$ rpki-client -vvvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230362e302f32342d3234203d3e20323637333937.roa File: 34352e3233332e3230362e302f32342d3234203d3e20323637333937.roa (raw, json) Hash identifier: 0r1gWZdBG2wueG188bUirz9OdD16TbkIdLmXnZsfmOM= Subject key identifier: BA:F2:5D:5B:89:2C:D2:D5:54:1B:47:E0:FF:25:44:49:50:E9:64:B8 Certificate issuer: /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB Certificate serial: 39E680AA6FA76DACD1EA6CBC03BA99C282DE5DE3 Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230362e302f32342d3234203d3e20323637333937.roa Signing time: Wed 23 Sep 2026 00:40:10 +0000 ROA not before: Wed 23 Sep 2026 00:35:10 +0000 ROA not after: Wed 22 Sep 2027 00:40:10 +0000 asID: 267397 IP address blocks: 45.233.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 19:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e6:80:aa:6f:a7:6d:ac:d1:ea:6c:bc:03:ba:99:c2:82:de:5d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB Validity Not Before: Sep 23 00:35:10 2026 GMT Not After : Sep 22 00:40:10 2027 GMT Subject: CN=BAF25D5B892CD2D5541B47E0FF25444950E964B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:95:7c:ae:4c:c6:53:7d:ee:35:7a:ef:71:7f: 5a:08:9e:20:a6:88:22:a0:33:9b:75:e8:32:00:c1: 46:b1:3e:fd:b9:d7:c6:e0:7e:79:bc:d3:26:69:1a: 39:3b:33:29:cc:26:f0:2b:d3:13:4a:58:67:17:34: b4:d8:4c:55:ee:9d:5c:4e:2f:b5:52:34:4f:aa:c3: 5a:3d:df:e0:b2:f6:42:54:d4:51:18:67:6b:c9:fb: 2a:7e:4e:93:cd:77:c9:bd:53:5e:93:8d:01:8b:48: 5a:31:c2:93:17:18:e1:68:76:c0:c4:ee:cb:d6:e1: d9:f5:03:f1:2d:aa:38:96:1c:e9:68:73:dd:dd:41: 2c:24:6e:86:cc:30:ac:30:ac:7a:b9:0a:9e:a0:9f: a7:86:79:29:0b:48:c1:25:8d:dc:b6:ae:73:0c:cc: 73:f2:2c:df:33:32:03:ec:fb:c3:82:33:29:6e:47: 49:7a:ea:78:94:c5:1a:b7:3a:15:96:d3:db:77:01: b5:33:3f:03:c8:d5:f7:95:bf:d5:f7:ac:a7:24:90: 2e:ad:09:4a:04:5a:60:54:86:ed:ac:01:48:a8:f9: 5a:12:9c:05:cc:5d:37:57:a8:43:fb:f8:32:1e:09: be:07:8b:9f:d2:e7:b3:24:a0:a3:ce:b1:ee:a1:81: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:5D:5B:89:2C:D2:D5:54:1B:47:E0:FF:25:44:49:50:E9:64:B8 X509v3 Authority Key Identifier: keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/34352e3233332e3230362e302f32342d3234203d3e20323637333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.206.