$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa File: 3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json) Hash identifier: ijAJadOz9UZZ8sPPLl2TUqBkcqmPNOwoNTu8bdGVmDw= Subject key identifier: 59:BB:50:15:D0:CC:61:23:50:DD:2A:FB:CF:AB:D0:C4:04:35:94:A5 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 71B677009579D2EE2ED462939307B50CA3C8330F Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa Signing time: Sat 18 Oct 2025 23:01:05 +0000 ROA not before: Sat 18 Oct 2025 22:56:05 +0000 ROA not after: Sat 17 Oct 2026 23:01:05 +0000 asID: 262509 IP address blocks: 131.196.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b6:77:00:95:79:d2:ee:2e:d4:62:93:93:07:b5:0c:a3:c8:33:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:05 2025 GMT Not After : Oct 17 23:01:05 2026 GMT Subject: CN=59BB5015D0CC612350DD2AFBCFABD0C4043594A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:4d:c0:3a:b8:11:b4:b8:b7:b1:a3:f8:b5: 73:34:2a:27:d0:e4:2e:10:1a:57:76:cf:3d:de:e4: 45:a8:19:bc:2e:66:79:41:fa:86:82:ee:d6:ca:14: a8:88:b2:26:6c:26:e1:65:9d:25:f7:d3:0b:09:43: 27:d0:4d:c6:cb:c5:93:95:cb:f5:81:cf:0e:71:45: 65:8f:56:6a:88:cb:83:bc:79:0b:53:45:4e:bd:f6: 53:66:a6:db:7f:c7:95:a3:dd:f2:95:06:10:e1:3c: 37:28:75:89:09:51:98:63:81:48:0d:be:c5:3b:be: 8b:5c:88:00:fa:7d:3d:0f:29:67:9e:c4:f5:4d:34: 89:d0:dd:df:54:bf:3d:e0:62:3d:4e:cf:66:85:99: 17:c5:5d:38:0e:80:8b:d4:78:30:38:ca:fd:72:f5: 8d:a2:80:0f:2a:6b:30:bd:a2:28:9d:9b:36:96:11: 53:99:e0:b4:98:60:ab:ac:6f:ab:e1:58:2d:b7:8c: 44:32:84:e6:1c:89:5a:a4:03:e5:72:df:47:b7:24: d4:77:10:b5:8f:09:c4:4e:45:4f:31:c3:84:fa:de: dd:06:82:c0:d0:eb:75:89:58:ca:9d:f7:2c:6a:09: 9f:34:13:f4:1d:91:7b:85:84:9a:af:60:d4:c4:29: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:50:15:D0:CC:61:23:50:DD:2A:FB:CF:AB:D0:C4:04:35:94:A5 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.76.0/22 Signature Algorithm: sha256WithRSAEncryption 41:e2:0b:d1:94:76:18:71:a7:ac:ed:f0:d4:38:1e:60:49:a6: 80:24:0f:b6:80:eb:34:aa:9d:0e:30:3a:e7:42:62:37:e6:7d: 2a:24:16:6c:32:f9:61:b7:42:13:87:73:fd:8d:5e:8c:27:d4: 07:cc:cd:c3:99:b7:01:da:39:7f:5a:20:34:d2:5e:dd:47:a2: 8e:fa:41:8d:cf:f4:c9:e0:03:9e:6a:43:7f:d5:45:e8:e7:9c: ac:44:16:8f:d0:f8:55:b3:83:a4:fe:75:0e:fa:7f:f9:88:78: 7a:39:86:41:96:3d:4a:a3:73:45:56:a8:5d:62:2d:e0:89:c0: 0f:ba:a2:54:1a:4a:a0:6e:80:28:1d:5d:9d:65:7f:a8:e4:7a: b4:90:12:41:27:10:65:4e:63:9b:22:d9:05:dd:c9:2e:2c:85: 22:e8:7e:f0:64:16:50:fe:7d:2c:6e:dd:fc:f8:88:45:94:6a: 14:3b:c6:70:b5:20:38:4c:e6:e6:fb:f4:9c:53:0e:d0:df:22: 09:4c:1d:dd:cb:9b:83:12:0c:eb:23:f2:57:bb:59:40:1a:15: 08:d8:45:51:61:78:8a:47:db:b8:06:c8:46:cc:ab:f1:a6:e9: 40:8a:76:bb:ee:91:c5:5d:a7:df:a0:46:04:e4:53:0a:7e:af: a0:22:d2:0d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUcbZ3AJV50u4u1GKTkwe1DKPIMw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDVaFw0yNjEwMTcyMzAxMDVaMDMxMTAvBgNV BAMTKDU5QkI1MDE1RDBDQzYxMjM1MEREMkFGQkNGQUJEMEM0MDQzNTk0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4E3AOrgRtLi3saP4tXM0KifQ 5C4QGld2zz3e5EWoGbwuZnlB+oaC7tbKFKiIsiZsJuFlnSX30wsJQyfQTcbLxZOV y/WBzw5xRWWPVmqIy4O8eQtTRU699lNmptt/x5Wj3fKVBhDhPDcodYkJUZhjgUgN vsU7votciAD6fT0PKWeexPVNNInQ3d9Uvz3gYj1Oz2aFmRfFXTgOgIvUeDA4yv1y 9Y2igA8qazC9oiidmzaWEVOZ4LSYYKusb6vhWC23jEQyhOYciVqkA+Vy30e3JNR3 ELWPCcRORU8xw4T63t0GgsDQ63WJWMqd9yxqCZ80E/QdkXuFhJqvYNTEKbK7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUWbtQFdDMYSNQ3Sr7z6vQxAQ1lKUwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKDxEwwDQYJKoZIhvcNAQELBQADggEBAEHiC9GU dhhxp6zt8NQ4HmBJpoAkD7aA6zSqnQ4wOudCYjfmfSokFmwy+WG3QhOHc/2NXown 1AfMzcOZtwHaOX9aIDTSXt1Hoo76QY3P9MngA55qQ3/VRejnnKxEFo/Q+FWzg6T+ dQ76f/mIeHo5hkGWPUqjc0VWqF1iLeCJwA+6olQaSqBugCgdXZ1lf6jkerSQEkEn EGVOY5si2QXdyS4shSLofvBkFlD+fSxu3fz4iEWUahQ7xnC1IDhM5ub79JxTDtDf IglMHd3Lm4MSDOsj8le7WUAaFQjYRVFheIpH27gGyEbMq/Gm6UCKdrvukcVdp9+g RgTkUwp+r6Ai0g0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:56 2025 by rpki-client