOKf zp/c/WVB8RUl0gO8ruPYJvhSgRNTsJGUqjBEYbQt8EU8chZ64kVDYI/+HrZ7TcN/ 8wlQDKaR/Vs9EYOn2YEVLw5Y9cpYaQiy0TBjyKFc4cRP1MDWQ3GV0DeabmSLaC4n M800ctKvBlwK6fWsocsjI3Jn0WWa9Ti36f1u8OwOBYb5u0NdbZp9hOUlGuX/ivqA SPeSkDVST6Rz+6Y= -----END CERTIFICATE-----Generated at Mon Oct 20 20:38:00 2025 by rpki-client