$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa File: 34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa (raw, json) Hash identifier: NhfnlYs1H4+RDVMyKOyGFbCvRR+biBUgZ5rA8Tv0Rt8= Subject key identifier: 3A:3D:BC:9D:39:05:D4:77:34:11:54:DE:0E:0A:60:AE:4C:66:CB:A0 Certificate issuer: /CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64 Certificate serial: 1770716D946C0C6096900302ABDDBF4802F6D6E3 Authority key identifier: 7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa Signing time: Thu 07 Aug 2025 12:48:55 +0000 ROA not before: Thu 07 Aug 2025 12:43:55 +0000 ROA not after: Thu 06 Aug 2026 12:48:55 +0000 asID: 268341 IP address blocks: 45.238.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:70:71:6d:94:6c:0c:60:96:90:03:02:ab:dd:bf:48:02:f6:d6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A156DCDCD0ACF159FE4705A579B3F0277F6DD64 Validity Not Before: Aug 7 12:43:55 2025 GMT Not After : Aug 6 12:48:55 2026 GMT Subject: CN=3A3DBC9D3905D477341154DE0E0A60AE4C66CBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:2b:a1:b8:5e:09:a5:40:b4:04:a5:13:31: cf:e0:24:b7:49:ea:48:02:80:c1:21:4d:6e:0f:b7: 5c:87:36:c6:8e:15:ab:92:aa:f2:4d:e0:c2:4f:ed: 1d:d8:0d:46:57:f6:98:af:39:39:66:36:17:39:09: 52:cb:95:08:43:00:2a:0b:f3:05:67:c6:0c:94:ea: 52:f6:bc:5e:f7:8b:5e:d9:4e:14:50:f2:44:01:51: 53:a9:ea:02:df:b0:a0:c8:3c:c5:a3:bc:52:8f:e9: 3f:38:c9:3b:cf:da:8b:46:29:4d:bd:74:8f:7b:7c: 4e:26:12:ff:01:23:bb:c9:9a:29:dd:9a:8d:a7:36: 56:f3:e8:1d:90:97:82:f9:37:de:af:8b:01:44:4d: 0e:d0:6a:81:4a:63:6d:7a:d9:1e:ff:cb:74:14:47: d0:ba:a8:2a:6d:8d:ae:02:bf:ef:4c:d8:34:94:fb: fc:4e:74:47:4a:f8:0f:6b:04:47:92:b1:0e:90:97: 09:9e:9b:e7:fc:aa:99:75:05:a8:e9:be:f6:cf:9f: 86:12:0b:4b:81:d9:15:53:f3:9d:f4:59:56:5a:a6: 16:41:2e:23:82:bb:35:0c:ca:53:2f:18:3c:f5:1c: 15:3c:37:13:db:93:31:38:0f:57:b3:bd:3a:6e:40: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:BC:9D:39:05:D4:77:34:11:54:DE:0E:0A:60:AE:4C:66:CB:A0 X509v3 Authority Key Identifier: keyid:7A:15:6D:CD:CD:0A:CF:15:9F:E4:70:5A:57:9B:3F:02:77:F6:DD:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A156DCDCD0ACF159FE4705A579B3F0277F6DD64.