$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3234203d3e20323637323338.roa File: 34352e3233322e342e302f32322d3234203d3e20323637323338.roa (raw, json) Hash identifier: 5E6bM5Jm9jKj+pTsI7qgsmglSLc7xM+oQlH0PO9Riy4= Subject key identifier: D9:10:3D:2E:C1:33:03:F9:D2:F7:8D:C2:D2:BD:E9:DD:E7:7B:73:3E Certificate issuer: /CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Certificate serial: 379B3803F1C36CF7B894D56888F92D0B79EB0C42 Authority key identifier: 2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject info access: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3234203d3e20323637323338.roa Signing time: Mon 27 Oct 2025 18:09:49 +0000 ROA not before: Mon 27 Oct 2025 18:04:49 +0000 ROA not after: Mon 26 Oct 2026 18:09:49 +0000 asID: 267238 IP address blocks: 45.232.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9b:38:03:f1:c3:6c:f7:b8:94:d5:68:88:f9:2d:0b:79:eb:0c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Validity Not Before: Oct 27 18:04:49 2025 GMT Not After : Oct 26 18:09:49 2026 GMT Subject: CN=D9103D2EC13303F9D2F78DC2D2BDE9DDE77B733E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:2e:3d:86:e1:47:58:8f:40:ed:e3:b8:3b: 9b:02:3f:55:ff:9d:08:0b:80:f5:89:2f:c6:70:b3: 20:f1:3e:50:ff:5e:42:ae:ad:f2:b7:52:cb:84:b6: a3:97:e3:33:a2:ac:9d:6b:be:af:1c:a8:52:85:66: 2f:f3:91:f2:95:10:d7:58:e4:36:7a:87:9d:07:05: a6:8d:c9:7b:1f:88:71:4e:c7:d7:7f:32:19:90:70: 92:ff:c0:10:79:f3:7e:75:0f:9a:27:39:64:7f:39: 46:e2:63:33:ea:d7:85:4e:c9:51:fa:ca:cb:19:72: 89:21:01:b2:4a:f5:2e:96:ee:8a:41:31:42:6f:0c: 2d:e8:ef:b1:b7:34:60:c0:24:70:06:82:85:ad:3b: 2a:99:22:9d:ee:81:6b:ee:e9:c9:3c:61:bb:a0:53: 8b:75:ad:b6:2f:36:0f:09:6d:46:c3:68:80:2b:90: d1:4e:6c:a1:19:78:61:03:eb:ae:c2:fb:e7:9a:6f: c6:63:86:d6:e8:c1:68:43:40:2c:e7:74:a8:95:d6: 32:93:3a:d3:8c:3d:df:34:6b:70:1e:94:b9:b8:26: 54:9a:06:41:1e:78:80:3b:0f:a4:46:16:c3:45:f2: 50:93:a3:00:30:89:ed:67:c3:05:d5:a6:14:44:47: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:10:3D:2E:C1:33:03:F9:D2:F7:8D:C2:D2:BD:E9:DD:E7:7B:73:3E X509v3 Authority Key Identifier: keyid:2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/34352e3233322e342e302f32322d3234203d3e20323637323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:2f:49:3b:30:fa:24:44:2a:7d:5e:3d:89:78:d1:2e:77:41: 3a:4c:55:14:a1:4a:97:c5:16:09:b8:28:bb:f8:d0:fb:d7:90: 08:7e:f1:22:30:28:2e:9f:14:99:cd:1d:8b:af:9a:91:76:9c: 