$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa File: 3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: w4RaIa7vqhAinkfpym9LhrJR+niwq4lu+X2JcFNBO3U= Subject key identifier: 3C:B2:71:6D:B0:AE:F6:E2:DE:CB:11:EC:B2:F1:54:D2:0D:04:13:C8 Certificate issuer: /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Certificate serial: 17E74300F52481F160F27223FD9C19A031D66CFF Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa Signing time: Thu 25 Sep 2025 13:35:23 +0000 ROA not before: Thu 25 Sep 2025 13:30:23 +0000 ROA not after: Thu 24 Sep 2026 13:35:23 +0000 asID: 53153 IP address blocks: 138.204.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e7:43:00:f5:24:81:f1:60:f2:72:23:fd:9c:19:a0:31:d6:6c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Validity Not Before: Sep 25 13:30:23 2025 GMT Not After : Sep 24 13:35:23 2026 GMT Subject: CN=3CB2716DB0AEF6E2DECB11ECB2F154D20D0413C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:45:62:e1:bc:91:e6:82:57:65:1c:fe:c2: f6:7a:a3:a0:28:a3:13:59:be:f1:f8:aa:67:b5:b9: 1c:33:6f:a4:dc:65:79:63:d3:f8:f9:63:c0:a4:1b: 75:8e:f6:d5:6d:88:03:36:4b:6d:71:16:b2:80:7e: 4e:0d:85:86:0f:1d:1b:cd:b0:71:fe:e1:93:dc:14: 23:41:0c:58:dc:de:9a:80:28:40:7f:4c:53:99:01: 2b:ef:5c:a6:2f:c0:d1:5d:63:71:b2:21:46:55:ef: 04:9a:e1:e5:2c:b3:de:c1:69:51:fb:0c:3d:b4:ed: fd:ef:71:af:6a:8d:e0:9c:af:fc:a5:58:e3:47:e2: 84:c0:8d:e1:dc:ef:7e:29:03:17:8c:11:71:88:e7: 9f:0f:c4:ac:ca:3e:08:e5:af:5d:be:6b:b8:22:aa: d2:a7:70:59:a2:13:78:e1:14:e5:3b:c3:dd:e6:d4: b7:80:81:dc:f3:91:db:08:08:15:1c:fb:89:99:04: f7:dd:ea:04:29:2c:95:67:19:e0:2d:5c:9e:99:9c: ab:99:39:76:02:4b:3c:4d:4e:7f:a4:c5:76:d7:bd: 27:0c:45:61:37:ca:8b:6c:4d:e7:96:ab:7d:3b:5e: 5d:6f:fc:60:de:09:b9:90:2f:ff:4a:9a:a1:e2:f8: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:71:6D:B0:AE:F6:E2:DE:CB:11:EC:B2:F1:54:D2:0D:04:13:C8 X509v3 Authority Key Identifier: keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.223.0/24 Signature Algorithm: sha256WithRSAEncryption 29:14:34:e9:f8:eb:aa:3d:6b:37:a4:81:dc:21:96:9d:b3:62: 34:f6:f8:8a:7f:31:cb:0c:0c:fb:0f:4f:4f:69:25:35:02:cb: 2c:31:33:1f:7d:21:2d:70:aa:5f:e3:50:be:a0:ce:f0:f3:75: 58:0d:12:2d:2b:10:d0:cb:04:e1:1f:63:fa:62:4a:0a:8d:ef: 81:7d:5e:27:f0:99:fc:f8:d7:d7:15:12:4e:61:78:73:cd:eb: ec:ff:b3:18:56:e8:a3:e0:23:ae:74:14:42:a7:35:44:6c:34: ed:3f:5a:36:d8:bb:07:5c:35:32:aa:0a:cb:45:5d:bd:39:2c: 35:65:3f:60:34:17:c8:e6:0b:e3:27:8d:f2:2c:d3:23:76:e7: fc:f7:ac:46:52:c5:a3:95:d3:fc:aa:cb:e9:4b:1b:17:58:fe: c4:b0:bf:90:83:c4:2d:ec:cd:36:28:fd:ff:a5:f2:0c:63:9b: 0b:55:d4:24:13:f0:c2:83:f7:59:ef:d7:50:44:5b:1e:74:0c: ac:74:75:1e:e7:b8:e6:57:c0:48:8b:0f:ea:3e:8c:26:5b:5d: a7:53:49:bc:0a:8f:1f:46:5e:97:99:c7:a7:70:79:62:1e:46: 8b:22:e6:cc:b8:e4:cc:60:da:ef:43:e5:90:db:7b:ef:d8:0d: 73:04:01:42 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUF+dDAPUkgfFg8nIj/ZwZoDHWbP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2 OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjNaFw0yNjA5MjQxMzM1MjNaMDMxMTAvBgNV BAMTKDNDQjI3MTZEQjBBRUY2RTJERUNCMTFFQ0IyRjE1NEQyMEQwNDEzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv50Vi4byR5oJXZRz+wvZ6o6Ao oxNZvvH4qme1uRwzb6TcZXlj0/j5Y8CkG3WO9tVtiAM2S21xFrKAfk4NhYYPHRvN sHH+4ZPcFCNBDFjc3pqAKEB/TFOZASvvXKYvwNFdY3GyIUZV7wSa4eUss97BaVH7 DD207f3vca9qjeCcr/ylWONH4oTAjeHc734pAxeMEXGI558PxKzKPgjlr12+a7gi qtKncFmiE3jhFOU7w93m1LeAgdzzkdsICBUc+4mZBPfd6gQpLJVnGeAtXJ6ZnKuZ OXYCSzxNTn+kxXbXvScMRWE3yotsTeeWq307Xl1v/GDeCbmQL/9KmqHi+LvTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUPLJxbbCu9uLeyxHssvFU0g0EE8gwHwYDVR0j BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2 RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzN8wDQYJKoZIhvcNAQELBQADggEBACkUNOn4 66o9azekgdwhlp2zYjT2+Ip/McsMDPsPT09pJTUCyywxMx99IS1wql/jUL6gzvDz dVgNEi0rENDLBOEfY/piSgqN74F9Xifwmfz419cVEk5heHPN6+z/sxhW6KPgI650 FEKnNURsNO0/WjbYuwdcNTKqCstFXb05LDVlP2A0F8jmC+MnjfIs0yN25/z3rEZS xaOV0/yqy+lLGxdY/sSwv5CDxC3szTYo/f+l8gxjmwtV1CQT8MKD91nv11BEWx50 DKx0dR7nuOZXwEiLD+o+jCZbXadTSbwKjx9GXpeZx6dweWIeRosi5sy45Mxg2u9D 5ZDbe+/YDXMEAUI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:43 2025 by rpki-client