$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa File: 3230312e33332e382e302f32342d3234203d3e203238323733.roa (raw, json) Hash identifier: S4gawlg+elS/2gL1edHdcwGvanGFV/7jrkY7+Z04NJA= Subject key identifier: 4A:E2:DC:8B:2D:C6:26:80:60:B0:EF:5A:A8:B1:04:32:0F:65:16:D9 Certificate issuer: /CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Certificate serial: 41D94DF61AE04318AF8D63AF45DD485B00408CFB Authority key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa Signing time: Mon 20 Oct 2025 19:27:05 +0000 ROA not before: Mon 20 Oct 2025 19:22:05 +0000 ROA not after: Mon 19 Oct 2026 19:27:05 +0000 asID: 28273 IP address blocks: 201.33.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d9:4d:f6:1a:e0:43:18:af:8d:63:af:45:dd:48:5b:00:40:8c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Validity Not Before: Oct 20 19:22:05 2025 GMT Not After : Oct 19 19:27:05 2026 GMT Subject: CN=4AE2DC8B2DC6268060B0EF5AA8B104320F6516D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:fa:7e:df:0e:b4:e8:b8:8a:d5:ed:77:0f: ec:55:62:fa:24:79:da:fc:62:f0:28:66:9f:17:68: 4f:00:2f:a6:85:d6:3f:a4:47:ea:aa:01:c7:06:9f: 2b:41:f4:06:60:1e:0d:59:95:fc:ef:8e:29:7e:fa: d2:fe:1b:20:3e:4c:f2:f4:17:0b:9a:84:ef:f5:7e: da:a5:53:78:83:46:e2:a6:cd:3b:65:d6:9f:64:4d: 18:67:91:b6:4d:a2:13:a9:97:da:5a:f4:02:e1:37: ee:ba:b4:c7:ed:6e:e0:37:8e:c0:3d:24:80:d9:e0: 7e:ba:43:4e:68:0b:f1:03:4a:53:be:46:49:be:79: ed:1a:bf:77:ea:75:cd:c1:d5:4c:4f:4a:d6:01:dc: 1a:d3:90:a7:13:d4:a0:b9:c0:65:99:33:eb:f1:ff: 1d:9b:87:98:c9:92:d7:11:b2:c8:c8:18:22:08:23: 73:60:e0:5c:55:53:4a:05:5f:53:3c:1a:d1:45:8c: f5:cf:0c:e0:f6:1c:df:a1:87:9a:26:fc:f2:5a:40: 4c:f1:a9:12:56:7d:f9:8f:20:7f:3c:d9:8b:17:b9: dd:1b:94:1f:2a:5f:13:1f:fa:1f:55:d3:7e:6e:28: 4f:45:d7:75:91:f6:66:cd:32:d6:ba:8a:76:a0:a1: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E2:DC:8B:2D:C6:26:80:60:B0:EF:5A:A8:B1:04:32:0F:65:16:D9 X509v3 Authority Key Identifier: keyid:5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.8.