51:44:e2:43:e4:1b:88:b5:64:3f:09:12:07:4e:a2:27:71:73: ba:6c:5b:ec:5a:63:1e:a2:9e:ad:6f:be:3f:2f:a9:7d:da:9f: c3:25:b6:c5:cc:42:42:de:7e:02:f5:de:05:b3:52:5d:45:c8: bc:1b:0c:2f:c4:ea:4d:8a:47:c6:9a:30:9d:98:ac:fb:03:9c: 9e:18:ed:36:ba:de:e4:78:18:da:c3:5e:5b:e1:cf:45:e0:99: 08:d7:88:f9:33:64:53:f5:5b:92:d6:c1:bf:6d:72:73:6e:c9: ba:11:16:8f:13:85:0a:81:2b:d9:6c:55:72:8d:30:a0:65:6e: c0:6a:5a:57:95:5a:26:ec:3c:83:3b:2f:44:3e:6f:ce:73:66: 07:52:97:6e:c1:e8:5f:e3:c9:b7:17:3f:ce:a2:55:e2:2b:b6: 19:5f:8b:0b:12:4d:0e:63:fd:a9:8e:5b:e4:e4:9f:c8:58:e7: 18:d7:73:fb:74:cf:25:25:b7:37:03:1e:de:b6:c7:ee:fa:d9: f7:4a:53:76 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUN5s4A/HDbPe4lNVoiPktC3nrDEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwNkNFOEQ2QjI0MDc5MkUwNjcwQUI3NUFCMzcwQThB NjNDOEY1OTAeFw0yNTEwMjcxODA0NDlaFw0yNjEwMjYxODA5NDlaMDMxMTAvBgNV BAMTKEQ5MTAzRDJFQzEzMzAzRjlEMkY3OERDMkQyQkRFOURERTc3QjczM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEy49huFHWI9A7eO4O5sCP1X/ nQgLgPWJL8ZwsyDxPlD/XkKurfK3UsuEtqOX4zOirJ1rvq8cqFKFZi/zkfKVENdY 5DZ6h50HBaaNyXsfiHFOx9d/MhmQcJL/wBB58351D5onOWR/OUbiYzPq14VOyVH6 yssZcokhAbJK9S6W7opBMUJvDC3o77G3NGDAJHAGgoWtOyqZIp3ugWvu6ck8Ybug U4t1rbYvNg8JbUbDaIArkNFObKEZeGED667C++eab8ZjhtbowWhDQCzndKiV1jKT OtOMPd80a3AelLm4JlSaBkEeeIA7D6RGFsNF8lCTowAwie1nwwXVphRERzWrAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU2RA9LsEzA/nS943C0r3p3ed7cz4wHwYDVR0j BBgwFoAULwbOjWskB5LgZwq3WrNwqKY8j1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRW bTMvMC8yRjA2Q0U4RDZCMjQwNzkyRTA2NzBBQjc1QUIzNzBBOEE2M0M4RjU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMDZDRThENkIyNDA3OTJF MDY3MEFCNzVBQjM3MEE4QTYzQzhGNTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JFdDh4RVh1bnB0U0h3dTRaV3BlZ3FQU1J5VW8xeU14NG9BendvUWRUVm0zLzAv MzQzNTJlMzIzMzMyMmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzMy MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAi3oBDANBgkqhkiG9w0BAQsFAAOCAQEAXC9JOzD6JEQq fV49iXjRLndBOkxVFKFKl8UWCbgou/jQ+9eQCH7xIjAoLp8Umc0di6+akXacUUTi Q+QbiLVkPwkSB06iJ3Fzumxb7FpjHqKerW++Py+pfdqfwyW2xcxCQt5+AvXeBbNS XUXIvBsML8TqTYpHxpownZis+wOcnhjtNrre5HgY2sNeW+HPReCZCNeI+TNkU/Vb ktbBv21yc27JuhEWjxOFCoEr2WxVco0woGVuwGpaV5VaJuw8gzsvRD5vznNmB1KX bsHoX+PJtxc/zqJV4iu2GV+LCxJNDmP9qY5b5OSfyFjnGNdz+3TPJSW3NwMe3rbH 7vrZ90pTdg== -----END CERTIFICATE-----Generated at Tue Nov 4 01:30:21 2025 by rpki-client