$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa File: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (raw, json) Hash identifier: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ= Subject key identifier: 4F:BC:12:4E:7E:56:E6:26:3F:5B:58:66:A5:28:24:7C:DD:97:0F:05 Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Certificate serial: 3314EDBC5F31697C73FC03892277F944F45EC584 Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa Signing time: Fri 10 Oct 2025 19:01:40 +0000 ROA not before: Fri 10 Oct 2025 18:56:40 +0000 ROA not after: Fri 09 Oct 2026 19:01:40 +0000 asID: 268213 IP address blocks: 45.236.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:14:ed:bc:5f:31:69:7c:73:fc:03:89:22:77:f9:44:f4:5e:c5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Validity Not Before: Oct 10 18:56:40 2025 GMT Not After : Oct 9 19:01:40 2026 GMT Subject: CN=4FBC124E7E56E6263F5B5866A528247CDD970F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:2b:ed:8e:a9:70:62:a8:4f:b9:9c:4c:d3: 92:b9:2e:86:73:cc:da:dc:48:b2:45:75:fe:e6:6b: 67:ce:79:2e:08:ee:b6:92:6c:18:0e:ad:12:9a:8a: df:b8:be:12:b7:23:33:c5:2a:79:d2:58:3a:3e:d3: 65:d3:29:69:82:32:3c:85:c4:22:ab:1f:29:1c:91: a4:34:9a:74:85:ab:18:4d:16:ea:7a:88:c3:3a:0f: b0:0d:d2:e0:a1:74:b0:0f:b6:9b:31:52:ef:3b:fe: 10:7c:4a:db:f1:b7:b2:68:70:ee:e1:de:b0:b5:ed: 4a:50:da:92:35:56:14:d8:64:e4:c2:11:2c:95:4e: d6:1c:73:0b:25:c7:94:6c:5a:bd:c7:74:0f:d7:74: f5:3b:27:b6:3e:28:c2:96:cc:14:d6:60:06:50:57: 47:97:aa:b9:ab:3d:a7:6f:cf:7b:51:d3:5c:ee:97: 60:e5:6f:5e:98:2a:61:f5:67:fb:6b:d2:ff:57:d1: a4:08:04:b9:85:7b:f2:9c:ca:f3:b4:35:1e:d0:40: 7f:66:03:b1:bb:34:6e:b9:13:cc:fe:6a:d5:b9:45: 0c:3c:64:52:18:c4:6c:bd:30:7b:4a:a3:6f:a6:a3: bc:f9:3d:da:be:43:b9:98:96:30:e1:92:27:05:ed: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BC:12:4E:7E:56:E6:26:3F:5B:58:66:A5:28:24:7C:DD:97:0F:05 X509v3 Authority Key Identifier: keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:b6:c1:e8:1f:b2:0c:f5:2b:3c:bf:9c:95:73:de:6c:36:a6: a2:e7:fa:6c:7e:0e:60:86:c4:6a:83:8a:4b:0e:63:6b:80:b0: 44:1c:85:62:2a:ed:08:ed:34:52:de:de:e8:f0:01:eb:33:d7: 82:0c:09:92:a2:9f:e6:f4:96:c6:0e:47:5c:90:90:df:73:79: 09:87:8e:18:72:6b:13:35:53:b0:98:55:e5:cb:d7:2c:b8:58: be:7c:a2:4d:9a:2a:f2:2c:f4:ac:8a:a8:47:fb:ec:fa:8a:70: e8:8c:65:b6:6f:72:65:87:85:9e:1e:85:bd:b7:d7:05:0c:f7: e1:1a:6d:2d:59:f6:46:2b:6e:d9:ba:e0:d4:3e:78:79:c9:82: b3:c6:00:40:a0:27:55:fb:4e:41:4a:bc:9d:3c:f3:cf:80:a2: d0:0f:c1:03:3f:96:eb:80:05:2d:fe:49:1f:8b:91:85:25:22: 54:99:be:54:e4:51:a6:4d:eb:37:79:8e:fd:8d:ae:df:8f:eb: 0f:7b:e9:2a:1b:15:74:e9:33:c1:10:37:ff:93:5c:a5:8f:c2: c1:8a:17:f9:35:a0:de:dd:f3:07:22:a2:af:41:ac:84:a6:a4: 29:e0:4c:d9:b4:7e:f2:f1:06:93:68:29:c2:68:e0:07:b1:89: d9:72:39:43 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUMxTtvF8xaXxz/AOJInf5RPRexYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBE QUJCRUYyMjAeFw0yNTEwMTAxODU2NDBaFw0yNjEwMDkxOTAxNDBaMDMxMTAvBgNV BAMTKDRGQkMxMjRFN0U1NkU2MjYzRjVCNTg2NkE1MjgyNDdDREQ5NzBGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQivtjqlwYqhPuZxM05K5LoZz zNrcSLJFdf7ma2fOeS4I7raSbBgOrRKait+4vhK3IzPFKnnSWDo+02XTKWmCMjyF xCKrHykckaQ0mnSFqxhNFup6iMM6D7AN0uChdLAPtpsxUu87/hB8Stvxt7JocO7h 3rC17UpQ2pI1VhTYZOTCESyVTtYccwslx5RsWr3HdA/XdPU7J7Y+KMKWzBTWYAZQ V0eXqrmrPadvz3tR01zul2Dlb16YKmH1Z/tr0v9X0aQIBLmFe/KcyvO0NR7QQH9m A7G7NG65E8z+atW5RQw8ZFIYxGy9MHtKo2+mo7z5Pdq+Q7mYljDhkicF7eDbAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUT7wSTn5W5iY/W1hmpSgkfN2XDwUwHwYDVR0j BBgwFoAUwyVO+lxOn9pnaNApQkffcNq77yIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV LzAvQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBEQUJCRUYyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMzI1NEVGQTVDNEU5RkRBNjc2 OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X QlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hVLzAvMzQz NTJlMzIzMzM2MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzIz MTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQALewKMA0GCSqGSIb3DQEBCwUAA4IBAQBvtsHoH7IM9Ss8 v5yVc95sNqai5/psfg5ghsRqg4pLDmNrgLBEHIViKu0I7TRS3t7o8AHrM9eCDAmS op/m9JbGDkdckJDfc3kJh44YcmsTNVOwmFXly9csuFi+fKJNmiryLPSsiqhH++z6 inDojGW2b3Jlh4WeHoW9t9cFDPfhGm0tWfZGK27ZuuDUPnh5yYKzxgBAoCdV+05B SrydPPPPgKLQD8EDP5brgAUt/kkfi5GFJSJUmb5U5FGmTes3eY79ja7fj+sPe+kq GxV06TPBEDf/k1ylj8LBihf5NaDe3fMHIqKvQayEpqQp4EzZtH7y8QaTaCnCaOAH sYnZcjlD -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:14 2025 by rpki-client