$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa File: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (raw, json) Hash identifier: CRqkkf2w5VjzwQgAR4y5rNFUkhYqHkxPd+dK1wg49MU= Subject key identifier: 1C:FA:D4:F0:EA:77:9E:0B:26:2A:A4:EF:02:A8:3F:1E:ED:FF:6C:B8 Certificate issuer: /CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705 Certificate serial: 5FA48CEA4D81FFB02296264EB18986B3FA17C4BB Authority key identifier: 1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa Signing time: Wed 30 Apr 2025 19:44:46 +0000 ROA not before: Wed 30 Apr 2025 19:39:46 +0000 ROA not after: Wed 29 Apr 2026 19:44:46 +0000 asID: 264091 IP address blocks: 143.208.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:8c:ea:4d:81:ff:b0:22:96:26:4e:b1:89:86:b3:fa:17:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A57F0046A898E6B7D56895412B21D8FB1DEF705 Validity Not Before: Apr 30 19:39:46 2025 GMT Not After : Apr 29 19:44:46 2026 GMT Subject: CN=1CFAD4F0EA779E0B262AA4EF02A83F1EEDFF6CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:64:c5:41:67:e8:f8:da:f0:ec:8a:ee:8a: 01:c1:53:e7:3c:b7:6c:d2:ed:5e:dc:69:b6:d9:23: bd:ef:d3:97:79:73:cc:64:ca:a8:39:ea:b5:28:f8: 16:f8:4f:bc:6e:f1:e7:83:76:14:40:31:77:d1:56: 64:fc:82:c9:9f:fc:48:e9:fa:3d:d6:45:dd:41:63: c4:0b:a6:7b:d9:6f:34:32:d0:f2:70:3c:c8:d1:4f: b6:4b:90:55:ef:c6:d7:c7:28:11:f7:8a:a5:b1:03: 55:17:82:4a:72:9e:1a:60:06:4c:81:9b:56:89:4f: c0:35:17:97:71:2c:40:10:e2:97:a1:a5:4c:41:f8: f6:ab:15:c0:2c:9a:d8:8c:9f:aa:16:05:c6:9a:1b: 2d:16:1d:08:0a:1e:96:d7:ec:f7:c6:1a:c2:01:c2: 81:ed:48:04:c5:86:05:9a:9d:df:9d:1e:fd:b8:91: 2f:65:23:46:40:b1:1f:98:2d:8e:4d:ed:b0:22:59: 91:f2:b7:9d:58:8e:7f:36:63:90:75:58:19:11:2c: 14:97:aa:66:0b:29:92:5e:1a:36:ed:14:ea:68:01: 02:30:8c:ef:99:87:80:3d:05:78:1f:a7:ad:f5:f1: b3:15:55:d3:5b:a2:2a:55:c8:6f:95:d9:42:c5:6a: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:D4:F0:EA:77:9E:0B:26:2A:A4:EF:02:A8:3F:1E:ED:FF:6C:B8 X509v3 Authority Key Identifier: keyid:1A:57:F0:04:6A:89:8E:6B:7D:56:89:54:12:B2:1D:8F:B1:DE:F7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/1A57F0046A898E6B7D56895412B21D8FB1DEF705.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A57F0046A898E6B7D56895412B21D8FB1DEF705.