$ rpki-client -vvf rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa File: 34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa (raw, json) Hash identifier: Jp6O41V1NVO0Szi2b0CjFN+43cQ3amCvqcyMgEZCQPU= Subject key identifier: 42:AF:35:E4:4A:BF:27:78:C1:25:A9:C1:15:ED:EA:14:BD:99:29:97 Certificate issuer: /CN=1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1 Certificate serial: 2DF65FA2AA848EEE64F59E879D8C535617ED5DBC Authority key identifier: 1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa Signing time: Tue 24 Mar 2026 14:01:13 +0000 ROA not before: Tue 24 Mar 2026 13:56:13 +0000 ROA not after: Tue 23 Mar 2027 14:01:13 +0000 asID: 267198 IP address blocks: 45.231.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.crl rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 16:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f6:5f:a2:aa:84:8e:ee:64:f5:9e:87:9d:8c:53:56:17:ed:5d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1 Validity Not Before: Mar 24 13:56:13 2026 GMT Not After : Mar 23 14:01:13 2027 GMT Subject: CN=42AF35E44ABF2778C125A9C115EDEA14BD992997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:bb:75:76:11:26:69:28:30:4a:57:be:28: 3a:3d:e4:3e:cf:c3:b9:dc:24:51:07:ed:d5:f5:16: d2:d4:8f:14:52:d8:8c:1e:75:22:03:1f:f7:6a:32: 9a:2e:1d:1c:95:d0:89:ef:63:79:d1:2e:4f:3c:73: c2:3c:e0:91:cf:fa:e8:f3:7e:c9:15:20:59:a3:7f: a5:38:86:d3:01:65:28:1a:4a:84:75:03:3a:9e:8b: 07:b9:37:a8:86:62:78:c7:93:7c:81:68:b3:66:95: 05:f6:26:d1:8d:ce:b2:40:15:7b:d9:72:2f:b7:c2: 55:36:d8:c5:c4:07:ca:a7:78:f5:f9:30:14:32:52: 5a:c6:ad:c8:91:be:ca:4f:15:c3:2a:36:0f:93:35: cb:eb:bc:6a:19:a2:ad:a1:a2:a3:15:34:a8:a5:64: 7e:c9:16:04:da:99:6b:fe:21:e0:09:b3:57:d2:e0: 08:08:51:29:38:81:e3:1a:e8:e9:d6:04:fb:a1:6d: 35:0e:f2:32:07:84:d1:0b:57:60:1a:08:13:80:5a: 43:60:5e:7a:d6:ff:b1:e3:a9:8f:31:30:f9:a0:a3: 2b:7f:9e:24:53:66:71:27:ab:6c:4e:83:8a:af:7e: 0a:c6:09:2a:6b:93:93:cf:79:37:58:e9:4a:b2:7e: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AF:35:E4:4A:BF:27:78:C1:25:A9:C1:15:ED:EA:14:BD:99:29:97 X509v3 Authority Key Identifier: keyid:1A:D5:26:2B:FA:23:BB:41:CD:0B:D6:C4:C3:1C:31:9F:D5:61:EC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AD5262BFA23BB41CD0BD6C4C31C319FD561ECC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/34352e3233312e3132342e302f32322d3332203d3e20323637313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.231.124.