$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa File: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (raw, json) Hash identifier: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU= Subject key identifier: F1:2A:13:8A:9D:B2:F9:54:7C:4F:94:7C:31:7C:23:75:3B:CC:72:96 Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Certificate serial: 76267D19A9DC0881A77DA16B7C53DEC522C1B3E1 Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa Signing time: Thu 06 Mar 2025 03:59:06 +0000 ROA not before: Thu 06 Mar 2025 03:54:06 +0000 ROA not after: Thu 05 Mar 2026 03:59:06 +0000 asID: 270683 IP address blocks: 200.187.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:26:7d:19:a9:dc:08:81:a7:7d:a1:6b:7c:53:de:c5:22:c1:b3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Validity Not Before: Mar 6 03:54:06 2025 GMT Not After : Mar 5 03:59:06 2026 GMT Subject: CN=F12A138A9DB2F9547C4F947C317C23753BCC7296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:84:83:5d:36:12:cc:47:32:4b:6d:bc:83: 5f:a5:7a:42:21:93:5e:d8:8a:4f:58:2c:98:cf:ab: b5:74:5f:ef:7b:4b:68:e0:55:cb:d6:1b:d3:f8:50: 97:bc:22:9d:17:61:9e:09:9e:fd:37:ef:6e:d4:68: 88:5d:96:5d:52:97:d8:a4:39:3e:ea:67:bb:a2:0c: 6c:84:88:dc:a9:d7:ae:25:8b:9e:35:5f:24:11:2d: db:8d:c7:2a:f2:fa:67:0a:9c:6c:cd:dc:b7:cd:4d: 2e:dc:b7:ff:38:e0:a6:41:36:c3:31:d1:57:90:00: f5:29:9e:35:fd:74:22:33:2d:cc:56:ba:44:f2:6d: 90:d6:8c:9f:95:db:a4:10:5b:ac:ae:f5:3a:4e:54: da:ab:e5:c8:1c:5c:f0:0c:67:7e:9d:fb:3d:a8:2b: 6f:62:89:4c:ba:a2:a5:5d:b2:44:ce:7d:c2:d9:b2: 5e:0c:57:21:e1:68:b4:a5:af:8c:74:38:9f:38:f4: d7:d6:61:b4:14:0d:7c:ca:e0:ad:d3:92:a8:09:bf: c6:02:2b:a5:30:c2:1e:9c:45:e1:0d:38:54:ba:39: 70:e2:58:96:1f:eb:37:db:98:7b:94:ef:f4:52:75: 29:a9:17:34:78:4e:47:f3:41:ed:90:a4:e3:66:7b: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:13:8A:9D:B2:F9:54:7C:4F:94:7C:31:7C:23:75:3B:CC:72:96 X509v3 Authority Key Identifier: keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.187.102.0/24 Signature Algorithm: sha256WithRSAEncryption 42:f1:48:a0:6c:44:ba:e4:5d:46:19:fd:2d:d2:78:e8:66:72: 7e:6a:8d:3d:b2:ee:5b:1b:45:50:48:b0:d5:6c:bd:56:f1:ee: e1:48:fe:63:5b:68:a3:6c:f3:10:da:eb:1e:68:0a:65:d7:62: 54:74:c2:a1:96:54:62:41:c6:09:67:78:b9:72:b3:41:58:81: 11:98:3e:4a:09:96:ba:8a:15:a0:7e:80:08:4d:a5:f8:8d:0e: 62:a7:43:49:4e:5a:a7:0e:df:fc:7c:7c:e7:37:b3:4a:62:ad: 1e:8b:f6:59:7d:d1:10:f9:b0:ae:ba:fb:84:ab:e5:35:2d:59: 25:98:43:3d:2b:1d:f7:26:66:24:06:65:1b:fe:b4:2a:b7:fe: ee:d7:90:b0:aa:45:99:f8:74:01:34:32:d7:1d:5f:53:ea:17: 1f:66:d6:19:84:53:46:6b:c7:05:b4:a4:9c:63:7a:66:8a:fb: 3b:08:72:f5:85:3b:1d:57:98:cf:b4:97:28:ca:83:a1:4f:c1: 19:c4:09:95:60:56:bf:70:a5:fa:93:b9:61:10:d3:87:be:6e: 8a:d2:3d:88:35:12:fa:2e:e2:d5:24:c6:fd:f2:03:ad:53:da: 87:95:db:f5:d8:37:aa:db:2b:f0:3d:ae:e9:53:24:67:0e:85: 8b:ee:89:d3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUdiZ9GancCIGnfaFrfFPexSLBs+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5 RDRDNzUwNTAeFw0yNTAzMDYwMzU0MDZaFw0yNjAzMDUwMzU5MDZaMDMxMTAvBgNV BAMTKEYxMkExMzhBOURCMkY5NTQ3QzRGOTQ3QzMxN0MyMzc1M0JDQzcyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJd4SDXTYSzEcyS228g1+lekIh k17Yik9YLJjPq7V0X+97S2jgVcvWG9P4UJe8Ip0XYZ4Jnv03727UaIhdll1Sl9ik OT7qZ7uiDGyEiNyp164li541XyQRLduNxyry+mcKnGzN3LfNTS7ct/844KZBNsMx 0VeQAPUpnjX9dCIzLcxWukTybZDWjJ+V26QQW6yu9TpOVNqr5cgcXPAMZ36d+z2o K29iiUy6oqVdskTOfcLZsl4MVyHhaLSlr4x0OJ849NfWYbQUDXzK4K3TkqgJv8YC K6Uwwh6cReENOFS6OXDiWJYf6zfbmHuU7/RSdSmpFzR4TkfzQe2QpONme/ITAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU8SoTip2y+VR8T5R8MXwjdTvMcpYwHwYDVR0j BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1 RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJDeHRLZ1ZOajJUUGdHMjhyTlF6elZyNG4yMTV0VlFFeE1nZ0pBdU5ySFB5LzEv MzIzMDMwMmUzMTM4MzcyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMDM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMi7ZjANBgkqhkiG9w0BAQsFAAOCAQEAQvFI oGxEuuRdRhn9LdJ46GZyfmqNPbLuWxtFUEiw1Wy9VvHu4Uj+Y1too2zzENrrHmgK ZddiVHTCoZZUYkHGCWd4uXKzQViBEZg+SgmWuooVoH6ACE2l+I0OYqdDSU5apw7f /Hx85zezSmKtHov2WX3REPmwrrr7hKvlNS1ZJZhDPSsd9yZmJAZlG/60Krf+7teQ sKpFmfh0ATQy1x1fU+oXH2bWGYRTRmvHBbSknGN6Zor7Owhy9YU7HVeYz7SXKMqD oU/BGcQJlWBWv3Cl+pO5YRDTh75uitI9iDUS+i7i1STG/fIDrVPah5Xb9dg3qtsr 8D2u6VMkZw6Fi+6J0w== -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:26 2025 by rpki-client