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.128.0/22 Signature Algorithm: sha256WithRSAEncryption 45:d9:22:f2:fa:20:a7:2a:f3:e3:49:2e:cb:bf:8c:aa:62:d3: ff:00:b9:81:c5:69:6c:f2:96:59:ba:37:6e:ac:62:49:fd:b7: fa:5a:70:7c:5b:63:48:c6:79:28:fc:fa:b5:8b:48:25:b4:3a: 89:2c:08:73:72:2a:5c:c6:8e:55:25:67:b5:cf:a7:a1:2a:68: 6b:64:64:1a:cc:84:19:71:e0:05:56:e5:4f:63:1f:54:76:30: 36:3b:fb:c3:0c:9f:18:29:80:ab:f3:a2:b6:7c:49:58:bc:e4: 07:13:e1:f7:19:b6:00:0d:03:f8:ae:27:7f:da:02:47:f4:64: 2c:28:30:59:66:7f:83:70:b7:26:e8:66:ec:f4:a1:76:ce:a4: 22:d1:26:9f:44:7e:7e:18:91:33:cf:91:2d:c1:fc:97:59:c7: dc:d9:f8:e7:a3:24:52:39:03:61:c1:1d:19:a7:80:4b:5d:9e: 60:6c:70:ad:ec:2a:3b:cb:0f:8a:94:d2:90:22:59:13:af:7f: 04:13:5a:4f:ae:90:46:fe:b5:b8:0c:05:db:ad:c8:40:7c:f6: d8:8b:f6:7e:21:05:d7:96:5b:c1:be:b9:39:86:b6:c1:65:b0: 79:66:ff:46:80:df:75:97:61:1c:49:40:fc:b2:18:c6:cf:a8: c6:42:1d:26 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUX6SM6k2B/7AiliZOsYmGs/oXxLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1N0YwMDQ2QTg5OEU2QjdENTY4OTU0MTJCMjFEOEZC MURFRjcwNTAeFw0yNTA0MzAxOTM5NDZaFw0yNjA0MjkxOTQ0NDZaMDMxMTAvBgNV BAMTKDFDRkFENEYwRUE3NzlFMEIyNjJBQTRFRjAyQTgzRjFFRURGRjZDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xWTFQWfo+Nrw7IruigHBU+c8 t2zS7V7cabbZI73v05d5c8xkyqg56rUo+Bb4T7xu8eeDdhRAMXfRVmT8gsmf/Ejp +j3WRd1BY8QLpnvZbzQy0PJwPMjRT7ZLkFXvxtfHKBH3iqWxA1UXgkpynhpgBkyB m1aJT8A1F5dxLEAQ4pehpUxB+ParFcAsmtiMn6oWBcaaGy0WHQgKHpbX7PfGGsIB woHtSATFhgWand+dHv24kS9lI0ZAsR+YLY5N7bAiWZHyt51Yjn82Y5B1WBkRLBSX qmYLKZJeGjbtFOpoAQIwjO+Zh4A9BXgfp6318bMVVdNboipVyG+V2ULFavztAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUHPrU8Op3ngsmKqTvAqg/Hu3/bLgwHwYDVR0j BBgwFoAUGlfwBGqJjmt9VolUErIdj7He9wUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw YTUvMC8xQTU3RjAwNDZBODk4RTZCN0Q1Njg5NTQxMkIyMUQ4RkIxREVGNzA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTdGMDA0NkE4OThFNkI3 RDU2ODk1NDEyQjIxRDhGQjFERUY3MDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JLSEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAv MzEzNDMzMmUzMjMwMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QgDANBgkqhkiG9w0BAQsFAAOCAQEARdki 8vogpyrz40kuy7+MqmLT/wC5gcVpbPKWWbo3bqxiSf23+lpwfFtjSMZ5KPz6tYtI JbQ6iSwIc3IqXMaOVSVntc+noSpoa2RkGsyEGXHgBVblT2MfVHYwNjv7wwyfGCmA q/OitnxJWLzkBxPh9xm2AA0D+K4nf9oCR/RkLCgwWWZ/g3C3Juhm7PShds6kItEm n0R+fhiRM8+RLcH8l1nH3Nn456MkUjkDYcEdGaeAS12eYGxwrewqO8sPipTSkCJZ E69/BBNaT66QRv61uAwF263IQHz22Iv2fiEF15Zbwb65OYa2wWWweWb/RoDfdZdh HElA/LIYxs+oxkIdJg== -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:21 2025 by rpki-client