$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa File: 34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (raw, json) Hash identifier: ml4hqc5VvZd1QBGLffQaNw1GMHKb9UPVQavARL51frE= Subject key identifier: 00:39:74:99:05:6B:05:A0:46:BF:AF:1B:89:07:A9:01:A7:40:B5:AF Certificate issuer: /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Certificate serial: 3C1B3D27DEDAA3586F0EB1F402265566D1166F1D Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa Signing time: Mon 06 Oct 2025 09:17:58 +0000 ROA not before: Mon 06 Oct 2025 09:12:58 +0000 ROA not after: Mon 05 Oct 2026 09:17:58 +0000 asID: 268057 IP address blocks: 45.168.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1b:3d:27:de:da:a3:58:6f:0e:b1:f4:02:26:55:66:d1:16:6f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Validity Not Before: Oct 6 09:12:58 2025 GMT Not After : Oct 5 09:17:58 2026 GMT Subject: CN=00397499056B05A046BFAF1B8907A901A740B5AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:93:96:4c:78:61:b6:f2:0f:7e:b2:da:3f: 59:26:77:2f:b0:ab:12:9e:ff:47:91:e5:44:46:b5: 1d:d8:be:7c:07:ea:6e:c5:3c:2a:df:de:39:4b:5c: b8:6d:36:e2:af:15:4d:2a:55:4b:8c:fe:ee:30:7b: 6d:03:1b:55:b8:27:9f:85:99:ac:7e:01:e9:16:09: 05:2b:c0:87:17:a7:8d:b6:1f:03:a8:ca:a0:fc:61: b3:eb:74:bb:d4:f4:82:ea:cd:07:4c:6e:ad:15:1b: 5c:3c:d8:55:a9:97:6e:2b:d4:9e:a4:94:93:55:1c: 6d:46:2c:e9:9f:88:2b:4f:66:0f:e1:07:f7:4a:e1: ac:4f:7f:f7:5f:6b:0e:86:b9:3b:51:35:11:26:94: 36:24:f4:40:5b:85:fe:55:20:02:b1:ae:00:e0:1b: 59:71:f8:fb:d8:25:6c:7f:b0:ba:a7:66:39:0e:29: 0d:66:1d:3c:92:eb:bd:42:c2:36:21:60:14:73:7e: c0:e1:70:08:22:13:bd:a0:fa:77:08:58:94:7e:e5: 1d:bc:93:bf:fa:7d:02:06:85:58:85:d5:06:17:16: b6:9b:30:74:11:d0:41:59:1e:5a:3a:14:82:de:33: 3a:ad:7d:10:91:19:96:04:5e:f7:de:a1:65:46:3b: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:74:99:05:6B:05:A0:46:BF:AF:1B:89:07:A9:01:A7:40:B5:AF X509v3 Authority Key Identifier: keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.108.0/24 Signature Algorithm: sha256WithRSAEncryption 86:fa:13:34:8d:85:93:0c:62:6a:65:75:14:75:b3:a2:4b:71: ad:2d:41:52:36:55:66:0b:48:54:c4:c9:19:8f:da:4e:28:41: fe:4b:97:b9:48:22:87:f5:07:6c:34:9b:b7:00:6a:fa:65:71: 45:07:0e:8e:bb:b7:5c:81:df:88:8d:ce:97:6b:e4:51:d3:91: 84:47:04:03:13:bf:f1:50:f8:2d:cd:6e:29:fd:14:7f:08:cd: 20:31:56:db:e9:79:8b:3f:bd:ad:34:0a:1e:36:7a:73:13:ba: 45:b6:99:0b:9d:87:2c:d6:e9:d7:b6:d5:fc:6a:4d:49:ef:d6: 0f:52:d9:fe:b3:31:3f:83:b2:30:73:c9:b0:d5:63:5e:45:05: 70:a2:f0:cd:68:2b:0a:9b:ab:2f:80:3c:76:31:64:c0:56:41: 3b:d3:03:9f:7a:28:69:c4:e1:84:3b:c4:fd:5b:7a:c4:96:b4: 34:87:14:0e:98:06:18:e0:ec:fe:ff:fb:94:17:fc:4f:61:c6: 6a:e5:74:39:36:ae:3b:89:e1:78:c9:af:1d:46:e9:c6:f9:c3: b5:45:6a:8a:d2:a9:f2:53:bb:4f:6b:c9:d3:b1:03:6d:cc:6c: b0:9b:5b:b4:53:6f:0b:a7:27:c1:69:1f:7f:5a:1c:f3:11:76: f2:f6:49:51 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUPBs9J97ao1hvDrH0AiZVZtEWbx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQTlCQTlEQzJGQTBBQkQ4MEI4REQ2MkI0ODVFOUI2 RkRCMDBFNTAeFw0yNTEwMDYwOTEyNThaFw0yNjEwMDUwOTE3NThaMDMxMTAvBgNV BAMTKDAwMzk3NDk5MDU2QjA1QTA0NkJGQUYxQjg5MDdBOTAxQTc0MEI1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTJOWTHhhtvIPfrLaP1kmdy+w qxKe/0eR5URGtR3YvnwH6m7FPCrf3jlLXLhtNuKvFU0qVUuM/u4we20DG1W4J5+F max+AekWCQUrwIcXp422HwOoyqD8YbPrdLvU9ILqzQdMbq0VG1w82FWpl24r1J6k lJNVHG1GLOmfiCtPZg/hB/dK4axPf/dfaw6GuTtRNREmlDYk9EBbhf5VIAKxrgDg G1lx+PvYJWx/sLqnZjkOKQ1mHTyS671CwjYhYBRzfsDhcAgiE72g+ncIWJR+5R28 k7/6fQIGhViF1QYXFrabMHQR0EFZHlo6FILeMzqtfRCRGZYEXvfeoWVGO85JAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUADl0mQVrBaBGv68biQepAadAta8wHwYDVR0j BBgwFoAUkcqbqdwvoKvYC43WK0hem2/bAOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5 NHYvMC85MUNBOUJBOURDMkZBMEFCRDgwQjhERDYyQjQ4NUU5QjZGREIwMEU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0E5QkE5REMyRkEwQUJE ODBCOERENjJCNDg1RTlCNkZEQjAwRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VuSFJFc05wTHZpS0N3YjVMQUFleUxFYURXS1dTWWMya0JhbllMcVc3OTR2LzAv MzQzNTJlMzEzNjM4MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqGwwDQYJKoZIhvcNAQELBQADggEBAIb6EzSN hZMMYmpldRR1s6JLca0tQVI2VWYLSFTEyRmP2k4oQf5Ll7lIIof1B2w0m7cAavpl cUUHDo67t1yB34iNzpdr5FHTkYRHBAMTv/FQ+C3Nbin9FH8IzSAxVtvpeYs/va00 Ch42enMTukW2mQudhyzW6de21fxqTUnv1g9S2f6zMT+DsjBzybDVY15FBXCi8M1o Kwqbqy+APHYxZMBWQTvTA596KGnE4YQ7xP1besSWtDSHFA6YBhjg7P7/+5QX/E9h xmrldDk2rjuJ4XjJrx1G6cb5w7VFaorSqfJTu09rydOxA23MbLCbW7RTbwunJ8Fp H39aHPMRdvL2SVE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:43 2025 by rpki-client