$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa File: 34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json) Hash identifier: u12dzT1GMw9EhPejQmta2KDItLBsnK6sBeCAvct2gbk= Subject key identifier: 8A:F6:92:3C:D6:F0:0F:7F:FB:A3:A8:6E:1D:0F:C5:35:68:C4:A5:54 Certificate issuer: /CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60 Certificate serial: 1F2C44868B1AEBA963C8D4DEE9C38CD1305236CD Authority key identifier: D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa Signing time: Mon 02 Mar 2026 20:34:37 +0000 ROA not before: Mon 02 Mar 2026 20:29:37 +0000 ROA not after: Mon 01 Mar 2027 20:34:37 +0000 asID: 53062 IP address blocks: 45.7.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2c:44:86:8b:1a:eb:a9:63:c8:d4:de:e9:c3:8c:d1:30:52:36:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23A9AB74382168B4B0E0F5772B4F25A461F8B60 Validity Not Before: Mar 2 20:29:37 2026 GMT Not After : Mar 1 20:34:37 2027 GMT Subject: CN=8AF6923CD6F00F7FFBA3A86E1D0FC53568C4A554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:d5:9f:3f:d0:e9:03:ec:9d:ae:1e:92:2e: f5:10:c4:68:10:9d:60:05:46:85:ba:a9:34:e0:88: cf:2a:a4:34:12:90:45:dc:ba:d1:44:4c:0f:d8:61: b2:a6:63:82:2a:20:9e:be:1e:93:12:ca:1f:69:1c: 34:17:c7:8a:dd:8d:34:4a:48:a0:b7:5f:cf:2a:00: 74:e1:47:2d:1c:11:62:d3:75:bb:72:97:46:ed:34: 48:2a:e6:2a:ce:b2:74:d6:04:79:bf:89:2d:0c:05: 5a:88:8c:50:1e:58:06:08:a9:08:f8:2f:af:5b:a5: 84:7b:d7:55:8c:25:60:34:1e:a7:23:cb:09:40:77: db:62:a9:13:55:ad:73:58:43:6e:0d:b0:84:00:90: dc:74:0f:c5:7a:8a:a8:00:b8:83:b0:ad:18:38:f3: a6:a6:a6:a1:54:6e:a9:b2:5e:56:c4:55:b2:07:03: 5b:dc:a2:d1:9f:b3:6f:48:b1:c0:e2:2a:4f:53:67: dc:44:98:d3:11:de:60:2a:d7:de:77:6a:2d:6f:d1: 45:ee:76:f6:17:c4:27:a2:cf:ed:90:6a:fb:51:63: 3e:c0:26:3f:c1:5b:21:4b:19:05:12:ca:d6:cc:57: eb:a0:f6:d2:2b:c0:88:81:3b:52:15:20:48:b6:c7: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F6:92:3C:D6:F0:0F:7F:FB:A3:A8:6E:1D:0F:C5:35:68:C4:A5:54 X509v3 Authority Key Identifier: keyid:D2:3A:9A:B7:43:82:16:8B:4B:0E:0F:57:72:B4:F2:5A:46:1F:8B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23A9AB74382168B4B0E0F5772B4F25A461F8B60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/34352e372e3132382e302f32322d3234203d3e203533303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.128.0/22 Signature Algorithm: sha256WithRSAEncryption 05:74:69:3a:51:62:e8:b6:49:a6:b5:8a:27:50:5a:d5:0b:73: 73:fb:50:43:fe:6a:f7:04:32:21:54:1f:ae:bc:6a:20:b5:fc: ff:97:28:fa:1d:44:e1:50:31:0b:30:bb:24:91:cd:5c:6f:b3: 17:24:35:6e:16:1b:bb:61:60:39:f1:97:1f:43:cc:73:25:0b: 55:17:66:7c:4e:1f:6a:a9:a6:03:49:d5:4b:34:6d:e8:31:63: 2c:64:dd:87:21:b6:41:3f:e9:73:e4:d9:ff:39:92:2d:58:79: 93:3e:03:57:86:da:ea:92:5f:d6:2e:5e:ed:ea:ed:ee:cd:e0: 41:da:b4:5d:a2:bc:cc:5f:f7:51:b0:a2:82:19:6a:b2:87:8e: dc:c7:a0:02:81:a1:b2:a4:61:36:05:7c:1c:9d:8e:d4:01:d4: 98:d0:10:51:42:d8:d9:01:2f:7c:f5:10:7a:45:47:32:89:3c: 57:f5:27:52:fd:12:4e:a0:41:11:aa:b2:de:c4:db:8c:33:71: ab:f2:61:88:8b:b3:e4:62:8b:4c:8c:b7:db:9a:c6:6e:fd:b0: d4:69:ff:af:e9:88:0d:38:9f:b6:22:bd:80:3a:e5:5b:b3:23: 3e:f2:fa:28:f6:7e:43:c5:89:f9:89:d2:2a:a6:b8:12:23:10: 5a:b9:d7:66 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUHyxEhosa66ljyNTe6cOM0TBSNs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzQTlBQjc0MzgyMTY4QjRCMEUwRjU3NzJCNEYyNUE0 NjFGOEI2MDAeFw0yNjAzMDIyMDI5MzdaFw0yNzAzMDEyMDM0MzdaMDMxMTAvBgNV BAMTKDhBRjY5MjNDRDZGMDBGN0ZGQkEzQTg2RTFEMEZDNTM1NjhDNEE1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW7tWfP9DpA+ydrh6SLvUQxGgQ nWAFRoW6qTTgiM8qpDQSkEXcutFETA/YYbKmY4IqIJ6+HpMSyh9pHDQXx4rdjTRK SKC3X88qAHThRy0cEWLTdbtyl0btNEgq5irOsnTWBHm/iS0MBVqIjFAeWAYIqQj4 L69bpYR711WMJWA0HqcjywlAd9tiqRNVrXNYQ24NsIQAkNx0D8V6iqgAuIOwrRg4 86ampqFUbqmyXlbEVbIHA1vcotGfs29IscDiKk9TZ9xEmNMR3mAq1953ai1v0UXu dvYXxCeiz+2QavtRYz7AJj/BWyFLGQUSytbMV+ug9tIrwIiBO1IVIEi2xxdRAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUivaSPNbwD3/7o6huHQ/FNWjEpVQwHwYDVR0j BBgwFoAU0jqat0OCFotLDg9XcrTyWkYfi2AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw LzQvRDIzQTlBQjc0MzgyMTY4QjRCMEUwRjU3NzJCNEYyNUE0NjFGOEI2MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMjNBOUFCNzQzODIxNjhCNEIw RTBGNTc3MkI0RjI1QTQ2MUY4QjYwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzQvMzQz NTJlMzcyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzMzMDM2MzIu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAItB4AwDQYJKoZIhvcNAQELBQADggEBAAV0aTpRYui2Saa1iidQ WtULc3P7UEP+avcEMiFUH668aiC1/P+XKPodROFQMQswuySRzVxvsxckNW4WG7th YDnxlx9DzHMlC1UXZnxOH2qppgNJ1Us0begxYyxk3YchtkE/6XPk2f85ki1YeZM+ A1eG2uqSX9YuXu3q7e7N4EHatF2ivMxf91GwooIZarKHjtzHoAKBobKkYTYFfByd jtQB1JjQEFFC2NkBL3z1EHpFRzKJPFf1J1L9Ek6gQRGqst7E24wzcavyYYiLs+Ri i0yMt9uaxm79sNRp/6/piA04n7YivYA65VuzIz7y+ij2fkPFifmJ0iqmuBIjEFq5 12Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:17:08 2026 by rpki-client