$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa File: 3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa (raw, json) Hash identifier: VgMFMmaobaCEUsM022elo5PWrGNQARyRDi6zjqvG0rM= Subject key identifier: DD:6B:E5:03:37:AE:36:57:A0:E3:0B:A1:57:21:0D:1B:A1:3F:5F:6D Certificate issuer: /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78 Certificate serial: 3AD4F43852D7C545332C6E95006F8EC4568C4AE7 Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa Signing time: Wed 05 Mar 2025 22:29:08 +0000 ROA not before: Wed 05 Mar 2025 22:24:08 +0000 ROA not after: Wed 04 Mar 2026 22:29:08 +0000 asID: 263860 IP address blocks: 168.227.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d4:f4:38:52:d7:c5:45:33:2c:6e:95:00:6f:8e:c4:56:8c:4a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78 Validity Not Before: Mar 5 22:24:08 2025 GMT Not After : Mar 4 22:29:08 2026 GMT Subject: CN=DD6BE50337AE3657A0E30BA157210D1BA13F5F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:49:02:ed:15:2b:90:79:56:47:fa:97:66: 1d:bb:3a:73:97:cb:66:89:17:32:f4:b3:68:28:9a: fd:6f:36:ea:0a:9c:bb:e0:60:a8:fa:1f:fb:41:bf: 31:e6:c9:4e:c5:85:08:ab:db:9c:d3:a7:41:1b:0c: 9b:c7:89:e7:ab:a4:44:df:cf:d8:80:32:40:06:14: 5f:b6:43:a7:6d:76:ca:90:e5:9a:c3:14:1f:a6:5f: c8:f3:6d:30:80:29:9d:86:e6:43:fb:db:ec:cb:2d: 18:93:4c:3c:f5:d2:eb:c0:87:17:ca:ef:1d:58:e9: 51:ab:de:45:92:0c:7b:40:88:e4:a5:7b:b9:93:55: 71:15:b3:8c:95:e6:5a:b1:9c:39:05:dd:6b:e7:26: fe:29:b5:aa:18:e7:1d:2a:ee:37:57:1d:0f:70:f4: 04:1c:0f:50:b4:f9:8c:f1:e6:5d:b8:88:68:87:af: 5a:c2:d3:1d:f1:77:11:d4:fe:7c:77:5c:ea:de:34: ba:c2:c0:ef:0b:8e:b7:a9:21:f6:b8:2d:db:9e:24: b0:ca:ae:3f:18:69:dd:6c:a6:4f:d0:98:06:e3:32: a0:12:28:39:8b:97:12:a8:ca:02:f0:1a:11:fa:03: 12:57:0d:da:1e:a9:a7:38:a2:ab:bd:4b:21:47:00: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:E5:03:37:AE:36:57:A0:E3:0B:A1:57:21:0D:1B:A1:3F:5F:6D X509v3 Authority Key Identifier: keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136302e302f32322d3232203d3e20323633383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.160.0/22 Signature Algorithm: sha256WithRSAEncryption 66:bb:dd:ad:7c:4c:81:d9:f5:39:8f:fb:e1:0e:38:56:24:c2: 7a:48:65:f1:16:d7:1c:d2:b0:4d:53:1f:02:d8:cc:24:2e:b3: 43:76:63:2f:a2:56:d4:03:cc:4c:cf:2a:76:33:4d:df:b9:32: fa:39:aa:50:8b:94:28:58:e1:4a:bb:17:31:cd:5a:3f:6d:c6: 