$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa File: 32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa (raw, json) Hash identifier: TcSqaSWjHkoNZ8xbIKNq3uVXI+bKYCUjIr0D89ok520= Subject key identifier: A3:84:9A:F3:DB:3B:C0:61:86:92:3B:48:D5:B5:BB:60:7C:74:3C:42 Certificate issuer: /CN=1A5050EEA434138710D1F922949F1181F26D44A5 Certificate serial: 37A4B31ED4499DF6FA80DD2C59B6F08BE56C3F52 Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa Signing time: Thu 11 Sep 2025 20:54:12 +0000 ROA not before: Thu 11 Sep 2025 20:49:12 +0000 ROA not after: Thu 10 Sep 2026 20:54:12 +0000 asID: 270519 IP address blocks: 24.152.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 15:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a4:b3:1e:d4:49:9d:f6:fa:80:dd:2c:59:b6:f0:8b:e5:6c:3f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5 Validity Not Before: Sep 11 20:49:12 2025 GMT Not After : Sep 10 20:54:12 2026 GMT Subject: CN=A3849AF3DB3BC06186923B48D5B5BB607C743C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:5e:4e:1e:26:77:8e:ef:9e:06:6d:81:af: ff:b9:de:2b:d1:98:86:46:02:40:0e:4c:cc:20:f4: 83:4d:8e:95:25:b0:91:5d:7f:44:4f:fb:74:07:f9: 22:4e:79:fd:a7:ac:82:c6:7c:93:04:47:71:f1:cc: 71:3b:2c:b2:2d:9e:b4:9c:bd:88:55:1e:ae:98:eb: 77:f6:85:1c:df:7e:77:49:87:58:cd:d3:ff:fb:22: 1e:09:5f:41:6d:f4:79:10:41:a7:e3:e7:d5:2c:15: dc:ca:95:4e:0e:e8:cd:52:0b:6a:44:cb:c4:8a:29: bc:30:3c:63:be:00:d3:1a:12:b9:20:b8:d2:8c:a3: 68:14:45:b9:06:9f:bf:cb:6e:17:f2:eb:58:96:83: 73:58:c9:d9:94:8b:22:6c:a3:02:4c:3d:70:61:72: 15:49:be:f8:7c:90:90:c0:ae:c0:ae:79:97:5b:9f: 9d:61:f0:38:12:f6:0b:f7:f1:80:d5:51:31:50:64: 37:67:51:f5:0a:dc:07:0e:d7:24:17:fd:83:b1:9b: c9:5d:ef:48:ad:76:2c:d5:fd:f3:2b:b1:f2:d0:16: ab:33:1f:34:66:5c:43:3c:3b:7a:0d:44:da:da:bd: fa:64:cc:46:f9:6d:5b:55:66:5b:52:bc:d2:1d:f5: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:9A:F3:DB:3B:C0:61:86:92:3B:48:D5:B5:BB:60:7C:74:3C:42 X509v3 Authority Key Identifier: keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.104.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a5:a4:b5:ea:1d:e4:e2:3f:74:a4:5e:e8:85:1b:74:d0:52: 5c:c0:fa:0d:5b:28:5f:8e:69:fa:66:70:7d:18:88:0a:32:87: 8a:3c:ce:c4:d2:8c:a9:89:6d:b9:aa:f4:d6:e0:29:2e:8c:64: 01:bd:dc:11:e6:e4:e2:0a:80:a5:5d:9f:d3:e0:f7:ca:56:9e: d8:2f:ff:f6:da:5b:7a:c3:6b:c0:4f:e9:02:90:b0:f5:31:22: 9a:fd:9b:3b:2a:49:36:1f:2b:d2:10:6d:5b:f3:5f:00:b1:83: c5:8d:29:61:f0:b6:5e:75:f8:f5:00:69:5f:d2:c4:5c:84:8c: 4e:30:41:83:a1:90:a7:50:06:0b:92:b2:ca:33:88:6c:70:a1: f9:35:cf:49:05:80:e5:f1:3f:10:0d:95:9a:69:b0:05:26:88: 85:31:70:23:20:78:93:9e:24:76:80:de:7f:97:8e:ea:eb:0e: bb:44:b3:f1:b0:de:76:ff:31:95:b1:24:07:d2:bf:bc:01:6b: 38:cb:a9:bf:fc:1b:bd:61:96:b8:96:e8:27:75:53:99:85:f5: b6:4d:c8:f5:0f:fb:86:b0:e5:ce:35:49:29:b7:25:83:4a:fe: a1:5b:0b:ac:24:b6:a2:5d:7f:f1:12:c5:2c:de:7a:19:f4:2f: 81:76:d9:12 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUN6SzHtRJnfb6gN0sWbbwi+VsP1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1MDUwRUVBNDM0MTM4NzEwRDFGOTIyOTQ5RjExODFG MjZENDRBNTAeFw0yNTA5MTEyMDQ5MTJaFw0yNjA5MTAyMDU0MTJaMDMxMTAvBgNV BAMTKEEzODQ5QUYzREIzQkMwNjE4NjkyM0I0OEQ1QjVCQjYwN0M3NDNDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYC15OHiZ3ju+eBm2Br/+53ivR mIZGAkAOTMwg9INNjpUlsJFdf0RP+3QH+SJOef2nrILGfJMER3HxzHE7LLItnrSc vYhVHq6Y63f2hRzffndJh1jN0//7Ih4JX0Ft9HkQQafj59UsFdzKlU4O6M1SC2pE y8SKKbwwPGO+ANMaErkguNKMo2gURbkGn7/Lbhfy61iWg3NYydmUiyJsowJMPXBh chVJvvh8kJDArsCueZdbn51h8DgS9gv38YDVUTFQZDdnUfUK3AcO1yQX/YOxm8ld 70itdizV/fMrsfLQFqszHzRmXEM8O3oNRNravfpkzEb5bVtVZltSvNId9SgPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUo4Sa89s7wGGGkjtI1bW7YHx0PEIwHwYDVR0j BBgwFoAUGlBQ7qQ0E4cQ0fkilJ8RgfJtRKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6 aGovMC8xQTUwNTBFRUE0MzQxMzg3MTBEMUY5MjI5NDlGMTE4MUYyNkQ0NEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTA1MEVFQTQzNDEzODcx MEQxRjkyMjk0OUYxMTgxRjI2RDQ0QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M4QXZHNmFMTlNVWUhNQWMzYksxR1pONGVBbXpLQ3lQWXVSTFB2TmZ4emhqLzAv MzIzNDJlMzEzNTMyMmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3 MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAYmGgwDQYJKoZIhvcNAQELBQADggEBAEOlpLXq HeTiP3SkXuiFG3TQUlzA+g1bKF+OafpmcH0YiAoyh4o8zsTSjKmJbbmq9NbgKS6M ZAG93BHm5OIKgKVdn9Pg98pWntgv//baW3rDa8BP6QKQsPUxIpr9mzsqSTYfK9IQ bVvzXwCxg8WNKWHwtl51+PUAaV/SxFyEjE4wQYOhkKdQBguSssoziGxwofk1z0kF gOXxPxANlZppsAUmiIUxcCMgeJOeJHaA3n+XjurrDrtEs/Gw3nb/MZWxJAfSv7wB azjLqb/8G71hlriW6Cd1U5mF9bZNyPUP+4aw5c41SSm3JYNK/qFbC6wktqJdf/ES xSzeehn0L4F22RI= -----END CERTIFICATE-----Generated at Fri Sep 19 06:09:10 2025 by rpki-client