$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135342e302f32342d3234203d3e203238313635.roa File: 3139312e3234302e3135342e302f32342d3234203d3e203238313635.roa (raw, json) Hash identifier: 7eGy5lqcPZzFUxaygHFvbX03xpgdHdLlItFT9NHTo5Y= Subject key identifier: 63:FF:ED:33:83:BD:AB:D8:42:B4:96:72:29:D9:6B:B7:D0:26:D1:A9 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 569A43AB653E32C4E4FDC65C9D86D82C1EB25CA6 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135342e302f32342d3234203d3e203238313635.roa Signing time: Mon 28 Jul 2025 12:31:36 +0000 ROA not before: Mon 28 Jul 2025 12:26:36 +0000 ROA not after: Mon 27 Jul 2026 12:31:36 +0000 asID: 28165 IP address blocks: 191.240.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 13:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9a:43:ab:65:3e:32:c4:e4:fd:c6:5c:9d:86:d8:2c:1e:b2:5c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Jul 28 12:26:36 2025 GMT Not After : Jul 27 12:31:36 2026 GMT Subject: CN=63FFED3383BDABD842B4967229D96BB7D026D1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:36:3c:9e:f7:35:6c:bd:c6:86:3e:27:ee: 6e:e7:34:a4:48:77:40:23:8e:a5:96:10:63:34:cf: 5a:bc:ad:9a:04:23:a9:07:74:56:14:eb:6d:dc:1e: 64:37:45:f2:26:5a:58:fc:b1:58:9b:83:97:27:3f: 5d:a0:2a:30:ab:97:1b:29:b4:c9:5e:0b:25:5b:36: 0a:81:d2:6f:c9:ab:a0:c6:92:cd:30:70:22:f9:35: 2d:ab:7a:ab:28:78:61:de:88:b6:7c:96:02:a0:4c: 43:78:b0:74:a1:cc:9a:23:b3:e8:e3:28:52:c5:66: a0:65:48:a5:8f:f8:df:c1:fe:c2:b0:e3:44:cf:89: 4f:c1:8f:b6:5e:6b:20:a2:ae:6a:59:64:af:c1:87: 1b:89:00:76:51:37:57:7b:13:8e:23:61:2e:fa:69: e9:27:f4:e4:23:db:19:ce:54:7b:18:5f:e3:c8:d3: d6:2f:63:73:70:af:70:73:55:48:83:20:b1:68:53: c2:a5:5b:31:b5:8b:70:a1:a7:b3:f2:2f:21:c1:4b: b0:fc:b2:9c:5f:ae:f1:3e:c8:d6:49:17:2a:09:b3: 6a:c4:53:e5:d4:20:12:8a:3e:d2:ef:bf:b5:3d:fc: d0:b5:b9:89:d2:8d:f2:a2:29:24:3f:28:4f:24:71: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FF:ED:33:83:BD:AB:D8:42:B4:96:72:29:D9:6B:B7:D0:26:D1:A9 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135342e302f32342d3234203d3e203238313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.154.0/24 Signature Algorithm: sha256WithRSAEncryption 44:b6:a5:aa:89:86:03:29:ae:d6:08:7e:ac:42:14:7b:50:bb: 96:00:e4:ff:ff:70:e3:5a:23:b0:94:81:d7:a1:eb:34:e2:a0: c1:0c:58:db:80:da:a6:4e:b3:55:52:d7:78:83:ea:c8:0b:81: 90:bf:28:54:48:e1:9f:ac:5b:37:17:4b:be:13:ed:1b:5f:89: bb:28:89:ce:5c:03:0d:03:a3:cd:5a:61:e5:8e:3a:39:cd:0c: a6:a7:98:9e:51:6f:5d:a4:12:a7:e2:fe:1b:89:52:36:73:ac: 13:1a:02:20:65:f8:9c:a7:c0:e2:c6:27:c5:46:a9:18:15:dd: 01:35:50:8d:5e:78:46:ab:92:5f:64:91:be:04:60:8b:72:9a: df:57:be:ba:68:d8:a2:00:d3:a4:e5:ca:c4:2e:4e:7d:24:05: e5:61:80:fe:b2:7a:a0:11:58:af:a7:f3:cd:d7:04:5b:13:e9: f4:e0:93:62:50:a9:37:ea:49:13:5c:6d:99:bd:ae:bf:5e:37: 4f:7a:4d:41:67:01:34:bf:22:62:44:95:2b:7a:15:86:cc:d5: 20:a0:30:12:7f:13:3d:19:6c:af:69:9a:51:b0:02:90:b5:f7: 19:a3:8b:03:65:a0:c3:4b:a3:f6:40:e1:06:96:50:3f:a2:74: 23:f6:43:9f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVppDq2U+MsTk/cZcnYbYLB6yXKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzZaFw0yNjA3MjcxMjMxMzZaMDMxMTAvBgNV BAMTKDYzRkZFRDMzODNCREFCRDg0MkI0OTY3MjI5RDk2QkI3RDAyNkQxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAzY8nvc1bL3Ghj4n7m7nNKRI d0AjjqWWEGM0z1q8rZoEI6kHdFYU623cHmQ3RfImWlj8sVibg5cnP12gKjCrlxsp tMleCyVbNgqB0m/Jq6DGks0wcCL5NS2reqsoeGHeiLZ8lgKgTEN4sHShzJojs+jj KFLFZqBlSKWP+N/B/sKw40TPiU/Bj7ZeayCirmpZZK/BhxuJAHZRN1d7E44jYS76 aekn9OQj2xnOVHsYX+PI09YvY3Nwr3BzVUiDILFoU8KlWzG1i3Chp7PyLyHBS7D8 spxfrvE+yNZJFyoJs2rEU+XUIBKKPtLvv7U9/NC1uYnSjfKiKSQ/KE8kcajZAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUY//tM4O9q9hCtJZyKdlrt9Am0akwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC/8JowDQYJKoZIhvcNAQELBQADggEBAES2paqJ hgMprtYIfqxCFHtQu5YA5P//cONaI7CUgdeh6zTioMEMWNuA2qZOs1VS13iD6sgL gZC/KFRI4Z+sWzcXS74T7Rtfibsoic5cAw0Do81aYeWOOjnNDKanmJ5Rb12kEqfi /huJUjZzrBMaAiBl+JynwOLGJ8VGqRgV3QE1UI1eeEarkl9kkb4EYItymt9Xvrpo 2KIA06TlysQuTn0kBeVhgP6yeqARWK+n883XBFsT6fTgk2JQqTfqSRNcbZm9rr9e N096TUFnATS/ImJElSt6FYbM1SCgMBJ/Ez0ZbK9pmlGwApC19xmjiwNloMNLo/ZA 4QaWUD+idCP2Q58= -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:10 2025 by rpki-client