$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38352e302f32342d3234203d3e20323731323534.roa File: 34352e3233322e38352e302f32342d3234203d3e20323731323534.roa (raw, json) Hash identifier: KWtyN99uRkdP5QmZxLBrmQICjrve0tAd8gA6/GzFIzg= Subject key identifier: 3A:B0:A6:08:86:EB:69:EA:7D:E6:98:B6:A8:CB:05:0B:32:93:C9:39 Certificate issuer: /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7 Certificate serial: 595B9CA6D6DB828080FF06EE07B095E4C2C1D541 Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38352e302f32342d3234203d3e20323731323534.roa Signing time: Mon 02 Jun 2025 18:24:11 +0000 ROA not before: Mon 02 Jun 2025 18:19:11 +0000 ROA not after: Mon 01 Jun 2026 18:24:11 +0000 asID: 271254 IP address blocks: 45.232.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 12:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5b:9c:a6:d6:db:82:80:80:ff:06:ee:07:b0:95:e4:c2:c1:d5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7 Validity Not Before: Jun 2 18:19:11 2025 GMT Not After : Jun 1 18:24:11 2026 GMT Subject: CN=3AB0A60886EB69EA7DE698B6A8CB050B3293C939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:c4:cf:99:65:58:6c:07:88:75:20:8f:23: d4:7c:59:90:8c:fe:ce:c9:84:05:d1:cf:b7:f8:53: 70:00:09:b2:de:c6:f7:a8:9c:b6:b7:ac:0e:90:ab: e7:d3:8a:62:12:bf:12:e3:3c:00:da:f2:7e:2d:72: 87:20:57:61:0b:74:52:0e:87:ae:18:7f:28:db:d0: ac:9f:e5:82:c1:00:ab:25:6c:01:a1:4f:3f:5d:a9: 79:14:70:22:b3:aa:ce:5f:fc:d3:98:d1:4f:0e:25: bf:ce:79:44:5d:42:95:02:cf:40:8c:09:4b:b2:87: f7:c4:a1:3d:6b:71:52:51:ab:42:dd:0b:5f:2d:e5: 68:60:80:b7:0c:4c:0a:e9:76:68:88:cd:51:d6:b4: c0:ee:17:75:19:ac:a4:df:13:ab:2d:ab:5a:5a:78: 24:4c:39:08:ef:b7:a0:ee:d2:20:22:b0:31:a9:2d: 54:7f:b9:9c:17:8f:f6:24:3f:57:a7:3b:b4:99:df: 4b:3f:d9:c0:95:c0:44:93:30:db:2b:ec:ee:e0:fc: d4:c1:f0:3f:20:e4:65:8f:36:17:0e:e0:95:29:ce: fe:f7:32:68:31:01:5f:6f:7d:ca:8f:85:15:4b:1a: d4:75:61:f3:0c:7a:7b:c6:f1:07:4b:08:01:fb:8d: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B0:A6:08:86:EB:69:EA:7D:E6:98:B6:A8:CB:05:0B:32:93:C9:39 X509v3 Authority Key Identifier: keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38352e302f32342d3234203d3e20323731323534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.85.0/24 Signature Algorithm: sha256WithRSAEncryption 26:dd:fe:41:fd:d2:c9:7f:6f:0a:6d:03:95:99:2c:1a:34:f0: 08:a4:82:42:e7:90:11:c5:c3:bc:55:44:86:e3:3c:4e:51:60: e2:29:7c:e7:dd:e1:4c:16:33:95:13:c3:6f:d5:42:0a:31:6f: 