$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa File: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (raw, json) Hash identifier: TtZY2HkDxWkCvGI4HqDn8AnGzlPaFTi1kjMjjf0hwqo= Subject key identifier: 44:F7:B4:D4:D3:BB:41:02:76:D9:53:C0:A0:83:7A:C2:F0:72:A8:0B Certificate issuer: /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4 Certificate serial: 7CF7EBA9600591721A33D4F695D47352DE7170B1 Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa Signing time: Wed 16 Jul 2025 15:50:07 +0000 ROA not before: Wed 16 Jul 2025 15:45:07 +0000 ROA not after: Wed 15 Jul 2026 15:50:07 +0000 asID: 264404 IP address blocks: 131.161.228.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 20:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f7:eb:a9:60:05:91:72:1a:33:d4:f6:95:d4:73:52:de:71:70:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4 Validity Not Before: Jul 16 15:45:07 2025 GMT Not After : Jul 15 15:50:07 2026 GMT Subject: CN=44F7B4D4D3BB410276D953C0A0837AC2F072A80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:c9:80:c7:dc:0a:e7:04:ab:07:21:f8:1e: 1e:a1:a7:65:5f:f1:52:22:bd:0e:a8:1e:cb:3f:64: 7f:93:ba:ed:66:1d:9b:6a:82:1d:e8:63:03:31:2d: e0:b6:80:55:26:23:3d:2a:3e:30:7a:79:42:51:ec: 47:49:8f:83:c0:98:6c:ff:61:21:71:da:79:dd:a6: 88:2d:5c:98:dc:6d:73:1e:17:45:23:57:a9:c5:05: 15:9e:d8:00:45:49:c9:15:b5:10:5b:20:ed:71:c1: 2a:16:1b:19:60:9f:9c:a5:cc:41:fa:0a:e0:b3:b5: 51:91:1f:5c:05:82:e5:c3:bb:db:8d:7c:b7:7b:3f: 94:29:c6:63:b5:24:18:af:3a:24:1a:61:09:63:46: fb:38:0a:e9:89:ca:c2:fb:1b:46:bf:d4:9c:f5:7b: 21:93:07:3e:4e:89:61:39:ba:39:71:9e:dc:7f:fb: 54:38:5d:71:9e:3a:aa:00:b1:84:38:84:87:40:c6: 7e:68:f8:74:d9:05:7a:a0:4a:94:84:76:4a:f8:17: 61:f4:ac:fd:75:20:67:a7:34:37:bf:b1:7b:1e:19: fc:48:79:92:d1:7d:a9:cc:d4:cd:63:6b:e9:6b:be: d6:ad:61:96:63:5d:3f:d9:cd:1c:16:49:93:19:f7: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:B4:D4:D3:BB:41:02:76:D9:53:C0:A0:83:7A:C2:F0:72:A8:0B X509v3 Authority Key Identifier: keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.228.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:4b:fa:6c:2f:1d:5c:09:92:e5:a6:36:84:d7:32:28:c5:7d: 89:81:12:e8:20:f1:e4:2c:20:0d:1f:c3:b2:a7:fb:25:65:5c: 12:4d:ed:ad:37:74:ce:97:e8:44:59:98:8a:28:df:63:31:8c: 2c:1c:70:af:16:1f:07:9a:32:45:5e:b8:96:f5:ad:be:e5:f8: 40:eb:4d:4b:f2:eb:bf:40:02:4a:78:19:3e:2f:ca:f0:23:16: 0a:41:e8:d7:74:99:63:de:e9:5d:e7:4d:c4:3e:02:61:d1:f7: 4f:b2:e5:52:ce:0c:f7:5a:ee:91:24:53:30:95:5d:09:e8:10: c5:b8:f7:f1:9e:d3:0d:9b:10:61:cc:4e:75:72:20:80:10:7b: 6c:c9:3b:13:a3:4c:82:83:22:f3:c1:bb:1b:f5:a4:9a:28:ca: 46:c5:da:4a:e8:cf:7d:2d:41:d9:03:ee:29:89:25:bb:f2:24: a2:eb:2b:15:6a:c5:99:75:50:97:37:7b:03:88:fb:6c:02:cc: 10:6e:b0:50:c3:c5:68:01:25:20:e8:54:f1:47:db:c0:97:c5: ae:ce:8c:73:73:a0:d0:c6:ff:a0:f9:01:60:f7:8f:56:45:d8: 04:84:66:f5:b6:07:58:4d:92:7d:32:2d:64:91:e7:f6:7f:11: 30:93:20:71 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUfPfrqWAFkXIaM9T2ldRzUt5xcLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhCMzkyQzgxNzNCQzA2M0FDRTlGNEY0MkM4NUU4RjNC QzI5N0ZBNDAeFw0yNTA3MTYxNTQ1MDdaFw0yNjA3MTUxNTUwMDdaMDMxMTAvBgNV BAMTKDQ0RjdCNEQ0RDNCQjQxMDI3NkQ5NTNDMEEwODM3QUMyRjA3MkE4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZ8mAx9wK5wSrByH4Hh6hp2Vf 8VIivQ6oHss/ZH+Tuu1mHZtqgh3oYwMxLeC2gFUmIz0qPjB6eUJR7EdJj4PAmGz/ YSFx2nndpogtXJjcbXMeF0UjV6nFBRWe2ABFSckVtRBbIO1xwSoWGxlgn5ylzEH6 CuCztVGRH1wFguXDu9uNfLd7P5QpxmO1JBivOiQaYQljRvs4CumJysL7G0a/1Jz1 eyGTBz5OiWE5ujlxntx/+1Q4XXGeOqoAsYQ4hIdAxn5o+HTZBXqgSpSEdkr4F2H0 rP11IGenNDe/sXseGfxIeZLRfanM1M1ja+lrvtatYZZjXT/ZzRwWSZMZ99a3AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQURPe01NO7QQJ22VPAoIN6wvByqAswHwYDVR0j BBgwFoAUCLOSyBc7wGOs6fT0LIXo87wpf6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1 aUIvMC8wOEIzOTJDODE3M0JDMDYzQUNFOUY0RjQyQzg1RThGM0JDMjk3RkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4QjM5MkM4MTczQkMwNjNB Q0U5RjRGNDJDODVFOEYzQkMyOTdGQTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FhN2hza2kxZlN3a1ZwZ0RjanlaQlBzQTVOWWdZR0xuOFc5c2t5QzV3NWlCLzAv MzEzMzMxMmUzMTM2MzEyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNDM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOh5DANBgkqhkiG9w0BAQsFAAOCAQEAWkv6 bC8dXAmS5aY2hNcyKMV9iYES6CDx5CwgDR/Dsqf7JWVcEk3trTd0zpfoRFmYiijf YzGMLBxwrxYfB5oyRV64lvWtvuX4QOtNS/Lrv0ACSngZPi/K8CMWCkHo13SZY97p XedNxD4CYdH3T7LlUs4M91rukSRTMJVdCegQxbj38Z7TDZsQYcxOdXIggBB7bMk7 E6NMgoMi88G7G/WkmijKRsXaSujPfS1B2QPuKYklu/IkousrFWrFmXVQlzd7A4j7 bALMEG6wUMPFaAElIOhU8UfbwJfFrs6Mc3Og0Mb/oPkBYPePVkXYBIRm9bYHWE2S fTItZJHn9n8RMJMgcQ== -----END CERTIFICATE-----Generated at Sun Aug 24 03:13:24 2025 by rpki-client