$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa File: 34352e3232372e32332e302f32342d3234203d3e20323637303038.roa (raw, json) Hash identifier: LgJZySq5yA5txngba1WHAYva/XHpGUNlM8b5bB1RXcw= Subject key identifier: BF:8E:59:E1:37:6D:B5:2B:5F:E3:11:0E:7D:CC:6F:3E:5D:1A:52:76 Certificate issuer: /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3 Certificate serial: 2FF7070BDB487F470928A99BFACF8A2AE9DFF814 Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa Signing time: Mon 22 Sep 2025 14:36:51 +0000 ROA not before: Mon 22 Sep 2025 14:31:51 +0000 ROA not after: Mon 21 Sep 2026 14:36:51 +0000 asID: 267008 IP address blocks: 45.227.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f7:07:0b:db:48:7f:47:09:28:a9:9b:fa:cf:8a:2a:e9:df:f8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3 Validity Not Before: Sep 22 14:31:51 2025 GMT Not After : Sep 21 14:36:51 2026 GMT Subject: CN=BF8E59E1376DB52B5FE3110E7DCC6F3E5D1A5276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:04:ae:93:0b:ec:d4:fa:8a:40:1f:99:11: 97:60:93:68:47:fa:62:46:d7:d2:87:cb:e3:9b:e5: 8a:9f:51:1a:d6:25:71:0b:b1:a8:24:bb:19:b1:a0: b4:9c:75:91:8c:26:e0:3d:b4:b7:d6:7d:76:25:05: 45:e9:c1:0f:d8:1c:30:47:26:d3:5e:6b:58:79:3c: f7:d8:e9:10:72:25:cc:89:8a:39:41:57:43:17:92: 04:27:e3:51:ac:b8:d7:4f:08:49:92:e3:aa:7f:32: f8:1d:3e:dd:6a:50:5e:86:fe:be:61:bc:d9:8d:69: 1e:a1:6c:ea:06:ba:3a:06:80:ec:fa:18:90:bb:1a: b3:6b:71:a1:a3:5d:11:3f:b0:64:7b:5b:de:6f:99: f6:af:98:93:53:5c:bd:55:e9:76:16:2b:14:a6:70: 7b:8c:e5:e1:11:af:81:12:af:98:e8:66:96:a6:9c: 69:b7:0f:1e:90:7a:89:d2:85:c0:36:47:b3:38:4b: c5:37:c9:20:00:7c:8e:23:a2:73:21:a1:af:e6:9a: 01:c1:f9:00:da:5b:54:65:ed:55:f6:62:0e:2b:af: c7:5c:6f:b6:1f:bb:a9:90:6c:42:b5:24:16:c5:f9: cd:a1:ac:71:86:80:6a:c5:b2:76:d8:24:f9:b6:80: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8E:59:E1:37:6D:B5:2B:5F:E3:11:0E:7D:CC:6F:3E:5D:1A:52:76 X509v3 Authority Key Identifier: keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.23.0/24 Signature Algorithm: sha256WithRSAEncryption c2:0d:14:6d:9a:59:42:95:a7:e4:46:01:36:70:96:85:6b:de: 57:4e:3e:70:ca:44:0d:38:fa:a3:07:0b:b9:4b:4b:ff:bb:70: bd:8d:9d:90:13:62:44:4b:24:ca:a5:a4:1c:d3:d2:9d:f1:87: d2:7c:06:41:66:28:06:ed:75:df:e9:01:83:35:d3:6d:58:d2: 32:e9:3e:4e:33:a2:46:3e:93:f7:13:ca:80:66:d2:30:97:63: 7c:dc:b7:dd:51:19:7c:e3:da:32:d1:e2:ad:f7:42:2f:7b:f5: 93:93:b6:2d:be:96:b9:84:09:ee:25:1e:05:65:fd:ff:53:54: f1:90:4a:51:ee:32:2d:f7:87:08:9a:f8:f8:6b:bc:b5:55:dc: 31:64:6e:10:54:fc:88:92:b2:04:af:4e:d4:c2:1a:b1:65:d8: be:d0:1e:af:eb:fb:07:0b:69:36:35:6d:75:2d:0c:de:04:9f: f8:b0:54:ea:99:9a:c4:41:21:79:1b:79:33:5c:55:9c:bd:a1: b5:8c:85:18:42:fc:29:d9:05:70:97:aa:94:68:d9:d9:2a:25: 03:b0:c7:65:17:16:6f:6a:23:0f:ef:dd:db:9f:a7:49:c1:64: 75:74:91:32:52:cb:b0:b9:05:cb:d8:29:ee:1f:c6:69:2d:96: de:44:70:1b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUL/cHC9tIf0cJKKmb+s+KKunf+BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOEY2QjU1RDFDM0NFMkIzNTk3QTRFNzNGQzQ0NEEy ODM2NUFGMzAeFw0yNTA5MjIxNDMxNTFaFw0yNjA5MjExNDM2NTFaMDMxMTAvBgNV BAMTKEJGOEU1OUUxMzc2REI1MkI1RkUzMTEwRTdEQ0M2RjNFNUQxQTUyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrigSukwvs1PqKQB+ZEZdgk2hH +mJG19KHy+Ob5YqfURrWJXELsagkuxmxoLScdZGMJuA9tLfWfXYlBUXpwQ/YHDBH JtNea1h5PPfY6RByJcyJijlBV0MXkgQn41GsuNdPCEmS46p/MvgdPt1qUF6G/r5h vNmNaR6hbOoGujoGgOz6GJC7GrNrcaGjXRE/sGR7W95vmfavmJNTXL1V6XYWKxSm cHuM5eERr4ESr5joZpamnGm3Dx6QeonShcA2R7M4S8U3ySAAfI4jonMhoa/mmgHB +QDaW1Rl7VX2Yg4rr8dcb7Yfu6mQbEK1JBbF+c2hrHGGgGrFsnbYJPm2gG1rAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUv45Z4TdttStf4xEOfcxvPl0aUnYwHwYDVR0j BBgwFoAU9Nj2tV0cPOKzWXpOc/xESig2WvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1ZFRHdERTZwN1cyRFZhTUEzVEdwMzFpQWF6cm5mdVJLUzVMZTZKUWFG ZkQvMC9GNEQ4RjZCNTVEMUMzQ0UyQjM1OTdBNEU3M0ZDNDQ0QTI4MzY1QUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0RDhGNkI1NUQxQzNDRTJC MzU5N0E0RTczRkM0NDRBMjgzNjVBRjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dWRUR3REU2cDdXMkRWYU1BM1RHcDMxaUFhenJuZnVSS1M1TGU2SlFhRmZELzAv MzQzNTJlMzIzMjM3MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3 MzAzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALeMXMA0GCSqGSIb3DQEBCwUAA4IBAQDCDRRtmllC lafkRgE2cJaFa95XTj5wykQNOPqjBwu5S0v/u3C9jZ2QE2JESyTKpaQc09Kd8YfS fAZBZigG7XXf6QGDNdNtWNIy6T5OM6JGPpP3E8qAZtIwl2N83LfdURl849oy0eKt 90Ive/WTk7Ytvpa5hAnuJR4FZf3/U1TxkEpR7jIt94cImvj4a7y1VdwxZG4QVPyI krIEr07UwhqxZdi+0B6v6/sHC2k2NW11LQzeBJ/4sFTqmZrEQSF5G3kzXFWcvaG1 jIUYQvwp2QVwl6qUaNnZKiUDsMdlFxZvaiMP793bn6dJwWR1dJEyUsuwuQXL2Cnu H8ZpLZbeRHAb -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:06 2025 by rpki-client