$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa File: 3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: Qn28kVXR1/pmqH3n6lYcrIs8PLjF7iAcyRookWVj6To= Subject key identifier: 04:C7:A1:3B:9B:BD:E9:9C:51:47:BC:CE:47:17:24:D1:7C:C6:5E:CF Certificate issuer: /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Certificate serial: 4A5C190C386F5AAAC85EDFFE2C44A991A77FAF60 Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa Signing time: Thu 25 Sep 2025 13:35:22 +0000 ROA not before: Thu 25 Sep 2025 13:30:22 +0000 ROA not after: Thu 24 Sep 2026 13:35:22 +0000 asID: 53153 IP address blocks: 186.209.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5c:19:0c:38:6f:5a:aa:c8:5e:df:fe:2c:44:a9:91:a7:7f:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Validity Not Before: Sep 25 13:30:22 2025 GMT Not After : Sep 24 13:35:22 2026 GMT Subject: CN=04C7A13B9BBDE99C5147BCCE471724D17CC65ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:47:46:15:00:41:b0:4e:9f:e8:31:1b:b8:6d: 04:c7:e3:58:b4:b4:3a:5b:47:cd:27:b4:d4:8f:8b: eb:d4:e9:4a:84:3f:3a:bf:c8:82:42:ab:d0:5e:74: 95:d6:06:7e:86:e0:6d:de:94:62:b3:e4:40:00:0a: 9b:f7:eb:cd:de:c7:3c:df:37:13:2c:53:de:ca:d7: 2c:99:28:64:05:c8:03:0b:27:10:9a:88:16:22:80: ae:26:9c:2a:23:54:6b:35:ea:e8:a5:c2:3b:70:af: 7c:40:b3:c1:be:d5:0b:1b:cf:ee:5e:12:8c:2a:fc: b3:d1:4d:ea:3a:e5:90:89:60:cd:ce:35:62:07:9c: 02:68:7b:5d:a0:42:6e:2e:53:f3:ed:6d:60:5e:0a: b1:71:49:61:80:e3:d3:11:61:69:46:f4:92:dd:fc: 12:4a:ab:51:e2:0e:a8:8f:38:5c:49:b9:6f:86:da: 2e:9c:35:a1:0e:d5:79:0c:b0:4e:7e:07:56:10:96: 7e:e1:0a:0a:c4:ee:62:13:09:b0:09:ef:8d:37:64: 83:92:b9:96:27:b0:f9:b4:cb:03:52:dd:65:be:91: 5d:bc:f0:57:fc:a6:30:fd:13:47:36:8a:d9:72:9f: f1:0c:0f:7d:f2:b6:61:56:ab:1c:8b:0f:88:e8:45: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:A1:3B:9B:BD:E9:9C:51:47:BC:CE:47:17:24:D1:7C:C6:5E:CF X509v3 Authority Key Identifier: keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.104.0/24 Signature Algorithm: sha256WithRSAEncryption 35:cf:fb:f0:bc:e7:1b:70:28:97:bb:c8:34:3b:a3:38:5c:ae: d5:be:48:d4:f1:99:13:c3:40:94:15:a0:6f:fb:82:b8:69:aa: fd:60:b1:f7:d4:4c:f9:c6:70:8b:2c:0f:94:cf:3c:ed:57:83: dd:80:93:5a:b4:d5:ca:38:a5:ba:8d:93:be:cb:81:4a:3c:4c: 7b:ad:56:8b:6b:4b:d9:c2:3b:0a:38:08:db:05:c6:91:63:35: 45:eb:39:3e:b8:c1:18:0e:78:7c:a0:29:5c:83:d6:93:ab:4d: f9:5e:4f:20:50:85:09:7f:a9:b2:d3:a2:6d:38:5f:21:e5:33: b3:8e:04:d9:e0:2e:57:d8:83:42:ba:e4:95:6a:26:bf:67:e2: 80:60:e9:03:86:6c:c2:8a:a0:f6:91:6a:05:00:9f:24:50:a3: 33:48:6e:d8:8e:c8:bf:bb:61:f6:96:70:33:69:31:22:60:5d: 87:4f:8c:ee:19:c2:07:1f:b1:0b:b6:41:64:c6:b1:44:e4:e2: d4:0f:21:aa:5c:ef:40:08:9d:58:cb:a1:2a:ba:5a:1e:10:91: 1b:26:d4:0a:aa:6f:d1:25:4d:2b:ca:b3:a7:95:a4:85:cf:a8: ff:1f:d6:80:72:83:d1:61:1f:a8:15:5e:b1:ac:5e:15:2c:62: 11:3b:4a:cd -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUSlwZDDhvWqrIXt/+LESpkad/r2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2 OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjJaFw0yNjA5MjQxMzM1MjJaMDMxMTAvBgNV BAMTKDA0QzdBMTNCOUJCREU5OUM1MTQ3QkNDRTQ3MTcyNEQxN0NDNjVFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1R0YVAEGwTp/oMRu4bQTH41i0 tDpbR80ntNSPi+vU6UqEPzq/yIJCq9BedJXWBn6G4G3elGKz5EAACpv3683exzzf NxMsU97K1yyZKGQFyAMLJxCaiBYigK4mnCojVGs16uilwjtwr3xAs8G+1Qsbz+5e Eowq/LPRTeo65ZCJYM3ONWIHnAJoe12gQm4uU/PtbWBeCrFxSWGA49MRYWlG9JLd /BJKq1HiDqiPOFxJuW+G2i6cNaEO1XkMsE5+B1YQln7hCgrE7mITCbAJ7403ZIOS uZYnsPm0ywNS3WW+kV288Ff8pjD9E0c2itlyn/EMD33ytmFWqxyLD4joRevDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUBMehO5u96ZxRR7zORxck0XzGXs8wHwYDVR0j BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2 RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzODM2MmUzMjMwMzkyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC60WgwDQYJKoZIhvcNAQELBQADggEBADXP+/C8 5xtwKJe7yDQ7ozhcrtW+SNTxmRPDQJQVoG/7grhpqv1gsffUTPnGcIssD5TPPO1X g92Ak1q01co4pbqNk77LgUo8THutVotrS9nCOwo4CNsFxpFjNUXrOT64wRgOeHyg KVyD1pOrTfleTyBQhQl/qbLTom04XyHlM7OOBNngLlfYg0K65JVqJr9n4oBg6QOG bMKKoPaRagUAnyRQozNIbtiOyL+7YfaWcDNpMSJgXYdPjO4ZwgcfsQu2QWTGsUTk 4tQPIapc70AInVjLoSq6Wh4QkRsm1Aqqb9ElTSvKs6eVpIXPqP8f1oByg9FhH6gV XrGsXhUsYhE7Ss0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:46 2025 by rpki-client