$ rpki-client -vvf rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/34352e3136362e3232302e302f32322d3331203d3e20323637393731.roa File: 34352e3136362e3232302e302f32322d3331203d3e20323637393731.roa (raw, json) Hash identifier: eNuDkDpJHQw7UZu0U40YMg169y992ggjvkTOpdcOjTQ= Subject key identifier: 47:0E:4F:29:9D:B5:10:DD:FB:7B:75:B6:E5:E1:08:D2:54:08:6D:F3 Certificate issuer: /CN=8B11D102B9B6311625032B2D5F8266B6885CF7FF Certificate serial: 357B20E3A5C65DF318B62976EF86AF8E0A41A8B5 Authority key identifier: 8B:11:D1:02:B9:B6:31:16:25:03:2B:2D:5F:82:66:B6:88:5C:F7:FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/34352e3136362e3232302e302f32322d3331203d3e20323637393731.roa Signing time: Mon 27 Oct 2025 19:55:26 +0000 ROA not before: Mon 27 Oct 2025 19:50:26 +0000 ROA not after: Mon 26 Oct 2026 19:55:26 +0000 asID: 267971 IP address blocks: 45.166.220.0/22 maxlen: 31 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.crl rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7b:20:e3:a5:c6:5d:f3:18:b6:29:76:ef:86:af:8e:0a:41:a8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B11D102B9B6311625032B2D5F8266B6885CF7FF Validity Not Before: Oct 27 19:50:26 2025 GMT Not After : Oct 26 19:55:26 2026 GMT Subject: CN=470E4F299DB510DDFB7B75B6E5E108D254086DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:2f:61:98:e1:60:28:e2:47:6a:57:e8:a2: e0:2a:20:4a:1a:f6:66:20:04:95:63:e4:0e:76:8c: 28:4f:37:96:bd:e3:a9:11:a3:14:15:37:e9:a3:e7: ff:17:19:ce:52:28:83:d5:ba:fd:55:39:e2:3d:7a: 81:25:c3:43:b4:30:f6:22:b2:82:79:81:39:e4:3c: f9:ee:07:0d:58:31:e7:2d:2a:b6:0f:7e:5d:de:54: 81:56:0d:40:34:ec:6b:09:4f:35:88:be:1e:d3:b0: cb:55:49:63:ee:48:68:b0:86:f6:e2:82:3d:1e:5c: 85:5f:1a:fb:34:0a:e9:18:71:df:8e:d5:88:98:e7: 7b:9c:60:be:28:f0:76:18:cc:47:7b:4d:1f:34:04: 6d:44:54:10:8d:15:33:36:03:9e:c9:27:b3:89:4a: 9a:15:83:73:00:20:0d:3c:93:2b:39:47:2b:6c:85: ff:8c:a3:27:43:3a:7c:19:a9:03:50:4c:75:51:c0: 16:ff:5c:3c:f3:8c:cc:e7:5f:e4:06:ac:c9:77:b0: df:b5:4d:c5:75:ce:fd:e0:4d:cc:97:90:aa:c8:b8: a6:cf:69:8e:16:9a:5f:a6:b4:88:51:05:20:06:48: 20:04:75:a2:8e:e8:de:d8:05:e6:27:c0:0f:1d:bb: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0E:4F:29:9D:B5:10:DD:FB:7B:75:B6:E5:E1:08:D2:54:08:6D:F3 X509v3 Authority Key Identifier: keyid:8B:11:D1:02:B9:B6:31:16:25:03:2B:2D:5F:82:66:B6:88:5C:F7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/8B11D102B9B6311625032B2D5F8266B6885CF7FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B11D102B9B6311625032B2D5F8266B6885CF7FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCXpB3HTodUgVQ6DXUAQBLcnse7e119Lx417DBHHvzU4/0/34352e3136362e3232302e302f32322d3331203d3e20323637393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.220.0/22 