$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3235203d3e20323634353530.roa File: 3133382e302e3133372e302f32342d3235203d3e20323634353530.roa (raw, json) Hash identifier: 7SvdBQ4up+qaObQTxMvaY8VLaXgyyg8rrTvcao1YaYE= Subject key identifier: 7A:75:99:7F:52:55:66:81:50:40:95:19:9B:F9:48:B6:C9:26:E3:17 Certificate issuer: /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Certificate serial: 3DA3CD0932E8BA9B4E8D1082814691A94360043A Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3235203d3e20323634353530.roa Signing time: Tue 23 Sep 2025 15:17:08 +0000 ROA not before: Tue 23 Sep 2025 15:12:08 +0000 ROA not after: Tue 22 Sep 2026 15:17:08 +0000 asID: 264550 IP address blocks: 138.0.137.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a3:cd:09:32:e8:ba:9b:4e:8d:10:82:81:46:91:a9:43:60:04:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Validity Not Before: Sep 23 15:12:08 2025 GMT Not After : Sep 22 15:17:08 2026 GMT Subject: CN=7A75997F52556681504095199BF948B6C926E317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:dd:b5:97:e5:33:9b:9d:ce:68:58:b5:06: c6:06:f4:1d:2c:c9:de:c3:db:6a:86:29:72:ac:bd: 3f:39:d3:88:80:df:d3:0a:21:e1:34:51:ba:ec:65: 22:74:e9:5e:20:94:f0:b8:18:83:a7:f8:4c:e0:01: d7:bd:d8:f9:96:dc:0e:b0:49:1b:cd:1e:6b:5f:53: b7:73:c1:ac:d8:f7:0b:ee:9f:6f:9c:82:41:d1:67: 02:a6:b3:65:cb:1e:bb:47:f0:3a:27:c1:64:a6:82: 2d:78:94:74:68:b7:3a:79:92:eb:1d:57:c8:53:03: a6:0c:4f:e3:98:64:a1:a3:ba:06:f7:45:45:fc:db: da:fc:2c:e6:83:b5:4a:e2:77:e4:c2:d6:46:32:99: 42:c6:24:5e:36:de:98:b0:6f:7f:f9:62:1d:5d:b5: 75:f3:6c:d1:6f:0c:a4:50:75:01:88:98:01:a6:3f: 3b:6b:7f:6b:0a:c9:db:92:14:9a:e4:2c:6a:89:25: b5:55:9d:eb:b5:fc:b3:26:72:85:c5:fa:0c:71:25: da:d6:bd:3c:f8:46:e1:3f:d2:bc:11:32:f5:4b:47: e0:0a:ab:57:8b:0a:71:d4:4d:55:b5:72:08:1a:4f: c1:83:bd:b4:c4:57:48:d2:29:d3:e1:85:56:86:be: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:99:7F:52:55:66:81:50:40:95:19:9B:F9:48:B6:C9:26:E3:17 X509v3 Authority Key Identifier: keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3235203d3e20323634353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.137.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:67:71:53:ed:4e:22:16:b0:25:43:52:48:7b:0f:48:eb:7c: 9a:b9:00:e2:3d:b4:3e:b7:8d:bf:80:20:a8:0b:3c:bf:f6:18: eb:f9:3f:8e:da:60:e2:2e:a9:8b:8a:4a:67:73:dd:b0:42:75: 0c:f4:38:d3:f2:05:36:17:e1:cf:05:c3:90:72:54:b1:97:15: d8:f9:14:20:b3:08:52:6e:1a:7a:67:4e:4d:01:89:ba:03:88: ff:8b:9f:5d:e7:73:67:fc:99:a8:4c:e3:1c:87:3d:7d:9e:30: 4e:5e:85:55:4e:7d:08:61:06:b4:9d:be:f8:71:69:9f:24:58: 54:00:41:d2:ea:1d:0b:67:c9:d7:57:80:57:98:3c:27:c1:0a: 2d:09:d8:9b:05:ef:2a:57:b3:c9:a2:56:33:17:a3:97:17:8e: 7c:77:23:c6:1c:78:6b:37:da:f2:a5:20:8d:9d:47:85:6f:1e: d3:60:c9:25:76:28:03:80:2f:a7:85:7f:1e:7a:09:3c:3b:b5: 2a:64:15:7e:1c:c2:e0:cf:c8:85:59:af:a9:1b:b3:a0:70:14: 68:93:b5:02:ea:89:f7:bf:2a:f9:68:a7:6a:29:11:d2:3f:31: 9c:39:eb:66:f4:b9:40:6c:1e:32:da:0a:ac:04:ac:86:f1:05: 20:f8:fb:46 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUPaPNCTLouptOjRCCgUaRqUNgBDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI0MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3 MUI1QjU4MzAeFw0yNTA5MjMxNTEyMDhaFw0yNjA5MjIxNTE3MDhaMDMxMTAvBgNV BAMTKDdBNzU5OTdGNTI1NTY2ODE1MDQwOTUxOTlCRjk0OEI2QzkyNkUzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVD921l+Uzm53OaFi1BsYG9B0s yd7D22qGKXKsvT8504iA39MKIeE0UbrsZSJ06V4glPC4GIOn+EzgAde92PmW3A6w SRvNHmtfU7dzwazY9wvun2+cgkHRZwKms2XLHrtH8DonwWSmgi14lHRotzp5kusd V8hTA6YMT+OYZKGjugb3RUX829r8LOaDtUrid+TC1kYymULGJF423piwb3/5Yh1d tXXzbNFvDKRQdQGImAGmPztrf2sKyduSFJrkLGqJJbVVneu1/LMmcoXF+gxxJdrW vTz4RuE/0rwRMvVLR+AKq1eLCnHUTVW1cggaT8GDvbTEV0jSKdPhhVaGvmmjAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUenWZf1JVZoFQQJUZm/lItskm4xcwHwYDVR0j BBgwFoAU+0NeeU2Gy5uugAptKJqI93G1tYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1 VVAvMC9GQjQzNUU3OTREODZDQjlCQUU4MDBBNkQyODlBODhGNzcxQjVCNTgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDM1RTc5NEQ4NkNCOUJB RTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv MzEzMzM4MmUzMDJlMzEzMzM3MmUzMDJmMzIzNDJkMzIzNTIwM2QzZTIwMzIzNjM0 MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigCJMA0GCSqGSIb3DQEBCwUAA4IBAQBsZ3FT7U4i FrAlQ1JIew9I63yauQDiPbQ+t42/gCCoCzy/9hjr+T+O2mDiLqmLikpnc92wQnUM 9DjT8gU2F+HPBcOQclSxlxXY+RQgswhSbhp6Z05NAYm6A4j/i59d53Nn/JmoTOMc hz19njBOXoVVTn0IYQa0nb74cWmfJFhUAEHS6h0LZ8nXV4BXmDwnwQotCdibBe8q V7PJolYzF6OXF458dyPGHHhrN9rypSCNnUeFbx7TYMkldigDgC+nhX8eegk8O7Uq ZBV+HMLgz8iFWa+pG7OgcBRok7UC6on3vyr5aKdqKRHSPzGcOetm9LlAbB4y2gqs BKyG8QUg+PtG -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:15 2025 by rpki-client