$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa File: 34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa (raw, json) Hash identifier: 6rb4EcevTNqEk6gWtgyWFJOeaCPx95xlVQdg6pg/pPo= Subject key identifier: 6A:14:2F:66:64:DE:E8:B1:47:B4:CB:C0:A2:78:A9:66:71:DB:80:CF Certificate issuer: /CN=8D649BA756DE234532A1E9A858DEBF41843906BD Certificate serial: 5A7421D0632B1E137194AF68C13576699A988E1F Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa Signing time: Tue 22 Jul 2025 20:54:41 +0000 ROA not before: Tue 22 Jul 2025 20:49:41 +0000 ROA not after: Tue 21 Jul 2026 20:54:41 +0000 asID: 263427 IP address blocks: 45.162.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 06:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:74:21:d0:63:2b:1e:13:71:94:af:68:c1:35:76:69:9a:98:8e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD Validity Not Before: Jul 22 20:49:41 2025 GMT Not After : Jul 21 20:54:41 2026 GMT Subject: CN=6A142F6664DEE8B147B4CBC0A278A96671DB80CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:22:24:97:e9:ae:d0:1d:3e:30:5f:b4:c9: 6d:72:91:4b:6f:b7:2a:b1:89:15:70:e8:2a:b8:21: 80:49:cf:46:a9:10:1f:73:31:b2:b0:7b:18:d5:99: 2d:7d:60:0a:0c:01:78:d0:b4:f8:af:fb:d6:96:02: a4:cf:38:01:16:c9:ec:3f:e5:8a:10:86:75:ef:eb: 78:b6:27:26:b0:db:dc:2f:27:88:2e:03:ef:43:2b: e6:b5:9a:76:5c:ad:a8:5f:5e:60:8b:1e:4c:e5:55: e0:31:66:73:73:ef:61:b6:41:8f:84:56:b2:5b:de: 53:ec:b7:d0:3e:bc:12:9f:5d:e1:ff:d2:b7:6d:8e: 54:3c:7b:1d:8e:f7:da:f1:f1:6e:85:d7:47:24:5b: 56:e3:15:b6:e6:6b:4b:44:c8:aa:ac:8d:12:0c:dd: 86:df:fc:79:ab:44:15:35:d6:af:ed:2a:e7:e8:f7: ca:b7:31:b4:ad:db:76:5c:0c:80:13:c4:3b:a7:19: f1:2b:14:8b:fe:b6:7d:8c:31:60:37:06:e8:dd:77: 4f:d1:0a:37:a5:c3:fb:f4:5f:89:5f:13:ae:98:19: 05:b5:7d:f7:94:d3:eb:e7:86:71:6d:17:a3:39:20: 7a:f8:bd:c6:81:53:ae:99:ea:f1:87:25:a4:e1:03: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:14:2F:66:64:DE:E8:B1:47:B4:CB:C0:A2:78:A9:66:71:DB:80:CF X509v3 Authority Key Identifier: keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.242.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1d:cf:0f:6c:68:98:ed:25:79:34:bc:17:f2:44:81:15:62: 73:00:c3:cb:94:7f:ea:d3:79:34:6a:96:77:26:91:f4:96:e6: 58:14:85:f8:c7:ac:0c:5d:84:05:da:cc:37:e5:c1:d3:51:f1: 62:e0:6a:9e:ab:16:6e:05:f6:c9:7a:f3:bd:fc:0b:97:da:a1: 30:fb:6d:77:ac:b3:7f:e5:7a:3a:1c:cf:57:66:53:03:bd:aa: a2:4f:ca:dc:0a:a1:36:47:40:eb:d0:80:d7:13:82:e3:cf:aa: 51:0c:16:6a:32:7f:2f:e4:54:96:17:3a:31:4a:cc:95:59:bf: 42:40:fe:ff:72:3a:73:f7:15:b7:23:36:42:a3:07:ac:5d:41: 59:44:a8:5f:d4:e2:fa:62:43:b6:95:d2:b5:3e:a5:f5:14:0f: 61:0b:a0:9f:a7:d9:ac:a0:d4:2f:95:b8:f4:19:c7:a1:84:e7: ff:9d:cf:c3:e2:83:74:fe:51:e5:3a:45:ba:c8:93:98:f9:2d: c3:ec:c6:cc:70:e2:7a:2a:0f:28:20:fe:f6:9c:13:ae:fd:f0: e6:6f:a9:1c:f5:2b:2e:2a:f8:23:fa:cf:d6:ca:af:6b:69:55: 1b:c4:d9:a8:1b:60:b5:37:ad:56:8c:62:e8:c9:55:b6:71:16: 5c:de:2a:9b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUWnQh0GMrHhNxlK9owTV2aZqYjh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ2NDlCQTc1NkRFMjM0NTMyQTFFOUE4NThERUJGNDE4 NDM5MDZCRDAeFw0yNTA3MjIyMDQ5NDFaFw0yNjA3MjEyMDU0NDFaMDMxMTAvBgNV BAMTKDZBMTQyRjY2NjRERUU4QjE0N0I0Q0JDMEEyNzhBOTY2NzFEQjgwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDyIkl+mu0B0+MF+0yW1ykUtv tyqxiRVw6Cq4IYBJz0apEB9zMbKwexjVmS19YAoMAXjQtPiv+9aWAqTPOAEWyew/ 5YoQhnXv63i2Jyaw29wvJ4guA+9DK+a1mnZcrahfXmCLHkzlVeAxZnNz72G2QY+E VrJb3lPst9A+vBKfXeH/0rdtjlQ8ex2O99rx8W6F10ckW1bjFbbma0tEyKqsjRIM 3Ybf/HmrRBU11q/tKufo98q3MbSt23ZcDIATxDunGfErFIv+tn2MMWA3Bujdd0/R Cjelw/v0X4lfE66YGQW1ffeU0+vnhnFtF6M5IHr4vcaBU66Z6vGHJaThA5M3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUahQvZmTe6LFHtMvAonipZnHbgM8wHwYDVR0j BBgwFoAUjWSbp1beI0UyoemoWN6/QYQ5Br0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16 TTQvMC84RDY0OUJBNzU2REUyMzQ1MzJBMUU5QTg1OERFQkY0MTg0MzkwNkJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENjQ5QkE3NTZERTIzNDUz MkExRTlBODU4REVCRjQxODQzOTA2QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv MzQzNTJlMzEzNjMyMmUzMjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtovIwDQYJKoZIhvcNAQELBQADggEBAIYdzw9s aJjtJXk0vBfyRIEVYnMAw8uUf+rTeTRqlncmkfSW5lgUhfjHrAxdhAXazDflwdNR 8WLgap6rFm4F9sl68738C5faoTD7bXess3/lejocz1dmUwO9qqJPytwKoTZHQOvQ gNcTguPPqlEMFmoyfy/kVJYXOjFKzJVZv0JA/v9yOnP3FbcjNkKjB6xdQVlEqF/U 4vpiQ7aV0rU+pfUUD2ELoJ+n2ayg1C+VuPQZx6GE5/+dz8Pig3T+UeU6RbrIk5j5 LcPsxsxw4noqDygg/vacE6798OZvqRz1Ky4q+CP6z9bKr2tpVRvE2agbYLU3rVaM YujJVbZxFlzeKps= -----END CERTIFICATE-----Generated at Tue Jul 29 04:46:49 2025 by rpki-client