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:67:36:6b:b4:40:69:88:20:3b:f1:16:05:55:fb:c4:96:b8: 8e:9f:01:2e:79:7b:fe:ac:4e:76:19:77:a6:3c:d0:81:f9:12: 1a:8e:9a:29:e8:1d:c6:61:b4:f9:81:40:c0:ca:a3:45:13:8c: 33:10:11:4c:6b:6b:5c:b0:f0:ff:de:38:8f:59:11:75:e2:a8: fd:19:41:25:5e:93:af:95:1e:d6:14:45:89:1e:41:03:19:d7: 1f:02:c0:06:23:9f:86:f6:47:95:0c:89:99:7e:24:a0:8c:12: bb:20:0e:dd:3a:59:a2:4f:2d:2c:bc:9b:1a:2e:06:21:7c:74: 1f:9c:0f:c7:c0:2f:3c:13:11:ca:23:9b:da:5f:53:6c:de:d5: 7c:d2:71:e2:c3:f6:e1:9f:5e:12:c1:d9:c3:7e:34:b7:38:4b: 5c:5e:63:46:6f:85:6c:11:99:81:7b:d7:ce:ba:24:42:6e:cc: 03:58:25:f5:67:33:82:aa:88:e2:e1:4a:d9:2f:64:2a:8b:fd: a3:68:c5:5d:1c:26:0c:34:4f:39:29:94:3a:9f:35:10:16:ea: 78:59:cb:3b:5f:6e:b9:e0:2d:ff:c3:ff:84:2a:0e:89:38:ee: e8:05:ee:31:8d:0e:8c:19:c8:6f:fb:87:73:ac:e4:ac:77:91: 9f:f7:cb:56 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUQdlN9hrgQxivjWOvRd1IWwBAjPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2NDc2REVDMDY3N0Q0QzM2ODVBREM5QUFCQkU4RkMy QTA3OUNBNjAeFw0yNTEwMjAxOTIyMDVaFw0yNjEwMTkxOTI3MDVaMDMxMTAvBgNV BAMTKDRBRTJEQzhCMkRDNjI2ODA2MEIwRUY1QUE4QjEwNDMyMEY2NTE2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ffp+3w606LiK1e13D+xVYvok edr8YvAoZp8XaE8AL6aF1j+kR+qqAccGnytB9AZgHg1Zlfzvjil++tL+GyA+TPL0 FwuahO/1ftqlU3iDRuKmzTtl1p9kTRhnkbZNohOpl9pa9ALhN+66tMftbuA3jsA9 JIDZ4H66Q05oC/EDSlO+Rkm+ee0av3fqdc3B1UxPStYB3BrTkKcT1KC5wGWZM+vx /x2bh5jJktcRssjIGCIII3Ng4FxVU0oFX1M8GtFFjPXPDOD2HN+hh5om/PJaQEzx qRJWffmPIH882YsXud0blB8qXxMf+h9V035uKE9F13WR9mbNMta6inagocvrAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUSuLciy3GJoBgsO9aqLEEMg9lFtkwHwYDVR0j BBgwFoAUWmR23sBnfUw2ha3Jqrvo/CoHnKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dhNzc1TUZ0bjhlNEZMWXFSRHByS0RiYmpic0ZEOER2UjU5ZGdDQkVR b20vMC81QTY0NzZERUMwNjc3RDRDMzY4NUFEQzlBQUJCRThGQzJBMDc5Q0E2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjQ3NkRFQzA2NzdENEMz Njg1QURDOUFBQkJFOEZDMkEwNzlDQTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N3YTc3NU1GdG44ZTRGTFlxUkRwcktEYmJqYnNGRDhEdlI1OWRnQ0JFUW9tLzAv MzIzMDMxMmUzMzMzMmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMjM3 MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADJIQgwDQYJKoZIhvcNAQELBQADggEBAFxnNmu0QGmIIDvx FgVV+8SWuI6fAS55e/6sTnYZd6Y80IH5EhqOminoHcZhtPmBQMDKo0UTjDMQEUxr a1yw8P/eOI9ZEXXiqP0ZQSVek6+VHtYURYkeQQMZ1x8CwAYjn4b2R5UMiZl+JKCM ErsgDt06WaJPLSy8mxouBiF8dB+cD8fALzwTEcojm9pfU2ze1XzSceLD9uGfXhLB 2cN+NLc4S1xeY0ZvhWwRmYF71866JEJuzANYJfVnM4KqiOLhStkvZCqL/aNoxV0c Jgw0TzkplDqfNRAW6nhZyztfbrngLf/D/4QqDok47ugF7jGNDowZyG/7h3Os5Kx3 kZ/3y1Y= -----END CERTIFICATE-----Generated at Wed Nov 5 08:15:37 2025 by rpki-client