$ rpki-client -vvvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323634333938.roa File: 34352e3233392e3137372e302f32342d3234203d3e20323634333938.roa (raw, json) Hash identifier: M8P5DOSbcJgj71lHZ6TXHJCKmjEx4SsdM479D5/LV54= Subject key identifier: 1A:B9:85:C6:B6:6A:A5:95:2E:78:99:54:9F:44:60:29:E6:9A:8C:64 Certificate issuer: /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4 Certificate serial: 2B85D7641481761B01A8721563A717D2B7D91D1F Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323634333938.roa Signing time: Fri 23 Oct 2026 17:58:51 +0000 ROA not before: Fri 23 Oct 2026 17:53:51 +0000 ROA not after: Fri 22 Oct 2027 17:58:51 +0000 asID: 264398 IP address blocks: 45.239.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 22:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:85:d7:64:14:81:76:1b:01:a8:72:15:63:a7:17:d2:b7:d9:1d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4 Validity Not Before: Oct 23 17:53:51 2026 GMT Not After : Oct 22 17:58:51 2027 GMT Subject: CN=1AB985C6B66AA5952E7899549F446029E69A8C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:5d:ea:8b:d7:e9:1a:44:ca:42:41:9d:65: 32:0e:5f:6c:ef:19:1b:e9:d1:55:b6:dc:06:8e:82: ed:30:57:8b:d1:d3:09:fd:89:5e:79:80:f2:89:f2: aa:84:94:6c:dd:7b:b3:d1:92:c7:f5:ae:6c:91:dc: 70:66:41:d2:4e:67:39:af:be:9b:85:43:49:3e:23: a1:2b:1b:2c:59:62:80:97:72:ef:fa:a1:cc:43:e1: c9:54:61:09:a0:72:0c:64:17:99:4a:0d:ac:96:4f: 0c:93:b7:a1:0c:59:10:a3:26:8a:69:00:3b:82:6c: ca:e6:11:45:3f:d1:29:8b:b6:66:16:03:2e:2b:e0: 91:3b:d6:1b:56:93:c0:4d:1f:fa:70:14:41:d1:aa: 29:1d:6a:c3:dc:58:a9:1b:95:d9:5f:a4:c2:05:6c: 90:81:7a:a9:38:5c:34:1c:d5:4b:89:34:ae:66:dd: 14:b6:4b:b8:50:57:02:0b:4f:26:ec:70:ef:0a:88: cd:26:c7:9c:52:94:c4:a4:af:21:84:13:26:67:af: d6:b8:07:a5:86:d6:83:3b:a4:98:52:5f:64:2e:f2: e6:9e:ad:76:5e:c2:9f:e2:94:e0:c8:73:13:61:46: 03:36:1e:ba:89:fd:12:75:25:49:d9:21:4a:c1:97: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:85:C6:B6:6A:A5:95:2E:78:99:54:9F:44:60:29:E6:9A:8C:64 X509v3 Authority Key Identifier: keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323634333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.239.177.