$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa File: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (raw, json) Hash identifier: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s= Subject key identifier: 87:3C:B2:DF:99:54:B5:18:1A:38:38:FF:C4:E5:5E:1F:DF:60:E2:D9 Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431 Certificate serial: 43E764662084D1E25570C4E98FEE08489A2E39F6 Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa Signing time: Fri 25 Apr 2025 07:05:15 +0000 ROA not before: Fri 25 Apr 2025 07:00:15 +0000 ROA not after: Fri 24 Apr 2026 07:05:15 +0000 asID: 263395 IP address blocks: 168.194.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e7:64:66:20:84:d1:e2:55:70:c4:e9:8f:ee:08:48:9a:2e:39:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431 Validity Not Before: Apr 25 07:00:15 2025 GMT Not After : Apr 24 07:05:15 2026 GMT Subject: CN=873CB2DF9954B5181A3838FFC4E55E1FDF60E2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:97:82:02:70:d7:88:f1:e0:e9:0c:90:6c: 7b:ac:23:70:e5:7f:89:81:44:fa:ae:fa:f1:19:a1: 7f:ac:ff:88:4b:33:12:78:33:e1:66:da:f6:6e:6f: 3a:6c:6d:ef:3e:3a:a7:5e:26:f3:6e:e6:23:58:26: 7e:27:9f:e5:c9:16:c2:ea:98:b7:a6:6c:ef:56:67: 7e:82:ca:76:a1:41:d4:7a:29:23:13:f0:4e:fb:f3: 1a:7e:03:a8:5b:eb:ca:e3:83:e7:7f:00:8f:82:86: ef:ad:39:95:fd:ea:ff:51:7d:3f:a1:48:d8:fc:aa: c0:d7:e7:8e:41:8d:e2:39:59:5e:68:73:9e:b2:f2: d1:96:7d:4e:a2:db:d2:a4:06:08:4e:db:ba:b6:32: 26:70:01:a7:3c:92:cd:5b:94:cf:d3:9b:f4:40:6b: 6b:dc:21:44:a7:54:ed:3b:09:1d:b5:e4:a6:37:5a: b5:91:fc:37:a6:ae:07:51:3d:b9:80:9a:ad:66:ca: 68:c5:7c:44:02:2f:ef:70:7f:10:7d:6d:c2:e3:9e: a8:08:fe:ab:3e:a0:d3:0e:ab:32:17:9c:5b:c9:d4: e5:7d:0d:83:21:15:f6:57:a7:f2:e7:63:ec:3e:90: a8:12:d3:a8:d2:82:57:45:a9:15:b6:11:f4:27:8d: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3C:B2:DF:99:54:B5:18:1A:38:38:FF:C4:E5:5E:1F:DF:60:E2:D9 X509v3 Authority Key Identifier: keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.136.0/22 Signature Algorithm: sha256WithRSAEncryption 87:eb:ca:50:6b:93:93:a8:ca:58:eb:cb:2d:37:5c:04:e0:cf: 3d:2e:da:7e:10:bf:86:ba:7f:b8:e3:6a:f0:6d:a9:d1:e2:9c: 6e:bc:93:4d:60:fc:ca:05:f5:1d:1c:70:05:df:3f:6b:f9:cf: 51:cf:d1:fc:71:5f:17:24:26:ff:d1:98:4e:66:06:14:fc:46: f5:28:be:90:7a:df:db:bd:c6:e9:ce:06:ba:89:a7:ef:28:73: fe:68:80:68:01:90:9d:0f:10:30:c9:c8:08:53:81:94:de:89: 06:ca:0f:e9:5c:54:a0:7c:5a:e1:d3:ac:fd:d1:b0:9e:fc:15: 28:55:b4:27:55:38:8f:19:0a:94:3b:71:a7:a6:99:f3:40:d8: e5:bc:db:6f:8e:a0:4f:ec:d3:bf:16:da:ce:2f:ec:a4:77:06: 2b:62:79:77:02:d7:ad:c8:44:2f:f1:b7:98:f3:f5:e1:99:3d: 6f:02:26:71:75:5f:25:ee:33:fc:b7:cc:10:a3:2c:13:fe:6f: 78:2d:35:94:90:a2:95:ae:3c:c0:6d:44:81:8c:0d:27:c6:f4: 3b:ed:0b:5d:df:63:cd:5c:fb:fe:1e:74:99:c7:d3:c4:ff:42: 87:f7:cc:d0:58:42:2e:b6:f1:cc:1c:76:f2:ab:ee:a3:8d:d5: 81:b1:9d:2e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQ+dkZiCE0eJVcMTpj+4ISJouOfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4 QTExMjQzMTAeFw0yNTA0MjUwNzAwMTVaFw0yNjA0MjQwNzA1MTVaMDMxMTAvBgNV BAMTKDg3M0NCMkRGOTk1NEI1MTgxQTM4MzhGRkM0RTU1RTFGREY2MEUyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInZeCAnDXiPHg6QyQbHusI3Dl f4mBRPqu+vEZoX+s/4hLMxJ4M+Fm2vZubzpsbe8+OqdeJvNu5iNYJn4nn+XJFsLq mLembO9WZ36CynahQdR6KSMT8E778xp+A6hb68rjg+d/AI+Chu+tOZX96v9RfT+h SNj8qsDX545BjeI5WV5oc56y8tGWfU6i29KkBghO27q2MiZwAac8ks1blM/Tm/RA a2vcIUSnVO07CR215KY3WrWR/DemrgdRPbmAmq1mymjFfEQCL+9wfxB9bcLjnqgI /qs+oNMOqzIXnFvJ1OV9DYMhFfZXp/LnY+w+kKgS06jSgldFqRW2EfQnjWlTAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUhzyy35lUtRgaODj/xOVeH99g4tkwHwYDVR0j BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3 MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzEv MzEzNjM4MmUzMTM5MzQyZTMxMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzMzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjCiDANBgkqhkiG9w0BAQsFAAOCAQEAh+vK UGuTk6jKWOvLLTdcBODPPS7afhC/hrp/uONq8G2p0eKcbryTTWD8ygX1HRxwBd8/ a/nPUc/R/HFfFyQm/9GYTmYGFPxG9Si+kHrf273G6c4Guomn7yhz/miAaAGQnQ8Q MMnICFOBlN6JBsoP6VxUoHxa4dOs/dGwnvwVKFW0J1U4jxkKlDtxp6aZ80DY5bzb b46gT+zTvxbazi/spHcGK2J5dwLXrchEL/G3mPP14Zk9bwImcXVfJe4z/LfMEKMs E/5veC01lJCila48wG1EgYwNJ8b0O+0LXd9jzVz7/h50mcfTxP9Ch/fM0FhCLrbx zBx28qvuo43VgbGdLg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:52 2025 by rpki-client