$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa File: 3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (raw, json) Hash identifier: u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c= Subject key identifier: 29:BB:68:7C:2A:E9:40:D1:42:A8:2A:58:56:EA:90:8C:4C:C0:AF:4F Certificate issuer: /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Certificate serial: 56BFCA8FDB2BDC57766611D80498A3DB3DE9478C Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa Signing time: Fri 08 Aug 2025 19:26:03 +0000 ROA not before: Fri 08 Aug 2025 19:21:03 +0000 ROA not after: Fri 07 Aug 2026 19:26:03 +0000 asID: 262519 IP address blocks: 168.205.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bf:ca:8f:db:2b:dc:57:76:66:11:d8:04:98:a3:db:3d:e9:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Validity Not Before: Aug 8 19:21:03 2025 GMT Not After : Aug 7 19:26:03 2026 GMT Subject: CN=29BB687C2AE940D142A82A5856EA908C4CC0AF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:80:01:98:5a:cd:5e:50:b8:79:5e:35:e7: 50:fa:fd:ee:c0:db:17:9c:3b:70:73:08:40:af:22: 2c:73:4e:59:69:0c:87:20:50:77:c0:2a:a3:9f:5e: e4:82:cc:13:12:75:e9:43:a0:d6:bc:81:29:a2:dc: 2a:a8:34:10:b9:67:89:0c:42:ad:f7:b1:27:a4:25: 2f:f0:dd:e1:96:88:c6:eb:0f:a3:55:17:fd:59:bb: 79:ba:9c:b8:da:ba:53:49:6f:43:6b:a3:95:1a:1c: b9:ad:14:3a:56:3a:8d:7a:b1:00:28:f3:e9:3a:35: 38:69:a3:82:7a:5e:35:0f:6a:da:29:7b:eb:39:2e: 97:54:40:2a:ed:b2:38:28:35:ab:15:12:57:c5:76: 67:70:f1:ec:f3:76:17:25:6c:64:2e:08:36:d6:a1: 35:02:03:88:c4:b0:cd:92:d9:06:67:12:c4:2b:8f: 5c:ec:7d:c1:6f:7b:62:ef:49:03:1f:ce:3a:ea:56: 2e:ea:ad:3d:b8:f9:59:a2:b1:91:fa:f6:c6:c4:53: 72:ef:e5:32:3a:8d:d9:ac:de:f3:cd:2b:7b:e1:3d: 7c:71:19:55:d1:ca:dc:d9:59:fa:03:67:10:12:46: 32:37:74:ad:f7:d9:b9:33:35:bd:13:ff:35:0d:46: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:68:7C:2A:E9:40:D1:42:A8:2A:58:56:EA:90:8C:4C:C0:AF:4F X509v3 Authority Key Identifier: keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.104.0/22 Signature Algorithm: sha256WithRSAEncryption aa:d6:64:62:c3:d1:ff:c9:e8:c3:a7:24:ce:9f:4d:93:f9:fc: 4c:a2:84:4d:98:8a:76:21:66:71:2a:ad:45:01:92:c8:4a:25: e6:91:fc:a6:a8:ab:61:4f:df:64:ef:ee:cb:80:37:cd:cd:74: c8:34:9e:21:e1:59:8e:95:2e:92:c7:bd:a0:f1:a1:24:ed:6d: 8c:d8:5f:94:db:1f:3e:87:b8:17:84:1d:0f:57:ed:e7:45:80: 64:44:0c:52:29:51:96:28:81:67:a1:c6:cb:d6:4a:02:51:21: b4:d8:03:f1:5a:e7:44:d6:07:31:a3:44:f3:30:2d:c2:72:d8: 2a:54:57:e8:0e:f1:fd:4b:a1:58:8c:d1:7f:c4:01:42:b1:e5: 27:e6:32:5b:40:17:ba:28:63:6f:8c:ec:f5:a0:08:78:c6:90: d8:ee:f8:fc:1f:9d:56:fd:3a:09:41:52:31:39:e8:59:b0:58: b0:5f:32:da:63:ac:fc:22:7c:a7:26:33:56:cc:99:1e:0f:19: 76:ac:47:98:73:7c:1d:8f:2a:ec:14:c4:2b:19:ef:3d:d9:41: 84:bc:0f:f5:57:18:8a:09:7e:5b:37:98:07:88:c1:bf:e9:52: 10:fb:12:7b:e1:10:05:2b:a8:5c:04:be:5c:42:94:75:26:6b: 29:98:18:37 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVr/Kj9sr3Fd2ZhHYBJij2z3pR4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyNDk4RThDRTdCNDg4RUJGQjEwNUJGRTJBMDQ4NzY2 MDBDQjVBMzAeFw0yNTA4MDgxOTIxMDNaFw0yNjA4MDcxOTI2MDNaMDMxMTAvBgNV BAMTKDI5QkI2ODdDMkFFOTQwRDE0MkE4MkE1ODU2RUE5MDhDNENDMEFGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHV4ABmFrNXlC4eV4151D6/e7A 2xecO3BzCECvIixzTllpDIcgUHfAKqOfXuSCzBMSdelDoNa8gSmi3CqoNBC5Z4kM Qq33sSekJS/w3eGWiMbrD6NVF/1Zu3m6nLjaulNJb0Nro5UaHLmtFDpWOo16sQAo 8+k6NThpo4J6XjUPatope+s5LpdUQCrtsjgoNasVElfFdmdw8ezzdhclbGQuCDbW oTUCA4jEsM2S2QZnEsQrj1zsfcFve2LvSQMfzjrqVi7qrT24+VmisZH69sbEU3Lv 5TI6jdms3vPNK3vhPXxxGVXRytzZWfoDZxASRjI3dK332bkzNb0T/zUNRsGrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUKbtofCrpQNFCqCpYVuqQjEzAr08wHwYDVR0j BBgwFoAUziSY6M57SI6/sQW/4qBIdmAMtaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFltaFFHYXZrZTJNUHBOQlpueEJlenFkMVJNM3I5TnhwcEpDOUFHVVV5 RFkvMC9DRTI0OThFOENFN0I0ODhFQkZCMTA1QkZFMkEwNDg3NjYwMENCNUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMjQ5OEU4Q0U3QjQ4OEVC RkIxMDVCRkUyQTA0ODc2NjAwQ0I1QTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhZbWhRR2F2a2UyTVBwTkJabnhCZXpxZDFSTTNyOU54cHBKQzlBR1VVeURZLzAv MzEzNjM4MmUzMjMwMzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMjM1MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNaDANBgkqhkiG9w0BAQsFAAOCAQEAqtZk YsPR/8now6ckzp9Nk/n8TKKETZiKdiFmcSqtRQGSyEol5pH8pqirYU/fZO/uy4A3 zc10yDSeIeFZjpUukse9oPGhJO1tjNhflNsfPoe4F4QdD1ft50WAZEQMUilRliiB Z6HGy9ZKAlEhtNgD8VrnRNYHMaNE8zAtwnLYKlRX6A7x/UuhWIzRf8QBQrHlJ+Yy W0AXuihjb4zs9aAIeMaQ2O74/B+dVv06CUFSMTnoWbBYsF8y2mOs/CJ8pyYzVsyZ Hg8ZdqxHmHN8HY8q7BTEKxnvPdlBhLwP9VcYigl+WzeYB4jBv+lSEPsSe+EQBSuo XAS+XEKUdSZrKZgYNw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:42 2025 by rpki-client