$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa File: 3137302e38302e332e302f32342d3234203d3e20323633363237.roa (raw, json) Hash identifier: oyqyHkSmYtINQOzr1A+DTZdawq73TSaWIhv9iFXcF5g= Subject key identifier: AE:0C:95:3C:42:13:54:3A:8E:28:60:34:57:0F:A5:2D:A4:59:76:67 Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2 Certificate serial: 4B3858D0FC0A30589991AC86B3547DB0B5D1BF91 Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa Signing time: Tue 25 Mar 2025 20:13:31 +0000 ROA not before: Tue 25 Mar 2025 20:08:31 +0000 ROA not after: Tue 24 Mar 2026 20:13:31 +0000 asID: 263627 IP address blocks: 170.80.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:58:d0:fc:0a:30:58:99:91:ac:86:b3:54:7d:b0:b5:d1:bf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2 Validity Not Before: Mar 25 20:08:31 2025 GMT Not After : Mar 24 20:13:31 2026 GMT Subject: CN=AE0C953C4213543A8E286034570FA52DA4597667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:74:be:9e:6c:50:8c:39:a2:da:b1:63:7b: 9e:90:fb:3a:07:7c:3c:f2:23:62:ae:9c:2e:3b:0a: fc:39:6c:bc:64:01:b2:0f:3d:98:d3:64:b5:f6:fc: 8d:10:71:aa:f8:ba:6c:25:d8:56:ef:16:04:0c:87: ce:b7:e9:4a:20:7e:7c:45:89:05:35:f9:b7:ae:1a: 01:0a:85:8e:d3:4f:e4:ad:3f:01:69:8e:6b:b2:f7: 9b:02:ff:fb:2b:c2:85:c9:c7:43:61:20:ce:ed:0d: 46:a9:a4:0b:d2:8f:30:07:8f:87:ff:35:71:ca:e9: 34:5c:43:e7:f4:88:ab:ae:08:ce:f9:e6:21:03:89: a1:cb:ca:13:20:4e:70:f3:9a:66:02:70:7e:1b:57: 00:57:bd:69:e7:21:bd:fd:9d:1c:70:3a:ff:02:f8: 4d:a1:a0:24:4c:0b:30:1c:8d:8d:0a:e6:36:81:b8: fd:08:a5:b2:86:74:c1:84:e1:89:ea:3f:87:74:6e: c8:d0:30:ba:95:c1:dc:54:2b:73:00:f4:bd:24:75: 7d:e6:8e:e1:87:e9:8e:43:3b:d8:8a:9b:a3:6a:40: 71:5b:1d:6b:89:70:0d:f5:0f:0c:00:b9:d7:2b:b7: e2:8b:e3:9c:63:75:b4:13:8f:7f:40:2e:8d:e1:1f: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:95:3C:42:13:54:3A:8E:28:60:34:57:0F:A5:2D:A4:59:76:67 X509v3 Authority Key Identifier: keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e332e302f32342d3234203d3e20323633363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.3.0/24 Signature Algorithm: sha256WithRSAEncryption 79:99:a5:6b:aa:82:1d:dd:62:e6:1e:48:60:f6:ba:0d:4a:18: a9:98:a6:23:1d:8d:ce:9e:50:56:99:2e:1f:3d:16:fb:32:f6: a8:e9:38:d8:2f:9c:f6:b5:d1:ad:83:e0:fb:28:7f:27:ca:98: 31:59:21:cb:77:17:90:ac:be:f1:df:0d:a3:54:3e:6f:2a:de: c5:e0:c7:13:c6:39:9f:31:f7:35:fc:00:65:92:ae:10:00:00: fb:c8:10:b5:78:99:e2:83:a2:ed:9f:20:5c:b3:41:a9:a8:29: 66:be:37:90:d2:72:92:4e:e2:9b:c2:97:cf:da:94:c2:60:9f: 09:79:74:99:a2:22:32:ff:ff:f9:74:51:94:e8:78:3c:3c:37: e7:c4:d0:a7:1e:e2:4c:70:ec:26:68:fd:90:5e:63:e7:4a:2c: 7e:b7:d4:cb:90:90:67:80:8a:44:f0:dd:ac:6d:ba:4c:79:48: df:3d:2b:bc:8b:47:01:c6:40:89:f6:6f:ae:0f:99:90:d9:95: d3:40:df:03:34:84:3c:21:02:58:0c:42:83:c7:42:c5:89:48: 77:0f:c3:cb:84:62:63:89:28:3a:6f:d4:93:5f:35:83:e2:2f: 1a:79:12:8c:a7:01:01:9d:ee:6c:c7:a9:73:a1:16:bd:6b:1b: 31:23:b2:3b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUSzhY0PwKMFiZkayGs1R9sLXRv5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE NURFMzhEMjAeFw0yNTAzMjUyMDA4MzFaFw0yNjAzMjQyMDEzMzFaMDMxMTAvBgNV BAMTKEFFMEM5NTNDNDIxMzU0M0E4RTI4NjAzNDU3MEZBNTJEQTQ1OTc2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkXS+nmxQjDmi2rFje56Q+zoH fDzyI2KunC47Cvw5bLxkAbIPPZjTZLX2/I0Qcar4umwl2FbvFgQMh8636UogfnxF iQU1+beuGgEKhY7TT+StPwFpjmuy95sC//srwoXJx0NhIM7tDUappAvSjzAHj4f/ NXHK6TRcQ+f0iKuuCM755iEDiaHLyhMgTnDzmmYCcH4bVwBXvWnnIb39nRxwOv8C +E2hoCRMCzAcjY0K5jaBuP0IpbKGdMGE4YnqP4d0bsjQMLqVwdxUK3MA9L0kdX3m juGH6Y5DO9iKm6NqQHFbHWuJcA31DwwAudcrt+KL45xjdbQTj39ALo3hH9fvAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUrgyVPEITVDqOKGA0Vw+lLaRZdmcwHwYDVR0j BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6 V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3 NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv MzEzNzMwMmUzODMwMmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM2 MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAKpQAzANBgkqhkiG9w0BAQsFAAOCAQEAeZmla6qCHd1i 5h5IYPa6DUoYqZimIx2Nzp5QVpkuHz0W+zL2qOk42C+c9rXRrYPg+yh/J8qYMVkh y3cXkKy+8d8No1Q+byrexeDHE8Y5nzH3NfwAZZKuEAAA+8gQtXiZ4oOi7Z8gXLNB qagpZr43kNJykk7im8KXz9qUwmCfCXl0maIiMv//+XRRlOh4PDw358TQpx7iTHDs Jmj9kF5j50osfrfUy5CQZ4CKRPDdrG26THlI3z0rvItHAcZAifZvrg+ZkNmV00Df AzSEPCECWAxCg8dCxYlIdw/Dy4RiY4koOm/Uk181g+IvGnkSjKcBAZ3ubMepc6EW vWsbMSOyOw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:51 2025 by rpki-client