$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa File: 3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa (raw, json) Hash identifier: 479anbVOZnSsEI99gJ7YrU3FPGiheVTxdi+9lXBt+14= Subject key identifier: E1:F2:47:4D:C5:66:DE:E8:8A:B3:51:7E:AF:C1:03:16:2A:B4:84:E1 Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Certificate serial: 7710954CD07AF9F96A136EC0F9F004EE03F7B146 Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa Signing time: Tue 21 Oct 2025 15:49:23 +0000 ROA not before: Tue 21 Oct 2025 15:44:23 +0000 ROA not after: Tue 20 Oct 2026 15:49:23 +0000 asID: 264886 IP address blocks: 201.49.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:10:95:4c:d0:7a:f9:f9:6a:13:6e:c0:f9:f0:04:ee:03:f7:b1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Validity Not Before: Oct 21 15:44:23 2025 GMT Not After : Oct 20 15:49:23 2026 GMT Subject: CN=E1F2474DC566DEE88AB3517EAFC103162AB484E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:b4:17:77:c7:98:89:95:98:73:7a:24:cd: e7:be:01:ac:d3:88:d9:73:77:b3:0d:02:3c:f6:97: 92:b3:cc:fa:61:2e:74:2d:a2:54:22:d5:57:5e:b3: b1:02:53:87:73:0c:63:cb:1a:da:49:fc:71:f6:f3: 52:99:10:61:fc:a1:a1:78:bb:26:c0:3a:d9:8e:8b: 39:5a:4a:9e:6e:40:02:75:c0:34:ab:fb:32:41:cf: 8b:23:f2:16:e2:2a:a8:1f:4c:e6:65:dc:a4:d3:45: cf:73:69:bd:39:ac:ee:e4:93:73:77:49:bd:d4:27: 1f:5e:6d:6e:12:63:40:d2:f9:6c:85:ee:22:b3:e1: 33:8b:fa:2c:a3:37:ec:48:c0:05:24:d3:af:7d:d9: 78:c0:dc:4c:c2:e1:cd:1f:13:12:a4:86:05:12:ad: dc:93:94:bd:1e:60:20:11:d4:5b:40:38:53:f6:79: a0:39:0c:f6:36:84:c2:8a:95:cc:73:64:df:f1:89: 9b:98:2b:84:ee:b6:71:ac:7a:37:f4:ae:71:d0:cb: 77:08:bc:f9:62:fe:ee:6a:9d:a0:8b:1b:77:39:d5: f0:8d:27:03:f4:01:e0:23:19:42:47:8d:70:68:b9: 05:96:6a:2d:1f:8f:3a:53:d2:ab:12:51:30:a9:41: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:47:4D:C5:66:DE:E8:8A:B3:51:7E:AF:C1:03:16:2A:B4:84:E1 X509v3 Authority Key Identifier: keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323634383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.49.225.0/24 Signature Algorithm: sha256WithRSAEncryption ae:f2:21:bd:25:5a:dd:01:05:83:e0:a1:42:61:d1:1d:78:f2: 90:5e:f0:75:d6:d1:c7:b5:55:ab:8a:e5:14:25:70:85:f1:81: 93:d3:d9:15:ff:67:08:11:f1:10:1a:b1:1e:6c:1b:88:30:f6: b3:78:a3:a8:8b:4c:8e:e9:7e:8f:6b:63:f1:ea:ad:6f:e3:8b: cf:9c:fb:9f:c5:e2:21:3b:d7:89:4d:6e:56:73:6f:2b:88:a2: 41:87:71:46:8e:b4:06:e7:25:03:bc:61:f7:90:60:af:68:f6: 29:f2:2b:4c:40:ec:76:fd:57:fe:71:2d:bc:16:0b:1a:21:81: 43:67:52:4c:18:95:6e:a4:35:70:9a:64:10:4c:d9:69:ed:46: 3c:cc:8c:df:cc:b7:e9:b7:bd:e4:b5:33:d9:f0:a1:c8:cf:8d: 6c:d7:96:87:d1:5d:61:23:c6:d7:52:a9:1a:eb:17:49:f6:5b: c8:c1:75:0f:72:c3:e5:e5:fb:b7:b1:29:5d:35:5b:0c:88:88: f0:37:f1:f3:a5:3c:55:4c:ca:68:cf:95:43:51:0e:18:e1:19: c5:1c:d0:48:b2:53:01:24:05:5d:62:1c:51:ef:54:1d:d3:b6: e2:82:60:60:f8:7a:67:78:a5:5a:6a:b7:5a:40:d9:20:b8:6d: 5b:9c:b6:f1 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUdxCVTNB6+flqE27A+fAE7gP3sUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB ODlDMkQxQTAeFw0yNTEwMjExNTQ0MjNaFw0yNjEwMjAxNTQ5MjNaMDMxMTAvBgNV BAMTKEUxRjI0NzREQzU2NkRFRTg4QUIzNTE3RUFGQzEwMzE2MkFCNDg0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymbQXd8eYiZWYc3okzee+AazT iNlzd7MNAjz2l5KzzPphLnQtolQi1Vdes7ECU4dzDGPLGtpJ/HH281KZEGH8oaF4 uybAOtmOizlaSp5uQAJ1wDSr+zJBz4sj8hbiKqgfTOZl3KTTRc9zab05rO7kk3N3 Sb3UJx9ebW4SY0DS+WyF7iKz4TOL+iyjN+xIwAUk06992XjA3EzC4c0fExKkhgUS rdyTlL0eYCAR1FtAOFP2eaA5DPY2hMKKlcxzZN/xiZuYK4TutnGsejf0rnHQy3cI vPli/u5qnaCLG3c51fCNJwP0AeAjGUJHjXBouQWWai0fjzpT0qsSUTCpQd8nAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU4fJHTcVm3uiKs1F+r8EDFiq0hOEwHwYDVR0j BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5 QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz MDMxMmUzNDM5MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBADJMeEwDQYJKoZIhvcNAQELBQADggEBAK7yIb0lWt0B BYPgoUJh0R148pBe8HXW0ce1VauK5RQlcIXxgZPT2RX/ZwgR8RAasR5sG4gw9rN4 o6iLTI7pfo9rY/HqrW/ji8+c+5/F4iE714lNblZzbyuIokGHcUaOtAbnJQO8YfeQ YK9o9inyK0xA7Hb9V/5xLbwWCxohgUNnUkwYlW6kNXCaZBBM2WntRjzMjN/Mt+m3 veS1M9nwocjPjWzXlofRXWEjxtdSqRrrF0n2W8jBdQ9yw+Xl+7exKV01WwyIiPA3 8fOlPFVMymjPlUNRDhjhGcUc0EiyUwEkBV1iHFHvVB3TtuKCYGD4emd4pVpqt1pA 2SC4bVuctvE= -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:51 2025 by rpki-client