$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa File: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (raw, json) Hash identifier: hBgzZnxmEBmYRTuvlGTuu4nN28d1lzU1d0fXQNp/cp8= Subject key identifier: 27:68:B7:D1:A2:EA:DA:BF:33:1D:54:75:5C:44:C1:80:56:B5:4B:B9 Certificate issuer: /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353 Certificate serial: 03836CD2F4EFCA52BD1B0048FF6440B1AFE0A0CC Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa Signing time: Fri 21 Mar 2025 11:07:10 +0000 ROA not before: Fri 21 Mar 2025 11:02:10 +0000 ROA not after: Fri 20 Mar 2026 11:07:10 +0000 asID: 265385 IP address blocks: 170.254.248.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:83:6c:d2:f4:ef:ca:52:bd:1b:00:48:ff:64:40:b1:af:e0:a0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353 Validity Not Before: Mar 21 11:02:10 2025 GMT Not After : Mar 20 11:07:10 2026 GMT Subject: CN=2768B7D1A2EADABF331D54755C44C18056B54BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8a:2c:b5:03:01:46:0b:98:ab:f3:2d:d1:2c: 41:f2:08:81:80:03:90:bf:40:ff:82:b0:c9:5c:8e: b5:07:48:19:32:f8:ae:f6:e6:73:d5:a3:ef:8b:08: bf:e8:a7:9f:93:6e:7c:58:9f:30:56:5f:be:f9:af: 18:1a:ed:3f:e2:8f:0d:36:11:36:54:53:ec:cc:9f: dc:96:7d:b8:46:ca:2b:7e:b4:9f:47:5e:fe:20:0d: 64:cf:9e:bc:2e:9f:a7:59:f6:0d:0e:fe:49:e3:4f: 47:ea:31:d7:47:c1:72:ef:b8:38:00:73:3f:a4:53: e7:2b:c9:77:f2:0f:40:dd:59:52:1a:7f:d0:ae:e5: 58:20:5e:9f:7f:e5:c2:e3:97:a9:e7:56:de:ea:4d: 6f:30:de:66:af:eb:36:ad:91:45:4f:8a:a7:03:e3: 08:7a:d9:2d:0e:93:d2:6b:53:28:b5:4b:94:1d:73: 6c:d1:25:9d:7d:8f:90:c5:79:7b:61:a6:e4:c6:55: 3c:c2:07:57:68:7a:18:18:62:f0:f4:70:ea:f0:e3: 16:10:b5:67:07:03:67:8c:7c:f7:d0:c4:58:0d:ba: 35:f8:9b:35:57:a2:52:8c:a4:0f:fa:9d:1a:58:8b: 2b:c8:3e:79:e5:ef:5a:fb:48:b7:31:36:d9:fe:51: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:B7:D1:A2:EA:DA:BF:33:1D:54:75:5C:44:C1:80:56:B5:4B:B9 X509v3 Authority Key Identifier: keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.248.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:c2:33:bb:32:b5:3c:60:40:1b:5b:7f:59:6b:1f:c4:1f:1f: 37:cf:8b:20:bf:35:5f:bd:bd:90:8a:19:6c:8d:bf:2c:51:95: ea:b8:e5:6e:84:0f:9e:29:2f:ab:d2:29:19:22:81:50:b7:d5: 07:8e:51:9a:20:a3:2d:7a:f7:c4:07:65:a6:ae:15:06:be:27: 51:82:3c:fb:e1:b7:a6:59:2e:20:22:87:26:0a:78:df:a7:da: 50:41:56:8c:57:c3:66:70:e9:43:bb:dd:c7:eb:3f:a5:28:eb: 4c:da:13:c0:c5:97:6c:4f:82:74:22:d4:fb:4d:f5:20:8e:96: 8a:1b:82:f7:7c:9e:93:dc:5d:27:56:38:90:a0:bc:c2:17:74: b9:1d:c3:f3:c1:93:4c:7f:1b:3f:c2:4a:de:6a:5e:b0:5b:2d: 91:a3:1f:dc:57:52:2a:02:5a:f7:02:b4:b8:23:0f:f3:a6:ad: 61:5a:d4:c1:2d:fd:2f:66:13:6c:84:94:51:de:18:46:af:ce: d5:0f:d3:37:39:4e:8d:23:bf:8b:4b:f4:60:fd:dc:35:ca:ce: df:bf:f8:70:b0:1b:04:ec:3f:1d:a0:30:7d:bc:2d:af:24:0a: 37:3d:50:f6:6f:2a:c9:f2:0d:ce:ad:63:f9:d5:61:60:b7:94: a6:d8:37:65 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUA4Ns0vTvylK9GwBI/2RAsa/goMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNDRjg2NUFDOTA3NTFDQ0VGNUVGMjlDODNEQTQwMEVD REMwMDM1MzAeFw0yNTAzMjExMTAyMTBaFw0yNjAzMjAxMTA3MTBaMDMxMTAvBgNV BAMTKDI3NjhCN0QxQTJFQURBQkYzMzFENTQ3NTVDNDRDMTgwNTZCNTRCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsiiy1AwFGC5ir8y3RLEHyCIGA A5C/QP+CsMlcjrUHSBky+K725nPVo++LCL/op5+TbnxYnzBWX775rxga7T/ijw02 ETZUU+zMn9yWfbhGyit+tJ9HXv4gDWTPnrwun6dZ9g0O/knjT0fqMddHwXLvuDgA cz+kU+cryXfyD0DdWVIaf9Cu5VggXp9/5cLjl6nnVt7qTW8w3mav6zatkUVPiqcD 4wh62S0Ok9JrUyi1S5Qdc2zRJZ19j5DFeXthpuTGVTzCB1doehgYYvD0cOrw4xYQ tWcHA2eMfPfQxFgNujX4mzVXolKMpA/6nRpYiyvIPnnl71r7SLcxNtn+UScdAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUJ2i30aLq2r8zHVR1XETBgFa1S7kwHwYDVR0j BBgwFoAUbM+GWskHUczvXvKcg9pADs3AA1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNpNWlZeHdpQThteEtFRXpuNVNtSnFDbzdQTEJ5UmNLNFY5d2ZqN2hN SlgvMC82Q0NGODY1QUM5MDc1MUNDRUY1RUYyOUM4M0RBNDAwRUNEQzAwMzUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQ0Y4NjVBQzkwNzUxQ0NF RjVFRjI5QzgzREE0MDBFQ0RDMDAzNTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJjaTVpWXh3aUE4bXhLRUV6bjVTbUpxQ283UExCeVJjSzRWOXdmajdoTUpYLzAv MzEzNzMwMmUzMjM1MzQyZTMyMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr++DANBgkqhkiG9w0BAQsFAAOCAQEAX8Iz uzK1PGBAG1t/WWsfxB8fN8+LIL81X729kIoZbI2/LFGV6rjlboQPnikvq9IpGSKB ULfVB45RmiCjLXr3xAdlpq4VBr4nUYI8++G3plkuICKHJgp436faUEFWjFfDZnDp Q7vdx+s/pSjrTNoTwMWXbE+CdCLU+031II6WihuC93yek9xdJ1Y4kKC8whd0uR3D 88GTTH8bP8JK3mpesFstkaMf3FdSKgJa9wK0uCMP86atYVrUwS39L2YTbISUUd4Y Rq/O1Q/TNzlOjSO/i0v0YP3cNcrO37/4cLAbBOw/HaAwfbwtryQKNz1Q9m8qyfIN zq1j+dVhYLeUptg3ZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:12 2025 by rpki-client