$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa File: 34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa (raw, json) Hash identifier: oefXe+7orDxe+17NveHo7IVHEuePPJpNac/h0/GDXZM= Subject key identifier: 1A:5C:45:3E:EE:3E:2D:16:EC:64:6B:A2:72:A3:49:DA:EB:3C:62:46 Certificate issuer: /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4 Certificate serial: 725EA04574D66F1DCC1BA355288CEE25F0594D64 Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa Signing time: Wed 04 Jun 2025 01:13:26 +0000 ROA not before: Wed 04 Jun 2025 01:08:26 +0000 ROA not after: Wed 03 Jun 2026 01:13:26 +0000 asID: 268546 IP address blocks: 45.187.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 22:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:a0:45:74:d6:6f:1d:cc:1b:a3:55:28:8c:ee:25:f0:59:4d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4 Validity Not Before: Jun 4 01:08:26 2025 GMT Not After : Jun 3 01:13:26 2026 GMT Subject: CN=1A5C453EEE3E2D16EC646BA272A349DAEB3C6246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:12:a8:e8:bf:60:6e:14:f6:eb:05:de:43: 13:b3:2d:e0:40:61:26:52:d8:0a:1c:4f:df:1a:ca: c8:b9:55:9f:b8:2d:45:45:2d:28:f2:11:a1:bd:e0: 60:74:a2:57:61:a2:97:45:18:70:7d:4d:1d:20:3e: b4:87:b2:a7:b7:77:45:c7:49:37:4a:ea:48:e3:f5: 75:ad:21:4e:91:ca:10:02:b5:ab:5a:67:2d:66:f9: 83:13:ef:cc:4c:fd:73:51:e4:e6:66:d9:6d:2a:e8: f8:28:da:ff:4d:da:2d:ca:bb:47:fe:67:fd:43:83: 87:52:cb:a1:ec:be:a6:3a:93:8d:57:3f:32:87:88: ff:b2:0f:22:2e:fd:72:b7:59:66:46:8d:90:c1:49: d0:6e:1e:db:5a:de:6e:86:98:9a:e1:ee:1b:bf:50: e7:78:06:69:14:28:c4:77:b0:6a:bf:f6:9d:22:14: 41:cb:76:21:db:cc:b8:fc:6e:74:a8:15:08:5e:7d: ca:bb:13:ff:1d:2f:d9:01:41:40:28:36:e1:c7:fd: 25:9e:bd:dd:a9:db:c7:2c:88:b1:97:4a:7f:d1:c1: 76:8b:9d:e5:70:06:e4:57:54:7a:4b:7f:f9:d1:fa: 61:26:e2:df:c4:81:fe:48:26:96:41:8b:dd:26:91: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:45:3E:EE:3E:2D:16:EC:64:6B:A2:72:A3:49:DA:EB:3C:62:46 X509v3 Authority Key Identifier: keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.187.123.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:a9:9b:0e:6e:c3:be:08:ce:a8:1d:e6:30:0d:d5:47:98:2f: 16:e7:7b:a8:79:df:97:c2:99:0f:4f:11:00:6e:34:2e:cb:2c: 3f:e4:e3:50:ea:15:47:4d:57:ac:88:c8:ec:b3:69:0d:b5:96: 42:86:db:4b:4c:dd:49:5f:c2:ce:db:08:cc:82:4d:37:de:e8: 4a:3f:86:c5:db:9b:5f:29:1a:5a:3c:2f:a7:20:05:d0:17:3c: fc:6d:0a:06:1c:a8:b8:b7:82:c0:28:1b:d7:7f:15:84:bd:bc: 2a:41:2a:20:78:4a:79:09:fa:10:6b:d0:52:aa:8b:02:44:9b: 12:ba:cc:bf:ad:25:e3:b5:cf:38:f5:1a:8d:72:e5:cc:f6:23: 67:d5:90:4a:a9:c2:ae:f0:d7:4c:a7:87:8e:14:77:98:98:9f: ae:48:9b:c4:29:49:f7:15:50:b6:5d:d3:65:68:40:ff:89:58: 0c:80:d2:70:a4:40:f5:05:7e:76:16:8f:66:f3:f3:de:e6:e2: c6:1a:d4:83:45:c3:e1:41:cf:20:ac:68:ff:51:d9:02:c6:77: d5:db:0f:04:83:b3:41:13:69:8e:6c:c0:87:d8:49:d9:31:49: c8:fd:07:2a:87:ab:d6:ce:b1:2f:53:fb:5b:4e:8c:41:1a:58: 1d:89:cf:a1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUcl6gRXTWbx3MG6NVKIzuJfBZTWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDM0EyMEJFQkUxQUM3QTZDM0UwOTU4Q0NCOTcxREVB NjRERTFCNDAeFw0yNTA2MDQwMTA4MjZaFw0yNjA2MDMwMTEzMjZaMDMxMTAvBgNV BAMTKDFBNUM0NTNFRUUzRTJEMTZFQzY0NkJBMjcyQTM0OURBRUIzQzYyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yBKo6L9gbhT26wXeQxOzLeBA YSZS2AocT98aysi5VZ+4LUVFLSjyEaG94GB0oldhopdFGHB9TR0gPrSHsqe3d0XH STdK6kjj9XWtIU6RyhACtataZy1m+YMT78xM/XNR5OZm2W0q6Pgo2v9N2i3Ku0f+ Z/1Dg4dSy6HsvqY6k41XPzKHiP+yDyIu/XK3WWZGjZDBSdBuHtta3m6GmJrh7hu/ UOd4BmkUKMR3sGq/9p0iFEHLdiHbzLj8bnSoFQhefcq7E/8dL9kBQUAoNuHH/SWe vd2p28csiLGXSn/RwXaLneVwBuRXVHpLf/nR+mEm4t/Egf5IJpZBi90mkYzTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGlxFPu4+LRbsZGuicqNJ2us8YkYwHwYDVR0j BBgwFoAUMsOiC+vhrHpsPglYzLlx3qZN4bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhrR1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hn NTMvMC8zMkMzQTIwQkVCRTFBQzdBNkMzRTA5NThDQ0I5NzFERUE2NERFMUI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzNBMjBCRUJFMUFDN0E2 QzNFMDk1OENDQjk3MURFQTY0REUxQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JIa0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAv MzQzNTJlMzEzODM3MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtu3swDQYJKoZIhvcNAQELBQADggEBAAypmw5u w74Izqgd5jAN1UeYLxbne6h535fCmQ9PEQBuNC7LLD/k41DqFUdNV6yIyOyzaQ21 lkKG20tM3Ulfws7bCMyCTTfe6Eo/hsXbm18pGlo8L6cgBdAXPPxtCgYcqLi3gsAo G9d/FYS9vCpBKiB4SnkJ+hBr0FKqiwJEmxK6zL+tJeO1zzj1Go1y5cz2I2fVkEqp wq7w10ynh44Ud5iYn65Im8QpSfcVULZd02VoQP+JWAyA0nCkQPUFfnYWj2bz897m 4sYa1INFw+FBzyCsaP9R2QLGd9XbDwSDs0ETaY5swIfYSdkxScj9ByqHq9bOsS9T +1tOjEEaWB2Jz6E= -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:50 2025 by rpki-client