$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa File: 34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa (raw, json) Hash identifier: Zg6hu9T5lkAymC5Nn3ylhceH8/l2Ooq76i8se7tccAg= Subject key identifier: C3:AD:B4:1D:68:9C:12:AF:FB:59:62:DB:6E:77:C5:C5:0F:65:BB:01 Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Certificate serial: 549A309F81DAE087C5DE3CC6277A37E86B13367E Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa Signing time: Sat 02 Aug 2025 20:35:20 +0000 ROA not before: Sat 02 Aug 2025 20:30:20 +0000 ROA not after: Sat 01 Aug 2026 20:35:20 +0000 asID: 269626 IP address blocks: 45.190.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:30:9f:81:da:e0:87:c5:de:3c:c6:27:7a:37:e8:6b:13:36:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Validity Not Before: Aug 2 20:30:20 2025 GMT Not After : Aug 1 20:35:20 2026 GMT Subject: CN=C3ADB41D689C12AFFB5962DB6E77C5C50F65BB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:3c:6e:37:1f:87:8c:0a:5c:78:60:7d:fa: e4:c7:03:8f:d3:d8:27:0c:54:45:23:fc:bc:cc:ec: 3c:93:88:e9:84:d6:3f:cb:c1:a3:87:61:be:26:55: d6:e9:3d:8c:57:d2:0b:b2:74:0f:7a:0e:61:dc:66: 47:4e:dc:b5:e2:86:cd:b5:04:93:c4:16:5f:6e:be: a0:10:ce:f7:ca:8f:c5:45:70:47:5e:f9:e0:a6:ca: 8e:3c:d8:1f:a5:32:c3:e0:f9:d1:4e:ba:31:25:2e: 89:d2:70:17:28:52:10:1f:bf:b3:22:74:9f:5e:8d: ca:08:ce:b2:c6:26:36:f4:a4:03:4d:27:78:e9:ee: 5f:d6:f7:83:de:fc:fe:76:2b:c6:64:e1:1b:c6:49: a2:ca:03:48:22:ed:3e:3d:55:d1:69:f0:bf:81:a4: ee:ed:a3:f3:f4:d6:4e:90:eb:58:60:a2:2f:3a:4f: f1:5a:09:a6:12:bc:62:9e:af:cc:42:04:9b:bf:7f: 60:c8:e5:e7:5f:be:fd:8c:2e:e6:4f:54:ab:38:1c: 7e:65:af:91:1e:ad:68:53:01:8e:35:f6:ae:41:6a: 45:88:2b:cf:ac:ea:ca:9c:06:ed:d1:4f:5e:c6:69: 92:8d:d8:f6:9a:4d:ec:b9:d4:75:47:3c:80:11:5a: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AD:B4:1D:68:9C:12:AF:FB:59:62:DB:6E:77:C5:C5:0F:65:BB:01 X509v3 Authority Key Identifier: keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3131312e302f32342d3234203d3e20323639363236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.111.0/24 Signature Algorithm: sha256WithRSAEncryption 79:d4:2a:99:47:2d:50:dc:7e:e2:74:fd:48:3e:4f:fa:3d:45: c6:ab:bf:81:f5:65:fd:55:7c:e2:39:fc:4d:77:4f:87:96:d6: 4a:86:6e:da:5d:d4:b4:5a:67:67:40:30:43:29:5b:3d:fa:9a: a6:5e:ab:e4:56:7a:5b:d5:33:9b:54:b1:56:34:21:cd:b1:4b: 83:b1:3c:c9:ba:17:cb:14:37:7b:be:c8:85:ee:6f:f7:e5:09: 3c:ae:8d:db:05:2a:da:8b:a4:8a:12:ea:8e:b8:65:f9:87:85: 44:61:45:84:6a:f1:9a:77:60:00:4c:67:c3:0d:71:1b:25:96: 4e:e0:26:02:ca:50:17:d1:46:22:eb:f5:cf:92:f4:d1:01:13: 9f:d1:89:a6:81:19:d3:3f:32:9e:14:eb:42:dd:73:6b:6c:4a: 6c:14:34:a3:cc:5e:36:2d:10:d3:39:25:bd:a8:73:27:9c:a5: 00:35:81:32:6c:ac:67:74:f3:f3:05:45:20:fc:be:4b:0f:68: e2:a4:64:ed:e1:83:ef:3f:2f:68:33:59:40:be:0b:21:39:48: e9:41:bb:fe:a9:bd:ce:85:03:d6:65:9c:cb:fa:b5:68:0a:10: d1:97:f7:55:51:a9:26:2e:83:b5:25:f4:23:52:dd:86:c6:cc: a4:54:f5:e0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVJown4Ha4IfF3jzGJ3o36GsTNn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFERERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVF M0NEMEFEQzAeFw0yNTA4MDIyMDMwMjBaFw0yNjA4MDEyMDM1MjBaMDMxMTAvBgNV BAMTKEMzQURCNDFENjg5QzEyQUZGQjU5NjJEQjZFNzdDNUM1MEY2NUJCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8jxuNx+HjApceGB9+uTHA4/T 2CcMVEUj/LzM7DyTiOmE1j/LwaOHYb4mVdbpPYxX0guydA96DmHcZkdO3LXihs21 BJPEFl9uvqAQzvfKj8VFcEde+eCmyo482B+lMsPg+dFOujElLonScBcoUhAfv7Mi dJ9ejcoIzrLGJjb0pANNJ3jp7l/W94Pe/P52K8Zk4RvGSaLKA0gi7T49VdFp8L+B pO7to/P01k6Q61hgoi86T/FaCaYSvGKer8xCBJu/f2DI5edfvv2MLuZPVKs4HH5l r5EerWhTAY419q5BakWIK8+s6sqcBu3RT17GaZKN2PaaTey51HVHPIARWlXfAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUw620HWicEq/7WWLbbnfFxQ9luwEwHwYDVR0j BBgwFoAUId3fBHpULBCC9t2dF1TqruPNCtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUdacHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZM U1QvMC8yMUREREYwNDdBNTQyQzEwODJGNkREOUQxNzU0RUFBRUUzQ0QwQURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRERERjA0N0E1NDJDMTA4 MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FHWnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAv MzQzNTJlMzEzOTMwMmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzkzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtvm8wDQYJKoZIhvcNAQELBQADggEBAHnUKplH LVDcfuJ0/Ug+T/o9Rcarv4H1Zf1VfOI5/E13T4eW1kqGbtpd1LRaZ2dAMEMpWz36 mqZeq+RWelvVM5tUsVY0Ic2xS4OxPMm6F8sUN3u+yIXub/flCTyujdsFKtqLpIoS 6o64ZfmHhURhRYRq8Zp3YABMZ8MNcRsllk7gJgLKUBfRRiLr9c+S9NEBE5/RiaaB GdM/Mp4U60Ldc2tsSmwUNKPMXjYtENM5Jb2ocyecpQA1gTJsrGd08/MFRSD8vksP aOKkZO3hg+8/L2gzWUC+CyE5SOlBu/6pvc6FA9ZlnMv6tWgKENGX91VRqSYug7Ul 9CNS3YbGzKRU9eA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:55:41 2025 by rpki-client