$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa File: 34352e3233342e3230302e302f32322d3234203d3e203532393734.roa (raw, json) Hash identifier: pLzYOt2hnB5gBPu+VGg2BbJGkHqgosACBbTeTnTjBoY= Subject key identifier: CE:01:D7:4C:1A:8E:8D:69:5A:B4:E5:1B:BB:6F:39:B6:E1:AE:AE:7B Certificate issuer: /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Certificate serial: 6E7B3858EC49266430D9909AE5C71D75EE046763 Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject info access: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa Signing time: Fri 14 Mar 2025 14:01:27 +0000 ROA not before: Fri 14 Mar 2025 13:56:27 +0000 ROA not after: Fri 13 Mar 2026 14:01:27 +0000 asID: 52974 IP address blocks: 45.234.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7b:38:58:ec:49:26:64:30:d9:90:9a:e5:c7:1d:75:ee:04:67:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68 Validity Not Before: Mar 14 13:56:27 2025 GMT Not After : Mar 13 14:01:27 2026 GMT Subject: CN=CE01D74C1A8E8D695AB4E51BBB6F39B6E1AEAE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:ac:e9:31:f2:a2:4c:7b:1a:47:4a:37:83: ca:62:a7:30:f8:72:7a:9d:1b:db:a9:ea:f3:50:49: 7e:7a:b9:ff:eb:03:7e:94:78:19:58:33:06:70:14: 08:0c:ad:16:ee:f0:ed:72:db:48:e8:c8:4e:a6:75: 7b:33:38:64:6f:6d:51:8d:19:41:6f:49:34:4b:48: 8a:5f:29:7d:ec:5f:69:01:5f:8b:73:6b:00:3c:44: 59:82:c3:ee:8c:a4:42:98:81:63:42:d1:79:45:89: de:16:8d:b4:52:e4:7f:cd:8a:2a:20:e6:d3:89:f9: 01:9a:0a:69:b5:1e:fa:e3:77:3a:f2:09:9a:00:12: 52:49:6a:bd:78:89:df:9a:1c:84:2a:37:bb:72:7b: ac:66:0a:36:d9:30:02:44:c1:65:b3:af:df:93:f0: 73:5d:08:10:73:2b:4e:c9:8b:bf:94:a8:4a:f9:b1: 66:66:cf:e9:b0:5f:b6:d5:94:2f:18:e2:b5:02:71: 61:f4:75:5b:25:22:8f:f8:6d:71:21:0c:1c:92:12: cf:96:df:a6:62:c7:0c:49:af:c2:30:f7:4f:4c:c6: 16:63:e4:93:09:78:34:2d:d5:cc:c2:fb:93:51:ba: 48:72:b8:3a:61:2b:4e:63:5b:7e:cd:45:34:6c:98: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:D7:4C:1A:8E:8D:69:5A:B4:E5:1B:BB:6F:39:B6:E1:AE:AE:7B X509v3 Authority Key Identifier: keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/34352e3233342e3230302e302f32322d3234203d3e203532393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:cd:74:ad:90:6a:a1:b8:9c:9c:c0:d0:7f:94:4d:35:56:d6: e9:23:e1:c0:29:69:fe:73:cc:9f:b3:1e:2c:58:ab:7c:da:03: 76:e8:97:1a:87:01:b4:5f:bc:62:13:6b:aa:2b:bd:2f:e1:e7: 2b:ff:4e:8b:47:52:26:dd:49:26:a4:03:92:08:77:d3:11:f6: 17:5b:0d:6b:da:a2:23:a0:2a:df:f2:25:c6:dc:e3:ff:fe:15: ca:f7:58:10:7a:dc:76:e9:f6:68:cd:ec:94:cb:0b:70:90:8e: 5e:3d:09:d6:4e:04:23:cd:19:fc:ef:c8:1e:ed:d4:43:ca:17: 70:a2:cd:19:3e:17:75:4a:aa:4b:92:c8:36:6f:9c:dd:b5:ad: 41:90:9b:2e:11:55:c1:39:a3:24:17:4b:bf:be:13:2e:cf:a9: 4f:a5:0c:c7:dd:d7:26:87:0c:7c:4a:d7:dd:dd:4f:ec:c8:f1: d4:0c:d2:92:26:76:f3:f3:52:e2:dc:ce:2e:87:02:ee:7a:8e: 10:d3:8f:7f:fa:e8:c1:87:b2:dc:3f:12:1e:5d:3a:7f:60:18: f1:86:4f:ef:ab:8f:85:d0:a3:25:b8:2e:70:78:00:c2:cd:ae: c2:f2:7b:4b:f3:fc:9b:32:1b:34:e8:f6:75:14:f2:01:5c:34: f8:3e:83:8e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbns4WOxJJmQw2ZCa5ccdde4EZ2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy QThDQ0Y2ODAeFw0yNTAzMTQxMzU2MjdaFw0yNjAzMTMxNDAxMjdaMDMxMTAvBgNV BAMTKENFMDFENzRDMUE4RThENjk1QUI0RTUxQkJCNkYzOUI2RTFBRUFFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJ6zpMfKiTHsaR0o3g8pipzD4 cnqdG9up6vNQSX56uf/rA36UeBlYMwZwFAgMrRbu8O1y20joyE6mdXszOGRvbVGN GUFvSTRLSIpfKX3sX2kBX4tzawA8RFmCw+6MpEKYgWNC0XlFid4WjbRS5H/Niiog 5tOJ+QGaCmm1HvrjdzryCZoAElJJar14id+aHIQqN7tye6xmCjbZMAJEwWWzr9+T 8HNdCBBzK07Ji7+UqEr5sWZmz+mwX7bVlC8Y4rUCcWH0dVslIo/4bXEhDBySEs+W 36ZixwxJr8Iw909MxhZj5JMJeDQt1czC+5NRukhyuDphK05jW37NRTRsmBYfAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUzgHXTBqOjWlatOUbu285tuGurnswHwYDVR0j BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv MzQzNTJlMzIzMzM0MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy MzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLerIMA0GCSqGSIb3DQEBCwUAA4IBAQB6zXStkGqh uJycwNB/lE01VtbpI+HAKWn+c8yfsx4sWKt82gN26JcahwG0X7xiE2uqK70v4ecr /06LR1Im3UkmpAOSCHfTEfYXWw1r2qIjoCrf8iXG3OP//hXK91gQetx26fZozeyU ywtwkI5ePQnWTgQjzRn878ge7dRDyhdwos0ZPhd1SqpLksg2b5zdta1BkJsuEVXB OaMkF0u/vhMuz6lPpQzH3dcmhwx8Stfd3U/syPHUDNKSJnbz81Li3M4uhwLueo4Q 049/+ujBh7LcPxIeXTp/YBjxhk/vq4+F0KMluC5weADCza7C8ntL8/ybMhs06PZ1 FPIBXDT4PoOO -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:07 2025 by rpki-client