$ rpki-client -vvvf rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa File: 34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa (raw, json) Hash identifier: ZZy7LdQPFzISfg0i4tLBwbQszVc0haFn9sP0hf+x8lE= Subject key identifier: DA:57:DE:B2:4D:A6:C4:28:7D:9C:C9:39:B4:31:02:98:7B:B2:69:FD Certificate issuer: /CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Certificate serial: 22D99E95CE009777DE24419E9318CA86033C19B3 Authority key identifier: 3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa Signing time: Wed 09 Sep 2026 02:22:02 +0000 ROA not before: Wed 09 Sep 2026 02:17:02 +0000 ROA not after: Wed 08 Sep 2027 02:22:02 +0000 asID: 273534 IP address blocks: 45.170.139.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Oct 2026 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d9:9e:95:ce:00:97:77:de:24:41:9e:93:18:ca:86:03:3c:19:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Validity Not Before: Sep 9 02:17:02 2026 GMT Not After : Sep 8 02:22:02 2027 GMT Subject: CN=DA57DEB24DA6C4287D9CC939B43102987BB269FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:2b:42:b4:f5:5c:27:25:dc:4f:a9:24:38: c5:6f:ac:e6:b8:1b:a3:e5:83:69:6b:05:7d:17:8a: 7a:76:17:80:ac:88:74:f8:d5:04:69:18:84:1b:07: 6c:46:fc:a7:d4:6c:3f:63:6b:1f:b4:96:57:f2:e2: ba:89:54:6e:0f:d9:e0:69:67:fb:2d:23:41:71:5b: b5:3c:0c:2f:a7:b4:48:5c:0e:03:b4:a1:66:f2:d4: 06:2f:91:88:59:05:3a:e1:42:5d:1e:3a:66:91:e6: f4:69:f7:67:9e:d5:8c:6f:1e:f5:19:0a:9d:a4:ba: 6e:ed:08:ab:06:27:7d:17:51:19:d7:13:6f:62:7e: 68:c9:44:0a:31:c1:a6:22:0c:dc:94:99:73:ab:11: cf:a0:51:0a:1c:d7:2b:74:73:4f:e0:85:87:d7:a4: 50:7d:da:a0:0f:44:e0:76:82:14:f1:18:cf:9c:2f: 33:3d:57:87:8e:ec:af:5e:02:b4:60:64:63:e6:59: a6:d6:cb:4c:87:3a:5c:17:9b:bf:0f:da:2c:2d:5e: 7c:94:0d:a5:d2:40:d7:92:ab:bf:1f:e8:cf:6a:46: 9e:66:92:9b:65:e3:dc:a9:c8:4e:f8:cf:2e:4a:2b: 41:29:78:da:a1:6a:cb:6d:d6:a6:be:1e:67:cc:db: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:57:DE:B2:4D:A6:C4:28:7D:9C:C9:39:B4:31:02:98:7B:B2:69:FD X509v3 Authority Key Identifier: keyid:3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.139.