$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa File: 3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (raw, json) Hash identifier: Bz5wxvrUIn7qT/KOi2fX26APXFbZ3oWcaeGHAaH1U+o= Subject key identifier: C0:AE:90:E9:F3:E1:55:F1:0A:2A:28:6C:A4:D2:06:15:04:43:67:D3 Certificate issuer: /CN=C6311968EBC105398794FB43DCF25FAA7999A36E Certificate serial: 689737C226A84FC8018416AE656E1A057CC5AA0A Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer Subject info access: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa Signing time: Thu 20 Mar 2025 11:18:00 +0000 ROA not before: Thu 20 Mar 2025 11:13:00 +0000 ROA not after: Thu 19 Mar 2026 11:18:00 +0000 asID: 264281 IP address blocks: 170.233.172.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:97:37:c2:26:a8:4f:c8:01:84:16:ae:65:6e:1a:05:7c:c5:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E Validity Not Before: Mar 20 11:13:00 2025 GMT Not After : Mar 19 11:18:00 2026 GMT Subject: CN=C0AE90E9F3E155F10A2A286CA4D20615044367D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:32:5a:32:ab:57:16:76:46:e2:aa:b3:b7: 07:80:6e:80:0f:51:d0:13:26:42:59:79:5c:99:21: d1:5c:d7:42:7c:26:51:7d:53:ce:fb:ca:2d:5c:99: 66:4a:c6:51:52:d9:0b:5d:cd:9e:ec:1b:0e:cc:65: 63:0f:03:fe:1c:d9:62:45:7d:74:50:7f:40:b7:43: 47:f5:9f:b2:62:03:d9:49:bc:84:2b:b2:e4:04:da: 72:94:76:c6:42:a1:40:09:44:cf:1d:f1:e9:ff:0b: ea:d4:fb:b5:96:5f:c4:33:a7:42:b8:36:58:e9:a8: 59:83:b4:e4:ca:b4:c3:9b:c1:54:59:76:3b:e8:cd: df:67:1d:e3:c0:c7:8f:42:15:ca:1b:43:37:2c:50: 3b:7b:a0:27:2e:43:2c:ba:db:fc:47:d4:7c:93:8c: 6e:92:7c:ba:83:4b:2f:94:66:eb:02:0e:0d:1a:97: 4c:ab:3e:1e:13:4a:39:ee:73:8b:47:09:ff:8b:d9: 52:b6:d1:00:07:68:4e:59:a3:f4:34:2f:c6:46:c1: 0f:a4:49:e4:22:c8:01:90:e9:8a:3c:44:86:d3:64: d7:39:94:a2:3c:5e:47:31:fe:11:02:ee:3f:be:f0: 8a:10:ff:3a:5e:ab:66:8a:e7:3d:9c:9f:5f:91:fb: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:90:E9:F3:E1:55:F1:0A:2A:28:6C:A4:D2:06:15:04:43:67:D3 X509v3 Authority Key Identifier: keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 03:fa:37:a0:00:56:6b:6f:7b:c7:47:70:b7:57:2b:34:97:86: 50:65:0a:14:cf:82:49:36:5e:3f:77:77:ae:34:40:33:7b:3f: ea:0a:43:76:d3:0a:d0:1f:26:82:8f:b7:e5:ff:84:32:16:a1: 69:34:cb:aa:dc:77:47:d3:30:30:15:51:b4:cc:80:6b:32:a5: 38:34:08:fe:80:e5:5f:7e:a3:bb:18:fa:35:ae:0c:34:d6:19: 13:98:98:6f:a9:d2:f1:64:04:5e:88:85:27:ea:98:08:81:09: 80:0b:48:5a:14:b9:a3:1c:fb:d2:21:7a:89:a1:a9:2d:73:cf: cc:0d:55:59:79:d0:73:93:a9:6c:f2:7f:f7:8e:10:d9:ef:e8: 4a:13:d3:7d:ce:20:14:18:d4:83:f5:85:a6:35:5d:ee:2b:90: 23:23:84:71:fa:03:3a:be:cd:2f:e6:0c:67:7d:39:1c:37:4a: 04:86:b5:cb:52:9a:f0:5e:2b:71:bd:18:c1:fe:80:b0:d9:ab: 26:cd:7b:d2:5a:88:51:3d:d4:5e:bc:de:73:ab:c6:d2:63:de: b7:bd:75:64:74:d0:1f:2c:73:dc:03:91:e7:c1:78:d4:90:0b: de:0f:6d:7d:a8:95:a6:62:a4:02:e4:a3:46:38:b4:19:a6:b4: 8e:48:ef:ad -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUaJc3wiaoT8gBhBauZW4aBXzFqgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzMTE5NjhFQkMxMDUzOTg3OTRGQjQzRENGMjVGQUE3 OTk5QTM2RTAeFw0yNTAzMjAxMTEzMDBaFw0yNjAzMTkxMTE4MDBaMDMxMTAvBgNV BAMTKEMwQUU5MEU5RjNFMTU1RjEwQTJBMjg2Q0E0RDIwNjE1MDQ0MzY3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/zJaMqtXFnZG4qqztweAboAP UdATJkJZeVyZIdFc10J8JlF9U877yi1cmWZKxlFS2QtdzZ7sGw7MZWMPA/4c2WJF fXRQf0C3Q0f1n7JiA9lJvIQrsuQE2nKUdsZCoUAJRM8d8en/C+rU+7WWX8Qzp0K4 NljpqFmDtOTKtMObwVRZdjvozd9nHePAx49CFcobQzcsUDt7oCcuQyy62/xH1HyT jG6SfLqDSy+UZusCDg0al0yrPh4TSjnuc4tHCf+L2VK20QAHaE5Zo/Q0L8ZGwQ+k SeQiyAGQ6Yo8RIbTZNc5lKI8Xkcx/hEC7j++8IoQ/zpeq2aK5z2cn1+R+/PtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUwK6Q6fPhVfEKKihspNIGFQRDZ9MwHwYDVR0j BBgwFoAUxjEZaOvBBTmHlPtD3PJfqnmZo24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR VzIvMC9DNjMxMTk2OEVCQzEwNTM5ODc5NEZCNDNEQ0YyNUZBQTc5OTlBMzZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2MzExOTY4RUJDMTA1Mzk4 Nzk0RkI0M0RDRjI1RkFBNzk5OUEzNkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv MzEzNzMwMmUzMjMzMzMyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNDMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrprDANBgkqhkiG9w0BAQsFAAOCAQEAA/o3 oABWa297x0dwt1crNJeGUGUKFM+CSTZeP3d3rjRAM3s/6gpDdtMK0B8mgo+35f+E MhahaTTLqtx3R9MwMBVRtMyAazKlODQI/oDlX36juxj6Na4MNNYZE5iYb6nS8WQE XoiFJ+qYCIEJgAtIWhS5oxz70iF6iaGpLXPPzA1VWXnQc5OpbPJ/944Q2e/oShPT fc4gFBjUg/WFpjVd7iuQIyOEcfoDOr7NL+YMZ305HDdKBIa1y1Ka8F4rcb0Ywf6A sNmrJs170lqIUT3UXrzec6vG0mPet711ZHTQHyxz3AOR58F41JAL3g9tfaiVpmKk AuSjRji0Gaa0jkjvrQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:06:02 2025 by rpki-client