93:f2:0a:f7:36:3c:1e:f7:c0:83:d3:aa:94:b8:72:81:43:4e: f9:bd:44:d6:5e:06:cf:65:af:3c:4c:32:7d:58:61:5d:b4:e6: 2c:e7:ed:f7:93:74:b6:cc:ec:59:ed:83:d2:c3:6a:a3:32:0c: 67:78:c7:a7:0f:69:d4:74:8c:9f:0a:73:0b:18:07:5a:36:35: 7b:9b:8e:c1:c1:9d:ec:b1:a4:9c:39:42:d0:9b:0e:32:a4:f5: 1f:8f:5c:ee:02:d6:7c:cd:4f:e4:67:4f:48:b1:75:0b:a1:d4: ff:59:b0:ce:c4:53:48:3a:5c:0c:59:70:3f:5f:02:e6:67:e3: 7f:7c:d7:0b:c6:86:28:17:eb:6b:62:de:30:18:78:b9:7e:b1: b2:09:2a:df:0b:e9:b6:dc:6a:2c:ba:4a:48:c6:ba:65:8e:92: 4f:62:82:07:4c:b6:cb:a5:0c:d4:1d:e3:40:2b:55:c4:a1:4f: 09:48:82:53 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOtT0OFLXxUUzLG6VAG+OxFaMSucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY5NUVENjBFRjA5QUQwMTQ4QTlFMEE3MEFBRkFDNjFB NkEyMUQ3ODAeFw0yNTAzMDUyMjI0MDhaFw0yNjAzMDQyMjI5MDhaMDMxMTAvBgNV BAMTKERENkJFNTAzMzdBRTM2NTdBMEUzMEJBMTU3MjEwRDFCQTEzRjVGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2EkC7RUrkHlWR/qXZh27OnOX y2aJFzL0s2gomv1vNuoKnLvgYKj6H/tBvzHmyU7FhQir25zTp0EbDJvHieerpETf z9iAMkAGFF+2Q6dtdsqQ5ZrDFB+mX8jzbTCAKZ2G5kP72+zLLRiTTDz10uvAhxfK 7x1Y6VGr3kWSDHtAiOSle7mTVXEVs4yV5lqxnDkF3WvnJv4ptaoY5x0q7jdXHQ9w 9AQcD1C0+Yzx5l24iGiHr1rC0x3xdxHU/nx3XOreNLrCwO8LjrepIfa4LdueJLDK rj8Yad1spk/QmAbjMqASKDmLlxKoygLwGhH6AxJXDdoeqac4oqu9SyFHAHBnAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU3WvlAzeuNleg4wuhVyENG6E/X20wHwYDVR0j BBgwFoAUVpXtYO8JrQFIqeCnCq+sYaaiHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlyMkFKR3l6b3F0V3NxRUYzSFFielI1cVphYXVDZTFWZ1BMWmZqVkxk ZGovMS81Njk1RUQ2MEVGMDlBRDAxNDhBOUUwQTcwQUFGQUM2MUE2QTIxRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OTVFRDYwRUYwOUFEMDE0 OEE5RTBBNzBBQUZBQzYxQTZBMjFENzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M5cjJBSkd5em9xdFdzcUVGM0hRYnpSNXFaYWF1Q2UxVmdQTFpmalZMZGRqLzEv MzEzNjM4MmUzMjMyMzcyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjoDANBgkqhkiG9w0BAQsFAAOCAQEAZrvd rXxMgdn1OY/74Q44ViTCekhl8RbXHNKwTVMfAtjMJC6zQ3ZjL6JW1APMTM8qdjNN 37ky+jmqUIuUKFjhSrsXMc1aP23Gk/IK9zY8HvfAg9OqlLhygUNO+b1E1l4Gz2Wv PEwyfVhhXbTmLOft95N0tszsWe2D0sNqozIMZ3jHpw9p1HSMnwpzCxgHWjY1e5uO wcGd7LGknDlC0JsOMqT1H49c7gLWfM1P5GdPSLF1C6HU/1mwzsRTSDpcDFlwP18C 5mfjf3zXC8aGKBfra2LeMBh4uX6xsgkq3wvpttxqLLpKSMa6ZY6ST2KCB0y2y6UM 1B3jQCtVxKFPCUiCUw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:26 2025 by rpki-client