$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa File: 3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: i4kddhwQ6NYTLRCTw8Y4cqYBmTJzhtG6dm1gqQrOXr4= Subject key identifier: 28:DD:4C:05:FB:AF:A2:DA:15:78:8B:A2:12:A5:EE:6E:49:41:4D:F9 Certificate issuer: /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Certificate serial: 61C1816F46B10B9B89E9A3D4D8CEE671E09FE31A Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa Signing time: Thu 25 Sep 2025 13:35:23 +0000 ROA not before: Thu 25 Sep 2025 13:30:23 +0000 ROA not after: Thu 24 Sep 2026 13:35:23 +0000 asID: 53153 IP address blocks: 138.204.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c1:81:6f:46:b1:0b:9b:89:e9:a3:d4:d8:ce:e6:71:e0:9f:e3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Validity Not Before: Sep 25 13:30:23 2025 GMT Not After : Sep 24 13:35:23 2026 GMT Subject: CN=28DD4C05FBAFA2DA15788BA212A5EE6E49414DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:2a:4d:95:a3:30:81:5a:17:21:29:c5:f4: 56:33:ed:78:bd:f8:ea:c5:90:5a:32:6e:7a:5f:6b: 17:a9:d4:e9:05:fe:ce:7e:33:77:b9:1d:81:09:85: cc:d9:7f:1f:50:aa:8c:2e:0e:6a:ae:f0:42:28:05: 67:19:8a:c2:7d:c0:2e:ad:f0:ea:a2:32:a9:bc:64: 39:e2:e7:49:bb:19:83:9f:95:05:fb:00:63:cf:6e: ef:b4:0b:7e:49:00:5e:4f:7d:89:99:ff:4c:1a:78: 28:b5:79:e8:0c:b5:df:74:1b:f1:44:9b:93:dc:53: e8:ed:91:0a:90:57:6b:7d:e0:06:fd:25:a1:43:45: 77:6f:61:82:6c:ea:78:f4:63:82:69:dd:be:38:a2: bd:71:f6:16:95:6b:51:d8:f7:1b:f2:14:01:9a:7e: 80:67:d4:b8:33:5d:e3:a6:3b:0f:6e:b3:eb:62:71: 17:21:13:2d:a1:b8:6a:da:78:95:47:2b:3b:27:82: 33:64:bb:b6:c5:1f:7a:4e:33:df:3a:54:d9:7b:0d: 23:67:f7:21:21:c9:b5:a3:eb:cf:94:1a:98:e6:ac: e5:d8:6e:6b:42:7b:7f:db:06:89:0a:73:e3:83:19: b0:e6:26:78:b9:2d:c6:45:f2:cd:6c:46:92:21:49: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:4C:05:FB:AF:A2:DA:15:78:8B:A2:12:A5:EE:6E:49:41:4D:F9 X509v3 Authority Key Identifier: keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.222.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f9:b1:d9:99:d5:af:72:50:8a:74:8a:b8:8f:68:29:50:5e: 27:34:c5:3c:6a:a2:9f:4d:11:af:47:5b:b5:88:a7:e1:00:a3: f8:f0:2e:b2:39:cc:38:d6:59:b0:8e:c9:8b:ed:f0:97:b6:2d: cc:41:d9:f6:71:4b:77:5b:93:7e:8d:23:38:76:6d:42:42:51: b4:13:31:72:37:64:06:62:14:34:26:92:f8:36:e9:03:55:43: 93:67:eb:53:44:4f:c6:3a:5a:c3:2d:0f:ce:e6:78:eb:52:b2: 54:14:c3:f0:7d:91:54:1e:90:f0:33:a4:08:2e:b6:b6:20:8e: e5:4f:c6:d9:71:86:a0:69:5c:32:7f:b9:6c:12:28:15:72:70: 55:34:b0:3c:58:35:a2:79:5a:dc:9a:22:b2:7e:06:f9:4f:d2: 67:9c:2d:30:64:cf:3b:a0:89:87:ce:27:1b:02:b8:6d:07:44: 46:14:ee:32:fc:de:0a:93:01:5f:c9:ec:88:b0:be:42:0a:56: c0:ed:2e:09:de:63:55:bc:31:47:02:10:d7:34:bb:41:27:b6: 1f:b8:0e:03:ac:fb:b1:76:2a:44:ae:fe:44:bc:c2:a7:e7:b4: 5d:19:72:bc:43:74:72:9d:d3:c3:7c:83:cf:73:66:ba:f9:68: 58:58:04:2d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUYcGBb0axC5uJ6aPU2M7mceCf4xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2 OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjNaFw0yNjA5MjQxMzM1MjNaMDMxMTAvBgNV BAMTKDI4REQ0QzA1RkJBRkEyREExNTc4OEJBMjEyQTVFRTZFNDk0MTRERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5ipNlaMwgVoXISnF9FYz7Xi9 +OrFkFoybnpfaxep1OkF/s5+M3e5HYEJhczZfx9QqowuDmqu8EIoBWcZisJ9wC6t 8OqiMqm8ZDni50m7GYOflQX7AGPPbu+0C35JAF5PfYmZ/0waeCi1eegMtd90G/FE m5PcU+jtkQqQV2t94Ab9JaFDRXdvYYJs6nj0Y4Jp3b44or1x9haVa1HY9xvyFAGa foBn1LgzXeOmOw9us+ticRchEy2huGraeJVHKzsngjNku7bFH3pOM986VNl7DSNn 9yEhybWj68+UGpjmrOXYbmtCe3/bBokKc+ODGbDmJni5LcZF8s1sRpIhScUPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUKN1MBfuvotoVeIuiEqXubklBTfkwHwYDVR0j BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2 RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzN4wDQYJKoZIhvcNAQELBQADggEBAGn5sdmZ 1a9yUIp0iriPaClQXic0xTxqop9NEa9HW7WIp+EAo/jwLrI5zDjWWbCOyYvt8Je2 LcxB2fZxS3dbk36NIzh2bUJCUbQTMXI3ZAZiFDQmkvg26QNVQ5Nn61NET8Y6WsMt D87meOtSslQUw/B9kVQekPAzpAgutrYgjuVPxtlxhqBpXDJ/uWwSKBVycFU0sDxY NaJ5WtyaIrJ+BvlP0mecLTBkzzugiYfOJxsCuG0HREYU7jL83gqTAV/J7IiwvkIK VsDtLgneY1W8MUcCENc0u0Enth+4DgOs+7F2KkSu/kS8wqfntF0ZcrxDdHKd08N8 g89zZrr5aFhYBC0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:44 2025 by rpki-client