$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136382e302f32322d3232203d3e20323638333431.roa File: 34352e3233382e3136382e302f32322d3232203d3e20323638333431.roa (raw, json) Hash identifier: iBD6+arZwaxksAkouzJjRb8MZfbSfq9C3Gp+ejWxi1M= Subject key identifier: 0C:E3:AF:98:1C:FD:F7:4A:5E:29:A1:7F:A1:95:64:FE:9D:CD:E4:27 Certificate issuer: /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Certificate serial: 4494FE2A6ED7E6DFD3A7D60A8D29315A222A8C99 Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136382e302f32322d3232203d3e20323638333431.roa Signing time: Mon 22 Sep 2025 18:40:50 +0000 ROA not before: Mon 22 Sep 2025 18:35:50 +0000 ROA not after: Mon 21 Sep 2026 18:40:50 +0000 asID: 268341 IP address blocks: 45.238.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:94:fe:2a:6e:d7:e6:df:d3:a7:d6:0a:8d:29:31:5a:22:2a:8c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA Validity Not Before: Sep 22 18:35:50 2025 GMT Not After : Sep 21 18:40:50 2026 GMT Subject: CN=0CE3AF981CFDF74A5E29A17FA19564FE9DCDE427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:3e:0f:3d:51:09:52:18:73:fb:77:73:66: ab:a0:b9:d6:cf:20:06:e8:82:0d:86:f9:76:d4:90: fd:76:83:2c:7b:62:53:82:da:bd:5d:03:d3:8e:23: 33:af:16:c6:5c:8b:61:0c:85:d1:f1:7d:68:73:96: a4:30:ce:4e:1c:a7:a0:4c:f7:27:d8:a1:5a:10:a0: 9e:77:a9:1d:74:34:15:3a:4c:bb:08:85:de:c4:e1: 87:ab:eb:32:56:77:c5:ea:6b:cd:09:88:e1:8c:bc: 6b:13:be:a6:94:64:3c:ab:31:ff:9c:a9:a3:71:71: 0d:7c:20:2d:86:6f:f7:f5:fb:58:5a:f9:ce:64:a5: 6b:5b:e7:31:7d:8a:40:ee:c8:c8:a3:88:d3:33:a5: 9b:e3:ba:14:90:bf:59:66:50:03:ea:45:6b:cb:cd: 86:cd:0b:94:92:ac:9d:5f:81:d2:61:de:75:09:29: 2f:b3:73:2f:b2:31:bd:21:d8:32:f5:87:5a:70:65: 57:c8:4f:f4:c8:94:86:ed:98:08:fe:55:2e:fe:e8: 86:f6:5f:29:fe:82:fb:d3:9c:23:5f:01:c7:56:82: af:01:91:08:1f:3b:12:91:2b:98:1a:dc:8f:3e:7b: 32:7f:bc:05:94:c6:28:02:07:46:c7:8c:67:36:e3: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:AF:98:1C:FD:F7:4A:5E:29:A1:7F:A1:95:64:FE:9D:CD:E4:27 X509v3 Authority Key Identifier: keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3136382e302f32322d3232203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.168.0/22 Signature Algorithm: sha256WithRSAEncryption 89:28:28:ce:2c:4f:96:67:15:99:52:bb:2d:4a:55:38:e3:52: 89:2e:1f:05:34:8f:a9:32:b0:b3:08:a0:f1:e6:92:a1:24:68: fa:4e:cb:f4:ce:e6:2f:1f:21:f9:34:c9:b0:6f:bf:63:fa:05: 1e:16:fd:7a:64:10:47:ba:e0:bd:cc:f0:99:9e:7f:75:a8:11: 64:02:64:c1:d3:05:71:1c:fa:ff:e7:81:01:1c:fa:c9:69:21: 4a:ba:9c:80:fe:c3:ff:c8:55:02:bc:2b:88:95:42:91:16:69: e3:ea:9e:f5:f6:14:42:7e:0a:86:c8:9c:ca:a9:58:ce:a8:2a: 05:15:71:58:56:06:75:78:d5:5f:90:20:00:e4:dd:55:03:fd: 71:58:9d:7e:72:21:11:0a:f4:e5:c5:5a:ea:08:75:1a:59:4f: 22:1e:f1:8e:17:6e:4f:4b:bc:61:35:6c:e3:ce:5d:72:36:33: 4f:fb:6f:11:88:d5:ad:ef:63:df:2d:71:a0:05:af:af:f1:50: 1c:27:58:25:a7:a0:03:2f:0e:4f:0c:b0:30:66:3b:8a:22:90: d8:84:eb:17:49:0c:c1:d2:b6:c6:1c:ab:b6:0f:ce:f9:f0:8b: eb:14:60:39:e1:30:30:0f:d6:dd:84:3e:1c:8a:98:ea:ff:20: 3d:37:b8:00 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURJT+Km7X5t/Tp9YKjSkxWiIqjJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx NzM4QzlCQTAeFw0yNTA5MjIxODM1NTBaFw0yNjA5MjExODQwNTBaMDMxMTAvBgNV BAMTKDBDRTNBRjk4MUNGREY3NEE1RTI5QTE3RkExOTU2NEZFOURDREU0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkD4PPVEJUhhz+3dzZqugudbP IAbogg2G+XbUkP12gyx7YlOC2r1dA9OOIzOvFsZci2EMhdHxfWhzlqQwzk4cp6BM 9yfYoVoQoJ53qR10NBU6TLsIhd7E4Yer6zJWd8Xqa80JiOGMvGsTvqaUZDyrMf+c qaNxcQ18IC2Gb/f1+1ha+c5kpWtb5zF9ikDuyMijiNMzpZvjuhSQv1lmUAPqRWvL zYbNC5SSrJ1fgdJh3nUJKS+zcy+yMb0h2DL1h1pwZVfIT/TIlIbtmAj+VS7+6Ib2 Xyn+gvvTnCNfAcdWgq8BkQgfOxKRK5ga3I8+ezJ/vAWUxigCB0bHjGc24753AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUDOOvmBz990peKaF/oZVk/p3N5CcwHwYDVR0j BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzQzNTJlMzIzMzM4MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt7qgwDQYJKoZIhvcNAQELBQADggEBAIkoKM4s T5ZnFZlSuy1KVTjjUokuHwU0j6kysLMIoPHmkqEkaPpOy/TO5i8fIfk0ybBvv2P6 BR4W/XpkEEe64L3M8Jmef3WoEWQCZMHTBXEc+v/ngQEc+slpIUq6nID+w//IVQK8 K4iVQpEWaePqnvX2FEJ+CobInMqpWM6oKgUVcVhWBnV41V+QIADk3VUD/XFYnX5y IREK9OXFWuoIdRpZTyIe8Y4Xbk9LvGE1bOPOXXI2M0/7bxGI1a3vY98tcaAFr6/x UBwnWCWnoAMvDk8MsDBmO4oikNiE6xdJDMHStsYcq7YPzvnwi+sUYDnhMDAP1t2E PhyKmOr/ID03uAA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:15:34 2025 by rpki-client