$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233332e302f32342d3234203d3e203238313635.roa File: 3230302e3232392e3233332e302f32342d3234203d3e203238313635.roa (raw, json) Hash identifier: L/l8VxUP/JDTYacO32gIqCrr57TSjjElY6QaNgiRksA= Subject key identifier: 45:DC:B8:49:D4:0E:33:00:86:9E:CD:E9:DB:0E:40:93:DC:E0:61:E3 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 1F6CA128F464F3204D9D6D0506D9C72ABA30FB21 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233332e302f32342d3234203d3e203238313635.roa Signing time: Mon 28 Jul 2025 12:31:53 +0000 ROA not before: Mon 28 Jul 2025 12:26:53 +0000 ROA not after: Mon 27 Jul 2026 12:31:53 +0000 asID: 28165 IP address blocks: 200.229.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 13:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6c:a1:28:f4:64:f3:20:4d:9d:6d:05:06:d9:c7:2a:ba:30:fb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Jul 28 12:26:53 2025 GMT Not After : Jul 27 12:31:53 2026 GMT Subject: CN=45DCB849D40E3300869ECDE9DB0E4093DCE061E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:72:fa:16:69:70:02:8e:15:1c:01:d1:a0: 6f:8a:e1:46:d8:3d:aa:b0:29:55:c9:21:9e:c6:74: 3c:ec:c2:52:5b:3e:fd:fe:cd:64:51:27:a2:fa:1e: b3:b8:57:33:c5:71:38:7d:b9:df:cf:1a:b7:a7:ca: cf:e0:71:19:6d:90:e0:8b:8a:44:09:9a:56:d0:6c: 17:57:ab:d4:37:e9:9c:e6:91:9b:88:29:52:c4:de: d2:a6:13:4c:06:0e:85:de:34:01:b7:99:cb:ff:86: 8c:32:1c:3b:52:03:08:4d:40:29:81:60:8a:15:a7: 06:56:32:33:ee:2d:cf:82:81:64:bc:af:14:24:f6: e9:10:2f:f3:db:41:3e:17:1a:1d:ad:37:39:6d:d3: 91:ce:04:93:7a:1c:d2:d0:ca:ce:3a:8d:ae:99:d5: 4c:35:af:94:08:47:ad:3d:1c:e9:d9:f3:92:51:95: ce:82:3a:28:2b:98:16:e8:c8:dd:45:49:4b:bf:4f: ea:bd:4e:28:32:eb:e5:35:3f:db:cc:3a:90:d5:e6: 37:32:6f:0a:18:e2:8b:02:6c:87:57:7d:20:4e:02: fd:5e:75:51:af:a4:62:5a:1e:f1:6b:5f:de:cc:03: 4b:d2:fe:52:7c:2a:2a:b3:47:9d:7a:15:51:ca:fb: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DC:B8:49:D4:0E:33:00:86:9E:CD:E9:DB:0E:40:93:DC:E0:61:E3 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233332e302f32342d3234203d3e203238313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.233.0/24 Signature Algorithm: sha256WithRSAEncryption b0:9a:da:ca:72:44:fb:7a:5f:93:5c:74:a8:c9:a8:84:6e:1b: 62:e7:4d:9b:ec:56:19:4e:28:f1:d6:9e:6b:87:1d:18:ea:75: 7c:c6:c9:5a:47:74:d3:13:ae:92:12:ec:db:3f:9b:50:4b:eb: c3:ae:a9:f8:95:61:51:04:d9:20:66:8f:d9:28:57:3d:57:d2: 19:34:fd:ab:0d:4c:98:f4:5f:67:4b:91:58:cc:c9:2c:be:67: 0c:41:26:2e:b8:e5:90:3d:59:72:b1:01:c1:96:18:a5:fc:01: 3d:98:c8:e5:cc:1c:59:69:ca:9d:b3:2b:92:3b:2e:f3:b9:fa: bc:29:8d:13:d0:38:15:4f:ac:20:28:da:7c:34:40:30:34:a5: af:d8:51:77:60:b7:5d:5d:1f:81:02:8f:84:7e:a3:3f:30:7f: b0:c0:db:6c:87:38:7f:c3:75:d8:b6:94:b9:55:d3:00:41:7d: b9:a8:98:eb:d8:a2:b0:d8:7b:94:39:88:e0:05:e6:d0:be:2d: 84:da:e6:d1:9f:26:99:cb:06:e7:dd:7c:3a:ed:dc:83:78:94: ce:db:3a:ed:63:2a:66:43:38:06:40:0f:14:92:55:f4:23:c2: 2d:d9:e7:09:b6:21:5d:39:00:22:36:90:b1:0b:80:2e:aa:91: 70:93:e0:35 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUH2yhKPRk8yBNnW0FBtnHKrow+yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNTA3MjgxMjI2NTNaFw0yNjA3MjcxMjMxNTNaMDMxMTAvBgNV BAMTKDQ1RENCODQ5RDQwRTMzMDA4NjlFQ0RFOURCMEU0MDkzRENFMDYxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqXL6FmlwAo4VHAHRoG+K4UbY PaqwKVXJIZ7GdDzswlJbPv3+zWRRJ6L6HrO4VzPFcTh9ud/PGrenys/gcRltkOCL ikQJmlbQbBdXq9Q36ZzmkZuIKVLE3tKmE0wGDoXeNAG3mcv/howyHDtSAwhNQCmB YIoVpwZWMjPuLc+CgWS8rxQk9ukQL/PbQT4XGh2tNzlt05HOBJN6HNLQys46ja6Z 1Uw1r5QIR609HOnZ85JRlc6COigrmBboyN1FSUu/T+q9Tigy6+U1P9vMOpDV5jcy bwoY4osCbIdXfSBOAv1edVGvpGJaHvFrX97MA0vS/lJ8KiqzR516FVHK++cRAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURdy4SdQOMwCGns3p2w5Ak9zgYeMwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADI5ekwDQYJKoZIhvcNAQELBQADggEBALCa2spy RPt6X5NcdKjJqIRuG2LnTZvsVhlOKPHWnmuHHRjqdXzGyVpHdNMTrpIS7Ns/m1BL 68OuqfiVYVEE2SBmj9koVz1X0hk0/asNTJj0X2dLkVjMySy+ZwxBJi645ZA9WXKx AcGWGKX8AT2YyOXMHFlpyp2zK5I7LvO5+rwpjRPQOBVPrCAo2nw0QDA0pa/YUXdg t11dH4ECj4R+oz8wf7DA22yHOH/Dddi2lLlV0wBBfbmomOvYorDYe5Q5iOAF5tC+ LYTa5tGfJpnLBufdfDrt3IN4lM7bOu1jKmZDOAZADxSSVfQjwi3Z5wm2IV05ACI2 kLELgC6qkXCT4DU= -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:15 2025 by rpki-client