$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa File: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (raw, json) Hash identifier: skjDbIMkBz7HLSub5RR9D55KzuR5gQAwotdB7fShPX8= Subject key identifier: 7A:AE:B0:48:59:30:9F:63:D6:19:60:F6:55:4A:6A:72:2F:01:BE:6F Certificate issuer: /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Certificate serial: 3656220EE61EE91BB03B7D3C046D39FD977AFF55 Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa Signing time: Wed 01 Oct 2025 12:50:27 +0000 ROA not before: Wed 01 Oct 2025 12:45:27 +0000 ROA not after: Wed 30 Sep 2026 12:50:27 +0000 asID: 262899 IP address blocks: 45.165.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 08:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:56:22:0e:e6:1e:e9:1b:b0:3b:7d:3c:04:6d:39:fd:97:7a:ff:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Validity Not Before: Oct 1 12:45:27 2025 GMT Not After : Sep 30 12:50:27 2026 GMT Subject: CN=7AAEB04859309F63D61960F6554A6A722F01BE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:a2:2a:8d:c8:34:b7:7c:c1:82:f3:a1:3e: b5:cd:d4:78:30:b7:f6:7e:6f:4a:9d:65:8a:f4:0a: fa:bb:6c:82:c5:b9:fa:5c:49:36:82:e7:fc:41:77: 1b:b4:fa:fe:85:7c:26:77:5f:a9:a5:5b:e5:53:90: b8:c7:44:54:25:4b:1e:d4:48:51:ba:97:2d:fb:54: 3e:e0:77:44:b8:8b:31:92:d6:5f:3b:66:33:25:04: 6d:de:0b:ec:19:14:04:42:e2:e8:cc:ae:cf:fa:2f: 59:c1:d0:1f:99:4c:11:5c:a6:c9:45:ba:9b:25:18: a7:ac:f5:10:52:70:b2:5e:fd:f4:41:d3:60:b3:c8: 3c:38:88:a6:5c:cf:9c:e7:24:31:ea:31:92:30:54: 70:fe:80:49:a9:c5:1e:ca:f5:71:81:cf:c7:38:98: 09:ae:29:c9:c5:90:a3:53:3f:1d:f9:1c:5a:71:af: b2:6b:49:7a:21:d0:72:88:01:7e:e8:b3:2b:11:4b: c4:19:81:fc:98:47:ac:4f:7b:7b:7f:05:b2:2c:cf: 6a:36:d3:ee:6f:dc:e1:01:c4:34:4f:02:50:07:b0: cc:d7:56:2c:86:17:8b:d0:09:1b:60:f7:0f:41:48: b5:f2:f6:c9:99:e3:ab:69:19:f1:47:6c:96:52:bf: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:B0:48:59:30:9F:63:D6:19:60:F6:55:4A:6A:72:2F:01:BE:6F X509v3 Authority Key Identifier: keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.128.0/23 Signature Algorithm: sha256WithRSAEncryption 37:1c:5f:49:8a:70:3d:0c:cb:d2:eb:39:45:88:be:dc:ef:0f: 47:0f:3f:1e:6c:5c:7c:3e:0b:aa:d1:cb:35:0e:38:4c:12:84: 19:86:77:f8:54:bf:95:8f:56:6d:26:37:2c:8b:06:54:29:ad: e8:bb:7f:72:58:fc:bf:f4:13:1b:1d:c5:82:81:ec:c6:36:50: 78:84:fc:01:82:e1:92:4f:75:3c:00:ae:c0:d8:1f:3c:32:09: 5b:f2:6b:61:f4:19:82:bd:47:cd:30:d7:db:c2:a5:68:de:8e: 4d:a7:74:dc:53:e5:46:f9:88:0f:00:0a:03:7d:63:74:ec:6e: f4:44:f7:40:af:02:9d:ca:49:5b:80:1c:b7:10:3b:8c:18:69: 03:aa:93:61:20:4e:85:5d:92:23:f1:c9:9b:0e:a1:cd:04:fe: b4:2f:78:1b:63:da:eb:41:f1:28:bd:eb:db:2a:ff:06:d8:38: fe:ed:6c:c5:cd:bc:a8:58:7c:a4:8c:7f:ac:df:cc:8a:5e:60: 26:89:70:29:0d:b7:7c:e0:10:83:6d:b8:76:2a:dc:07:57:75: 2d:8a:67:51:c5:a8:cd:d4:4b:50:65:61:f4:ec:66:95:41:00: ec:90:50:f0:58:5d:1e:77:a7:8d:38:05:36:61:b9:d2:bb:09: 69:d6:b3:53 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNlYiDuYe6RuwO308BG05/Zd6/1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM2NThDNkU1RDlCRjgwQzBENTA1RTRBRjc3MkZDOTI2 RkMyOEM1NjAeFw0yNTEwMDExMjQ1MjdaFw0yNjA5MzAxMjUwMjdaMDMxMTAvBgNV BAMTKDdBQUVCMDQ4NTkzMDlGNjNENjE5NjBGNjU1NEE2QTcyMkYwMUJFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VKIqjcg0t3zBgvOhPrXN1Hgw t/Z+b0qdZYr0Cvq7bILFufpcSTaC5/xBdxu0+v6FfCZ3X6mlW+VTkLjHRFQlSx7U SFG6ly37VD7gd0S4izGS1l87ZjMlBG3eC+wZFARC4ujMrs/6L1nB0B+ZTBFcpslF upslGKes9RBScLJe/fRB02CzyDw4iKZcz5znJDHqMZIwVHD+gEmpxR7K9XGBz8c4 mAmuKcnFkKNTPx35HFpxr7JrSXoh0HKIAX7osysRS8QZgfyYR6xPe3t/BbIsz2o2 0+5v3OEBxDRPAlAHsMzXViyGF4vQCRtg9w9BSLXy9smZ46tpGfFHbJZSv2l1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUeq6wSFkwn2PWGWD2VUpqci8Bvm8wHwYDVR0j BBgwFoAUnGWMbl2b+AwNUF5K93L8km/CjFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k OFgvMC85QzY1OEM2RTVEOUJGODBDMEQ1MDVFNEFGNzcyRkM5MjZGQzI4QzU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjU4QzZFNUQ5QkY4MEMw RDUwNUU0QUY3NzJGQzkyNkZDMjhDNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv MzQzNTJlMzEzNjM1MmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtpYAwDQYJKoZIhvcNAQELBQADggEBADccX0mK cD0My9LrOUWIvtzvD0cPPx5sXHw+C6rRyzUOOEwShBmGd/hUv5WPVm0mNyyLBlQp rei7f3JY/L/0ExsdxYKB7MY2UHiE/AGC4ZJPdTwArsDYHzwyCVvya2H0GYK9R80w 19vCpWjejk2ndNxT5Ub5iA8ACgN9Y3TsbvRE90CvAp3KSVuAHLcQO4wYaQOqk2Eg ToVdkiPxyZsOoc0E/rQveBtj2utB8Si969sq/wbYOP7tbMXNvKhYfKSMf6zfzIpe YCaJcCkNt3zgEINtuHYq3AdXdS2KZ1HFqM3US1BlYfTsZpVBAOyQUPBYXR53p404 BTZhudK7CWnWs1M= -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:14 2025 by rpki-client