$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa File: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (raw, json) Hash identifier: dFQvikjmvgdfS5xzkesm3mLXYzz4UjEfkQPlWOh3gGE= Subject key identifier: 66:96:DC:7E:D6:33:BC:DC:D4:61:8F:A3:36:8F:75:B3:CA:83:ED:0F Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Certificate serial: 0B278D0EB1E4F6E0314816C3007840D2B8C91883 Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa Signing time: Sat 02 Aug 2025 20:35:20 +0000 ROA not before: Sat 02 Aug 2025 20:30:20 +0000 ROA not after: Sat 01 Aug 2026 20:35:20 +0000 asID: 269626 IP address blocks: 45.190.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:27:8d:0e:b1:e4:f6:e0:31:48:16:c3:00:78:40:d2:b8:c9:18:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Validity Not Before: Aug 2 20:30:20 2025 GMT Not After : Aug 1 20:35:20 2026 GMT Subject: CN=6696DC7ED633BCDCD4618FA3368F75B3CA83ED0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:d9:63:81:9d:bb:e9:17:f9:80:07:87:21: 49:ea:7f:b5:8b:75:34:3b:2a:14:a3:45:35:db:51: 42:53:cf:05:b1:1b:52:5d:2f:88:62:a5:68:32:60: 67:31:41:dd:22:92:28:14:c5:a7:2e:5b:19:d7:a6: c7:08:5c:ba:6f:d9:fe:43:74:0c:de:83:3b:3b:20: ba:c8:87:86:f3:6d:a2:65:9c:89:62:c3:0a:90:e9: b7:45:ae:66:64:f8:56:3a:dd:84:34:fd:50:61:d8: 4f:73:c7:72:81:5e:a9:40:4c:c6:27:49:1c:c9:36: 44:a4:50:2b:fe:dc:7b:ff:db:31:09:99:24:f4:41: 64:90:d6:fc:05:83:24:36:9f:24:05:8a:ee:63:66: a4:18:d8:44:52:24:31:5b:e6:c4:37:fd:9a:54:9a: a6:08:77:05:be:e8:5c:17:09:f1:19:19:f2:85:b5: b6:41:7a:a5:fd:8e:9d:5b:8f:a4:0e:d6:d8:12:66: 9c:dc:b5:b3:74:41:80:44:17:c9:9a:ff:75:cc:48: 0e:38:88:38:b5:21:f1:c3:11:e9:c5:9f:cd:7a:7f: 50:ec:b9:e4:3c:43:95:55:01:c9:f7:de:67:82:58: 52:4c:e9:0d:df:0a:6e:ee:69:d8:38:dc:04:9a:ce: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:DC:7E:D6:33:BC:DC:D4:61:8F:A3:36:8F:75:B3:CA:83:ED:0F X509v3 Authority Key Identifier: keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.108.0/23 Signature Algorithm: sha256WithRSAEncryption 68:06:d6:03:fc:98:9c:8c:fc:a0:d5:99:5c:4a:6e:8d:9e:94: 2c:13:f9:b8:21:44:18:c5:61:6b:92:31:1b:fa:05:eb:54:28: 9b:dc:89:14:08:79:e5:b2:c6:53:68:b3:a7:0a:55:12:4b:5e: 25:ef:b1:57:80:05:14:d9:27:db:b4:ac:c0:bb:3b:95:35:81: ee:c7:01:a5:ef:9f:0c:1e:7f:ff:8c:2a:7b:2d:7b:3f:f4:7c: 75:c4:9f:c8:a9:78:93:a8:f5:f5:1e:4d:ad:72:f2:32:bd:a0: 96:97:67:5e:55:d0:5e:22:01:59:79:b7:42:1f:72:d6:b9:d8: 0a:51:ee:59:9d:31:f1:ea:cf:20:9d:11:35:74:a6:09:35:ab: c1:2a:5d:40:d7:6d:1f:f1:03:a8:94:3c:da:82:aa:e0:3f:47: 69:6e:ef:cb:38:53:dc:f0:26:38:92:02:f0:77:fa:56:2c:11: 0e:94:81:d3:8b:37:13:0e:a8:85:b4:b8:0f:bf:d9:c7:1c:fa: 0b:3e:90:69:b2:15:c0:f1:ed:cb:fb:ff:d9:81:67:13:9b:1c: 26:85:fd:36:83:d6:2f:7a:0d:e7:53:08:52:2d:4f:f4:79:0f: db:4e:b3:e0:f2:48:ed:cb:a4:63:21:cd:4e:0c:15:da:89:67: d5:75:d1:8b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUCyeNDrHk9uAxSBbDAHhA0rjJGIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF M0NEMEFEQzAeFw0yNTA4MDIyMDMwMjBaFw0yNjA4MDEyMDM1MjBaMDMxMTAvBgNV BAMTKDY2OTZEQzdFRDYzM0JDRENENDYxOEZBMzM2OEY3NUIzQ0E4M0VEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxtljgZ276Rf5gAeHIUnqf7WL dTQ7KhSjRTXbUUJTzwWxG1JdL4hipWgyYGcxQd0ikigUxacuWxnXpscIXLpv2f5D dAzegzs7ILrIh4bzbaJlnIliwwqQ6bdFrmZk+FY63YQ0/VBh2E9zx3KBXqlATMYn SRzJNkSkUCv+3Hv/2zEJmST0QWSQ1vwFgyQ2nyQFiu5jZqQY2ERSJDFb5sQ3/ZpU mqYIdwW+6FwXCfEZGfKFtbZBeqX9jp1bj6QO1tgSZpzctbN0QYBEF8ma/3XMSA44 iDi1IfHDEenFn816f1DsueQ8Q5VVAcn33meCWFJM6Q3fCm7uadg43ASaztmbAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUZpbcftYzvNzUYY+jNo91s8qD7Q8wHwYDVR0j BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4 MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FHWnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAv MzQzNTJlMzEzOTMwMmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzkzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtvmwwDQYJKoZIhvcNAQELBQADggEBAGgG1gP8 mJyM/KDVmVxKbo2elCwT+bghRBjFYWuSMRv6BetUKJvciRQIeeWyxlNos6cKVRJL XiXvsVeABRTZJ9u0rMC7O5U1ge7HAaXvnwwef/+MKnstez/0fHXEn8ipeJOo9fUe Ta1y8jK9oJaXZ15V0F4iAVl5t0Ifcta52ApR7lmdMfHqzyCdETV0pgk1q8EqXUDX bR/xA6iUPNqCquA/R2lu78s4U9zwJjiSAvB3+lYsEQ6UgdOLNxMOqIW0uA+/2ccc +gs+kGmyFcDx7cv7/9mBZxObHCaF/TaD1i96DedTCFItT/R5D9tOs+DySO3LpGMh zU4MFdqJZ9V10Ys= -----END CERTIFICATE-----Generated at Mon Oct 20 14:49:25 2025 by rpki-client