$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa File: 34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa (raw, json) Hash identifier: 4/UJFzOHwVR3GCyzVdtqy9y6df7puefAL7suYXIwdAM= Subject key identifier: B4:8A:3E:C7:83:7C:B1:3C:4F:08:BA:E8:30:DA:5F:46:A2:E7:7D:66 Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Certificate serial: 328BDE816C6825038A10EDC4145DAD03029BB3E7 Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa Signing time: Mon 22 Sep 2025 18:40:50 +0000 ROA not before: Mon 22 Sep 2025 18:35:50 +0000 ROA not after: Mon 21 Sep 2026 18:40:50 +0000 asID: 268341 IP address blocks: 45.238.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8b:de:81:6c:68:25:03:8a:10:ed:c4:14:5d:ad:03:02:9b:b3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Validity Not Before: Sep 22 18:35:50 2025 GMT Not After : Sep 21 18:40:50 2026 GMT Subject: CN=B48A3EC7837CB13C4F08BAE830DA5F46A2E77D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:6d:94:bb:13:85:ef:4c:be:74:d7:ea:08: 70:2d:4c:b7:33:9b:13:af:b4:51:3f:8f:87:cc:a4: 8f:8b:c1:e2:ef:30:4d:b1:dd:a2:3d:6d:b2:d0:df: e5:c0:b6:d3:bb:5e:b7:a8:43:9e:54:70:ec:e4:4c: e1:1b:1f:f4:66:7f:eb:f9:fe:09:d0:c8:ea:e8:17: e8:64:b8:5e:da:9e:7b:30:d2:37:0b:85:50:fa:d8: a9:10:36:50:2f:45:a5:51:9b:03:73:91:ca:c8:ba: 0d:18:91:86:d3:ac:3b:9d:68:5c:91:62:61:fc:cb: 05:c7:81:8a:c9:17:5f:57:5f:f9:61:91:e3:c4:a5: 27:1c:ac:fe:a4:a3:5f:3c:d1:ad:7f:ce:d9:0a:33: 6e:f2:fb:13:23:a9:dc:40:c9:45:a7:b5:2d:6b:a3: c8:de:f7:e8:b6:1f:f0:46:a9:88:39:f5:ea:29:62: e6:d0:8b:33:c7:76:80:0e:42:d6:f7:0d:92:c4:15: 30:2c:28:81:5b:38:ed:24:94:d4:74:e0:cf:49:b3: 60:5e:32:6b:ac:60:80:88:8a:ab:90:93:d2:3b:ea: ac:31:ed:e4:04:74:96:f7:13:34:0b:94:81:0e:4d: 10:8f:e2:2b:b1:21:67:f9:8d:46:d0:15:85:cf:2e: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:3E:C7:83:7C:B1:3C:4F:08:BA:E8:30:DA:5F:46:A2:E7:7D:66 X509v3 Authority Key Identifier: keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137302e302f32342d3234203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.170.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c9:03:e9:5c:54:fc:b3:2f:c1:50:24:67:69:7e:fe:93:81: 5e:81:8c:03:d1:76:cf:5b:60:29:96:d5:cc:86:5b:76:df:d8: 22:f3:e9:eb:1a:2b:69:45:1b:f1:79:57:d0:b9:72:0e:68:82: e8:7b:7c:f5:5b:9e:87:9c:6d:22:8b:18:01:18:38:56:bf:0c: 6a:cc:83:70:37:bc:85:62:f2:a0:44:17:c0:38:60:09:32:5b: dc:7d:a4:1a:91:42:08:f6:41:3a:ab:d2:71:99:13:9e:21:02: eb:86:48:ef:0e:1d:d0:56:5f:48:87:af:54:17:ae:19:35:33: 52:7e:9e:ef:c4:54:55:c4:70:63:ea:24:b4:ee:8c:6c:d3:02: f0:88:f7:eb:54:12:88:d1:fd:43:2c:dd:68:24:83:11:0a:97: 0d:e0:48:5b:19:2e:1c:c8:d3:4d:d2:be:38:44:ce:71:16:11: 3c:f7:ad:61:62:60:d1:bf:14:07:b6:12:f2:a9:c7:90:66:eb: dd:67:24:9e:49:68:6c:91:f5:ea:de:96:ef:29:04:89:54:ac: 10:e4:5c:16:d2:52:a7:da:cc:45:6c:34:c0:01:21:e1:d0:56: ba:82:34:ab:b9:b1:01:21:4f:cc:5d:28:e7:85:95:8c:c7:34: 04:f3:c7:55 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMovegWxoJQOKEO3EFF2tAwKbs+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx NzM4QzlCQTAeFw0yNTA5MjIxODM1NTBaFw0yNjA5MjExODQwNTBaMDMxMTAvBgNV BAMTKEI0OEEzRUM3ODM3Q0IxM0M0RjA4QkFFODMwREE1RjQ2QTJFNzdENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOm2UuxOF70y+dNfqCHAtTLcz mxOvtFE/j4fMpI+LweLvME2x3aI9bbLQ3+XAttO7XreoQ55UcOzkTOEbH/Rmf+v5 /gnQyOroF+hkuF7annsw0jcLhVD62KkQNlAvRaVRmwNzkcrIug0YkYbTrDudaFyR YmH8ywXHgYrJF19XX/lhkePEpSccrP6ko1880a1/ztkKM27y+xMjqdxAyUWntS1r o8je9+i2H/BGqYg59eopYubQizPHdoAOQtb3DZLEFTAsKIFbOO0klNR04M9Js2Be MmusYICIiquQk9I76qwx7eQEdJb3EzQLlIEOTRCP4iuxIWf5jUbQFYXPLmvrAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUtIo+x4N8sTxPCLroMNpfRqLnfWYwHwYDVR0j BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzQzNTJlMzIzMzM4MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt7qowDQYJKoZIhvcNAQELBQADggEBAAnJA+lc VPyzL8FQJGdpfv6TgV6BjAPRds9bYCmW1cyGW3bf2CLz6esaK2lFG/F5V9C5cg5o guh7fPVbnoecbSKLGAEYOFa/DGrMg3A3vIVi8qBEF8A4YAkyW9x9pBqRQgj2QTqr 0nGZE54hAuuGSO8OHdBWX0iHr1QXrhk1M1J+nu/EVFXEcGPqJLTujGzTAvCI9+tU EojR/UMs3WgkgxEKlw3gSFsZLhzI003SvjhEznEWETz3rWFiYNG/FAe2EvKpx5Bm 691nJJ5JaGyR9erelu8pBIlUrBDkXBbSUqfazEVsNMABIeHQVrqCNKu5sQEhT8xd KOeFlYzHNATzx1U= -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:12 2025 by rpki-client