1e:02:03:8b:2b:57:21:5b:21:ee:50:b4:c2:4f:2c:1e:63:bf: 3b:96:81:16:77:19:c3:36:c3:bb:ba:a8:18:e4:72:87:e5:dc: 4f:88:e6:5d:e7:b1:47:99:ac:9b:37:5e:ef:f0:47:00:b1:66: 7a:f9:e8:86:93:1c:18:94:76:24:06:f3:29:02:2c:e2:8d:10: db:5a:cd:57:6c:fa:b3:52:62:08:4c:1d:74:d1:d3:c2:20:1d: d9:79:4c:62:9d:f8:90:d4:58:bf:d1:5c:26:32:da:a1:9f:17: 5c:4b:d6:3f:26:c1:3f:d8:c6:71:da:2e:40:c1:01:15:54:0c: 7d:7c:38:c0:70:ac:4a:2a:fa:7f:dd:9b:55:75:70:76:fb:fd: dc:a2:8a:4a:ce:f4:32:b6:7b:4d:85:b2:c0:19:0e:01:c2:68: 3c:9b:4b:91:04:3b:44:06:c0:0f:fd:25:3a:f9:8b:90:c1:ae: ce:19:61:1a:20:4d:85:19:8e:7a:79:5d:69:ec:f0:61:bc:17: 57:c5:60:2a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWVucptbbgoCA/wbuB7CV5MLB1UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQjU4Q0I3Nzk2MEYzRUVGQUY3M0ZBMDczODBGQ0VE RDNGNEJDNzAeFw0yNTA2MDIxODE5MTFaFw0yNjA2MDExODI0MTFaMDMxMTAvBgNV BAMTKDNBQjBBNjA4ODZFQjY5RUE3REU2OThCNkE4Q0IwNTBCMzI5M0M5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz8TPmWVYbAeIdSCPI9R8WZCM /s7JhAXRz7f4U3AACbLexveonLa3rA6Qq+fTimISvxLjPADa8n4tcocgV2ELdFIO h64Yfyjb0Kyf5YLBAKslbAGhTz9dqXkUcCKzqs5f/NOY0U8OJb/OeURdQpUCz0CM CUuyh/fEoT1rcVJRq0LdC18t5WhggLcMTArpdmiIzVHWtMDuF3UZrKTfE6stq1pa eCRMOQjvt6Du0iAisDGpLVR/uZwXj/YkP1enO7SZ30s/2cCVwESTMNsr7O7g/NTB 8D8g5GWPNhcO4JUpzv73MmgxAV9vfcqPhRVLGtR1YfMMenvG8QdLCAH7jS37AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUOrCmCIbraep95pi2qMsFCzKTyTkwHwYDVR0j BBgwFoAUmvtYy3eWDz7vr3P6BzgPzt0/S8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVRFc0F6RWZYMXJMZ1JoeUU4RGlIbmJxa1JBREdIY04yWmFtNEhqZWVN ZHQvMC85QUZCNThDQjc3OTYwRjNFRUZBRjczRkEwNzM4MEZDRUREM0Y0QkM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRkI1OENCNzc5NjBGM0VF RkFGNzNGQTA3MzgwRkNFREQzRjRCQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VURXNBekVmWDFyTGdSaHlFOERpSG5icWtSQURHSGNOMlphbTRIamVlTWR0LzAv MzQzNTJlMzIzMzMyMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx MzIzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQALehVMA0GCSqGSIb3DQEBCwUAA4IBAQAm3f5B/dLJ f28KbQOVmSwaNPAIpIJC55ARxcO8VUSG4zxOUWDiKXzn3eFMFjOVE8Nv1UIKMW8e AgOLK1chWyHuULTCTyweY787loEWdxnDNsO7uqgY5HKH5dxPiOZd57FHmaybN17v 8EcAsWZ6+eiGkxwYlHYkBvMpAizijRDbWs1XbPqzUmIITB100dPCIB3ZeUxinfiQ 1Fi/0VwmMtqhnxdcS9Y/JsE/2MZx2i5AwQEVVAx9fDjAcKxKKvp/3ZtVdXB2+/3c oopKzvQytntNhbLAGQ4Bwmg8m0uRBDtEBsAP/SU6+YuQwa7OGWEaIE2FGY56eV1p 7PBhvBdXxWAq -----END CERTIFICATE-----Generated at Fri Jul 4 20:45:00 2025 by rpki-client