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e9:98:c6:ac:d7:23:5c:ed:7d:9a:d2:c7:49:fe:4f:07:09: 58:c5:91:a7:5f:33:6a:0a:0c:fd:68:0e:8c:70:a0:87:91:68: 30:4d:85:93:3b:81:4d:44:2c:4d:eb:ed:5d:55:05:6f:78:01: 41:82:13:cc:3d:8b:30:86:bc:f3:57:5d:f1:46:92:5c:0b:cd: 16:8d:8b:e0:d5:aa:fd:f8:97:72:5d:fa:c1:c1:df:fc:81:b7: fc:65:ab:97:9d:2e:61:66:8c:df:d0:d6:c0:c9:ce:1f:fc:0a: 7b:21:71:20:c1:b5:47:2f:95:2f:2a:be:95:a4:34:a5:fb:ea: f3:ae:a3:2a:b5:d8:70:2b:24:59:67:70:e1:92:92:32:8e:6c: e8:4c:b1:a1:99:7f:10:28:b3:1c:b1:1a:e3:75:2f:ad:ca:02: b8:3c:3d:f2:6d:76:6a:03:f9:96:66:df:43:9c:f5:52:97:a9: bb:6d:f6:90:d7:9b:45:ec:fc:7d:e2:fc:95:1b:f9:a9:2d:3a: dd:d9:fc:ec:ff:8e:e5:96:87:0d:cd:61:a4:12:19:f4:27:b4: cc:83:4f:1a:43:66:b1:f0:2f:db:6c:9a:41:07:21:82:a6:91: 8f:96:87:90:0d:47:6d:68:23:7a:04:ce:2b:32:15:29:54:62: 3b:4e:1c:68 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUItmelc4Al3feJEGekxjKhgM8GbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwQjU5NkYwQzY2RTc1Nzc2QTY5NDY5ODRFODgxNDEw QzVCODVDMzAeFw0yNjA5MDkwMjE3MDJaFw0yNzA5MDgwMjIyMDJaMDMxMTAvBgNV BAMTKERBNTdERUIyNERBNkM0Mjg3RDlDQzkzOUI0MzEwMjk4N0JCMjY5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MCtCtPVcJyXcT6kkOMVvrOa4 G6Plg2lrBX0Xinp2F4CsiHT41QRpGIQbB2xG/KfUbD9jax+0llfy4rqJVG4P2eBp Z/stI0FxW7U8DC+ntEhcDgO0oWby1AYvkYhZBTrhQl0eOmaR5vRp92ee1YxvHvUZ Cp2kum7tCKsGJ30XURnXE29ifmjJRAoxwaYiDNyUmXOrEc+gUQoc1yt0c0/ghYfX pFB92qAPROB2ghTxGM+cLzM9V4eO7K9eArRgZGPmWabWy0yHOlwXm78P2iwtXnyU DaXSQNeSq78f6M9qRp5mkptl49ypyE74zy5KK0EpeNqhastt1qa+HmfM279tAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU2lfesk2mxCh9nMk5tDECmHuyaf0wHwYDVR0j BBgwFoAUOgtZbwxm51d2ppRphOiBQQxbhcMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVDMmhEc296U1RlR3BpUUJYU0piWmNiMmpiZ1l6MWgzRXVvS1FMS3NX QXIvMC8zQTBCNTk2RjBDNjZFNzU3NzZBNjk0Njk4NEU4ODE0MTBDNUI4NUMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMEI1OTZGMEM2NkU3NTc3 NkE2OTQ2OTg0RTg4MTQxMEM1Qjg1QzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzh1QzJoRHNvelNUZUdwaVFCWFNKYlpjYjJqYmdZejFoM0V1b0tRTEtzV0FyLzAv MzQzNTJlMzEzNzMwMmUzMTMzMzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3 MzMzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqoswDQYJKoZIhvcNAQELBQADggEBAEDpmMas 1yNc7X2a0sdJ/k8HCVjFkadfM2oKDP1oDoxwoIeRaDBNhZM7gU1ELE3r7V1VBW94 AUGCE8w9izCGvPNXXfFGklwLzRaNi+DVqv34l3Jd+sHB3/yBt/xlq5edLmFmjN/Q 1sDJzh/8CnshcSDBtUcvlS8qvpWkNKX76vOuoyq12HArJFlncOGSkjKObOhMsaGZ fxAosxyxGuN1L63KArg8PfJtdmoD+ZZm30Oc9VKXqbtt9pDXm0Xs/H3i/JUb+akt Ot3Z/Oz/juWWhw3NYaQSGfQntMyDTxpDZrHwL9tsmkEHIYKmkY+Wh5ANR21oI3oE zisyFSlUYjtOHGg= -----END CERTIFICATE-----Generated at Tue Oct 27 15:55:44 2026 by rpki-client