$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa File: 3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa (raw, json) Hash identifier: YGH4HTxl7OG1B8VbLDIXyNx+HUhA1VF6faFqxowVDFU= Subject key identifier: DC:B2:4F:9A:7A:99:FF:98:C5:E4:DC:DB:06:1E:EE:4A:5E:84:5C:19 Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E Certificate serial: 0EFCE6B9E3B6EEAD41CB5D845756259B7A2F9F30 Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa Signing time: Wed 05 Mar 2025 23:40:24 +0000 ROA not before: Wed 05 Mar 2025 23:35:24 +0000 ROA not after: Wed 04 Mar 2026 23:40:24 +0000 asID: 52871 IP address blocks: 201.157.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 06:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fc:e6:b9:e3:b6:ee:ad:41:cb:5d:84:57:56:25:9b:7a:2f:9f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E Validity Not Before: Mar 5 23:35:24 2025 GMT Not After : Mar 4 23:40:24 2026 GMT Subject: CN=DCB24F9A7A99FF98C5E4DCDB061EEE4A5E845C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:f4:25:55:00:a4:17:2e:41:79:75:5a:db: aa:6b:b0:4e:81:47:4c:81:2e:e2:f4:47:a2:8e:21: ca:62:21:60:54:f8:6f:80:d2:e7:64:a0:54:7d:dd: 6d:21:a6:0d:33:b1:be:8d:d4:3a:f8:1e:d0:3b:79: 87:0f:d3:a8:5f:e2:12:eb:66:b2:fe:e9:0f:c0:ec: 25:32:e4:8e:9b:37:cf:5f:5d:87:12:92:eb:08:c5: 3a:3b:2c:4d:ad:01:85:fb:42:e6:84:27:5b:44:2e: be:b1:a3:ef:fc:0e:c0:69:9a:00:2b:d3:96:47:23: 8a:c5:6b:f0:99:05:0c:fc:cf:bd:54:72:c9:a6:07: fc:51:4b:f0:13:07:01:5a:57:14:78:8e:11:4a:8a: ac:c8:4f:6c:ea:9a:da:c5:31:a0:f5:0a:bc:66:98: 1c:c0:44:43:97:db:43:54:11:34:dd:b4:c0:a8:e0: 17:bc:d9:69:b2:90:b4:75:2c:78:90:49:2c:59:04: 28:d6:a4:d2:82:ae:2e:08:06:43:06:60:98:2b:c3: 46:37:f5:95:5a:75:be:9d:cf:14:ca:e2:6a:e5:4e: 30:66:c6:3c:38:6f:08:62:0d:cd:ed:03:d4:7c:59: c3:cd:af:a3:74:9d:76:d5:c0:12:f3:09:76:8c:e1: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B2:4F:9A:7A:99:FF:98:C5:E4:DC:DB:06:1E:EE:4A:5E:84:5C:19 X509v3 Authority Key Identifier: keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.157.214.0/23 Signature Algorithm: sha256WithRSAEncryption 56:b0:0a:9c:68:67:91:ba:8b:f7:70:50:3f:f3:8f:1e:fb:69: 38:0d:77:1b:9d:af:da:30:57:2a:9b:0f:29:3c:40:fa:6b:63: 1a:c2:47:39:9b:bb:19:6a:b5:91:db:0f:b9:b5:a7:e1:40:81: fe:0a:f2:8f:f6:60:8d:2d:51:89:52:dd:aa:d8:a9:be:25:7b: 3a:f5:68:ac:74:45:7d:55:17:c2:c2:dc:72:e3:e9:ab:2e:f4: 27:d4:c9:09:5a:aa:b9:e4:16:e1:a4:ee:ff:93:ba:3c:49:3c: a0:2f:39:67:c6:52:0a:6d:10:7c:f0:8e:e9:ea:9c:a4:74:d9: 89:5d:c7:f5:39:e6:e0:4d:3d:70:2f:99:97:46:65:ae:89:75: a9:65:c7:bf:75:81:51:e8:ec:b0:0e:d8:03:ea:1c:de:9f:7e: ae:d3:9d:b1:4f:3a:98:57:bc:ab:06:34:38:c0:f7:22:d7:e7: a9:fb:79:b0:ee:03:51:b1:51:52:17:6c:9c:2f:9e:1d:7a:f2: de:ca:3c:b6:b9:06:39:75:27:57:37:94:0b:3b:fd:fa:91:a3: 5e:f7:88:5b:e8:ed:76:01:c1:ab:29:5d:c2:38:ea:2f:85:99: 1f:39:c1:38:b0:6a:3e:54:f4:ae:f9:7f:af:eb:22:b1:76:aa: 11:54:df:45 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUDvzmueO27q1By12EV1Ylm3ovnzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF Mjg4QkY4RTAeFw0yNTAzMDUyMzM1MjRaFw0yNjAzMDQyMzQwMjRaMDMxMTAvBgNV BAMTKERDQjI0RjlBN0E5OUZGOThDNUU0RENEQjA2MUVFRTRBNUU4NDVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFvQlVQCkFy5BeXVa26prsE6B R0yBLuL0R6KOIcpiIWBU+G+A0udkoFR93W0hpg0zsb6N1Dr4HtA7eYcP06hf4hLr ZrL+6Q/A7CUy5I6bN89fXYcSkusIxTo7LE2tAYX7QuaEJ1tELr6xo+/8DsBpmgAr 05ZHI4rFa/CZBQz8z71UcsmmB/xRS/ATBwFaVxR4jhFKiqzIT2zqmtrFMaD1Crxm mBzAREOX20NUETTdtMCo4Be82WmykLR1LHiQSSxZBCjWpNKCri4IBkMGYJgrw0Y3 9ZVadb6dzxTK4mrlTjBmxjw4bwhiDc3tA9R8WcPNr6N0nXbVwBLzCXaM4YJbAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3LJPmnqZ/5jF5NzbBh7uSl6EXBkwHwYDVR0j BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6 TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv MzIzMDMxMmUzMTM1MzcyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1 MzIzODM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHJndYwDQYJKoZIhvcNAQELBQADggEBAFawCpxo Z5G6i/dwUD/zjx77aTgNdxudr9owVyqbDyk8QPprYxrCRzmbuxlqtZHbD7m1p+FA gf4K8o/2YI0tUYlS3arYqb4lezr1aKx0RX1VF8LC3HLj6asu9CfUyQlaqrnkFuGk 7v+TujxJPKAvOWfGUgptEHzwjunqnKR02Yldx/U55uBNPXAvmZdGZa6Jdallx791 gVHo7LAO2APqHN6ffq7TnbFPOphXvKsGNDjA9yLX56n7ebDuA1GxUVIXbJwvnh16 8t7KPLa5Bjl1J1c3lAs7/fqRo173iFvo7XYBwaspXcI46i+FmR85wTiwaj5U9K75 f6/rIrF2qhFU30U= -----END CERTIFICATE-----Generated at Thu Nov 6 06:54:28 2025 by rpki-client