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/34352e3233382e3137312e302f32342d3234203d3e20323638333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.171.0/24 Signature Algorithm: sha256WithRSAEncryption 78:cd:70:1f:6f:63:c3:10:2b:8f:ef:6c:dc:92:30:a3:9b:06: 85:01:75:4f:54:3c:b6:69:a5:3b:32:26:78:73:a4:15:aa:f4: 42:e7:6a:4d:01:96:8d:3b:0a:46:25:b2:59:b7:a8:a0:0e:8b: 17:f9:5a:e8:84:07:36:11:96:88:62:df:43:93:89:23:37:dd: f2:b9:b7:be:24:37:d0:c0:01:8d:be:9c:64:eb:18:da:24:26: 11:5a:7b:b5:bd:eb:89:28:6b:d4:e3:39:34:48:fe:11:9a:37: 47:ac:8e:ef:ef:fc:4e:a8:77:f8:32:47:a1:32:74:39:b0:85: 33:d5:17:0b:fb:19:fe:8e:d9:d9:97:f4:e3:6a:93:de:ad:67: c2:29:80:9b:d6:8f:49:5f:30:0e:71:c5:10:26:05:37:62:c0: b5:28:62:23:bc:82:01:be:02:88:73:03:67:09:d3:bf:46:fe: 48:b5:91:ec:50:bd:e7:df:7c:29:e7:db:fc:13:77:d7:85:f4: 64:50:c9:a7:47:db:4a:cc:89:b9:71:02:cc:91:d1:c3:ed:eb: fd:5b:d8:69:33:b7:28:66:dc:f5:78:85:6f:5a:a4:ec:ab:ea: ff:7f:3d:26:bb:56:a1:64:3f:0d:54:cb:1a:48:f6:a4:4f:fb: 03:8a:85:01 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUF3BxbZRsDGCWkAMCq92/SAL21uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ExNTZEQ0RDRDBBQ0YxNTlGRTQ3MDVBNTc5QjNGMDI3 N0Y2REQ2NDAeFw0yNTA4MDcxMjQzNTVaFw0yNjA4MDYxMjQ4NTVaMDMxMTAvBgNV BAMTKDNBM0RCQzlEMzkwNUQ0NzczNDExNTRERTBFMEE2MEFFNEM2NkNCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIyuhuF4JpUC0BKUTMc/gJLdJ 6kgCgMEhTW4Pt1yHNsaOFauSqvJN4MJP7R3YDUZX9pivOTlmNhc5CVLLlQhDACoL 8wVnxgyU6lL2vF73i17ZThRQ8kQBUVOp6gLfsKDIPMWjvFKP6T84yTvP2otGKU29 dI97fE4mEv8BI7vJmindmo2nNlbz6B2Ql4L5N96viwFETQ7QaoFKY2162R7/y3QU R9C6qCptja4Cv+9M2DSU+/xOdEdK+A9rBEeSsQ6Qlwmem+f8qpl1BajpvvbPn4YS C0uB2RVT8530WVZaphZBLiOCuzUMylMvGDz1HBU8NxPbkzE4D1ezvTpuQJMFAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUOj28nTkF1Hc0EVTeDgpgrkxmy6AwHwYDVR0j BBgwFoAUehVtzc0KzxWf5HBaV5s/Anf23WQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p UFUvMC83QTE1NkRDRENEMEFDRjE1OUZFNDcwNUE1NzlCM0YwMjc3RjZERDY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBMTU2RENEQ0QwQUNGMTU5 RkU0NzA1QTU3OUIzRjAyNzdGNkRENjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv MzQzNTJlMzIzMzM4MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzgzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt7qswDQYJKoZIhvcNAQELBQADggEBAHjNcB9v Y8MQK4/vbNySMKObBoUBdU9UPLZppTsyJnhzpBWq9ELnak0Blo07CkYlslm3qKAO ixf5WuiEBzYRlohi30OTiSM33fK5t74kN9DAAY2+nGTrGNokJhFae7W964koa9Tj OTRI/hGaN0esju/v/E6od/gyR6EydDmwhTPVFwv7Gf6O2dmX9ONqk96tZ8IpgJvW j0lfMA5xxRAmBTdiwLUoYiO8ggG+AohzA2cJ079G/ki1kexQvefffCnn2/wTd9eF 9GRQyadH20rMiblxAsyR0cPt6/1b2Gkztyhm3PV4hW9apOyr6v9/PSa7VqFkPw1U yxpI9qRP+wOKhQE= -----END CERTIFICATE-----Generated at Wed Aug 20 23:55:06 2025 by rpki-client