$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa File: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (raw, json) Hash identifier: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc= Subject key identifier: 41:52:4F:18:26:FD:C1:AC:37:11:5A:83:96:23:52:34:36:89:15:B3 Certificate issuer: /CN=00A0649BEB784D778983813CFFD9D01F42F24C95 Certificate serial: 7A9570F8316E368B4C2AF5DE5387357C5E1E7846 Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa Signing time: Wed 09 Apr 2025 12:33:19 +0000 ROA not before: Wed 09 Apr 2025 12:28:19 +0000 ROA not after: Wed 08 Apr 2026 12:33:19 +0000 asID: 264939 IP address blocks: 168.228.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:95:70:f8:31:6e:36:8b:4c:2a:f5:de:53:87:35:7c:5e:1e:78:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95 Validity Not Before: Apr 9 12:28:19 2025 GMT Not After : Apr 8 12:33:19 2026 GMT Subject: CN=41524F1826FDC1AC37115A8396235234368915B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:32:12:28:4e:92:e5:9e:9a:a1:32:90:59: a7:8a:d7:9e:ea:51:c9:46:5d:cf:44:c3:6a:78:83: bc:97:48:6b:04:2b:c2:35:af:f6:e0:8f:ab:4f:05: ab:fb:ba:ee:05:76:2a:de:ec:3e:05:ca:3a:42:88: a2:8d:9c:25:e8:3c:51:9a:a8:a1:5f:12:46:0e:2e: f1:0a:1d:8e:40:e2:f5:f2:08:34:98:9e:4b:fd:bc: c2:17:ba:9a:9e:a3:0b:71:24:3c:f4:bd:bc:2f:a4: 08:21:1e:b2:e7:9d:3d:dc:7c:90:62:8f:ba:6f:54: a1:13:b9:0e:85:cb:30:41:21:53:cd:3f:28:c0:f7: 07:5e:f8:5e:83:9f:0e:7f:06:06:27:5a:c0:f2:8d: f1:06:bf:4c:39:08:57:32:3f:13:ce:b6:65:55:46: 98:70:3f:52:25:77:7f:f2:d8:ee:38:bf:29:9c:5d: a0:94:40:7c:dc:10:81:4b:17:99:f0:e5:a8:d2:06: 6b:8b:b2:36:b3:eb:5d:82:10:b3:b0:b3:4b:ac:f9: 08:5d:1e:d7:65:1f:7d:9b:73:c7:42:92:84:02:e6: f1:59:6d:a6:60:ca:a6:39:4a:39:8d:e9:47:4b:6c: 25:44:a4:c9:d3:0c:ef:26:28:87:c2:35:8a:f7:ea: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:4F:18:26:FD:C1:AC:37:11:5A:83:96:23:52:34:36:89:15:B3 X509v3 Authority Key Identifier: keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.153.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ac:80:eb:03:7f:10:b5:9c:1f:cc:7a:4e:54:69:43:fa:4b: 01:1e:49:8c:e7:ad:2b:a8:9c:ad:2b:c4:db:56:e5:c2:c3:ac: a6:f5:88:85:7f:d7:83:57:5a:0e:ce:64:81:cb:22:bb:ef:75: be:a6:cc:b3:9b:b0:d5:8b:d7:8e:9d:9d:86:bb:85:d7:1f:83: 83:50:51:60:05:f6:46:23:43:70:f7:14:63:33:4d:d5:0e:b0: cf:e0:c5:de:87:80:f7:32:c9:21:17:e1:2c:26:d5:47:4f:16: 32:e8:e7:d3:72:6c:0c:37:88:83:df:85:72:b4:8a:6d:db:72: 3c:78:39:49:2c:ff:69:3a:3b:76:c9:2c:07:bc:84:c9:8a:e5: 43:55:7a:aa:9b:8d:07:35:1f:2b:9c:30:ca:0f:f2:b7:8b:40: 38:b6:d7:23:02:c3:e0:b8:83:0c:6c:8c:07:ab:0f:3f:8d:6d: 81:63:f7:38:27:89:47:04:ec:aa:c7:83:c1:25:a1:10:96:32: c6:1a:7a:e6:f8:0c:16:cd:76:54:94:f1:a3:3f:b2:67:18:7d: 61:64:d6:ae:54:28:d9:91:1f:70:ba:de:b9:50:51:39:49:20: 9b:6c:a7:86:bf:25:8b:a5:bc:b0:60:88:7e:0f:89:a0:f0:49: 7e:63:a7:4c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUepVw+DFuNotMKvXeU4c1fF4eeEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBMDY0OUJFQjc4NEQ3Nzg5ODM4MTNDRkZEOUQwMUY0 MkYyNEM5NTAeFw0yNTA0MDkxMjI4MTlaFw0yNjA0MDgxMjMzMTlaMDMxMTAvBgNV BAMTKDQxNTI0RjE4MjZGREMxQUMzNzExNUE4Mzk2MjM1MjM0MzY4OTE1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxTISKE6S5Z6aoTKQWaeK157q UclGXc9Ew2p4g7yXSGsEK8I1r/bgj6tPBav7uu4Fdire7D4FyjpCiKKNnCXoPFGa qKFfEkYOLvEKHY5A4vXyCDSYnkv9vMIXupqeowtxJDz0vbwvpAghHrLnnT3cfJBi j7pvVKETuQ6FyzBBIVPNPyjA9wde+F6Dnw5/BgYnWsDyjfEGv0w5CFcyPxPOtmVV RphwP1Ild3/y2O44vymcXaCUQHzcEIFLF5nw5ajSBmuLsjaz612CELOws0us+Qhd HtdlH32bc8dCkoQC5vFZbaZgyqY5SjmN6UdLbCVEpMnTDO8mKIfCNYr36s1RAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUQVJPGCb9waw3EVqDliNSNDaJFbMwHwYDVR0j BBgwFoAUAKBkm+t4TXeJg4E8/9nQH0LyTJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM056WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVyU0JhSzFKOEV2 eVcvMC8wMEEwNjQ5QkVCNzg0RDc3ODk4MzgxM0NGRkQ5RDAxRjQyRjI0Qzk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQTA2NDlCRUI3ODRENzc4 OTgzODEzQ0ZGRDlEMDFGNDJGMjRDOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOelprYktwR1VBeG9QWWI2VVZXQXBmMmhRa0t4UlJ1clNCYUsxSjhFdnlXLzAv MzEzNjM4MmUzMjMyMzgyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM5MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkmTANBgkqhkiG9w0BAQsFAAOCAQEApKyA 6wN/ELWcH8x6TlRpQ/pLAR5JjOetK6icrSvE21blwsOspvWIhX/Xg1daDs5kgcsi u+91vqbMs5uw1YvXjp2dhruF1x+Dg1BRYAX2RiNDcPcUYzNN1Q6wz+DF3oeA9zLJ IRfhLCbVR08WMujn03JsDDeIg9+FcrSKbdtyPHg5SSz/aTo7dsksB7yEyYrlQ1V6 qpuNBzUfK5wwyg/yt4tAOLbXIwLD4LiDDGyMB6sPP41tgWP3OCeJRwTsqseDwSWh EJYyxhp65vgMFs12VJTxoz+yZxh9YWTWrlQo2ZEfcLreuVBROUkgm2ynhr8li6W8 sGCIfg+JoPBJfmOnTA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:57 2025 by rpki-client