$ rpki-client -vvvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa File: 34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa (raw, json) Hash identifier: F4O110mvInWMqTJaRKk9k28XhqWswu32M3Obox9KCTo= Subject key identifier: 85:2D:7C:77:4C:41:7D:87:41:72:F7:46:B8:72:B1:E2:06:DB:FD:A3 Certificate issuer: /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Certificate serial: 5A3AA84FDCF12C7540FEBBAE84D6BB1618CD6879 Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa Signing time: Mon 07 Sep 2026 10:14:37 +0000 ROA not before: Mon 07 Sep 2026 10:09:37 +0000 ROA not after: Mon 06 Sep 2027 10:14:37 +0000 asID: 268057 IP address blocks: 45.168.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 13:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3a:a8:4f:dc:f1:2c:75:40:fe:bb:ae:84:d6:bb:16:18:cd:68:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5 Validity Not Before: Sep 7 10:09:37 2026 GMT Not After : Sep 6 10:14:37 2027 GMT Subject: CN=852D7C774C417D874172F746B872B1E206DBFDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:68:70:30:dd:36:86:f2:fd:e2:40:27:f3: cd:e9:cd:49:dd:c3:0b:46:ba:3e:47:08:2c:f5:98: f6:81:39:fb:5c:be:c5:cf:de:ac:d9:73:f4:d5:82: 2f:fb:2b:d6:8a:b3:da:77:cb:d8:f8:9d:73:eb:cb: fc:1d:4b:46:ff:6f:9a:12:e1:9b:6c:f5:1f:42:ae: f3:16:36:12:f2:5e:94:46:ae:a2:75:6f:b3:1a:0c: ad:1c:e5:db:6e:7b:46:90:95:6a:c3:89:7d:f2:37: d2:95:1a:04:76:22:b5:fc:3d:dd:c0:48:c8:1a:75: 96:5c:f8:5d:c6:fa:07:a3:c0:e0:cf:e8:21:2f:84: 1b:cb:7a:75:4f:7d:ce:6d:19:8b:82:57:6b:0d:fd: 61:4d:b4:14:ad:7e:97:87:b0:a7:1b:54:43:e0:45: 33:60:0d:26:fe:35:e0:5e:a4:d5:90:97:ef:02:f5: 4c:ea:92:49:ed:24:4f:56:d8:11:84:bf:e7:d2:a1: 69:6a:36:2e:fe:ea:44:72:af:a8:c0:73:40:9d:7f: 37:02:84:eb:79:b5:a3:d3:36:e1:1f:18:f1:17:ab: 44:4c:c3:ce:25:cb:a9:90:7b:42:20:66:9c:c0:5e: 4a:ac:ca:87:01:c5:4d:26:ef:d9:51:24:23:61:44: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:7C:77:4C:41:7D:87:41:72:F7:46:B8:72:B1:E2:06:DB:FD:A3 X509v3 Authority Key Identifier: keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.109.