$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa File: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (raw, json) Hash identifier: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA= Subject key identifier: 5E:E1:E7:AC:1B:D8:19:B6:6A:1D:38:75:8F:14:84:CD:CF:F8:BB:C8 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 6E13C000830C517377BD2E30239F534A686D4761 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa Signing time: Tue 14 Oct 2025 16:38:59 +0000 ROA not before: Tue 14 Oct 2025 16:33:59 +0000 ROA not after: Tue 13 Oct 2026 16:38:59 +0000 asID: 262725 IP address blocks: 186.192.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:13:c0:00:83:0c:51:73:77:bd:2e:30:23:9f:53:4a:68:6d:47:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Oct 14 16:33:59 2025 GMT Not After : Oct 13 16:38:59 2026 GMT Subject: CN=5EE1E7AC1BD819B66A1D38758F1484CDCFF8BBC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:6f:25:fa:3f:2e:6d:87:2c:90:5c:cd:80: 18:b1:61:62:27:6e:86:cf:a6:fb:9b:13:d6:3f:fe: 54:0b:ef:64:13:17:e6:1b:15:59:fe:cf:c5:28:5a: 18:c5:11:5c:d0:04:31:09:89:65:d1:99:ab:22:98: c3:c6:ea:0d:75:02:22:5f:17:96:65:91:ef:07:0d: 5c:28:33:53:3c:9a:20:73:e7:28:90:3f:67:3c:b2: 40:b9:30:b4:67:01:82:d4:64:32:cd:14:ab:c4:03: 88:d3:78:2b:b0:9f:dd:51:db:84:2b:c6:0d:de:79: 3f:07:60:8c:b2:e9:1a:4b:13:c2:04:fa:c8:c5:04: c1:62:4c:ff:31:df:14:3c:5a:10:56:41:38:5d:57: 30:ea:e0:39:2a:4f:6e:8e:1d:37:07:cb:ea:e8:69: e5:cc:aa:d2:e4:ac:f5:26:0c:24:16:02:20:69:1c: a7:8b:07:82:42:01:f8:e2:ab:3a:0e:13:7e:eb:40: 64:71:3e:b9:3d:43:50:6e:c0:7d:04:0d:00:3d:ba: b9:9e:af:ad:3d:90:bc:36:93:2e:f1:ea:f1:cc:98: 23:75:db:b5:cd:99:1f:53:17:64:41:97:1c:73:4e: 95:d9:77:f9:e4:42:0f:1e:9b:f9:e9:e7:f5:fc:c5: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:E7:AC:1B:D8:19:B6:6A:1D:38:75:8F:14:84:CD:CF:F8:BB:C8 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.192.0.0/20 Signature Algorithm: sha256WithRSAEncryption 77:98:b0:b8:38:94:ff:4f:f7:97:b2:f9:16:f2:e8:18:8b:3d: b8:5a:70:af:09:a8:55:8b:70:70:73:7f:f8:56:ec:48:01:7b: 57:e2:39:37:be:c6:3c:d5:dd:fb:cc:4e:6c:a8:f6:d0:f6:22: 72:03:6e:92:92:24:1e:8c:a2:dc:47:a7:ec:1f:24:af:8a:0c: a1:e9:b3:3a:6c:2c:2d:5a:fb:6f:89:c1:dd:33:16:73:ee:7a: d6:ca:f3:ad:55:aa:a8:73:38:75:42:09:eb:2a:72:3d:86:3e: 29:e8:ac:bc:e9:89:05:01:5b:ae:27:95:5e:57:fe:a9:2a:c1: f3:9b:8a:ee:1e:40:1e:a2:76:fb:09:13:67:e5:85:01:08:3a: 03:8a:b8:73:29:ea:81:f7:15:ad:d0:fe:11:93:04:6f:3b:1e: 5b:45:d7:18:93:84:81:76:8c:e1:4a:d3:aa:de:d7:03:3d:a3: ec:a1:bb:17:e9:f7:d5:60:a7:e6:0c:b1:f6:a5:37:d7:41:cb: 5a:fe:df:23:a4:54:5c:09:05:4e:fe:14:3a:a0:66:fc:81:f5: ce:ab:1a:bb:5d:ec:c3:cf:84:d0:f9:0a:18:7b:24:06:ff:0b: 6f:80:04:15:3f:19:77:30:a5:cb:c1:55:58:1f:0b:bb:69:3a: 1b:e0:7f:36 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbhPAAIMMUXN3vS4wI59TSmhtR2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTEwMTQxNjMzNTlaFw0yNjEwMTMxNjM4NTlaMDMxMTAvBgNV BAMTKDVFRTFFN0FDMUJEODE5QjY2QTFEMzg3NThGMTQ4NENEQ0ZGOEJCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSsW8l+j8ubYcskFzNgBixYWIn bobPpvubE9Y//lQL72QTF+YbFVn+z8UoWhjFEVzQBDEJiWXRmasimMPG6g11AiJf F5Zlke8HDVwoM1M8miBz5yiQP2c8skC5MLRnAYLUZDLNFKvEA4jTeCuwn91R24Qr xg3eeT8HYIyy6RpLE8IE+sjFBMFiTP8x3xQ8WhBWQThdVzDq4DkqT26OHTcHy+ro aeXMqtLkrPUmDCQWAiBpHKeLB4JCAfjiqzoOE37rQGRxPrk9Q1BuwH0EDQA9urme r609kLw2ky7x6vHMmCN127XNmR9TF2RBlxxzTpXZd/nkQg8em/np5/X8xbXfAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUXuHnrBvYGbZqHTh1jxSEzc/4u8gwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNLWGthbjFQMXhjN0pOSmp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAv MzEzODM2MmUzMTM5MzIyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEusAAMA0GCSqGSIb3DQEBCwUAA4IBAQB3mLC4OJT/ T/eXsvkW8ugYiz24WnCvCahVi3Bwc3/4VuxIAXtX4jk3vsY81d37zE5sqPbQ9iJy A26SkiQejKLcR6fsHySvigyh6bM6bCwtWvtvicHdMxZz7nrWyvOtVaqoczh1Qgnr KnI9hj4p6Ky86YkFAVuuJ5VeV/6pKsHzm4ruHkAeonb7CRNn5YUBCDoDirhzKeqB 9xWt0P4RkwRvOx5bRdcYk4SBdozhStOq3tcDPaPsobsX6ffVYKfmDLH2pTfXQcta /t8jpFRcCQVO/hQ6oGb8gfXOqxq7XezDz4TQ+QoYeyQG/wtvgAQVPxl3MKXLwVVY Hwu7aTob4H82 -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:50 2025 by rpki-client