$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa File: 34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa (raw, json) Hash identifier: eguUN6Rh/aQVJIE3fCrj8DtxSdCuIpmQ0StziQKnD1U= Subject key identifier: 4A:B9:EB:28:F8:E3:81:4C:53:AB:96:FB:ED:DD:B9:C8:16:18:32:4C Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Certificate serial: 640A1D1A99BC4C68E01B8EA1143EEA316760BB04 Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa Signing time: Mon 22 Sep 2025 18:40:54 +0000 ROA not before: Mon 22 Sep 2025 18:35:54 +0000 ROA not after: Mon 21 Sep 2026 18:40:54 +0000 asID: 268341 IP address blocks: 45.238.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0a:1d:1a:99:bc:4c:68:e0:1b:8e:a1:14:3e:ea:31:67:60:bb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Validity Not Before: Sep 22 18:35:54 2025 GMT Not After : Sep 21 18:40:54 2026 GMT Subject: CN=4AB9EB28F8E3814C53AB96FBEDDDB9C81618324C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:c5:7d:ca:f8:98:dd:56:1b:bb:09:2b:8c: 12:c7:a6:0e:a6:b2:d3:1e:1c:e2:8e:7f:14:31:b5: 5c:f9:41:ca:fe:d3:5f:fb:34:cb:92:9f:42:ca:6f: cb:cc:53:10:19:7b:27:ab:00:0a:e4:c1:ba:4d:19: 6b:0f:71:c0:0b:af:16:dc:7e:9d:58:c1:c4:f5:73: cf:ef:b4:69:23:11:72:9f:4c:7f:89:4b:cd:91:87: 42:69:91:10:b4:07:3f:33:60:e4:e1:0f:86:76:2e: cf:50:a9:e1:c4:d4:e1:d8:8c:5c:cc:25:57:2a:1b: 2e:8f:99:38:9b:0c:e1:38:a9:d7:3e:0e:6b:fc:77: 4a:5c:73:2e:24:52:3b:bb:cd:b5:bf:c6:d3:de:d8: f2:a4:ce:73:cd:c3:0e:3f:43:55:5d:09:23:c1:3c: 8c:26:bf:99:bd:c1:80:47:cf:1b:76:48:7e:00:e0: 49:29:b2:47:59:b1:bb:81:aa:f3:ea:ab:26:89:f4: d6:dc:66:7d:0c:01:c5:a9:71:bc:17:f2:f7:6a:13: cb:01:78:81:54:d5:96:57:d6:e1:04:44:86:28:d4: 54:7d:32:ff:7e:e3:54:9f:4f:21:ab:14:26:3d:d0: ff:fe:17:70:fd:7e:46:ab:1a:f3:d1:89:09:62:dc: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B9:EB:28:F8:E3:81:4C:53:AB:96:FB:ED:DD:B9:C8:16:18:32:4C X509v3 Authority Key Identifier: keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.171.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:9c:63:3e:0e:dd:82:99:65:ed:85:84:5b:d8:70:51:43:8d: dd:49:73:e3:70:02:16:26:b7:86:c1:05:40:05:e2:59:63:39: 23:cb:bf:93:89:89:ee:8d:24:30:7d:a7:ac:7c:19:24:01:0e: e9:e0:a3:d2:a8:f4:a3:1e:0a:f0:5d:79:18:0d:fd:e8:0b:83: 00:33:e6:f4:df:4e:d7:ce:d0:9d:c6:5b:14:05:7a:7b:97:92: 24:e5:af:69:8a:a5:ce:38:96:f6:97:b7:f1:35:af:5b:02:79: 70:ad:df:99:56:a8:f1:0a:e4:ad:da:33:9b:de:2f:89:02:71: f6:b1:ff:f6:39:8a:c0:3a:9f:61:d8:fd:6e:ea:a1:50:82:65: 24:8a:40:6a:08:84:d2:c0:0c:74:41:12:b1:c0:c2:07:99:c1: dc:82:7f:71:44:d2:56:38:2e:aa:fe:dd:a2:11:38:a9:06:71: 53:44:a9:8c:b9:82:96:ea:a6:c8:28:49:b4:38:0f:5c:02:eb: 01:ea:c4:eb:f4:fb:ab:1c:6c:6c:8c:55:ca:c1:97:2d:e7:7b: 13:a3:58:a7:84:25:06:c4:6e:6b:2a:b7:15:7a:4c:3e:17:13: 8d:d7:27:25:4a:dd:f6:ab:75:37:fe:fd:2a:f0:24:cf:46:75: d9:98:b1:00 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZAodGpm8TGjgG46hFD7qMWdguwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx NzM4QzlCQTAeFw0yNTA5MjIxODM1NTRaFw0yNjA5MjExODQwNTRaMDMxMTAvBgNV BAMTKDRBQjlFQjI4RjhFMzgxNEM1M0FCOTZGQkVERERCOUM4MTYxODMyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjMV9yviY3VYbuwkrjBLHpg6m stMeHOKOfxQxtVz5Qcr+01/7NMuSn0LKb8vMUxAZeyerAArkwbpNGWsPccALrxbc fp1YwcT1c8/vtGkjEXKfTH+JS82Rh0JpkRC0Bz8zYOThD4Z2Ls9QqeHE1OHYjFzM JVcqGy6PmTibDOE4qdc+Dmv8d0pccy4kUju7zbW/xtPe2PKkznPNww4/Q1VdCSPB PIwmv5m9wYBHzxt2SH4A4EkpskdZsbuBqvPqqyaJ9NbcZn0MAcWpcbwX8vdqE8sB eIFU1ZZX1uEERIYo1FR9Mv9+41SfTyGrFCY90P/+F3D9fkarGvPRiQli3AVdAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSrnrKPjjgUxTq5b77d25yBYYMkwwHwYDVR0j BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzQzNTJlMzIzMzM4MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt7qswDQYJKoZIhvcNAQELBQADggEBAE2cYz4O 3YKZZe2FhFvYcFFDjd1Jc+NwAhYmt4bBBUAF4lljOSPLv5OJie6NJDB9p6x8GSQB Dungo9Ko9KMeCvBdeRgN/egLgwAz5vTfTtfO0J3GWxQFenuXkiTlr2mKpc44lvaX t/E1r1sCeXCt35lWqPEK5K3aM5veL4kCcfax//Y5isA6n2HY/W7qoVCCZSSKQGoI hNLADHRBErHAwgeZwdyCf3FE0lY4Lqr+3aIROKkGcVNEqYy5gpbqpsgoSbQ4D1wC 6wHqxOv0+6scbGyMVcrBly3nexOjWKeEJQbEbmsqtxV6TD4XE43XJyVK3fardTf+ /SrwJM9GddmYsQA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:12 2025 by rpki-client