$ rpki-client -vvvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/34352e3137312e32382e302f32322d3331203d3e20323638313836.roa File: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (raw, json) Hash identifier: gq1G5pbJqHomir31KrPuTPo26/VSrfta3BIkNtX8p4M= Subject key identifier: 3A:5B:C3:E3:82:E0:B7:89:14:32:91:D5:6D:DF:11:09:57:CB:D9:AF Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 6BCD4EEBC9CC3388D7FEF67E100EF85AD4A0C436 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/34352e3137312e32382e302f32322d3331203d3e20323638313836.roa Signing time: Mon 07 Sep 2026 18:42:11 +0000 ROA not before: Mon 07 Sep 2026 18:37:11 +0000 ROA not after: Mon 06 Sep 2027 18:42:11 +0000 asID: 268186 IP address blocks: 45.171.28.0/22 maxlen: 31 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 03:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cd:4e:eb:c9:cc:33:88:d7:fe:f6:7e:10:0e:f8:5a:d4:a0:c4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Sep 7 18:37:11 2026 GMT Not After : Sep 6 18:42:11 2027 GMT Subject: CN=3A5BC3E382E0B789143291D56DDF110957CBD9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:0f:cd:44:9d:b1:c6:f9:b5:1d:9d:9d:ba: 49:42:ea:5b:50:e3:19:4f:39:4d:d7:17:17:ac:2d: d8:12:cb:01:b6:ca:d7:12:a9:67:0e:cd:c5:d7:c0: 41:8a:3a:31:c1:19:a7:f7:18:e7:b9:1e:c0:c7:47: 89:ba:a4:8a:20:71:ab:b7:9b:0e:f4:72:75:66:70: 56:cc:b9:a3:79:ec:59:04:65:e7:53:af:52:a5:d5: a9:ea:3f:5d:96:03:fe:e6:44:78:a1:ed:0c:cb:51: ef:5f:59:4d:63:17:54:b0:f0:73:96:58:24:43:f1: 26:9e:d1:b5:6f:e8:68:aa:7a:6f:a4:e9:3c:79:db: 43:9d:9a:a0:8c:8f:41:49:e0:40:a8:35:3d:97:9a: ff:2e:8d:38:10:c8:54:c0:b9:db:f0:df:1e:9f:46: aa:ea:28:ea:08:54:e6:3d:fd:39:06:9e:b1:2b:64: 61:5b:c2:c0:fa:30:50:82:fc:df:e1:07:4b:eb:f1: e9:91:fe:87:ae:e8:0f:3f:61:1e:63:4c:11:2e:b7: 03:cd:6c:f4:a8:98:ac:92:2a:a0:2c:af:ea:57:87: 1f:2f:79:19:e3:60:2a:90:fa:cd:26:ca:cc:44:18: 21:9b:b1:2d:20:2c:dd:85:89:26:6d:07:00:66:80: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:C3:E3:82:E0:B7:89:14:32:91:D5:6D:DF:11:09:57:CB:D9:AF X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/34352e3137312e32382e302f32322d3331203d3e20323638313836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.28.0/22 Signature Algorithm: sha256WithRSAEncryption a7:dd:d9:08:72:4f:11:04:11:42:2a:f1:67:73:eb:41:05:b1: 01:55:69:d2:4d:36:f6:7c:bc:da:f0:c6:06:2c:51:e3:1a:10: 5a:a4:40:44:39:7e:d3:67:30:bc:e2:a5:d0:cf:aa:a7:6a:99: 41:50:24:b1:bd:9d:fa:9b:c3:2d:ed:99:cf:1b:47:80:2f:4b: 0b:ce:ce:36:c7:09:8b:cd:0b:3b:a0:cb:6e:7a:13:4c:3f:ed: f9:a5:46:85:b2:c6:37:23:0e:ba:31:b8:be:7a:50:49:48:3a: 74:d0:e2:91:57:27:9e:e3:f5:81:8b:f9:cb:28:f7:7d:cc:5f: bf:3d:ed:17:b2:17:be:73:60:9e:91:1e:5e:ce:29:56:88:1a: 4f:af:67:22:93:4e:ba:6f:62:cf:37:23:cf:1e:ad:1a:1e:a5: 7e:d0:a9:92:df:63:7d:77:7f:cb:39:9f:cb:85:cf:99:d9:6e: 7c:88:80:4b:0b:cd:96:12:a5:03:80:0b:cb:32:a9:91:db:5b: b3:2d:17:99:94:62:84:6d:3e:34:af:88:9c:c1:52:1d:cd:46: 84:24:92:98:f8:30:9a:3a:5b:4a:a5:de:e2:b3:dc:62:ed:f8: e6:03:a7:6f:f4:19:b1:b6:58:02:06:be:d0:29:35:f0:d0:21: 6d:53:df:4a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUa81O68nMM4jX/vZ+EA74WtSgxDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNjA5MDcxODM3MTFaFw0yNzA5MDYxODQyMTFaMDMxMTAvBgNV BAMTKDNBNUJDM0UzODJFMEI3ODkxNDMyOTFENTZEREYxMTA5NTdDQkQ5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7A/NRJ2xxvm1HZ2duklC6ltQ 4xlPOU3XFxesLdgSywG2ytcSqWcOzcXXwEGKOjHBGaf3GOe5HsDHR4m6pIogcau3 mw70cnVmcFbMuaN57FkEZedTr1Kl1anqP12WA/7mRHih7QzLUe9fWU1jF1Sw8HOW WCRD8Sae0bVv6Giqem+k6Tx520OdmqCMj0FJ4ECoNT2Xmv8ujTgQyFTAudvw3x6f RqrqKOoIVOY9/TkGnrErZGFbwsD6MFCC/N/hB0vr8emR/oeu6A8/YR5jTBEutwPN bPSomKySKqAsr+pXhx8veRnjYCqQ+s0mysxEGCGbsS0gLN2FiSZtBwBmgJIxAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUOlvD44Lgt4kUMpHVbd8RCVfL2a8wHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hCWm9oQUM2ekY4Zm1OUDQ4YXFiVlJNNE1MNWdCUnVBa1lGdmREWUdCdll3LzAv MzQzNTJlMzEzNzMxMmUzMjM4MmUzMDJmMzIzMjJkMzMzMTIwM2QzZTIwMzIzNjM4 MzEzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLascMA0GCSqGSIb3DQEBCwUAA4IBAQCn3dkIck8R BBFCKvFnc+tBBbEBVWnSTTb2fLza8MYGLFHjGhBapEBEOX7TZzC84qXQz6qnaplB UCSxvZ36m8Mt7ZnPG0eAL0sLzs42xwmLzQs7oMtuehNMP+35pUaFssY3Iw66Mbi+ elBJSDp00OKRVyee4/WBi/nLKPd9zF+/Pe0Xshe+c2CekR5ezilWiBpPr2cik066 b2LPNyPPHq0aHqV+0KmS32N9d3/LOZ/Lhc+Z2W58iIBLC82WEqUDgAvLMqmR21uz LReZlGKEbT40r4icwVIdzUaEJJKY+DCaOltKpd7is9xi7fjmA6dv9BmxtlgCBr7Q KTXw0CFtU99K -----END CERTIFICATE-----Generated at Thu Oct 29 09:52:57 2026 by rpki-client