$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa File: 34352e3136352e35342e302f32342d3234203d3e20323636313239.roa (raw, json) Hash identifier: 8l0uxYK0zu5JXSfHlE9fbr4JcFicX7WbSqMszsgcgPQ= Subject key identifier: A9:FF:68:C3:41:44:CB:DB:7A:CB:53:B1:5E:6B:75:6F:72:DD:AE:90 Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Certificate serial: 038F6260B9BC54EDDDA3A18D37270CEB5A6E3E9A Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa Signing time: Wed 05 Mar 2025 19:00:15 +0000 ROA not before: Wed 05 Mar 2025 18:55:15 +0000 ROA not after: Wed 04 Mar 2026 19:00:15 +0000 asID: 266129 IP address blocks: 45.165.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:62:60:b9:bc:54:ed:dd:a3:a1:8d:37:27:0c:eb:5a:6e:3e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Validity Not Before: Mar 5 18:55:15 2025 GMT Not After : Mar 4 19:00:15 2026 GMT Subject: CN=A9FF68C34144CBDB7ACB53B15E6B756F72DDAE90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c6:ba:44:d3:87:7e:6e:cd:01:ba:85:30:80: fb:c7:0e:f4:d2:a0:7b:05:ce:4d:1a:b4:f0:53:d0: 1a:e4:2d:c5:98:68:03:fe:2b:8b:39:fa:a5:4d:e1: 47:a9:d5:a5:69:8f:7b:e9:2d:c9:46:46:2d:47:6d: 9a:37:e8:f9:fd:73:e3:85:d7:3c:ed:08:18:54:ac: 94:b5:69:0d:7b:10:0f:36:13:18:10:34:df:c3:ef: 94:53:64:93:72:90:00:f7:33:d6:8b:89:5e:be:a4: 02:4a:d2:c2:c2:7e:8a:1f:e5:fc:f4:d3:c6:72:52: dd:90:64:ce:0f:10:e3:92:99:28:30:22:cc:03:16: bb:93:db:01:dc:6e:17:60:d2:ea:1e:40:9e:55:ef: 4f:eb:f5:a8:0d:49:34:5a:94:2f:36:f8:68:74:5a: b1:9a:0a:0d:6b:9b:4d:c6:31:5e:5c:11:e3:e1:db: 60:77:51:73:38:b2:d6:f1:9f:2d:6d:1a:9f:bd:bf: bb:87:ab:9a:d9:8d:38:74:ff:bf:36:0f:aa:96:56: 47:6c:c8:11:bc:ab:fc:94:14:a5:ec:92:fb:00:14: cd:3f:54:42:d0:78:3e:91:20:62:b5:8c:a0:93:37: 3b:65:ce:bd:de:07:b9:0c:33:1c:fa:e2:00:74:7c: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FF:68:C3:41:44:CB:DB:7A:CB:53:B1:5E:6B:75:6F:72:DD:AE:90 X509v3 Authority Key Identifier: keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.54.0/24 Signature Algorithm: sha256WithRSAEncryption 19:95:18:6d:4f:bb:8d:f9:21:98:d8:dd:dc:9e:89:04:7c:21: 2c:c6:a0:b4:88:6c:1e:ac:c9:8d:27:62:6e:71:69:7d:01:93: 1c:8d:77:1c:11:e1:60:f4:94:03:68:e2:3b:88:f0:58:af:18: 07:05:ea:41:0f:ec:7a:b2:5a:06:3a:33:60:5a:c8:24:44:ad: 66:cf:de:ff:d7:6f:8d:63:28:88:20:16:8c:47:1a:05:5d:30: 0d:8f:8c:fb:36:56:82:4b:6b:dd:34:10:b4:37:51:34:5a:bf: 80:18:13:10:17:f6:26:73:c5:c6:a8:21:79:2a:1b:48:41:2b: c5:75:d1:6f:6b:39:b7:03:97:33:a8:1f:0f:f0:3c:5c:f8:f9: 92:3e:45:03:33:19:5d:8a:ff:52:bc:26:42:2f:8a:03:51:b2: 99:cd:ff:1a:83:7e:01:63:69:51:d7:ae:35:88:92:4b:76:37: 75:3d:30:d8:28:b7:1c:90:e4:08:82:19:24:7e:89:56:cd:b5: 8f:cf:06:3a:30:0c:fd:a0:b1:3b:66:96:1f:f1:4d:e3:a0:5a: 9c:2a:83:e7:82:41:4e:5f:29:a5:3d:50:87:05:17:fe:9b:fe: 7d:d0:51:6a:0f:6f:2c:c6:ec:87:bf:b6:89:13:7c:36:84:65: 1e:5f:4a:f1 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUA49iYLm8VO3do6GNNycM61puPpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF REI5RUU5RTAeFw0yNTAzMDUxODU1MTVaFw0yNjAzMDQxOTAwMTVaMDMxMTAvBgNV BAMTKEE5RkY2OEMzNDE0NENCREI3QUNCNTNCMTVFNkI3NTZGNzJEREFFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxrpE04d+bs0BuoUwgPvHDvTS oHsFzk0atPBT0BrkLcWYaAP+K4s5+qVN4Uep1aVpj3vpLclGRi1HbZo36Pn9c+OF 1zztCBhUrJS1aQ17EA82ExgQNN/D75RTZJNykAD3M9aLiV6+pAJK0sLCfoof5fz0 08ZyUt2QZM4PEOOSmSgwIswDFruT2wHcbhdg0uoeQJ5V70/r9agNSTRalC82+Gh0 WrGaCg1rm03GMV5cEePh22B3UXM4stbxny1tGp+9v7uHq5rZjTh0/782D6qWVkds yBG8q/yUFKXskvsAFM0/VELQeD6RIGK1jKCTNztlzr3eB7kMMxz64gB0fGhXAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUqf9ow0FEy9t6y1OxXmt1b3LdrpAwHwYDVR0j BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3 dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3 NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv MzQzNTJlMzEzNjM1MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2 MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALaU2MA0GCSqGSIb3DQEBCwUAA4IBAQAZlRhtT7uN +SGY2N3cnokEfCEsxqC0iGwerMmNJ2JucWl9AZMcjXccEeFg9JQDaOI7iPBYrxgH BepBD+x6sloGOjNgWsgkRK1mz97/12+NYyiIIBaMRxoFXTANj4z7NlaCS2vdNBC0 N1E0Wr+AGBMQF/Ymc8XGqCF5KhtIQSvFddFvazm3A5czqB8P8Dxc+PmSPkUDMxld iv9SvCZCL4oDUbKZzf8ag34BY2lR1641iJJLdjd1PTDYKLcckOQIghkkfolWzbWP zwY6MAz9oLE7ZpYf8U3joFqcKoPngkFOXymlPVCHBRf+m/590FFqD28sxuyHv7aJ E3w2hGUeX0rx -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:32 2025 by rpki-client