$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa File: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (raw, json) Hash identifier: nzGBObgZfOlb5g7ptD/ia0xytS8qU/fdfbuLNT9Fifw= Subject key identifier: 2F:F9:A1:66:F4:DE:3A:C3:FF:C6:73:1E:CF:63:39:DE:0B:47:14:17 Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C Certificate serial: 60D390D2C34530F5A78CF085B19C0A59B6B7235E Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa Signing time: Wed 05 Mar 2025 19:00:00 +0000 ROA not before: Wed 05 Mar 2025 18:55:00 +0000 ROA not after: Wed 04 Mar 2026 19:00:00 +0000 asID: 268312 IP address blocks: 45.238.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d3:90:d2:c3:45:30:f5:a7:8c:f0:85:b1:9c:0a:59:b6:b7:23:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C Validity Not Before: Mar 5 18:55:00 2025 GMT Not After : Mar 4 19:00:00 2026 GMT Subject: CN=2FF9A166F4DE3AC3FFC6731ECF6339DE0B471417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:6b:bb:ef:8e:99:d2:34:e4:92:5b:57:65: 6d:4c:7f:aa:7a:01:a4:fa:f4:cc:ac:2c:c5:bf:98: a0:cb:0d:32:51:ac:47:07:04:73:b9:fc:d9:ac:07: b2:ea:86:70:10:ab:3a:f0:69:77:cd:fd:af:9b:20: dc:72:05:04:9c:a2:ec:fa:a1:13:8e:7a:1f:f8:bc: 09:af:ef:8b:6f:e3:cf:6b:b4:e7:b7:c9:11:c3:ef: 85:f9:63:7a:b8:5d:3e:4c:13:ab:3b:d8:37:87:ed: 95:1f:8a:23:c9:da:cb:6f:a6:71:2c:c7:54:b0:8a: ab:a5:a9:33:80:f0:b9:de:e9:2a:88:29:08:42:01: 08:3b:4e:6a:2d:ef:24:a8:b3:78:73:51:16:2d:d1: f0:d4:16:77:63:51:59:5c:4e:ef:c0:2f:04:30:b2: a6:b0:13:9e:40:48:fe:d6:cf:40:7c:34:a2:a1:d1: f5:1f:78:51:ba:f6:0d:af:1b:3f:01:57:1d:c9:35: d1:17:ab:f4:1f:cf:cb:b8:26:18:e1:75:69:1a:97: 9b:a8:51:f9:27:f7:66:6c:04:5b:d6:a6:35:60:bb: 0d:86:9b:55:b7:3e:6f:3f:7b:60:1c:56:82:b2:17: da:13:3b:12:70:a8:41:b4:e4:84:a5:50:c1:6b:2a: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F9:A1:66:F4:DE:3A:C3:FF:C6:73:1E:CF:63:39:DE:0B:47:14:17 X509v3 Authority Key Identifier: keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.44.0/22 Signature Algorithm: sha256WithRSAEncryption 16:7b:60:6a:fe:e6:0f:a9:ac:ec:2e:e9:9e:e5:a7:07:8e:08: 97:55:ff:95:7b:42:55:1e:83:57:8c:36:5e:c0:ce:8f:51:99: e4:b2:c3:46:49:31:ea:f1:dd:e1:16:fb:51:a8:18:bf:6b:01: a5:62:cf:33:24:6f:58:98:d8:c2:ae:e8:57:42:d9:f0:93:b8: af:f7:88:b0:27:a3:35:be:65:74:cb:3e:67:0d:4d:40:52:ed: 66:de:1a:a6:e8:e5:7d:92:0d:f2:2c:f0:7c:ee:06:5f:a2:c8: 23:d9:df:48:0e:b5:56:f4:27:51:76:bf:3c:23:ef:92:06:0f: 84:f2:69:f4:e1:ec:9c:34:18:13:5d:ec:9f:ab:63:ff:b7:52: 54:02:fd:4d:2c:48:5c:99:5c:49:22:57:63:71:8e:d5:20:84: 2d:49:9d:79:73:6f:ca:26:74:a4:10:4d:83:a4:6e:a2:49:bc: 96:17:90:d9:8c:b5:62:c8:2a:54:ff:27:df:a4:03:9b:42:6e: be:25:30:ae:ce:af:6c:d8:0f:c0:ff:fc:c4:8b:d7:6e:d3:db: 02:22:fb:30:19:c7:de:e8:0b:22:9f:20:14:aa:bb:26:92:81: bb:a4:77:c8:b9:6c:91:c0:d0:f0:9a:dc:a4:9a:4b:a1:c2:55: 0c:11:9c:20 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUYNOQ0sNFMPWnjPCFsZwKWba3I14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1 QzkyRDQwQzAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV BAMTKDJGRjlBMTY2RjRERTNBQzNGRkM2NzMxRUNGNjMzOURFMEI0NzE0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHumu7746Z0jTkkltXZW1Mf6p6 AaT69MysLMW/mKDLDTJRrEcHBHO5/NmsB7LqhnAQqzrwaXfN/a+bINxyBQScouz6 oROOeh/4vAmv74tv489rtOe3yRHD74X5Y3q4XT5ME6s72DeH7ZUfiiPJ2stvpnEs x1SwiqulqTOA8Lne6SqIKQhCAQg7Tmot7ySos3hzURYt0fDUFndjUVlcTu/ALwQw sqawE55ASP7Wz0B8NKKh0fUfeFG69g2vGz8BVx3JNdEXq/Qfz8u4JhjhdWkal5uo Ufkn92ZsBFvWpjVguw2Gm1W3Pm8/e2AcVoKyF9oTOxJwqEG05ISlUMFrKq3NAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUL/mhZvTeOsP/xnMez2M53gtHFBcwHwYDVR0j BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1 alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv MzQzNTJlMzIzMzM4MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4 MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLe4sMA0GCSqGSIb3DQEBCwUAA4IBAQAWe2Bq/uYP qazsLume5acHjgiXVf+Ve0JVHoNXjDZewM6PUZnkssNGSTHq8d3hFvtRqBi/awGl Ys8zJG9YmNjCruhXQtnwk7iv94iwJ6M1vmV0yz5nDU1AUu1m3hqm6OV9kg3yLPB8 7gZfosgj2d9IDrVW9CdRdr88I++SBg+E8mn04eycNBgTXeyfq2P/t1JUAv1NLEhc mVxJIldjcY7VIIQtSZ15c2/KJnSkEE2DpG6iSbyWF5DZjLViyCpU/yffpAObQm6+ JTCuzq9s2A/A//zEi9du09sCIvswGcfe6AsinyAUqrsmkoG7pHfIuWyRwNDwmtyk mkuhwlUMEZwg -----END CERTIFICATE-----Generated at Mon Nov 3 18:59:44 2025 by rpki-client