$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa File: AS53170.roa (raw, json) Hash identifier: D+3LsbWKIOXLyf7qG2sUWvzBHPAvO4uj4lpV+dhD3BA= Subject key identifier: BD:61:A3:0C:52:5E:5C:A7:2A:E8:B2:FB:8F:EC:46:77:52:95:1A:B2 Certificate issuer: /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Certificate serial: 055A541D3C669F6DCABF990DEBF52F92BF4FAC1B Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa Signing time: Wed 18 Jun 2025 15:00:00 +0000 ROA not before: Wed 18 Jun 2025 14:55:00 +0000 ROA not after: Wed 17 Jun 2026 15:00:00 +0000 asID: 53170 IP address blocks: 186.224.55.0/24 maxlen: 24 2804:3838:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5a:54:1d:3c:66:9f:6d:ca:bf:99:0d:eb:f5:2f:92:bf:4f:ac:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A Validity Not Before: Jun 18 14:55:00 2025 GMT Not After : Jun 17 15:00:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:54:9a:98:0d:21:81:c1:92:ba:48:4e:84: 7a:f8:27:48:77:18:f7:68:f0:35:3e:6b:0c:29:df: d1:86:5e:00:34:21:d2:57:1a:c3:38:5d:72:2e:a5: ed:f0:14:98:f7:2c:7f:8b:7b:d3:d8:1c:04:f5:84: d0:f4:ab:33:6e:3b:8a:f2:0f:15:cd:18:a2:9d:62: 4d:e1:91:17:83:a0:0b:47:fc:ef:f3:c2:a5:61:f0: 98:ec:29:8a:1c:82:80:56:e9:cb:0e:a9:89:fb:be: c0:b4:9a:4f:a9:73:76:28:0e:00:de:72:f2:f4:7e: bc:c6:e3:b5:3a:4b:f9:f5:f1:60:86:4d:9e:39:6a: 06:01:20:dc:45:2b:c7:b7:db:01:97:50:9e:f8:62: 8d:f6:99:dd:15:c5:46:df:b9:5e:90:f8:9f:6f:b3: 3f:c3:f0:b9:e0:05:87:65:b8:bf:83:e7:98:d4:fb: 08:f0:3f:16:c2:5a:d6:6a:f6:e7:e4:fa:b0:a8:75: cd:dd:1d:dc:cf:ea:0c:73:be:cd:cf:ed:90:8f:51: 51:76:b9:27:ce:14:81:34:5d:73:00:8d:6e:92:7d: 07:b1:61:12:c1:93:b2:35:8f:fc:b8:26:52:86:4c: 48:19:1b:7f:77:21:e1:ab:25:ab:fc:62:bb:b0:d8: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:A3:0C:52:5E:5C:A7:2A:E8:B2:FB:8F:EC:46:77:52:95:1A:B2 X509v3 Authority Key Identifier: keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS53170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.224.55.0/24 IPv6: 2804:3838:c000::/34 Signature Algorithm: sha256WithRSAEncryption 4c:77:d7:53:9a:9a:67:f1:ed:b0:4f:5e:ad:51:b4:2d:c0:4f: fb:c3:f2:fb:66:0d:c3:b3:e2:5f:7f:16:7d:a6:77:14:e3:3a: cd:11:89:a8:bd:f3:43:0b:df:cf:5c:97:a5:46:2f:86:15:a2: 3f:be:ae:1b:9c:1f:71:fd:37:bb:36:3a:c1:20:3d:88:41:65: be:29:64:2c:95:2c:6a:76:5d:9a:04:c0:0c:0a:58:7c:f5:fc: 4f:a2:be:22:04:fc:3d:f6:cb:48:81:cf:00:51:9a:3b:07:23: 0e:7e:86:b4:48:51:fe:cf:58:18:62:c3:7a:8d:70:98:71:50: de:de:7f:78:0d:4b:ee:f1:9c:29:40:85:66:3b:ca:13:2f:17: 2f:8d:ce:d0:ef:6b:f2:02:19:26:1d:c6:6d:1d:5f:d0:55:3c: 53:f4:b1:e1:c0:b4:f9:b4:ce:34:64:b4:48:f2:02:e1:29:a3: