$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa File: 3230312e33332e31342e302f32342d3234203d3e203238323733.roa (raw, json) Hash identifier: 2+q1Y4hLzRATyMQ2FtwTJEub/V3JGkMVQB8e+1oUbt4= Subject key identifier: E5:F4:5C:1A:C7:15:7A:1A:BD:47:1D:CA:C9:E0:0A:1A:D8:D6:3B:AB Certificate issuer: /CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Certificate serial: 6D11CC29023BF9901FD67A7909874CFE939D7B95 Authority key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa Signing time: Mon 20 Oct 2025 19:27:05 +0000 ROA not before: Mon 20 Oct 2025 19:22:05 +0000 ROA not after: Mon 19 Oct 2026 19:27:05 +0000 asID: 28273 IP address blocks: 201.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:11:cc:29:02:3b:f9:90:1f:d6:7a:79:09:87:4c:fe:93:9d:7b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Validity Not Before: Oct 20 19:22:05 2025 GMT Not After : Oct 19 19:27:05 2026 GMT Subject: CN=E5F45C1AC7157A1ABD471DCAC9E00A1AD8D63BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:58:8f:57:77:be:1e:db:52:1f:a8:71:0e: 3f:5e:cd:cb:a8:1c:a9:8e:6b:e9:01:77:8e:6b:29: 4b:a2:50:ff:f2:a4:16:07:91:1c:a2:be:88:00:20: 4d:7e:59:42:64:68:1f:88:43:3a:1f:35:8d:6e:af: 32:e7:f6:f4:26:75:74:13:7b:fb:8d:42:c4:c3:f2: 9d:45:89:a6:18:a4:c3:1b:29:3e:21:6d:90:42:66: bb:79:a9:20:ee:7d:8f:fc:1b:4b:2f:e4:00:01:ef: 87:01:6b:8e:b2:ec:e2:a2:b7:45:65:18:74:c3:e7: d9:07:26:ba:35:cf:95:da:26:b2:8e:7c:10:ac:f5: c8:48:78:36:9b:18:f7:e8:17:87:db:59:81:c6:0e: b1:be:0a:30:5c:ba:a6:0a:e3:e1:20:4f:87:71:72: 48:73:ea:87:c9:71:93:7d:8d:61:f2:00:7c:70:af: 22:1c:5b:ac:63:dd:24:29:34:31:89:0b:c3:a4:9e: 12:e4:2b:8f:2a:4a:36:f7:06:35:c5:c9:9c:23:b1: 5f:0c:b5:87:d4:8f:0f:9a:a9:f0:a3:99:5a:f4:d4: 1d:e1:3b:89:4c:3e:af:87:10:5b:4a:41:dc:c5:ad: 28:38:9a:a7:13:56:d1:b6:c0:a0:a1:a2:e1:04:18: 9c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F4:5C:1A:C7:15:7A:1A:BD:47:1D:CA:C9:E0:0A:1A:D8:D6:3B:AB X509v3 Authority Key Identifier: keyid:5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ce:db:13:0b:6c:06:8e:94:35:1a:0e:32:9a:86:0f:8b:f5: ce:11:88:95:da:f0:43:cd:75:18:e1:5c:42:38:9d:23:80:c1: 83:d0:ae:ea:bc:99:82:8a:47:eb:2b:ea:09:07:be:5a:d9:88: 96:a3:85:37:63:d2:fc:47:69:6a:7e:a3:2c:d8:96:e3:53:68: a4:fe:ea:35:46:1b:63:57:3b:d5:54:f4:41:7a:ca:e3:c1:3d: 3a:dc:70:c8:c1:be:ea:e5:bb:48:a0:a6:62:a7:72:b5:fd:f6: 9d:72:46:7a:c0:9f:69:77:39:fc:7c:d2:f6:66:eb:24:ca:01: e1:70:b7:5c:5b:38:be:f6:a6:dd:e7:b2:f4:fb:2e:12:0e:09: d6:ee:9e:12:60:13:95:f7:7b:bd:9f:0c:53:e9:27:8c:98:72: ef:12:18:58:c2:b1:64:6f:c2:8f:b8:fa:ca:04:0c:59:b5:e1: e5:33:c3:76:84:57:69:10:7c:c2:f1:e9:05:8f:cc:e6:46:a9: c7:4a:72:92:e6:76:70:e5:92:a0:a7:02:5e:a9:a4:96:61:b9: f1:36:d1:a6:91:19:ea:95:30:a4:ab:71:96:03:fd:a2:0e:b0: cc:ac:04:7d:b6:1f:ba:58:ec:d7:6e:9c:66:7c:e0:17:01:0b: 9d:c8:02:49 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUbRHMKQI7+ZAf1np5CYdM/pOde5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2NDc2REVDMDY3N0Q0QzM2ODVBREM5QUFCQkU4RkMy QTA3OUNBNjAeFw0yNTEwMjAxOTIyMDVaFw0yNjEwMTkxOTI3MDVaMDMxMTAvBgNV BAMTKEU1RjQ1QzFBQzcxNTdBMUFCRDQ3MURDQUM5RTAwQTFBRDhENjNCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjViPV3e+HttSH6hxDj9ezcuo HKmOa+kBd45rKUuiUP/ypBYHkRyivogAIE1+WUJkaB+IQzofNY1urzLn9vQmdXQT e/uNQsTD8p1FiaYYpMMbKT4hbZBCZrt5qSDufY/8G0sv5AAB74cBa46y7OKit0Vl GHTD59kHJro1z5XaJrKOfBCs9chIeDabGPfoF4fbWYHGDrG+CjBcuqYK4+EgT4dx ckhz6ofJcZN9jWHyAHxwryIcW6xj3SQpNDGJC8OknhLkK48qSjb3BjXFyZwjsV8M tYfUjw+aqfCjmVr01B3hO4lMPq+HEFtKQdzFrSg4mqcTVtG2wKChouEEGJw1AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU5fRcGscVehq9Rx3KyeAKGtjWO6swHwYDVR0j BBgwFoAUWmR23sBnfUw2ha3Jqrvo/CoHnKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dhNzc1TUZ0bjhlNEZMWXFSRHByS0RiYmpic0ZEOER2UjU5ZGdDQkVR b20vMC81QTY0NzZERUMwNjc3RDRDMzY4NUFEQzlBQUJCRThGQzJBMDc5Q0E2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjQ3NkRFQzA2NzdENEMz Njg1QURDOUFBQkJFOEZDMkEwNzlDQTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N3YTc3NU1GdG44ZTRGTFlxUkRwcktEYmJqYnNGRDhEdlI1OWRnQ0JFUW9tLzAv MzIzMDMxMmUzMzMzMmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAMkhDjANBgkqhkiG9w0BAQsFAAOCAQEAbM7bEwtsBo6U NRoOMpqGD4v1zhGIldrwQ811GOFcQjidI4DBg9Cu6ryZgopH6yvqCQe+WtmIlqOF N2PS/Edpan6jLNiW41NopP7qNUYbY1c71VT0QXrK48E9OtxwyMG+6uW7SKCmYqdy tf32nXJGesCfaXc5/HzS9mbrJMoB4XC3XFs4vvam3eey9PsuEg4J1u6eEmATlfd7 vZ8MU+knjJhy7xIYWMKxZG/Cj7j6ygQMWbXh5TPDdoRXaRB8wvHpBY/M5kapx0py kuZ2cOWSoKcCXqmklmG58TbRppEZ6pUwpKtxlgP9og6wzKwEfbYfuljs126cZnzg FwELncgCSQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:48:26 2025 by rpki-client