$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa File: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (raw, json) Hash identifier: ykG0t3865bduL23IsP3xqz/IsUEOucU/pL2ImcJIMYE= Subject key identifier: 7E:2C:F9:47:BE:19:C2:07:12:A0:C4:D9:24:BD:6F:93:B9:86:70:BB Certificate issuer: /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Certificate serial: 4DD81589906F20AE00259FB4A8DBB37E9159A3EA Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa Signing time: Wed 01 Oct 2025 12:50:26 +0000 ROA not before: Wed 01 Oct 2025 12:45:26 +0000 ROA not after: Wed 30 Sep 2026 12:50:26 +0000 asID: 262899 IP address blocks: 45.165.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 08:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d8:15:89:90:6f:20:ae:00:25:9f:b4:a8:db:b3:7e:91:59:a3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Validity Not Before: Oct 1 12:45:26 2025 GMT Not After : Sep 30 12:50:26 2026 GMT Subject: CN=7E2CF947BE19C20712A0C4D924BD6F93B98670BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:ad:a7:2a:96:06:82:25:d9:55:c5:bf:6e: 25:06:a3:b2:82:89:5f:1e:ee:ea:97:60:98:44:53: 3b:77:10:b4:8e:06:c6:35:34:c8:d8:e8:0c:50:a2: 22:a9:f7:fe:6a:38:9e:ec:0c:74:77:cb:ed:1a:89: c6:dc:21:c9:2f:ef:bf:19:ce:c4:73:e6:95:7e:8e: 81:c3:12:ff:69:49:cf:e7:98:ea:de:2e:de:11:52: fe:c9:57:e2:8e:ae:79:64:93:ab:c6:24:25:fc:ff: 8c:e1:3d:62:7c:6c:ad:53:83:86:9b:e2:bb:10:31: f8:62:6b:97:f0:23:dc:d4:f4:0f:15:4c:bc:55:62: e2:7b:9c:e4:1e:42:d9:bb:ba:34:cc:85:c8:15:9d: 94:37:6c:3f:fb:c7:f7:8b:7d:ef:d5:f2:d0:56:f2: 20:f4:f0:65:7c:39:c6:91:41:ec:d5:1d:9f:46:c3: b9:9a:2d:a4:9c:89:b0:65:c7:9c:99:bf:42:cd:5d: 2c:d3:f9:27:4e:6a:b2:76:9c:3f:56:f9:3f:60:8a: 68:60:0e:da:a0:98:98:35:b2:a7:67:f1:82:2e:62: ce:3e:37:44:04:59:2e:20:94:19:a0:2e:ad:51:47: 71:98:fe:b0:a6:25:9e:3a:e2:46:a1:89:78:2b:a8: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2C:F9:47:BE:19:C2:07:12:A0:C4:D9:24:BD:6F:93:B9:86:70:BB X509v3 Authority Key Identifier: keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.131.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d1:ed:e2:14:ad:9a:48:88:ea:eb:e3:8d:fb:9b:66:fa:0a: 9f:79:d4:47:8a:d7:33:1d:db:ca:15:fe:fe:4c:9f:11:e4:48: 2d:f4:fc:f5:44:d0:29:94:15:2e:e1:c4:4e:d6:f0:ac:fa:1e: 29:f3:35:fa:45:48:1c:5f:2a:c7:82:dc:28:39:69:5e:9e:5a: fc:b8:83:ba:01:70:5c:9d:61:9a:72:4e:02:ff:96:8c:f5:4d: 56:2d:16:0d:7f:fd:68:76:26:f0:5d:31:df:de:6e:ad:8e:40: 3d:c7:d2:a3:41:79:d3:15:63:80:2b:2d:4a:dc:d3:7b:22:2f: 34:50:e1:9b:fb:2e:6f:0d:83:bb:45:62:1e:7f:58:84:1c:90: a4:c7:43:de:fb:3a:4b:5d:c4:30:be:38:a7:2c:66:0f:24:fa: 0f:be:b5:f2:63:5f:ec:3a:05:e0:81:a7:6a:47:e6:11:0e:56: 6a:a7:64:ed:5c:51:82:39:da:10:b5:64:37:48:6b:9d:07:27: 86:62:92:dd:d4:9f:38:17:66:23:ab:13:3e:cc:a3:c5:27:ed: 5f:7f:9e:a0:fc:38:d6:36:d1:95:78:a2:c9:1d:af:17:e3:aa: 4e:31:36:c7:c3:a2:59:de:bf:3e:96:3f:45:84:a0:87:4d:b7: e6:81:37:06 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTdgViZBvIK4AJZ+0qNuzfpFZo+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM2NThDNkU1RDlCRjgwQzBENTA1RTRBRjc3MkZDOTI2 RkMyOEM1NjAeFw0yNTEwMDExMjQ1MjZaFw0yNjA5MzAxMjUwMjZaMDMxMTAvBgNV BAMTKDdFMkNGOTQ3QkUxOUMyMDcxMkEwQzREOTI0QkQ2RjkzQjk4NjcwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXna2nKpYGgiXZVcW/biUGo7KC iV8e7uqXYJhEUzt3ELSOBsY1NMjY6AxQoiKp9/5qOJ7sDHR3y+0aicbcIckv778Z zsRz5pV+joHDEv9pSc/nmOreLt4RUv7JV+KOrnlkk6vGJCX8/4zhPWJ8bK1Tg4ab 4rsQMfhia5fwI9zU9A8VTLxVYuJ7nOQeQtm7ujTMhcgVnZQ3bD/7x/eLfe/V8tBW 8iD08GV8OcaRQezVHZ9Gw7maLaScibBlx5yZv0LNXSzT+SdOarJ2nD9W+T9gimhg DtqgmJg1sqdn8YIuYs4+N0QEWS4glBmgLq1RR3GY/rCmJZ464kahiXgrqIyXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUfiz5R74ZwgcSoMTZJL1vk7mGcLswHwYDVR0j BBgwFoAUnGWMbl2b+AwNUF5K93L8km/CjFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k OFgvMC85QzY1OEM2RTVEOUJGODBDMEQ1MDVFNEFGNzcyRkM5MjZGQzI4QzU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjU4QzZFNUQ5QkY4MEMw RDUwNUU0QUY3NzJGQzkyNkZDMjhDNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv MzQzNTJlMzEzNjM1MmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtpYMwDQYJKoZIhvcNAQELBQADggEBACbR7eIU rZpIiOrr4437m2b6Cp951EeK1zMd28oV/v5MnxHkSC30/PVE0CmUFS7hxE7W8Kz6 HinzNfpFSBxfKseC3Cg5aV6eWvy4g7oBcFydYZpyTgL/loz1TVYtFg1//Wh2JvBd Md/ebq2OQD3H0qNBedMVY4ArLUrc03siLzRQ4Zv7Lm8Ng7tFYh5/WIQckKTHQ977 OktdxDC+OKcsZg8k+g++tfJjX+w6BeCBp2pH5hEOVmqnZO1cUYI52hC1ZDdIa50H J4Zikt3UnzgXZiOrEz7Mo8Un7V9/nqD8ONY20ZV4oskdrxfjqk4xNsfDolnevz6W P0WEoIdNt+aBNwY= -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:13 2025 by rpki-client