$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134392e302f32342d3234203d3e203238313635.roa File: 3139312e3234302e3134392e302f32342d3234203d3e203238313635.roa (raw, json) Hash identifier: VshYW+YW/cT3cw/UFI9D1oMr55jxFHkHRunTf1N0AiM= Subject key identifier: 89:DF:1C:66:51:07:3D:96:1A:D8:8C:CF:33:69:E6:99:64:76:AF:E9 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 47112340F3FAD2DDCF94E75AF9B55A9318B3C988 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134392e302f32342d3234203d3e203238313635.roa Signing time: Mon 28 Jul 2025 12:31:51 +0000 ROA not before: Mon 28 Jul 2025 12:26:51 +0000 ROA not after: Mon 27 Jul 2026 12:31:51 +0000 asID: 28165 IP address blocks: 191.240.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 13:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:11:23:40:f3:fa:d2:dd:cf:94:e7:5a:f9:b5:5a:93:18:b3:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Jul 28 12:26:51 2025 GMT Not After : Jul 27 12:31:51 2026 GMT Subject: CN=89DF1C6651073D961AD88CCF3369E6996476AFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6c:da:62:2b:e9:d2:6a:3d:6c:05:f9:56:d9: 3e:a6:70:7f:88:17:10:90:db:9e:ae:5c:ed:22:cf: f2:bb:7b:d3:86:97:95:2a:6d:d7:46:24:e9:bd:35: ce:ae:a1:76:0f:b9:57:ea:fe:4a:7a:66:64:0f:02: 95:b5:92:bc:81:77:4c:6a:f6:68:ed:d1:79:b2:15: 1e:63:5b:8a:5c:be:c9:4f:6f:21:fa:2f:05:1c:4b: 8b:3a:e9:b2:db:f4:c0:b1:4a:64:b1:02:5f:a6:2e: 72:c6:ad:e6:2a:8c:b2:41:3b:66:af:87:23:b4:90: 93:f1:05:fb:67:3c:17:ba:2d:a0:1a:06:37:fb:08: d6:f8:e0:2b:73:a3:da:c5:c8:0d:79:fc:49:36:a7: c5:b3:87:e7:56:94:55:52:67:5b:74:33:6f:67:0c: 51:eb:43:b6:4f:51:9f:0c:ca:f2:ff:74:8c:27:fb: bf:de:07:df:45:0d:c0:02:0b:4b:64:88:34:e5:8a: 15:7c:3b:0b:bb:b3:3d:a0:d0:5a:ad:33:da:ad:36: ef:91:e3:5e:47:48:98:e0:0b:f3:5a:28:f8:d6:c5: 69:fa:d4:5d:ac:e6:37:19:7c:fe:e7:1f:dd:bc:2a: 36:dd:bd:da:98:47:02:69:bc:9c:99:af:0f:30:65: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DF:1C:66:51:07:3D:96:1A:D8:8C:CF:33:69:E6:99:64:76:AF:E9 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134392e302f32342d3234203d3e203238313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.149.0/24 Signature Algorithm: sha256WithRSAEncryption c1:95:1d:ed:23:c1:a0:3d:0a:b5:b8:e6:5e:1e:1c:df:48:f7: 38:4e:34:b2:8b:be:48:64:c7:75:ca:2c:b0:5e:f8:cb:b6:16: 5f:3d:a7:26:54:d7:35:29:51:fc:d0:de:b6:86:75:cf:bb:39: ee:79:a9:f9:55:cb:a9:9a:b2:51:fb:60:45:48:c1:6e:51:e7: e6:f0:ce:a7:0f:43:ff:80:1c:f0:88:a0:ca:38:62:ca:8c:e3: 7d:b3:c8:eb:88:96:6f:e7:46:48:16:1d:de:1f:12:9c:d4:80: 39:83:d5:db:b7:89:c4:f7:be:71:d6:d1:3f:e0:e3:30:b6:61: 4d:73:d3:f1:aa:34:dc:77:d8:23:8b:bc:2d:87:6c:37:d9:c6: b8:99:74:e2:4a:fa:9e:54:89:ad:e2:a8:e1:82:3a:50:1c:82: 8d:12:7b:16:0e:b0:2c:e7:5b:7b:25:f2:9b:15:70:4b:df:b7: 33:49:bd:26:79:9d:5e:87:33:d9:d4:60:2d:1d:5e:ea:09:43: 00:4b:ad:d1:28:49:fb:7f:86:19:96:f6:d1:9d:b1:86:95:45: c9:4b:2e:0e:88:75:6b:3b:f1:b9:f0:af:89:c0:06:94:96:cd: 15:5d:ac:57:75:f0:88:c2:63:c4:45:d4:26:47:0e:75:e4:af: 78:13:d3:d4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURxEjQPP60t3PlOda+bVakxizyYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNTA3MjgxMjI2NTFaFw0yNjA3MjcxMjMxNTFaMDMxMTAvBgNV BAMTKDg5REYxQzY2NTEwNzNEOTYxQUQ4OENDRjMzNjlFNjk5NjQ3NkFGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbNpiK+nSaj1sBflW2T6mcH+I FxCQ256uXO0iz/K7e9OGl5UqbddGJOm9Nc6uoXYPuVfq/kp6ZmQPApW1kryBd0xq 9mjt0XmyFR5jW4pcvslPbyH6LwUcS4s66bLb9MCxSmSxAl+mLnLGreYqjLJBO2av hyO0kJPxBftnPBe6LaAaBjf7CNb44Ctzo9rFyA15/Ek2p8Wzh+dWlFVSZ1t0M29n DFHrQ7ZPUZ8MyvL/dIwn+7/eB99FDcACC0tkiDTlihV8Owu7sz2g0FqtM9qtNu+R 415HSJjgC/NaKPjWxWn61F2s5jcZfP7nH928KjbdvdqYRwJpvJyZrw8wZWkxAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUid8cZlEHPZYa2IzPM2nmmWR2r+kwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC/8JUwDQYJKoZIhvcNAQELBQADggEBAMGVHe0j waA9CrW45l4eHN9I9zhONLKLvkhkx3XKLLBe+Mu2Fl89pyZU1zUpUfzQ3raGdc+7 Oe55qflVy6maslH7YEVIwW5R5+bwzqcPQ/+AHPCIoMo4YsqM432zyOuIlm/nRkgW Hd4fEpzUgDmD1du3icT3vnHW0T/g4zC2YU1z0/GqNNx32COLvC2HbDfZxriZdOJK +p5Uia3iqOGCOlAcgo0SexYOsCznW3sl8psVcEvftzNJvSZ5nV6HM9nUYC0dXuoJ QwBLrdEoSft/hhmW9tGdsYaVRclLLg6IdWs78bnwr4nABpSWzRVdrFd18IjCY8RF 1CZHDnXkr3gT09Q= -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:45 2025 by rpki-client