Signature Algorithm: sha256WithRSAEncryption 22:98:bd:58:6f:03:76:26:d0:b6:8c:6e:21:5d:9a:53:f5:13: 05:08:33:25:08:ec:f0:af:3d:e5:7a:a9:2e:c5:c1:01:1e:68: d8:51:a7:dc:be:e9:f8:cb:e6:eb:c3:58:67:89:c5:b1:cd:df: a7:f6:00:13:41:26:35:0e:52:40:d3:2d:70:89:a1:56:a4:37: 54:39:2d:64:e3:b8:aa:65:57:dd:16:d7:00:1a:1a:71:71:99: cb:01:94:07:f3:40:7a:1e:a2:3f:56:a3:db:b8:9a:80:bc:c7: bd:76:8b:85:6b:96:35:93:c2:f4:ef:e5:73:3a:1a:24:63:2f: 1c:52:85:26:6a:08:94:c4:a3:c7:f4:12:2d:22:f5:9e:a1:05: 7d:8e:16:67:3f:c5:99:c9:9d:15:d5:6d:51:26:06:eb:3a:31: 8f:cb:44:5c:8a:9f:5f:b7:fd:4c:66:43:36:14:4b:d7:30:47: 24:9c:78:6a:0a:52:38:06:ab:45:0a:44:17:96:13:81:33:77: ff:59:61:40:94:95:5b:ee:b0:24:27:3f:e3:b4:eb:72:78:5b: 95:58:ef:0d:69:a1:e3:e7:41:8f:a9:1d:dc:0a:91:b9:ba:9a: 34:8a:d4:e4:6f:80:78:96:75:93:c3:a1:67:be:2f:35:90:3d: bb:30:c7:c7 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNXsg46XGXfMYtil274avjgpBqLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxMUQxMDJCOUI2MzExNjI1MDMyQjJENUY4MjY2QjY4 ODVDRjdGRjAeFw0yNTEwMjcxOTUwMjZaFw0yNjEwMjYxOTU1MjZaMDMxMTAvBgNV BAMTKDQ3MEU0RjI5OURCNTEwRERGQjdCNzVCNkU1RTEwOEQyNTQwODZERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jy9hmOFgKOJHalfoouAqIEoa 9mYgBJVj5A52jChPN5a946kRoxQVN+mj5/8XGc5SKIPVuv1VOeI9eoElw0O0MPYi soJ5gTnkPPnuBw1YMectKrYPfl3eVIFWDUA07GsJTzWIvh7TsMtVSWPuSGiwhvbi gj0eXIVfGvs0CukYcd+O1YiY53ucYL4o8HYYzEd7TR80BG1EVBCNFTM2A57JJ7OJ SpoVg3MAIA08kys5Rytshf+MoydDOnwZqQNQTHVRwBb/XDzzjMznX+QGrMl3sN+1 TcV1zv3gTcyXkKrIuKbPaY4Wml+mtIhRBSAGSCAEdaKO6N7YBeYnwA8du3F1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURw5PKZ21EN37e3W25eEI0lQIbfMwHwYDVR0j BBgwFoAUixHRArm2MRYlAystX4Jmtohc9/8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENYcEIzSFRvZFVnVlE2RFhVQVFCTGNuc2U3ZTExOUx4NDE3REJISHZ6 VTQvMC84QjExRDEwMkI5QjYzMTE2MjUwMzJCMkQ1RjgyNjZCNjg4NUNGN0ZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCMTFEMTAyQjlCNjMxMTYy NTAzMkIyRDVGODI2NkI2ODg1Q0Y3RkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RDWHBCM0hUb2RVZ1ZRNkRYVUFRQkxjbnNlN2UxMTlMeDQxN0RCSEh2elU0LzAv MzQzNTJlMzEzNjM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMxMjAzZDNlMjAzMjM2 MzczOTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItptwwDQYJKoZIhvcNAQELBQADggEBACKYvVhv A3Ym0LaMbiFdmlP1EwUIMyUI7PCvPeV6qS7FwQEeaNhRp9y+6fjL5uvDWGeJxbHN 36f2ABNBJjUOUkDTLXCJoVakN1Q5LWTjuKplV90W1wAaGnFxmcsBlAfzQHoeoj9W o9u4moC8x712i4VrljWTwvTv5XM6GiRjLxxShSZqCJTEo8f0Ei0i9Z6hBX2OFmc/ xZnJnRXVbVEmBus6MY/LRFyKn1+3/UxmQzYUS9cwRySceGoKUjgGq0UKRBeWE4Ez d/9ZYUCUlVvusCQnP+O063J4W5VY7w1poePnQY+pHdwKkbm6mjSK1ORvgHiWdZPD oWe+LzWQPbswx8c= -----END CERTIFICATE-----Generated at Mon Nov 3 19:21:52 2025 by rpki-client