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:90:1e:57:93:f0:39:0d:ba:67:9d:6f:05:16:e7:9c:e0:37: d4:62:22:6b:db:05:eb:c5:53:94:66:39:ed:b1:2b:78:51:db: 10:6d:66:05:82:ed:2c:bf:94:03:29:3c:83:c7:a7:90:52:06: 66:0a:5d:7c:12:07:32:3d:14:c3:23:d0:de:0b:cf:8c:db:84: 59:83:d8:ea:99:35:a1:68:5c:e9:9e:03:26:b6:18:20:c8:ba: 4e:51:85:b5:e6:49:ea:71:cd:93:ca:db:6e:57:22:4a:e3:3c: 49:88:92:46:b9:8c:ce:ed:f6:78:c7:0c:f5:3a:df:4f:8a:1e: a2:77:b4:05:47:74:fe:21:5a:9e:87:13:b3:5c:2a:2f:93:7f: fb:49:0c:cf:3a:a7:72:44:59:bc:2a:e8:b0:c2:f3:89:b7:7f: 25:f6:a4:81:3b:fe:5e:b4:2c:34:7b:10:e2:e9:a5:d5:77:5c: 95:41:33:85:0c:94:12:ec:c4:61:b9:a6:25:ad:8c:06:cb:ca: ee:15:41:e4:31:ff:2b:80:e2:b3:59:63:94:ec:75:05:45:80: da:70:ed:93:2a:54:ac:29:f9:4a:33:97:de:6e:90:4d:cf:7d: 59:d5:34:04:d3:69:bb:38:08:5c:1a:49:42:38:4d:50:0c:00: 0e:b9:c4:fc -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUK4XXZBSBdhsBqHIVY6cX0rfZHR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgyOEY4QTg5MTVBNzI3NTMxMzY4MjVBMUY0NkZFQ0JC Rjk1QjdFNDAeFw0yNjEwMjMxNzUzNTFaFw0yNzEwMjIxNzU4NTFaMDMxMTAvBgNV BAMTKDFBQjk4NUM2QjY2QUE1OTUyRTc4OTk1NDlGNDQ2MDI5RTY5QThDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGV3qi9fpGkTKQkGdZTIOX2zv GRvp0VW23AaOgu0wV4vR0wn9iV55gPKJ8qqElGzde7PRksf1rmyR3HBmQdJOZzmv vpuFQ0k+I6ErGyxZYoCXcu/6ocxD4clUYQmgcgxkF5lKDayWTwyTt6EMWRCjJopp ADuCbMrmEUU/0SmLtmYWAy4r4JE71htWk8BNH/pwFEHRqikdasPcWKkbldlfpMIF bJCBeqk4XDQc1UuJNK5m3RS2S7hQVwILTybscO8KiM0mx5xSlMSkryGEEyZnr9a4 B6WG1oM7pJhSX2Qu8uaerXZewp/ilODIcxNhRgM2HrqJ/RJ1JUnZIUrBl4RhAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGrmFxrZqpZUueJlUn0RgKeaajGQwHwYDVR0j BBgwFoAUmCj4qJFacnUxNoJaH0b+y7+Vt+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1Hdnd1NGRibmljR0xzdEQyS0p6ZEtmdzlrbUhOVVR6ZHdTWUdIa3dZ b2ovMC85ODI4RjhBODkxNUE3Mjc1MzEzNjgyNUExRjQ2RkVDQkJGOTVCN0U0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MjhGOEE4OTE1QTcyNzUz MTM2ODI1QTFGNDZGRUNCQkY5NUI3RTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVNR3Z3dTRkYm5pY0dMc3REMktKemRLZnc5a21ITlVUemR3U1lHSGt3WW9qLzAv MzQzNTJlMzIzMzM5MmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzQzMzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt77EwDQYJKoZIhvcNAQELBQADggEBAEyQHleT 8DkNumedbwUW55zgN9RiImvbBevFU5RmOe2xK3hR2xBtZgWC7Sy/lAMpPIPHp5BS BmYKXXwSBzI9FMMj0N4Lz4zbhFmD2OqZNaFoXOmeAya2GCDIuk5RhbXmSepxzZPK 225XIkrjPEmIkka5jM7t9njHDPU630+KHqJ3tAVHdP4hWp6HE7NcKi+Tf/tJDM86 p3JEWbwq6LDC84m3fyX2pIE7/l60LDR7EOLppdV3XJVBM4UMlBLsxGG5piWtjAbL yu4VQeQx/yuA4rNZY5TsdQVFgNpw7ZMqVKwp+Uozl95ukE3PfVnVNATTabs4CFwa SUI4TVAMAA65xPw= -----END CERTIFICATE-----Generated at Mon Nov 2 00:55:23 2026 by rpki-client