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:25:3a:4c:92:cb:1f:c2:0b:00:17:7f:95:c9:2e:50:6a:d8: d8:9f:fa:23:1c:8a:af:ad:f6:1d:ee:ba:4f:d8:71:0e:6f:73: 61:c6:15:9a:eb:b2:45:6c:e9:8d:3e:b2:5e:0f:44:69:1c:8a: 72:ee:4b:1b:23:c2:e1:95:08:98:f8:28:ae:6a:eb:fa:56:69: 10:21:c0:03:9e:7a:d1:86:03:d3:55:4b:30:e1:b8:4a:83:a3: e7:0d:14:e8:13:76:23:44:95:49:9c:49:68:a2:53:19:96:62: 96:4c:30:b8:86:ff:82:42:53:dd:3a:74:ff:42:6a:41:46:33: 19:c2:35:13:01:20:15:1d:21:33:a9:59:45:74:61:72:64:91: 10:6d:09:5b:89:93:c0:34:eb:9a:9c:03:49:4f:99:2f:ac:22: 9c:37:37:03:06:b0:fc:12:92:7b:27:a4:1f:f2:eb:fe:bd:d3: 69:fb:e5:9a:47:e6:56:c8:1a:56:4b:38:5c:99:ff:a4:5f:29: 10:7c:7a:fa:40:3b:ad:36:af:b6:cc:ee:7a:88:6d:5e:04:58: e0:6b:2c:95:17:02:82:a6:0c:9d:c1:8d:11:d3:6e:5c:f1:7b: 5a:54:50:a3:eb:91:d6:52:39:97:d7:ce:1f:d2:d0:7a:0f:d7: c5:71:1e:2d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULfZfoqqEju5k9Z6HnYxTVhftXbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTI2MkJGQTIzQkI0MUNEMEJENkM0QzMxQzMxOUZE NTYxRUNDMTAeFw0yNjAzMjQxMzU2MTNaFw0yNzAzMjMxNDAxMTNaMDMxMTAvBgNV BAMTKDQyQUYzNUU0NEFCRjI3NzhDMTI1QTlDMTE1RURFQTE0QkQ5OTI5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+7t1dhEmaSgwSle+KDo95D7P w7ncJFEH7dX1FtLUjxRS2IwedSIDH/dqMpouHRyV0InvY3nRLk88c8I84JHP+ujz fskVIFmjf6U4htMBZSgaSoR1Azqeiwe5N6iGYnjHk3yBaLNmlQX2JtGNzrJAFXvZ ci+3wlU22MXEB8qnePX5MBQyUlrGrciRvspPFcMqNg+TNcvrvGoZoq2hoqMVNKil ZH7JFgTamWv+IeAJs1fS4AgIUSk4geMa6OnWBPuhbTUO8jIHhNELV2AaCBOAWkNg XnrW/7HjqY8xMPmgoyt/niRTZnEnq2xOg4qvfgrGCSprk5PPeTdY6UqyfmRlAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQq815Eq/J3jBJanBFe3qFL2ZKZcwHwYDVR0j BBgwFoAUGtUmK/oju0HNC9bEwxwxn9Vh7MEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2c3QlBLaDFXMXJvUm9kQURyTTVTQkM3azhvN3BURVRZdGg4eW8zb1NO ZGovMC8xQUQ1MjYyQkZBMjNCQjQxQ0QwQkQ2QzRDMzFDMzE5RkQ1NjFFQ0MxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRDUyNjJCRkEyM0JCNDFD RDBCRDZDNEMzMUMzMTlGRDU2MUVDQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdnN0JQS2gxVzFyb1JvZEFEck01U0JDN2s4bzdwVEVUWXRoOHlvM29TTmRqLzAv MzQzNTJlMzIzMzMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzczMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt53wwDQYJKoZIhvcNAQELBQADggEBAColOkyS yx/CCwAXf5XJLlBq2Nif+iMciq+t9h3uuk/YcQ5vc2HGFZrrskVs6Y0+sl4PRGkc inLuSxsjwuGVCJj4KK5q6/pWaRAhwAOeetGGA9NVSzDhuEqDo+cNFOgTdiNElUmc SWiiUxmWYpZMMLiG/4JCU906dP9CakFGMxnCNRMBIBUdITOpWUV0YXJkkRBtCVuJ k8A065qcA0lPmS+sIpw3NwMGsPwSknsnpB/y6/6902n75ZpH5lbIGlZLOFyZ/6Rf KRB8evpAO602r7bM7nqIbV4EWOBrLJUXAoKmDJ3BjRHTblzxe1pUUKPrkdZSOZfX zh/S0HoP18VxHi0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:05 2026 by rpki-client