$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa File: 3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa (raw, json) Hash identifier: HyMp/45+aPJ3xv6BS1BSEtGU5dfBoJttCdk+Y2oSFrY= Subject key identifier: 18:A1:A6:B7:FC:BF:14:9A:2B:0C:39:A7:EF:A9:A9:A5:84:3E:87:1D Certificate issuer: /CN=038EA35AF01B781289F24933082A9857B17EAE3A Certificate serial: FC1DCB9CB7DA2454F97BE265C1405B770F157A Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa Signing time: Thu 18 Sep 2025 13:40:40 +0000 ROA not before: Thu 18 Sep 2025 13:35:40 +0000 ROA not after: Thu 17 Sep 2026 13:40:40 +0000 asID: 266556 IP address blocks: 160.238.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fc:1d:cb:9c:b7:da:24:54:f9:7b:e2:65:c1:40:5b:77:0f:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A Validity Not Before: Sep 18 13:35:40 2025 GMT Not After : Sep 17 13:40:40 2026 GMT Subject: CN=18A1A6B7FCBF149A2B0C39A7EFA9A9A5843E871D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:42:c8:30:40:09:f0:52:85:dc:3f:10:01: fb:04:74:bb:fe:fb:cd:ef:9c:8a:46:25:e5:d6:4b: cd:5a:a5:7d:79:05:43:43:0a:c6:f9:1e:d9:34:ca: da:32:28:39:9a:a4:2f:51:4d:da:66:b0:73:c2:8b: ee:7d:db:9a:bf:ce:8a:84:ba:e8:a1:b8:39:41:7c: 86:2a:59:f4:59:61:47:76:fe:e2:30:8a:a3:7a:90: 3b:f1:de:76:88:2a:3c:54:1d:f4:0b:fb:77:e7:7a: 99:70:79:e1:a5:1f:44:45:59:61:8c:49:78:23:3f: a1:22:4c:15:b8:79:f7:b2:64:69:ff:32:0d:a6:71: a7:4d:94:37:9c:3f:0a:85:dd:01:03:4b:d7:fb:b0: e5:87:65:a6:b7:0e:ad:41:3a:b4:da:61:02:01:fe: 31:97:c6:2e:f7:26:5c:53:de:ac:ca:87:42:d6:a7: ff:2c:a0:aa:17:af:5c:c4:6e:b3:52:74:97:37:8e: 3e:9b:52:d9:9e:27:f3:5b:88:f0:a7:2b:1f:57:71: 18:4e:1b:70:62:49:e5:c9:e4:48:ea:40:1e:b0:80: 8d:4a:d5:b3:5f:0a:57:14:bf:92:40:e3:c7:9d:c0: 7d:77:9d:8c:67:39:8b:1b:3c:73:14:06:e9:ea:3a: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A1:A6:B7:FC:BF:14:9A:2B:0C:39:A7:EF:A9:A9:A5:84:3E:87:1D X509v3 Authority Key Identifier: keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.228.0/24 Signature Algorithm: sha256WithRSAEncryption 52:5a:7a:6a:31:cc:e5:34:24:8f:f9:ec:da:d2:82:cb:86:b7: a5:f4:6b:f8:63:0c:0a:86:a4:e7:88:cb:2c:0d:17:ee:ea:d4: 5f:7a:79:48:a9:84:40:ed:55:74:69:ac:8e:31:8c:d2:51:71: 62:98:89:c2:dd:e5:ba:16:99:9d:f5:3e:29:a2:97:53:5d:0b: 8d:90:ab:31:e2:28:bb:b7:c7:f1:e8:5a:cc:f8:af:fd:0e:00: