$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa File: AS52903.roa (raw, json) Hash identifier: 2nRB7xi6yeF3mRfymksPgEJASQSIzik/W+atAs0M+ws= Subject key identifier: 02:AA:56:86:13:51:06:BF:30:28:DA:38:99:66:BC:36:17:10:B7:F9 Certificate issuer: /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E Certificate serial: 4A0F6D48F0BC5F9A87A70C59AEC2AAE6454C3863 Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa Signing time: Wed 17 Sep 2025 14:48:12 +0000 ROA not before: Wed 17 Sep 2025 14:43:12 +0000 ROA not after: Wed 16 Sep 2026 14:48:12 +0000 asID: 52903 IP address blocks: 187.62.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 11:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0f:6d:48:f0:bc:5f:9a:87:a7:0c:59:ae:c2:aa:e6:45:4c:38:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E Validity Not Before: Sep 17 14:43:12 2025 GMT Not After : Sep 16 14:48:12 2026 GMT Subject: CN=02AA5686135106BF3028DA389966BC361710B7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:77:37:55:4a:04:4e:d1:06:d9:ae:fb:41: 9f:3e:1e:3b:49:39:bb:66:4c:82:2a:15:cb:3c:ed: e4:fb:aa:8f:9d:e0:44:9f:ed:c8:84:c1:00:44:30: 7d:60:b7:07:58:4c:fa:72:ac:c6:18:20:a3:a3:d5: 50:9f:fc:5a:b1:58:f1:a2:19:d0:ab:9e:35:74:76: 71:b6:0c:5a:55:d6:f8:88:94:dc:69:93:bf:b0:b2: 5d:af:16:9f:d7:2e:7b:69:57:62:0f:46:c1:18:b6: 49:76:13:9e:0f:47:c8:cb:11:21:cb:c2:8d:a6:a4: 62:bc:79:11:c3:b7:38:c9:46:76:a4:70:96:83:d9: ef:95:a6:4c:f5:0e:24:42:d3:37:22:37:63:0b:9d: 0b:0b:27:19:26:6d:71:f0:a6:8e:1e:b0:94:35:39: 1d:c3:1e:37:6c:43:ea:1b:14:0e:c5:61:d9:11:f4: 6c:0d:ff:d4:7d:1b:4c:60:83:da:54:66:b5:ca:71: a6:d7:e8:55:72:9e:b9:2f:f9:a4:0a:88:16:6c:a8: e4:ef:2d:2d:46:28:ed:d5:1a:9c:67:e3:01:32:c5: 93:f6:b8:5b:71:b7:75:9c:54:de:9d:89:96:11:1c: 68:5f:d4:6b:3f:70:69:0a:47:38:db:a2:92:3a:24: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:56:86:13:51:06:BF:30:28:DA:38:99:66:BC:36:17:10:B7:F9 X509v3 Authority Key Identifier: keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.62.253.0/24 Signature Algorithm: sha256WithRSAEncryption a5:bf:a6:47:30:94:5f:3f:9d:1a:77:f8:43:24:6f:69:0b:ee: cb:14:46:fd:cd:5c:c4:d5:8e:96:ca:67:eb:96:85:a8:f2:66: fd:d4:52:c5:2f:5d:0f:3b:e3:e9:3e:e9:5e:ac:86:7e:ce:da: 15:15:66:9d:2e:1b:e9:9f:15:9a:46:5b:f1:18:50:fe:34:f3: ea:a9:03:b4:6e:f2:d1:48:83:18:57:56:2d:7c:b6:7a:c9:46: 61:ae:9c:26:33:f6:73:4b:49:cb:35:49:ce:33:d9:f0:0f:41: 0d:de:63:14:86:a8:ef:14:4b:c4:b3:92:33:91:75:a1:54:cd: dc:7d:5d:f0:55:71:15:7f:4b:51:0b:ee:8e:13:fb:b7:d1:a1: b9:b6:3f:ca:ed:2c:c2:e0:fc:9b:13:df:44:d3:1c:d0:58:29: 84:d0:9b:f8:19:09:b4:79:0c:73:aa:62:0f:fc:7b:74:c2:f5: 5e:4c:86:05:bd:1d:67:ea:4d:f0:c4:f0:95:69:22:48:32:25: a8:7d:97:3a:0d:e4:88:97:44:44:29:0e:cf:2e:82:4c:42:0b: dc:bb:ff:5a:8c:fa:eb:ce:4f:5f:c1:eb:f1:df:74:a1:1d:bf: 4c:15:05:12:44:07:e3:60:b0:f2:c3:c2:36:78:bf:27:d7:83: b2:ec:e8:f6 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUSg9tSPC8X5qHpwxZrsKq5kVMOGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF M0E2M0U5RTAeFw0yNTA5MTcxNDQzMTJaFw0yNjA5MTYxNDQ4MTJaMDMxMTAvBgNV BAMTKDAyQUE1Njg2MTM1MTA2QkYzMDI4REEzODk5NjZCQzM2MTcxMEI3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFXc3VUoETtEG2a77QZ8+HjtJ ObtmTIIqFcs87eT7qo+d4ESf7ciEwQBEMH1gtwdYTPpyrMYYIKOj1VCf/FqxWPGi GdCrnjV0dnG2DFpV1viIlNxpk7+wsl2vFp/XLntpV2IPRsEYtkl2E54PR8jLESHL wo2mpGK8eRHDtzjJRnakcJaD2e+Vpkz1DiRC0zciN2MLnQsLJxkmbXHwpo4esJQ1 OR3DHjdsQ+obFA7FYdkR9GwN/9R9G0xgg9pUZrXKcabX6FVynrkv+aQKiBZsqOTv LS1GKO3VGpxn4wEyxZP2uFtxt3WcVN6diZYRHGhf1Gs/cGkKRzjbopI6JDMJAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUAqpWhhNRBr8wKNo4mWa8NhcQt/kwHwYDVR0j BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Db3RK M1JjbWY0UDg3VHYzOUo4Qnl0TjVQQW1YTlVINU1wNzRKVWJhajE2VS8xL0FTNTI5 MDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC7Pv0wDQYJKoZIhvcNAQELBQADggEBAKW/pkcwlF8/nRp3 +EMkb2kL7ssURv3NXMTVjpbKZ+uWhajyZv3UUsUvXQ874+k+6V6shn7O2hUVZp0u G+mfFZpGW/EYUP408+qpA7Ru8tFIgxhXVi18tnrJRmGunCYz9nNLScs1Sc4z2fAP QQ3eYxSGqO8US8SzkjORdaFUzdx9XfBVcRV/S1EL7o4T+7fRobm2P8rtLMLg/JsT 30TTHNBYKYTQm/gZCbR5DHOqYg/8e3TC9V5MhgW9HWfqTfDE8JVpIkgyJah9lzoN 5IiXREQpDs8ugkxCC9y7/1qM+uvOT1/B6/HfdKEdv0wVBRJEB+NgsPLDwjZ4vyfX g7Ls6PY= -----END CERTIFICATE-----Generated at Thu Sep 18 23:08:26 2025 by rpki-client