$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3235203d3e20323634353530.roa File: 3133382e302e3133392e302f32342d3235203d3e20323634353530.roa (raw, json) Hash identifier: afI0IMcZO08OnYB/VPB7bItMNpFmfp35ACf9RJ2A+cs= Subject key identifier: 9F:15:72:BC:CA:88:E8:FE:6A:37:E2:9F:41:90:4F:80:16:6F:66:32 Certificate issuer: /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Certificate serial: 5701075B328D5A26D5DD59E3A5E4F45EF6C56FF3 Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer Subject info access: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3235203d3e20323634353530.roa Signing time: Tue 23 Sep 2025 15:17:48 +0000 ROA not before: Tue 23 Sep 2025 15:12:48 +0000 ROA not after: Tue 22 Sep 2026 15:17:48 +0000 asID: 264550 IP address blocks: 138.0.139.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:01:07:5b:32:8d:5a:26:d5:dd:59:e3:a5:e4:f4:5e:f6:c5:6f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583 Validity Not Before: Sep 23 15:12:48 2025 GMT Not After : Sep 22 15:17:48 2026 GMT Subject: CN=9F1572BCCA88E8FE6A37E29F41904F80166F6632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:6a:2d:52:90:42:a7:9d:b3:e4:7f:4f:d0: 25:03:38:e5:6f:20:45:87:02:40:2d:d8:2b:6a:ab: 68:a5:1f:70:d3:88:7f:d4:e5:bd:56:2f:16:7e:e5: e8:7b:02:38:bd:cb:0d:03:87:39:c1:45:70:f9:24: 83:1c:b5:d6:de:6e:02:d4:84:bd:73:6e:58:fd:14: ea:c7:9f:ee:33:d6:f8:4c:5e:05:22:6a:1b:94:c3: 52:ca:fa:c5:4f:dd:ea:ed:40:88:f5:a2:63:68:18: 9b:99:ce:b3:4e:21:a3:ce:01:3a:23:b0:ee:8f:5f: 0b:0f:06:ca:fa:9c:26:5a:8a:a5:38:96:07:d8:24: 6f:72:40:39:0a:48:7a:a8:5d:5e:a1:0e:5d:e6:71: db:6a:8e:99:61:8e:47:66:29:8f:12:22:51:dd:1e: 29:b3:3f:2f:69:7b:bd:03:51:85:64:94:1f:6e:d5: 1f:c1:5a:59:ab:52:e3:ed:4c:ae:91:01:5c:a1:1b: 68:f1:65:0a:d4:f3:7b:55:0d:8d:98:60:60:1f:47: a6:e1:99:e6:2e:86:51:72:eb:a1:b4:f6:93:91:01: e4:3f:cb:c2:cd:eb:57:95:82:28:81:e9:ae:ba:20: a9:72:0b:93:04:84:bb:e4:69:6c:59:0a:0a:e3:ba: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:72:BC:CA:88:E8:FE:6A:37:E2:9F:41:90:4F:80:16:6F:66:32 X509v3 Authority Key Identifier: keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3235203d3e20323634353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.139.0/24 Signature Algorithm: sha256WithRSAEncryption 49:97:47:91:ce:25:b6:77:bc:5d:76:e9:fd:07:92:76:8c:cf: 26:6e:73:8a:6d:6c:67:54:6b:35:73:e0:44:63:ad:07:66:08: 7e:80:df:1f:05:07:23:33:a3:a9:c4:35:6d:16:5d:54:6d:54: 1d:b8:48:43:28:a7:79:0d:9f:57:c5:77:6e:4b:89:15:a7:aa: 66:0c:4f:9b:ad:b1:fd:d4:39:f3:10:a9:f2:2b:2b:83:1b:c1: a4:c6:e0:11:81:53:42:e7:43:87:a4:5d:d1:37:c2:e2:07:4b: fa:7b:61:04:62:f6:de:d6:73:62:b1:00:99:9e:ad:31:40:66: 8e:25:b9:7b:09:fb:9a:6d:96:a6:71:23:c1:93:6c:2b:54:e7: f6:93:68:b7:9c:ef:32:f3:db:66:ce:49:f8:e1:d1:e2:94:07: 93:66:d9:cf:65:13:53:b0:0c:37:62:7e:09:ff:5f:ef:f1:44: 45:1a:e0:a1:c6:5e:48:a5:06:f2:8e:d1:49:82:85:f6:58:ba: a1:b6:cb:13:9a:6e:e0:73:77:41:0b:bd:f0:0d:b9:a8:09:4a: 9f:08:57:71:99:2f:50:56:f8:c6:a4:95:ad:75:3b:6e:f7:45: ca:22:a1:93:33:61:ff:0b:23:26:2a:41:f5:46:b0:a5:4f:60: 9d:15:38:15 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUVwEHWzKNWibV3VnjpeT0XvbFb/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI0MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3 MUI1QjU4MzAeFw0yNTA5MjMxNTEyNDhaFw0yNjA5MjIxNTE3NDhaMDMxMTAvBgNV BAMTKDlGMTU3MkJDQ0E4OEU4RkU2QTM3RTI5RjQxOTA0RjgwMTY2RjY2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6motUpBCp52z5H9P0CUDOOVv IEWHAkAt2Ctqq2ilH3DTiH/U5b1WLxZ+5eh7Aji9yw0DhznBRXD5JIMctdbebgLU hL1zblj9FOrHn+4z1vhMXgUiahuUw1LK+sVP3ertQIj1omNoGJuZzrNOIaPOAToj sO6PXwsPBsr6nCZaiqU4lgfYJG9yQDkKSHqoXV6hDl3mcdtqjplhjkdmKY8SIlHd HimzPy9pe70DUYVklB9u1R/BWlmrUuPtTK6RAVyhG2jxZQrU83tVDY2YYGAfR6bh meYuhlFy66G09pORAeQ/y8LN61eVgiiB6a66IKlyC5MEhLvkaWxZCgrjunRnAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUnxVyvMqI6P5qN+KfQZBPgBZvZjIwHwYDVR0j BBgwFoAU+0NeeU2Gy5uugAptKJqI93G1tYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1 VVAvMC9GQjQzNUU3OTREODZDQjlCQUU4MDBBNkQyODlBODhGNzcxQjVCNTgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDM1RTc5NEQ4NkNCOUJB RTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv MzEzMzM4MmUzMDJlMzEzMzM5MmUzMDJmMzIzNDJkMzIzNTIwM2QzZTIwMzIzNjM0 MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAigCLMA0GCSqGSIb3DQEBCwUAA4IBAQBJl0eRziW2 d7xddun9B5J2jM8mbnOKbWxnVGs1c+BEY60HZgh+gN8fBQcjM6OpxDVtFl1UbVQd uEhDKKd5DZ9XxXduS4kVp6pmDE+brbH91DnzEKnyKyuDG8GkxuARgVNC50OHpF3R N8LiB0v6e2EEYvbe1nNisQCZnq0xQGaOJbl7CfuabZamcSPBk2wrVOf2k2i3nO8y 89tmzkn44dHilAeTZtnPZRNTsAw3Yn4J/1/v8URFGuChxl5IpQbyjtFJgoX2WLqh tssTmm7gc3dBC73wDbmoCUqfCFdxmS9QVvjGpJWtdTtu90XKIqGTM2H/CyMmKkH1 RrClT2CdFTgV -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:14 2025 by rpki-client