$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3134332e3235352e3232342e302f32322d3332203d3e203238363439.roa File: 3134332e3235352e3232342e302f32322d3332203d3e203238363439.roa (raw, json) Hash identifier: N3IXkWnEOGtjOYmGnq2oo6mz7QjGCg6wJnsdhEnGJPo= Subject key identifier: B5:2E:18:62:B6:14:70:04:C3:7F:85:44:96:2F:8C:15:98:D5:7A:54 Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Certificate serial: 4B4EC042F991FDE5D1CCEA8DD5F5DC259A6A1B7E Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3134332e3235352e3232342e302f32322d3332203d3e203238363439.roa Signing time: Fri 15 Aug 2025 20:31:17 +0000 ROA not before: Fri 15 Aug 2025 20:26:17 +0000 ROA not after: Fri 14 Aug 2026 20:31:17 +0000 asID: 28649 IP address blocks: 143.255.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4e:c0:42:f9:91:fd:e5:d1:cc:ea:8d:d5:f5:dc:25:9a:6a:1b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Validity Not Before: Aug 15 20:26:17 2025 GMT Not After : Aug 14 20:31:17 2026 GMT Subject: CN=B52E1862B6147004C37F8544962F8C1598D57A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:9e:c2:21:81:88:95:c7:c9:eb:90:a6:74: 52:63:b1:81:b0:cf:c2:1c:fc:2a:23:47:9d:23:88: c6:35:e8:10:83:39:ef:59:f9:58:c9:37:38:de:d6: e4:8c:17:14:05:2a:83:af:0c:b8:5b:23:4b:f6:4d: e8:4b:4c:2f:e7:35:be:82:87:f7:26:b5:be:88:2e: 35:60:44:a9:e8:e2:af:ef:e4:64:9a:10:e3:36:95: f8:fa:10:6c:9e:3b:fc:22:e5:e9:a9:c8:8d:04:49: f1:eb:e2:dd:3d:c1:f6:d8:78:1e:ec:ae:6f:00:ed: e7:a9:2b:28:e6:b9:f7:94:c4:a4:e3:19:4e:38:8d: 3a:68:9a:f9:e2:4c:d2:d0:5b:80:53:a5:99:18:7b: 14:13:6d:bf:cf:f3:61:2a:f5:c8:36:7e:b9:cc:a9: 7f:b1:2a:37:8c:a8:01:07:a7:0b:03:47:eb:af:17: 5f:13:1a:0c:7c:eb:2f:ff:3f:f5:83:cc:a7:95:cb: fc:4c:1e:2d:be:cb:67:a8:15:0c:0e:ad:aa:d5:68: 0b:81:67:5a:7e:ed:5e:a9:14:23:02:b0:70:2a:5a: 49:a8:b4:ab:6b:a9:97:e2:b0:00:60:5b:81:a7:aa: d8:41:2c:a6:9b:ea:ed:92:e5:7c:90:72:5c:e6:b4: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:18:62:B6:14:70:04:C3:7F:85:44:96:2F:8C:15:98:D5:7A:54 X509v3 Authority Key Identifier: keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3134332e3235352e3232342e302f32322d3332203d3e203238363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.224.0/22 Signature Algorithm: sha256WithRSAEncryption 65:d0:35:f5:71:69:80:a9:78:0b:b9:9b:7e:8d:5b:6b:07:cb: 7e:ea:df:ee:da:26:90:b1:1a:58:ef:03:bf:e5:33:78:99:04: ad:ee:33:35:2e:11:a3:50:ee:7e:c5:5c:6d:65:8f:20:ff:2d: 54:f4:4a:c1:4b:75:c1:e8:3e:37:6e:50:1d:17:19:b5:e0:da: 58:07:7f:ad:89:1e:7d:c3:f5:53:a1:06:74:4f:07:08:a7:d8: 01:16:8b:9e:1d:7f:29:a9:02:07:55:36:77:87:4b:f1:a6:d0: 87:f7:45:76:51:9f:85:0a:1e:c4:76:71:b2:52:14:7d:b6:0a: 35:12:f4:a4:75:1b:98:66:26:2f:38:68:c2:b1:d3:11:3c:29: 52:14:6e:0c:37:cd:f8:a6:31:c6:c7:61:b1:06:b5:7a:53:1c: fd:c5:d6:c5:1b:57:8d:1d:a4:0a:bf:0a:5e:00:2d:ed:2e:d9: 98:06:a1:6f:f3:fa:c5:44:a6:64:e3:80:91:5a:70:74:df:0e: ab:2e:fb:b8:79:87:49:a8:81:94:49:d6:ba:a9:8d:df:fd:b4: 30:9b:e2:97:8c:ed:da:a6:c4:d8:42:7f:4b:7e:18:ea:f6:f3: f2:c3:36:11:0a:87:0c:42:1a:b8:c2:6d:a1:96:a5:7b:fa:4a: 81:a5:5e:f4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUS07AQvmR/eXRzOqN1fXcJZpqG34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTdaFw0yNjA4MTQyMDMxMTdaMDMxMTAvBgNV BAMTKEI1MkUxODYyQjYxNDcwMDRDMzdGODU0NDk2MkY4QzE1OThENTdBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xZ7CIYGIlcfJ65CmdFJjsYGw z8Ic/CojR50jiMY16BCDOe9Z+VjJNzje1uSMFxQFKoOvDLhbI0v2TehLTC/nNb6C h/cmtb6ILjVgRKno4q/v5GSaEOM2lfj6EGyeO/wi5empyI0ESfHr4t09wfbYeB7s rm8A7eepKyjmufeUxKTjGU44jTpomvniTNLQW4BTpZkYexQTbb/P82Eq9cg2frnM qX+xKjeMqAEHpwsDR+uvF18TGgx86y//P/WDzKeVy/xMHi2+y2eoFQwOrarVaAuB Z1p+7V6pFCMCsHAqWkmotKtrqZfisABgW4GnqthBLKab6u2S5XyQclzmtPF3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUtS4YYrYUcATDf4VEli+MFZjVelQwHwYDVR0j BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv MzEzNDMzMmUzMjM1MzUyZTMyMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKP/+AwDQYJKoZIhvcNAQELBQADggEBAGXQNfVx aYCpeAu5m36NW2sHy37q3+7aJpCxGljvA7/lM3iZBK3uMzUuEaNQ7n7FXG1ljyD/ LVT0SsFLdcHoPjduUB0XGbXg2lgHf62JHn3D9VOhBnRPBwin2AEWi54dfympAgdV NneHS/Gm0If3RXZRn4UKHsR2cbJSFH22CjUS9KR1G5hmJi84aMKx0xE8KVIUbgw3 zfimMcbHYbEGtXpTHP3F1sUbV40dpAq/Cl4ALe0u2ZgGoW/z+sVEpmTjgJFacHTf Dqsu+7h5h0mogZRJ1rqpjd/9tDCb4peM7dqmxNhCf0t+GOr28/LDNhEKhwxCGrjC baGWpXv6SoGlXvQ= -----END CERTIFICATE-----Generated at Wed Aug 20 18:29:42 2025 by rpki-client