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:45:f2:c0:e5:e7:01:ba:1d:b8:63:8d:14:ab:cf:26:0c:12: 6a:f6:d5:ac:82:ce:4d:ec:9c:4b:4d:48:a1:c5:fe:95:37:15: ff:ff:c5:b1:bf:6d:f9:7c:59:b5:ec:f5:36:fd:c2:85:ec:c7: b1:a2:99:4f:e8:4d:e6:19:5d:e8:7b:3b:ce:e8:e6:25:61:66: d6:62:07:12:31:f0:1e:7b:dc:c3:1e:08:73:53:99:3a:6f:c0: 13:86:f7:75:10:d3:68:1e:d2:ca:fa:62:c9:d1:57:f3:c0:02: 69:1f:13:b3:0d:67:7a:9a:54:12:dd:19:e7:05:35:68:bd:e1: 49:87:69:78:e1:bc:9c:4d:4c:84:06:8f:0f:a5:c5:31:1a:84: fa:df:68:a8:ff:de:4a:f0:31:e8:c5:b9:7a:7e:1f:b7:f3:b8: 54:0a:7e:7b:9a:e7:8f:d9:40:5a:f6:ff:a3:73:00:3f:c5:76: d4:55:16:ae:2d:8a:c9:e8:fa:d2:2b:0d:16:6b:bf:17:14:34: 67:19:ac:31:cf:5f:74:f2:30:31:d4:4c:d5:b9:dc:8e:47:f2: ce:9f:d0:65:e1:fe:e0:ea:f9:44:ac:6c:ec:88:23:c0:2a:75: 14:5e:17:52:83:d6:3b:25:cd:b4:58:ec:86:4d:e2:bc:8e:ea: 8f:d9:4b:84 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUWjqoT9zxLHVA/ruuhNa7FhjNaHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQTlCQTlEQzJGQTBBQkQ4MEI4REQ2MkI0ODVFOUI2 RkRCMDBFNTAeFw0yNjA5MDcxMDA5MzdaFw0yNzA5MDYxMDE0MzdaMDMxMTAvBgNV BAMTKDg1MkQ3Qzc3NEM0MTdEODc0MTcyRjc0NkI4NzJCMUUyMDZEQkZEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0N2hwMN02hvL94kAn883pzUnd wwtGuj5HCCz1mPaBOftcvsXP3qzZc/TVgi/7K9aKs9p3y9j4nXPry/wdS0b/b5oS 4Zts9R9CrvMWNhLyXpRGrqJ1b7MaDK0c5dtue0aQlWrDiX3yN9KVGgR2IrX8Pd3A SMgadZZc+F3G+gejwODP6CEvhBvLenVPfc5tGYuCV2sN/WFNtBStfpeHsKcbVEPg RTNgDSb+NeBepNWQl+8C9UzqkkntJE9W2BGEv+fSoWlqNi7+6kRyr6jAc0CdfzcC hOt5taPTNuEfGPEXq0RMw84ly6mQe0IgZpzAXkqsyocBxU0m79lRJCNhRImBAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhS18d0xBfYdBcvdGuHKx4gbb/aMwHwYDVR0j BBgwFoAUkcqbqdwvoKvYC43WK0hem2/bAOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW5IUkVzTnBMdmlLQ3diNUxBQWV5TEVhRFdLV1NZYzJrQmFuWUxxVzc5 NHYvMC85MUNBOUJBOURDMkZBMEFCRDgwQjhERDYyQjQ4NUU5QjZGREIwMEU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0E5QkE5REMyRkEwQUJE ODBCOERENjJCNDg1RTlCNkZEQjAwRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VuSFJFc05wTHZpS0N3YjVMQUFleUxFYURXS1dTWWMya0JhbllMcVc3OTR2LzAv MzQzNTJlMzEzNjM4MmUzMTMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtqG0wDQYJKoZIhvcNAQELBQADggEBAF5F8sDl 5wG6HbhjjRSrzyYMEmr21ayCzk3snEtNSKHF/pU3Ff//xbG/bfl8WbXs9Tb9woXs x7GimU/oTeYZXeh7O87o5iVhZtZiBxIx8B573MMeCHNTmTpvwBOG93UQ02ge0sr6 YsnRV/PAAmkfE7MNZ3qaVBLdGecFNWi94UmHaXjhvJxNTIQGjw+lxTEahPrfaKj/ 3krwMejFuXp+H7fzuFQKfnua54/ZQFr2/6NzAD/FdtRVFq4tisno+tIrDRZrvxcU NGcZrDHPX3TyMDHUTNW53I5H8s6f0GXh/uDq+USsbOyII8AqdRReF1KD1jslzbRY 7IZN4ryO6o/ZS4Q= -----END CERTIFICATE-----Generated at Tue Oct 13 19:53:24 2026 by rpki-client