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:0d:d7:ff:67:63:c6:54:35:d7:b9:b0:f9:1f:52:d3:be:c9: 16:c1:d8:59:1a:83:9f:c9:c3:62:5b:48:36:a2:67:02:fa:26: 5d:73:10:74:03:ed:d9:88:39:c4:ff:74:af:e7:ba:e3:e1:4f: e8:a1:7c:38:47:29:38:f7:53:50:04:89:eb:e9:eb:66:79:a2: fa:79:07:5f:61:c6:38:36:ab:84:67:da:0f:69:7e:0b:2c:41: d1:71:bc:81:aa:60:7e:a7:25:76:d1:d8:fe:08:19:aa:99:ce: 3b:ee:59:dc:c4:d7:f8:95:67:05:4d:d5:b0:86:c8:2e:a3:34: a0:5c:d4:ce:49:09:1f:30:55:94:69:d2:f8:6b:1e:be:ac:bb: 69:a4:59:7b:51:ad:cb:89:ad:cf:72:c7:27:d8:53:7a:0e:03: 77:23:5e:b4:48:06:40:7c:c5:9f:5b:ca:36:20:da:47:2c:6c: 39:30:7d:a1:f2:65:bb:9c:19:16:21:c5:94:cc:98:ba:fd:b0: 16:cd:9b:15:2a:fb:59:06:32:cb:87:a4:57:26:9c:38:b3:42: fe:56:3e:5a:b1:e4:6c:99:c6:8e:cf:8c:5b:ff:9b:a8:7b:36: 87:65:04:bb:7b:a3:c3:a9:d2:c2:0f:e9:2f:74:7d:03:cb:ec: 92:6f:0c:71 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOeaAqm+nbazR6my8A7qZwoLeXeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY5MUQ3OTcxMjZDQzM4Q0ExMDExODdFRTBEMEY5NkEz RUU3RDBBQjAeFw0yNjA5MjMwMDM1MTBaFw0yNzA5MjIwMDQwMTBaMDMxMTAvBgNV BAMTKEJBRjI1RDVCODkyQ0QyRDU1NDFCNDdFMEZGMjU0NDQ5NTBFOTY0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzlXyuTMZTfe41eu9xf1oIniCm iCKgM5t16DIAwUaxPv2518bgfnm80yZpGjk7MynMJvAr0xNKWGcXNLTYTFXunVxO L7VSNE+qw1o93+Cy9kJU1FEYZ2vJ+yp+TpPNd8m9U16TjQGLSFoxwpMXGOFodsDE 7svW4dn1A/EtqjiWHOloc93dQSwkbobMMKwwrHq5Cp6gn6eGeSkLSMEljdy2rnMM zHPyLN8zMgPs+8OCMyluR0l66niUxRq3OhWW09t3AbUzPwPI1feVv9X3rKckkC6t CUoEWmBUhu2sAUio+VoSnAXMXTdXqEP7+DIeCb4Hi5/S57MkoKPOse6hgURjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUuvJdW4ks0tVUG0fg/yVESVDpZLgwHwYDVR0j BBgwFoAUD5HXlxJsw4yhARh+4ND5aj7n0KswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUhXVDI5R0hkZXJaY2pMSDJCZ1hERGJxY0JMdE0yajhEMUNjRTNBYmtL b1AvMC8wRjkxRDc5NzEyNkNDMzhDQTEwMTE4N0VFMEQwRjk2QTNFRTdEMEFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOTFENzk3MTI2Q0MzOENB MTAxMTg3RUUwRDBGOTZBM0VFN0QwQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VIV1QyOUdIZGVyWmNqTEgyQmdYRERicWNCTHRNMmo4RDFDY0UzQWJrS29QLzAv MzQzNTJlMzIzMzMzMmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzczMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAt6c4wDQYJKoZIhvcNAQELBQADggEBAF4N1/9n Y8ZUNde5sPkfUtO+yRbB2Fkag5/Jw2JbSDaiZwL6Jl1zEHQD7dmIOcT/dK/nuuPh T+ihfDhHKTj3U1AEievp62Z5ovp5B19hxjg2q4Rn2g9pfgssQdFxvIGqYH6nJXbR 2P4IGaqZzjvuWdzE1/iVZwVN1bCGyC6jNKBc1M5JCR8wVZRp0vhrHr6su2mkWXtR rcuJrc9yxyfYU3oOA3cjXrRIBkB8xZ9byjYg2kcsbDkwfaHyZbucGRYhxZTMmLr9 sBbNmxUq+1kGMsuHpFcmnDizQv5WPlqx5GyZxo7PjFv/m6h7NodlBLt7o8Op0sIP 6S90fQPL7JJvDHE= -----END CERTIFICATE-----Generated at Sun Oct 11 20:48:27 2026 by rpki-client