$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa File: 34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa (raw, json) Hash identifier: WSL3BRq2/k24U/WhtJob1EOCudx5yfhEPlAvZ54Meo8= Subject key identifier: 1B:0B:F7:6E:0A:D8:F2:05:45:68:90:01:8B:98:14:76:EC:9F:34:A1 Certificate issuer: /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Certificate serial: 443DD4B9BBBEE10F0C409349B6A2322E04A3505C Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa Signing time: Tue 03 Jun 2025 22:00:00 +0000 ROA not before: Tue 03 Jun 2025 21:55:00 +0000 ROA not after: Tue 02 Jun 2026 22:00:00 +0000 asID: 268101 IP address blocks: 45.168.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3d:d4:b9:bb:be:e1:0f:0c:40:93:49:b6:a2:32:2e:04:a3:50:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A Validity Not Before: Jun 3 21:55:00 2025 GMT Not After : Jun 2 22:00:00 2026 GMT Subject: CN=1B0BF76E0AD8F205456890018B981476EC9F34A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:ad:0e:32:3b:51:f8:89:b3:87:81:c4:7d: 64:2d:7d:c6:5a:ce:82:1f:d4:6b:32:31:ad:34:8f: b1:e7:f7:73:77:ff:2c:12:3d:0f:0b:70:14:d2:7f: 14:46:28:57:2f:9d:72:6f:8b:84:96:e6:5c:33:ce: 00:03:1e:70:c5:f5:34:3c:30:7b:44:b1:ec:d0:0f: ae:8d:1f:b3:95:5c:4c:e8:9d:80:4c:dd:85:cb:ad: 3a:e4:27:c9:44:b0:8e:30:8f:a3:24:7c:bd:4b:f7: de:ed:90:ab:43:46:83:c4:06:84:6d:0b:b2:86:94: e6:2a:26:ff:25:ad:af:3d:0d:41:ad:44:7d:43:1e: 0b:e3:0a:32:aa:68:07:bd:94:4a:dc:3f:0b:da:68: ff:07:70:1d:fa:31:83:f9:5c:94:36:be:95:f4:07: 80:85:f5:16:10:cc:c4:9a:4e:a1:e8:ea:3f:b0:9b: ae:09:50:e8:7f:ce:91:f3:30:aa:05:b5:ab:ae:a0: 4a:08:de:a2:4f:20:bc:1f:a2:91:81:bc:49:fa:5f: d2:01:14:3c:b4:c5:b4:69:44:8c:67:44:90:70:32: af:f4:6d:a0:a5:e4:e9:6f:99:2f:8f:4e:41:cc:a5: e3:c0:d5:1c:e8:cb:fd:6e:76:9b:f8:aa:73:26:21: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0B:F7:6E:0A:D8:F2:05:45:68:90:01:8B:98:14:76:EC:9F:34:A1 X509v3 Authority Key Identifier: keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.156.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8a:46:1b:87:30:6c:23:41:6e:a8:11:74:06:5b:3f:99:d1: f4:0c:7c:a5:bf:ae:6e:3e:eb:69:b3:6a:17:a3:31:c2:0d:b8: a7:6c:3c:ed:dc:e1:3f:e3:53:a6:13:7b:e0:c0:7e:79:50:f1: c6:48:c4:2e:1c:37:f9:92:91:c0:92:c3:45:b7:08:0b:3a:a2: 58:2f:6e:c6:fc:7e:f2:f3:84:73:f4:6f:67:bd:40:8c:32:c7: 69:49:43:f0:86:c2:b1:72:d3:90:a9:74:aa:c8:ed:60:ee:77: e9:a7:d8:ba:6a:63:0d:ff:b0:01:1f:9f:53:88:45:4c:80:f7: 0a:a6:2c:67:37:1e:50:d2:26:01:d6:79:b7:1d:ca:26:cf:f0: d7:fd:31:de:54:3c:3a:a4:f3:1b:4d:8f:bd:42:73:d8:9c:e3: 0d:6c:3e:00:56:83:b6:2b:6b:88:26:c1:25:6f:3c:c4:e5:a6: e4:fb:79:2e:f8:a3:de:6d:bd:4c:82:69:0f:a6:e6:1a:3d:cc: d0:5d:b7:e1:82:a8:7d:a3:de:ee:37:cd:e7:3d:db:ff:e5:ff: ae:df:62:b9:ab:ec:15:4b:cc:63:4a:18:6f:86:75:38:15:e4: a2:47:72:cc:64:3c:bb:a8:2b:db:33:ee:bb:fd:67:17:b2:27: 27:9b:02:29 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURD3Uubu+4Q8MQJNJtqIyLgSjUFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyRUM0OUM4OUJEQzFEQ0JFQ0I1MkM5MjJCRTRFQzk0 RDc5ODgyQTAeFw0yNTA2MDMyMTU1MDBaFw0yNjA2MDIyMjAwMDBaMDMxMTAvBgNV BAMTKDFCMEJGNzZFMEFEOEYyMDU0NTY4OTAwMThCOTgxNDc2RUM5RjM0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZK0OMjtR+Imzh4HEfWQtfcZa zoIf1GsyMa00j7Hn93N3/ywSPQ8LcBTSfxRGKFcvnXJvi4SW5lwzzgADHnDF9TQ8 MHtEsezQD66NH7OVXEzonYBM3YXLrTrkJ8lEsI4wj6MkfL1L997tkKtDRoPEBoRt C7KGlOYqJv8lra89DUGtRH1DHgvjCjKqaAe9lErcPwvaaP8HcB36MYP5XJQ2vpX0 B4CF9RYQzMSaTqHo6j+wm64JUOh/zpHzMKoFtauuoEoI3qJPILwfopGBvEn6X9IB FDy0xbRpRIxnRJBwMq/0baCl5OlvmS+PTkHMpePA1Rzoy/1udpv4qnMmISIBAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGwv3bgrY8gVFaJABi5gUduyfNKEwHwYDVR0j BBgwFoAUkS7EnIm9wdy+y1LJIr5OyU15iCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL TlgvMS85MTJFQzQ5Qzg5QkRDMURDQkVDQjUyQzkyMkJFNEVDOTRENzk4ODJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMkVDNDlDODlCREMxRENC RUNCNTJDOTIyQkU0RUM5NEQ3OTg4MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzEv MzQzNTJlMzEzNjM4MmUzMTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqJwwDQYJKoZIhvcNAQELBQADggEBAFyKRhuH MGwjQW6oEXQGWz+Z0fQMfKW/rm4+62mzahejMcINuKdsPO3c4T/jU6YTe+DAfnlQ 8cZIxC4cN/mSkcCSw0W3CAs6olgvbsb8fvLzhHP0b2e9QIwyx2lJQ/CGwrFy05Cp dKrI7WDud+mn2LpqYw3/sAEfn1OIRUyA9wqmLGc3HlDSJgHWebcdyibP8Nf9Md5U PDqk8xtNj71Cc9ic4w1sPgBWg7Yra4gmwSVvPMTlpuT7eS74o95tvUyCaQ+m5ho9 zNBdt+GCqH2j3u43zec92//l/67fYrmr7BVLzGNKGG+GdTgV5KJHcsxkPLuoK9sz 7rv9ZxeyJyebAik= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:56 2025 by rpki-client