b7:23:90:43:e8:4b:02:d2:12:c6:2d:d1:61:89:ec:3d:89:6b: 01:df:5d:54:44:53:aa:a9:7f:1f:3f:c9:a5:5c:22:29:ec:ba: 4b:3d:72:de:7a:8b:60:c4:87:31:15:44:58:52:e3:3d:74:fb: 3a:f2:c1:cb:ff:97:6e:5c:f5:28:1a:f3:44:9d:43:db:73:4b: 9e:23:2b:df:f4:d8:1b:7a:68:a2:dc:04:7b:3c:84:1d:27:70: a2:7e:22:e1:96:9c:10:35:c9:47:8b:de:6d:20:0e:87:ef:b4: 24:88:f0:b1:1e:ae:8c:d6:8a:6a:4d:e7:3f:6a:6d:71:f0:b2: 88:0b:c0:da:42:80:ae:b8:ac:1c:7e:4b:86:c5:c7:5d:2d:70: 4a:50:b9:70:ff:5e:f1:7c:7e:d2:63:57:e8:1f:61:0c:7f:4c: dc:7e:08:d3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUAPwdy5y32iRU+XviZcFAW3cPFXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RUEzNUFGMDFCNzgxMjg5RjI0OTMzMDgyQTk4NTdC MTdFQUUzQTAeFw0yNTA5MTgxMzM1NDBaFw0yNjA5MTcxMzQwNDBaMDMxMTAvBgNV BAMTKDE4QTFBNkI3RkNCRjE0OUEyQjBDMzlBN0VGQTlBOUE1ODQzRTg3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0ELIMEAJ8FKF3D8QAfsEdLv+ +83vnIpGJeXWS81apX15BUNDCsb5Htk0ytoyKDmapC9RTdpmsHPCi+5925q/zoqE uuihuDlBfIYqWfRZYUd2/uIwiqN6kDvx3naIKjxUHfQL+3fneplweeGlH0RFWWGM SXgjP6EiTBW4efeyZGn/Mg2mcadNlDecPwqF3QEDS9f7sOWHZaa3Dq1BOrTaYQIB /jGXxi73JlxT3qzKh0LWp/8soKoXr1zEbrNSdJc3jj6bUtmeJ/NbiPCnKx9XcRhO G3BiSeXJ5EjqQB6wgI1K1bNfClcUv5JA48edwH13nYxnOYsbPHMUBunqOiJXAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUGKGmt/y/FJorDDmn76mppYQ+hx0wHwYDVR0j BBgwFoAUA46jWvAbeBKJ8kkzCCqYV7F+rjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0VTVFZwZGlBcDdUUzhHbkdWSHl4ekhzeGFkekpDOXRYUkFQd1N6Mng4 R3IvMC8wMzhFQTM1QUYwMUI3ODEyODlGMjQ5MzMwODJBOTg1N0IxN0VBRTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOEVBMzVBRjAxQjc4MTI4 OUYyNDkzMzA4MkE5ODU3QjE3RUFFM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNFU1RWcGRpQXA3VFM4R25HVkh5eHpIc3hhZHpKQzl0WFJBUHdTejJ4OEdyLzAv MzEzNjMwMmUzMjMzMzgyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNjM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDu5DANBgkqhkiG9w0BAQsFAAOCAQEAUlp6 ajHM5TQkj/ns2tKCy4a3pfRr+GMMCoak54jLLA0X7urUX3p5SKmEQO1VdGmsjjGM 0lFxYpiJwt3luhaZnfU+KaKXU10LjZCrMeIou7fH8ehazPiv/Q4AtyOQQ+hLAtIS xi3RYYnsPYlrAd9dVERTqql/Hz/JpVwiKey6Sz1y3nqLYMSHMRVEWFLjPXT7OvLB y/+Xblz1KBrzRJ1D23NLniMr3/TYG3pootwEezyEHSdwon4i4ZacEDXJR4vebSAO h++0JIjwsR6ujNaKak3nP2ptcfCyiAvA2kKArrisHH5LhsXHXS1wSlC5cP9e8Xx+ 0mNX6B9hDH9M3H4I0w== -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:04 2025 by rpki-client