$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa File: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (raw, json) Hash identifier: 6W+sBJcJZ2b6bj5RsmyJFMfqEinjpbph4IeKP9qOa9U= Subject key identifier: D6:41:CE:0B:57:F2:49:CC:F8:8D:10:C4:85:27:37:78:D7:B9:50:E1 Certificate issuer: /CN=5A3AE20076D062C545A8A8573997926813E925D8 Certificate serial: 3CDC98A0A5DFFD3873FF6B2D7D37436DBBF2454A Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa Signing time: Fri 10 Oct 2025 19:05:09 +0000 ROA not before: Fri 10 Oct 2025 19:00:09 +0000 ROA not after: Fri 09 Oct 2026 19:05:09 +0000 asID: 268973 IP address blocks: 45.176.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 23:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dc:98:a0:a5:df:fd:38:73:ff:6b:2d:7d:37:43:6d:bb:f2:45:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8 Validity Not Before: Oct 10 19:00:09 2025 GMT Not After : Oct 9 19:05:09 2026 GMT Subject: CN=D641CE0B57F249CCF88D10C485273778D7B950E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:df:d5:f4:20:ff:fe:bb:f1:78:6d:41:7c: af:8d:7f:6d:6f:92:91:48:82:6c:c9:b3:53:b8:9c: 60:cf:5d:03:cf:00:9a:e5:c0:0a:9a:8f:02:29:43: 15:ff:06:c3:ce:6b:de:0c:41:b2:fe:50:87:df:27: 89:8e:38:e0:17:93:4a:a8:4d:fb:31:37:ce:8a:dc: ad:b7:17:1f:be:76:60:a8:ce:17:56:57:d6:93:50: 20:61:45:7d:73:52:2f:7a:65:f6:62:fc:e4:25:eb: d7:db:8c:e0:b2:25:be:a3:b7:90:d2:35:d8:94:fe: 7f:4f:86:31:3a:b8:7b:9a:29:ab:ad:35:28:75:89: 70:6c:7d:85:c8:f8:ab:91:45:f8:52:d8:67:d1:5f: f5:84:99:00:1b:a9:89:8f:7c:9d:e5:59:f9:33:39: bc:35:21:f5:03:0d:78:35:ab:71:78:64:c9:71:68: b7:bc:06:a6:e7:92:a6:ed:8e:58:69:d9:75:0d:b9: 44:56:06:73:e8:1b:22:06:fe:93:5a:7a:7f:e2:51: 21:60:f4:48:e2:be:d6:e6:3b:7e:00:27:69:3e:b2: b2:6b:6d:a3:83:12:fa:5b:de:f6:82:a8:06:dd:33: 25:6e:ec:6a:a4:86:27:d4:b0:0c:28:b8:5e:83:5b: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:41:CE:0B:57:F2:49:CC:F8:8D:10:C4:85:27:37:78:D7:B9:50:E1 X509v3 Authority Key Identifier: keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.252.0/22 Signature Algorithm: sha256WithRSAEncryption 39:b8:87:56:e2:8d:52:1a:f0:0f:9e:91:f0:88:bd:bb:c1:53: 04:01:6d:9e:31:00:c0:eb:c4:21:91:61:4f:ff:92:73:26:c7: 8f:c1:6e:e8:f0:df:79:69:92:f7:e3:a8:a9:e0:23:ee:4c:d2: 2b:c8:8c:b6:d5:ad:35:3a:38:1e:1c:64:f8:ab:7d:3d:97:0f: 8c:3d:fe:d7:8f:d3:52:3a:92:14:0f:c6:2b:e8:56:12:fb:e8: 7e:ab:f6:ab:0a:35:61:18:b0:37:61:72:a5:0e:db:a0:97:42: d3:f8:ac:0e:2d:52:9c:e0:9d:62:78:aa:72:0a:63:2a:93:6a: 32:a3:9e:61:e2:c9:17:ef:d6:b0:a7:de:b5:4d:ad:8e:9f:d1: 90:31:e0:b8:b9:33:fe:ff:b4:09:c6:f7:c2:d4:d8:4e:83:d1: 5a:ac:eb:87:3e:a6:95:73:2b:7b:13:84:43:c1:b8:46:4b:a9: dc:46:b4:42:22:d7:22:74:3e:34:53:b3:95:cb:88:1b:14:8b: d0:f1:66:c7:6d:e9:84:90:21:62:20:ce:be:f0:fd:4e:a0:a3: 1e:d1:d2:23:a1:ec:b6:ab:f3:33:20:83:7d:b2:57:19:5a:f9: c0:9d:f1:cd:4e:65:87:17:3a:9e:09:ad:c2:24:ad:7f:5d:ba: b3:7d:70:61 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPNyYoKXf/Thz/2stfTdDbbvyRUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzQUUyMDA3NkQwNjJDNTQ1QThBODU3Mzk5NzkyNjgx M0U5MjVEODAeFw0yNTEwMTAxOTAwMDlaFw0yNjEwMDkxOTA1MDlaMDMxMTAvBgNV BAMTKEQ2NDFDRTBCNTdGMjQ5Q0NGODhEMTBDNDg1MjczNzc4RDdCOTUwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgDN/V9CD//rvxeG1BfK+Nf21v kpFIgmzJs1O4nGDPXQPPAJrlwAqajwIpQxX/BsPOa94MQbL+UIffJ4mOOOAXk0qo TfsxN86K3K23Fx++dmCozhdWV9aTUCBhRX1zUi96ZfZi/OQl69fbjOCyJb6jt5DS NdiU/n9PhjE6uHuaKautNSh1iXBsfYXI+KuRRfhS2GfRX/WEmQAbqYmPfJ3lWfkz Obw1IfUDDXg1q3F4ZMlxaLe8Bqbnkqbtjlhp2XUNuURWBnPoGyIG/pNaen/iUSFg 9EjivtbmO34AJ2k+srJrbaODEvpb3vaCqAbdMyVu7GqkhifUsAwouF6DW6FhAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU1kHOC1fyScz4jRDEhSc3eNe5UOEwHwYDVR0j BBgwFoAUWjriAHbQYsVFqKhXOZeSaBPpJdgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6 azcvMC81QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBM0FFMjAwNzZEMDYyQzU0 NUE4QTg1NzM5OTc5MjY4MTNFOTI1RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JBWVMxS0hVWmFmMUFaUWhOYTh3bnF2eWVkbmZjNmZ6TWIzVDJZdnFhems3LzAv MzQzNTJlMzEzNzM2MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItsPwwDQYJKoZIhvcNAQELBQADggEBADm4h1bi jVIa8A+ekfCIvbvBUwQBbZ4xAMDrxCGRYU//knMmx4/Bbujw33lpkvfjqKngI+5M 0ivIjLbVrTU6OB4cZPirfT2XD4w9/teP01I6khQPxivoVhL76H6r9qsKNWEYsDdh cqUO26CXQtP4rA4tUpzgnWJ4qnIKYyqTajKjnmHiyRfv1rCn3rVNrY6f0ZAx4Li5 M/7/tAnG98LU2E6D0Vqs64c+ppVzK3sThEPBuEZLqdxGtEIi1yJ0PjRTs5XLiBsU i9DxZsdt6YSQIWIgzr7w/U6gox7R0iOh7Lar8zMgg32yVxla+cCd8c1OZYcXOp4J rcIkrX9durN9cGE= -----END CERTIFICATE-----Generated at Tue Oct 21 11:34:29 2025 by rpki-client