$ rpki-client -vvvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32322d3234203d3e20323632383939.roa File: 34352e3136352e3132382e302f32322d3234203d3e20323632383939.roa (raw, json) Hash identifier: HkY9ZxKMVwT+kvEQ5elrakFOCoAJda8BBjxRE78v+GE= Subject key identifier: 33:D6:BE:60:44:6E:E3:EE:6F:99:B5:0B:90:C1:4B:FD:A6:B5:72:AA Certificate issuer: /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Certificate serial: 6AE3EB16391B23243AA699B4645A44718FF084C8 Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32322d3234203d3e20323632383939.roa Signing time: Thu 30 Jul 2026 14:54:12 +0000 ROA not before: Thu 30 Jul 2026 14:49:12 +0000 ROA not after: Thu 29 Jul 2027 14:54:12 +0000 asID: 262899 IP address blocks: 45.165.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Aug 2026 15:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e3:eb:16:39:1b:23:24:3a:a6:99:b4:64:5a:44:71:8f:f0:84:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56 Validity Not Before: Jul 30 14:49:12 2026 GMT Not After : Jul 29 14:54:12 2027 GMT Subject: CN=33D6BE60446EE3EE6F99B50B90C14BFDA6B572AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:e4:19:66:ff:e1:77:55:77:a1:d2:62:bc: 5e:b8:ab:6d:57:13:ce:b3:1d:7a:2e:2d:ca:06:56: f9:8f:67:8c:81:4d:4d:9d:cf:96:e9:78:25:e7:20: b4:ce:97:6b:d1:f1:e3:f7:6a:16:90:a0:87:88:e9: 7b:81:52:b4:1a:3c:fd:ef:24:6c:69:ec:94:f6:86: 98:2c:3b:e3:30:d1:e6:23:0b:6c:0e:fe:ef:5e:3c: 14:0c:7e:82:ef:64:f4:33:2c:6f:f2:20:d2:6a:45: 7d:62:07:f0:98:c0:62:50:39:54:ad:b2:de:b2:d6: b6:28:26:4b:48:b4:90:f1:bb:98:20:56:d4:a8:d4: 72:78:d6:48:00:c3:43:68:0f:e8:f5:f2:2f:0d:0a: e0:bb:f1:56:66:27:07:89:42:32:d5:67:67:19:ca: 0c:fe:3e:75:a8:07:1c:9c:f7:68:a9:c2:a8:da:04: ab:15:45:38:2d:b3:a6:2e:fa:4d:08:2c:76:a1:86: 51:98:1e:37:37:59:cc:6e:ee:f4:e0:ad:64:d3:16: 4e:ec:1b:73:c1:d5:1a:d4:36:2c:1d:d8:d8:25:ee: 41:61:64:0e:13:42:46:af:8c:f9:6d:68:a0:8a:b7: c8:71:d0:a4:4d:64:5a:54:3d:75:2a:3e:4f:c4:d8: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D6:BE:60:44:6E:E3:EE:6F:99:B5:0B:90:C1:4B:FD:A6:B5:72:AA X509v3 Authority Key Identifier: keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32322d3234203d3e20323632383939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.128.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:79:89:0d:cf:64:41:ea:11:58:ae:d4:a5:ca:a0:c3:16:4d: 97:8c:4c:05:3b:8b:e1:e3:67:9f:77:44:3e:d0:ce:88:a6:78: e8:94:95:5f:50:e0:60:8c:f4:de:0d:83:2d:63:ed:c2:86:e3: ea:ab:c0:3f:32:8a:d4:f2:a7:ab:71:18:78:c9:ed:f3:7d:ca: 43:cc:cb:46:45:b5:6f:b2:87:35:16:6b:4a:e1:fc:c1:ef:d6: d4:19:14:eb:8b:7f:12:32:71:bc:79:98:d2:75:4b:37:f5:aa: 66:80:78:08:55:08:57:60:75:e4:85:92:36:fa:88:ea:85:ad: f3:87:ff:9a:19:ba:36:8a:49:87:ee:80:6f:a6:f1:a7:77:2b: 09:c7:24:80:2b:32:39:20:31:dd:92:9b:42:c5:54:56:ea:c0: 9c:ca:7d:d5:f4:19:de:a8:69:3c:74:b3:a8:27:1a:e3:6a:b9: 13:f1:9b:62:37:b8:6f:e8:c2:42:6c:d1:e0:4e:90:71:0f:21: ed:cb:dd:af:2c:08:15:22:e0:00:98:8d:6b:cb:29:66:f9:71: 73:67:7e:1c:62:02:38:60:ea:c3:f0:57:20:9c:91:d9:3b:a1: c8:cd:fa:27:70:79:d2:20:08:d3:b8:d7:0f:ca:b8:9b:3a:7e: de:54:bd:e0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUauPrFjkbIyQ6ppm0ZFpEcY/whMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM2NThDNkU1RDlCRjgwQzBENTA1RTRBRjc3MkZDOTI2 RkMyOEM1NjAeFw0yNjA3MzAxNDQ5MTJaFw0yNzA3MjkxNDU0MTJaMDMxMTAvBgNV BAMTKDMzRDZCRTYwNDQ2RUUzRUU2Rjk5QjUwQjkwQzE0QkZEQTZCNTcyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5OQZZv/hd1V3odJivF64q21X E86zHXouLcoGVvmPZ4yBTU2dz5bpeCXnILTOl2vR8eP3ahaQoIeI6XuBUrQaPP3v JGxp7JT2hpgsO+Mw0eYjC2wO/u9ePBQMfoLvZPQzLG/yINJqRX1iB/CYwGJQOVSt st6y1rYoJktItJDxu5ggVtSo1HJ41kgAw0NoD+j18i8NCuC78VZmJweJQjLVZ2cZ ygz+PnWoBxyc92ipwqjaBKsVRTgts6Yu+k0ILHahhlGYHjc3Wcxu7vTgrWTTFk7s G3PB1RrUNiwd2Ngl7kFhZA4TQkavjPltaKCKt8hx0KRNZFpUPXUqPk/E2AC/AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUM9a+YERu4+5vmbULkMFL/aa1cqowHwYDVR0j BBgwFoAUnGWMbl2b+AwNUF5K93L8km/CjFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k OFgvMC85QzY1OEM2RTVEOUJGODBDMEQ1MDVFNEFGNzcyRkM5MjZGQzI4QzU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjU4QzZFNUQ5QkY4MEMw RDUwNUU0QUY3NzJGQzkyNkZDMjhDNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv MzQzNTJlMzEzNjM1MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItpYAwDQYJKoZIhvcNAQELBQADggEBAJ15iQ3P ZEHqEViu1KXKoMMWTZeMTAU7i+HjZ593RD7QzoimeOiUlV9Q4GCM9N4Ngy1j7cKG 4+qrwD8yitTyp6txGHjJ7fN9ykPMy0ZFtW+yhzUWa0rh/MHv1tQZFOuLfxIycbx5 mNJ1Szf1qmaAeAhVCFdgdeSFkjb6iOqFrfOH/5oZujaKSYfugG+m8ad3KwnHJIAr MjkgMd2Sm0LFVFbqwJzKfdX0Gd6oaTx0s6gnGuNquRPxm2I3uG/owkJs0eBOkHEP Ie3L3a8sCBUi4ACYjWvLKWb5cXNnfhxiAjhg6sPwVyCckdk7ocjN+idwedIgCNO4 1w/KuJs6ft5UveA= -----END CERTIFICATE-----Generated at Wed Aug 26 22:03:11 2026 by rpki-client