$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa File: 3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (raw, json) Hash identifier: gsgnsrmcAMo9Uh0v77cXLF7vjcShyal3Mn1aJs7V4Hw= Subject key identifier: 30:9C:49:C3:2C:52:FD:2C:9A:AE:37:13:02:F8:57:55:16:12:C4:A5 Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Certificate serial: 541E8103DE0D5A8D4E8E0C0C28A00386670AE06C Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa Signing time: Thu 06 Mar 2025 00:58:53 +0000 ROA not before: Thu 06 Mar 2025 00:53:53 +0000 ROA not after: Thu 05 Mar 2026 00:58:53 +0000 asID: 52639 IP address blocks: 168.195.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1e:81:03:de:0d:5a:8d:4e:8e:0c:0c:28:a0:03:86:67:0a:e0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Validity Not Before: Mar 6 00:53:53 2025 GMT Not After : Mar 5 00:58:53 2026 GMT Subject: CN=309C49C32C52FD2C9AAE371302F857551612C4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:f9:24:3f:c2:60:0c:76:42:b4:be:ae:b0: 11:ee:70:68:2d:92:ce:a7:d0:76:bf:6c:1b:23:4d: 0d:34:2d:99:c2:36:f4:d5:49:e0:37:40:b9:cf:dd: 4c:3e:a6:6f:8e:3a:16:fb:03:26:22:16:2b:5e:86: 75:b1:e3:64:b5:43:f5:34:91:54:d1:52:2c:b5:db: 12:d2:b0:10:7a:ed:c8:19:e1:ad:55:a4:cb:d6:71: 39:9b:96:ed:ed:10:03:d7:86:50:58:3c:f7:57:0f: 42:d4:4a:80:67:f0:ab:d3:2b:5e:d1:29:53:bc:b8: de:9c:c9:ba:8e:54:cc:dd:d2:47:cc:6e:bd:d9:2b: b8:16:82:ff:ab:b1:f4:f1:e1:5b:f7:45:e7:37:35: 68:bc:27:e1:a0:2d:0b:2e:fc:3e:d8:97:5c:b6:bd: 81:e6:60:ad:1a:ce:f1:72:59:56:6b:e9:d8:31:bd: 1e:65:fe:c8:31:18:41:51:25:dc:b1:bc:ff:48:20: 5f:3b:e5:e3:6f:d0:ff:34:64:ed:03:da:8f:ca:7c: 7a:2c:18:17:e9:05:28:ed:45:64:44:cc:34:5a:34: 39:ff:89:eb:12:0b:1d:b2:37:71:78:00:c2:5f:6c: 99:ee:dd:e5:7e:6b:2f:83:86:52:c0:76:7b:81:99: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:49:C3:2C:52:FD:2C:9A:AE:37:13:02:F8:57:55:16:12:C4:A5 X509v3 Authority Key Identifier: keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.112.0/22 Signature Algorithm: sha256WithRSAEncryption 43:82:d7:41:90:56:21:83:b3:09:37:6b:f9:52:76:35:72:d3: d7:84:3d:c3:bd:3d:ca:b8:67:a0:a3:48:32:c6:25:94:8e:7f: 86:f9:1e:25:47:62:5b:89:f8:13:24:87:5e:dd:9e:a3:ad:0f: 8a:35:c7:08:ea:37:d5:1c:ad:99:2b:21:91:6e:32:7a:d0:cc: 0b:42:b3:07:7a:f9:b6:31:21:9d:f1:9d:f5:67:49:4f:44:d2: c5:a0:de:fd:13:9c:b0:a4:79:2d:99:4b:f4:a9:20:8f:03:e9: 5c:d4:bb:f8:f7:08:7f:c5:85:e6:aa:db:86:a8:dd:ed:eb:3a: b6:62:58:ae:d5:b3:a7:43:43:bf:ec:09:7e:2a:a2:8e:c7:fc: f2:ae:8e:97:59:5c:34:fe:49:ef:81:5a:2a:6f:bf:04:3f:85: 53:d5:b0:dd:9c:61:ca:bc:6c:2f:e5:43:1b:d7:50:d8:3a:57: 3c:27:0a:b0:f7:0c:b8:61:c8:e5:7c:db:ba:3a:41:e1:07:f9: bf:80:91:47:e8:c7:99:2c:12:16:71:06:0f:99:78:92:79:9c: 44:4a:27:98:a4:ac:f3:d8:87:53:1f:5c:26:89:60:5c:54:d2: 53:29:4c:e1:cd:a0:2c:b6:77:f4:40:8c:9d:40:5d:cc:89:d2: 59:31:48:c1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVB6BA94NWo1OjgwMKKADhmcK4GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB QzNDQzVBMjAeFw0yNTAzMDYwMDUzNTNaFw0yNjAzMDUwMDU4NTNaMDMxMTAvBgNV BAMTKDMwOUM0OUMzMkM1MkZEMkM5QUFFMzcxMzAyRjg1NzU1MTYxMkM0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTfkkP8JgDHZCtL6usBHucGgt ks6n0Ha/bBsjTQ00LZnCNvTVSeA3QLnP3Uw+pm+OOhb7AyYiFitehnWx42S1Q/U0 kVTRUiy12xLSsBB67cgZ4a1VpMvWcTmblu3tEAPXhlBYPPdXD0LUSoBn8KvTK17R KVO8uN6cybqOVMzd0kfMbr3ZK7gWgv+rsfTx4Vv3Rec3NWi8J+GgLQsu/D7Yl1y2 vYHmYK0azvFyWVZr6dgxvR5l/sgxGEFRJdyxvP9IIF875eNv0P80ZO0D2o/KfHos GBfpBSjtRWREzDRaNDn/iesSCx2yN3F4AMJfbJnu3eV+ay+DhlLAdnuBmcBPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUMJxJwyxS/SyarjcTAvhXVRYSxKUwHwYDVR0j BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2 QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv MzEzNjM4MmUzMTM5MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKow3AwDQYJKoZIhvcNAQELBQADggEBAEOC10GQ ViGDswk3a/lSdjVy09eEPcO9Pcq4Z6CjSDLGJZSOf4b5HiVHYluJ+BMkh17dnqOt D4o1xwjqN9UcrZkrIZFuMnrQzAtCswd6+bYxIZ3xnfVnSU9E0sWg3v0TnLCkeS2Z S/SpII8D6VzUu/j3CH/Fheaq24ao3e3rOrZiWK7Vs6dDQ7/sCX4qoo7H/PKujpdZ XDT+Se+BWipvvwQ/hVPVsN2cYcq8bC/lQxvXUNg6VzwnCrD3DLhhyOV827o6QeEH +b+AkUfox5ksEhZxBg+ZeJJ5nERKJ5ikrPPYh1MfXCaJYFxU0lMpTOHNoCy2d/RA jJ1AXcyJ0lkxSME= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:48 2025 by rpki-client