e3:a4:14:88:16:9d:ca:4f:e5:e7:bc:58:2b:f4:0e:85:ac:9e: b1:b5:bc:f7:4d:90:d8:38:4c:1a:ac:11:b2:47:5b:cc:e7:4b: 1b:b1:4a:e4:e0:4a:33:e3:10:85:14:25:d4:ac:20:b2:f8:32: 93:69:de:6d:01:2f:10:6b:fe:3f:6c:29:72:49:8c:23:77:0b: 71:0c:7d:04 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUBVpUHTxmn23Kv5kN6/Uvkr9PrBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1Nzg5RThBQ0RDMkQ1OTVCRTMzQjRBMEQyMUI2REEz Q0E2MEI0QTAeFw0yNTA2MTgxNDU1MDBaFw0yNjA2MTcxNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVCQTU0OUE5ODBEMjE4MUMx OTJCQTQ4NEU4NDdBRjgyNzQ4NzcxOEY3NjhGMDM1M0U2QjBDMjlERkQxODY1RTAw MzQyMUQyNTcxQUMzMzg1RDcyMkVBNUVERjAxNDk4RjcyQzdGOEI3QkQzRDgxQzA0 RjU4NEQwRjRBQjMzNkUzQjhBRjIwRjE1Q0QxOEEyOUQ2MjRERTE5MTE3ODNBMDBC NDdGQ0VGRjNDMkE1NjFGMDk4RUMyOThBMUM4MjgwNTZFOUNCMEVBOTg5RkJCRUMw QjQ5QTRGQTk3Mzc2MjgwRTAwREU3MkYyRjQ3RUJDQzZFM0I1M0E0QkY5RjVGMTYw ODY0RDlFMzk2QTA2MDEyMERDNDUyQkM3QjdEQjAxOTc1MDlFRjg2MjhERjY5OURE MTVDNTQ2REZCOTVFOTBGODlGNkZCMzNGQzNGMEI5RTAwNTg3NjVCOEJGODNFNzk4 RDRGQjA4RjAzRjE2QzI1QUQ2NkFGNkU3RTRGQUIwQTg3NUNEREQxRERDQ0ZFQTBD NzNCRUNEQ0ZFRDkwOEY1MTUxNzZCOTI3Q0UxNDgxMzQ1RDczMDA4RDZFOTI3RDA3 QjE2MTEyQzE5M0IyMzU4RkZDQjgyNjUyODY0QzQ4MTkxQjdGNzcyMUUxQUIyNUFC RkM2MkJCQjBEODIxOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtbpUmpgNIYHBkrpIToR6+CdIdxj3aPA1PmsMKd/Rhl4ANCHSVxrD OF1yLqXt8BSY9yx/i3vT2BwE9YTQ9KszbjuK8g8VzRiinWJN4ZEXg6ALR/zv88Kl YfCY7CmKHIKAVunLDqmJ+77AtJpPqXN2KA4A3nLy9H68xuO1Okv59fFghk2eOWoG ASDcRSvHt9sBl1Ce+GKN9pndFcVG37lekPifb7M/w/C54AWHZbi/g+eY1PsI8D8W wlrWavbn5PqwqHXN3R3cz+oMc77Nz+2Qj1FRdrknzhSBNF1zAI1ukn0HsWESwZOy NY/8uCZShkxIGRt/dyHhqyWr/GK7sNghiwIDAQABo4ICKzCCAicwHQYDVR0OBBYE FL1howxSXlynKuiy+4/sRndSlRqyMB8GA1UdIwQYMBaAFOlXieis3C1ZW+M7Sg0h tto8pgtKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzEvRTk1Nzg5RThBQ0RDMkQ1 OTVCRTMzQjRBMEQyMUI2REEzQ0E2MEI0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9FOTU3ODlFOEFDREMyRDU5NUJFMzNCNEEwRDIxQjZEQTNDQTYw QjRBLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWl3ZEE0Yno0dlhIZ2tnZkNoOUpqNVpN YmRiTk1pVFhybjlnUE5OdFY0dkIvMS9BUzUzMTcwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuuA3MA4E AgACMAgDBgYoBDg4wDANBgkqhkiG9w0BAQsFAAOCAQEATHfXU5qaZ/HtsE9erVG0 LcBP+8Py+2YNw7PiX38WfaZ3FOM6zRGJqL3zQwvfz1yXpUYvhhWiP76uG5wfcf03 uzY6wSA9iEFlvilkLJUsanZdmgTADApYfPX8T6K+IgT8PfbLSIHPAFGaOwcjDn6G tEhR/s9YGGLDeo1wmHFQ3t5/eA1L7vGcKUCFZjvKEy8XL43O0O9r8gIZJh3GbR1f 0FU8U/Sx4cC0+bTONGS0SPIC4Smj46QUiBadyk/l57xYK/QOhayesbW8902Q2DhM GqwRskdbzOdLG7FK5OBKM+MQhRQl1Kwgsvgyk2nebQEvEGv+P2wpckmMI3cLcQx9 BA== -----END CERTIFICATE-----Generated at Sat Jun 21 05:33:36 2025 by rpki-client