$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa File: 3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa (raw, json) Hash identifier: ZZ9TDjD4xpwMJCCqDS3LdtprsphvtJ82Dl2tiDZsjzI= Subject key identifier: 10:68:1D:55:6D:3B:A5:3B:6D:32:B3:84:84:D0:1D:DC:67:FA:05:1E Certificate issuer: /CN=D54C376960A26972A0B767BDA084048DFFE3673E Certificate serial: 0F99B2A804720D6A4BFBFC2130336B51751EB0FA Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa Signing time: Tue 22 Jul 2025 15:09:03 +0000 ROA not before: Tue 22 Jul 2025 15:04:03 +0000 ROA not after: Tue 21 Jul 2026 15:09:03 +0000 asID: 2716 IP address blocks: 168.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 10:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:99:b2:a8:04:72:0d:6a:4b:fb:fc:21:30:33:6b:51:75:1e:b0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E Validity Not Before: Jul 22 15:04:03 2025 GMT Not After : Jul 21 15:09:03 2026 GMT Subject: CN=10681D556D3BA53B6D32B38484D01DDC67FA051E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:49:c0:27:8e:0e:c3:96:00:f2:d2:32:58: 32:16:48:71:e4:da:f7:ba:ac:7f:f4:3b:f3:05:45: 31:44:d2:56:2a:9e:eb:ab:31:8d:ad:31:67:50:57: 89:6e:45:8c:5b:26:20:fe:00:58:99:ef:a5:62:c5: d4:0b:fb:c2:84:b6:a8:ea:0f:fe:96:23:27:e9:91: a5:0d:68:02:cd:5f:f1:47:84:8e:49:85:a7:28:ad: 23:a1:1f:71:07:e2:0a:7d:9e:a5:5d:bd:73:1a:ed: 6d:6e:a1:6e:b2:92:41:90:49:c5:fc:1f:1c:6a:9f: 66:c0:f4:4c:c3:e8:92:18:18:26:16:38:c5:d7:01: 72:a8:3a:3b:60:f6:06:44:59:bc:ff:f2:90:c2:7a: ca:e5:b5:1e:2b:c1:be:93:a3:6c:50:c2:36:13:1f: 47:13:54:f6:5d:62:4f:3d:bd:d5:96:52:8c:cd:f9: 34:ef:76:19:a8:82:01:f7:55:83:09:44:da:a8:92: 1b:f6:b7:22:30:fd:bc:51:8e:50:9a:c7:83:e7:3a: ea:cc:54:a9:73:39:c5:bb:9e:c5:df:7f:59:dc:51: 2b:18:ff:d0:54:b7:f2:17:d4:31:52:c5:ab:0d:46: 48:ba:86:7a:a5:35:32:b8:1f:95:cd:03:c6:79:fc: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:1D:55:6D:3B:A5:3B:6D:32:B3:84:84:D0:1D:DC:67:FA:05:1E X509v3 Authority Key Identifier: keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3232382e3235322e302f32322d3232203d3e2032373136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.252.0/22 Signature Algorithm: sha256WithRSAEncryption 99:09:e4:d9:23:55:ab:5b:8e:47:7b:00:1e:39:16:0d:68:47: 46:4b:b3:7f:26:65:9c:3a:95:46:f4:8e:05:2d:fa:c8:03:39: 2c:0d:95:49:16:ce:4d:8b:02:b1:18:b7:6f:e0:f4:e9:0e:0e: 54:40:37:05:48:17:28:04:1f:15:04:0a:e0:38:e6:27:56:bc: d0:c1:bb:9f:1b:41:8e:44:0a:e3:14:05:1e:ef:a3:d4:f3:38: 0c:84:23:2a:09:88:66:70:c8:c8:89:54:d2:85:98:f0:64:03: b0:d8:e0:4b:78:dc:65:9c:57:2a:e7:19:be:08:0c:4f:2e:04: 16:18:c1:67:b1:2d:c7:29:43:a8:67:27:84:97:5f:9d:f8:99: 95:99:da:c6:88:fd:0b:4a:f9:df:bb:3c:09:24:06:ed:f0:ff: ac:1f:34:b6:a8:9d:58:d8:b1:4d:62:49:80:78:ce:18:94:e7: 76:8d:93:1e:1b:c7:d8:f8:a2:09:b1:d3:f6:3c:1e:80:d0:ff: 9e:1c:2e:6c:4c:72:7d:23:b3:f0:76:7c:f6:2f:c6:d2:36:4e: 36:63:20:e0:5c:f7:0b:71:3f:e3:2b:d9:1e:b7:fe:53:a7:34: 51:0d:2e:9d:3d:84:99:28:ea:53:52:5d:51:3f:8b:15:c3:67: 98:4e:07:49 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUD5myqARyDWpL+/whMDNrUXUesPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG RkUzNjczRTAeFw0yNTA3MjIxNTA0MDNaFw0yNjA3MjExNTA5MDNaMDMxMTAvBgNV BAMTKDEwNjgxRDU1NkQzQkE1M0I2RDMyQjM4NDg0RDAxRERDNjdGQTA1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJEnAJ44Ow5YA8tIyWDIWSHHk 2ve6rH/0O/MFRTFE0lYqnuurMY2tMWdQV4luRYxbJiD+AFiZ76VixdQL+8KEtqjq D/6WIyfpkaUNaALNX/FHhI5JhacorSOhH3EH4gp9nqVdvXMa7W1uoW6ykkGQScX8 Hxxqn2bA9EzD6JIYGCYWOMXXAXKoOjtg9gZEWbz/8pDCesrltR4rwb6To2xQwjYT H0cTVPZdYk89vdWWUozN+TTvdhmoggH3VYMJRNqokhv2tyIw/bxRjlCax4PnOurM VKlzOcW7nsXff1ncUSsY/9BUt/IX1DFSxasNRki6hnqlNTK4H5XNA8Z5/HPlAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUEGgdVW07pTttMrOEhNAd3Gf6BR4wHwYDVR0j BBgwFoAU1Uw3aWCiaXKgt2e9oIQEjf/jZz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT d2EvMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2NzNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NEMzNzY5NjBBMjY5NzJB MEI3NjdCREEwODQwNDhERkZFMzY3M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEv MzEzNjM4MmUzMjMyMzgyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzczMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqOT8MA0GCSqGSIb3DQEBCwUAA4IBAQCZCeTZI1Wr W45HewAeORYNaEdGS7N/JmWcOpVG9I4FLfrIAzksDZVJFs5NiwKxGLdv4PTpDg5U QDcFSBcoBB8VBArgOOYnVrzQwbufG0GORArjFAUe76PU8zgMhCMqCYhmcMjIiVTS hZjwZAOw2OBLeNxlnFcq5xm+CAxPLgQWGMFnsS3HKUOoZyeEl1+d+JmVmdrGiP0L SvnfuzwJJAbt8P+sHzS2qJ1Y2LFNYkmAeM4YlOd2jZMeG8fY+KIJsdP2PB6A0P+e HC5sTHJ9I7Pwdnz2L8bSNk42YyDgXPcLcT/jK9ket/5TpzRRDS6dPYSZKOpTUl1R P4sVw2eYTgdJ -----END CERTIFICATE-----Generated at Sun Jul 27 01:04:44 2025 by rpki-client