$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa File: 3133312e3139362e37362e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: nQfuTZBe8qL6Jm0f6bTnZQgejR2YBD+U/NbM4cb9EVk= Subject key identifier: 2C:5C:26:7B:29:FD:63:88:47:90:57:F1:0C:75:70:E9:89:75:ED:CF Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 5CB2F86320831FD763428A2C38DF494BD146E917 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:06 +0000 ROA not before: Sat 18 Oct 2025 22:56:06 +0000 ROA not after: Sat 17 Oct 2026 23:01:06 +0000 asID: 28270 IP address blocks: 131.196.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b2:f8:63:20:83:1f:d7:63:42:8a:2c:38:df:49:4b:d1:46:e9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:06 2025 GMT Not After : Oct 17 23:01:06 2026 GMT Subject: CN=2C5C267B29FD6388479057F10C7570E98975EDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:cc:9d:ff:4b:d7:30:07:f2:9f:30:38:d9: 85:ef:fb:33:3c:f6:fa:4a:fa:02:b7:0f:77:2e:27: 16:63:2c:85:e9:56:fb:20:67:e4:b4:1e:ed:d7:23: 20:a7:e6:74:ef:6b:24:e5:c6:3d:49:2d:1e:4f:c7: e8:5c:5d:69:8a:9b:e0:33:88:d7:0b:9e:07:12:5a: fc:76:a3:c0:6d:cb:7d:3f:55:d0:87:d1:f5:78:de: 41:20:06:cf:6a:cd:2e:8f:0f:4d:97:be:8d:d4:40: 35:c8:3f:88:6d:ec:ce:1e:f0:f0:a0:d6:ed:84:d9: 9e:1a:2e:05:35:0a:b7:73:4e:4c:e7:b8:11:08:f9: 9c:25:1c:81:4a:38:8e:67:09:24:e3:76:b3:a3:f7: 65:c0:9d:c1:e4:69:05:95:9d:e0:98:f6:61:63:e2: de:8a:38:20:5e:40:be:1d:4b:ac:1c:f6:d0:2c:22: fd:e8:cc:c5:58:9c:0a:fd:c7:14:ae:2f:5e:3d:14: fa:8c:c5:e3:10:3e:38:21:f6:07:ec:a3:10:9e:ac: cc:4a:d3:a4:ac:06:40:47:2b:9e:49:7c:f0:84:f7: 44:dd:dd:ab:f6:1b:c2:91:5c:7c:f4:36:d6:22:0c: b7:aa:bd:00:e3:00:ca:ad:2b:e1:66:3f:75:68:3b: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:26:7B:29:FD:63:88:47:90:57:F1:0C:75:70:E9:89:75:ED:CF X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.76.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:f0:4c:e0:82:64:48:46:ad:56:fd:35:b0:ef:42:f9:d4:c6: 4e:d4:96:f0:63:41:88:a7:42:0e:e4:bf:de:62:10:75:26:5c: 4f:07:91:94:0c:d1:c9:c8:20:71:1a:ca:eb:30:ca:86:56:b2: 22:ec:43:7f:e6:6c:d0:a2:10:2f:7c:ad:cc:66:7f:80:97:d6: 7e:ab:88:80:8c:c1:fd:ac:7b:60:04:2b:2e:69:17:e2:42:b9: 62:94:fa:9e:83:95:20:9f:72:25:ae:fb:14:ee:29:26:1b:f4: 67:53:c5:5b:05:b9:86:f9:f1:70:82:46:23:d3:ba:2e:64:81: c3:2b:b2:1b:ce:ac:3c:dc:a6:b0:de:68:a7:f3:3b:8e:d2:66: 65:a8:26:a2:e9:bb:ee:67:fd:2a:10:98:07:ba:59:4e:6e:98: b3:70:6f:f7:f0:84:7d:e9:82:0e:9b:4f:cd:01:d3:39:b5:f3: ff:71:73:74:25:78:f4:f9:f2:3f:c7:37:49:80:40:11:18:c6: 5b:f8:1c:a6:e6:a0:c3:a1:cd:77:d1:df:31:d3:4f:b6:2b:c8: 13:a0:12:4a:bd:32:94:91:ed:c0:8f:25:72:a9:15:83:81:07: 2d:73:0c:fa:f9:9b:5e:84:cb:f9:a6:c0:6d:3a:0b:1d:c2:7d: 82:d8:20:18 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUXLL4YyCDH9djQoosON9JS9FG6RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDZaFw0yNjEwMTcyMzAxMDZaMDMxMTAvBgNV BAMTKDJDNUMyNjdCMjlGRDYzODg0NzkwNTdGMTBDNzU3MEU5ODk3NUVEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGsyd/0vXMAfynzA42YXv+zM8 9vpK+gK3D3cuJxZjLIXpVvsgZ+S0Hu3XIyCn5nTvayTlxj1JLR5Px+hcXWmKm+Az iNcLngcSWvx2o8Bty30/VdCH0fV43kEgBs9qzS6PD02Xvo3UQDXIP4ht7M4e8PCg 1u2E2Z4aLgU1CrdzTkznuBEI+ZwlHIFKOI5nCSTjdrOj92XAncHkaQWVneCY9mFj 4t6KOCBeQL4dS6wc9tAsIv3ozMVYnAr9xxSuL149FPqMxeMQPjgh9gfsoxCerMxK 06SsBkBHK55JfPCE90Td3av2G8KRXHz0NtYiDLeqvQDjAMqtK+FmP3VoO13JAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQULFwmeyn9Y4hHkFfxDHVw6Yl17c8wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4 MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCg8RMMA0GCSqGSIb3DQEBCwUAA4IBAQCM8EzggmRI Rq1W/TWw70L51MZO1JbwY0GIp0IO5L/eYhB1JlxPB5GUDNHJyCBxGsrrMMqGVrIi 7EN/5mzQohAvfK3MZn+Al9Z+q4iAjMH9rHtgBCsuaRfiQrlilPqeg5Ugn3IlrvsU 7ikmG/RnU8VbBbmG+fFwgkYj07ouZIHDK7Ibzqw83Kaw3min8zuO0mZlqCai6bvu Z/0qEJgHullObpizcG/38IR96YIOm0/NAdM5tfP/cXN0JXj0+fI/xzdJgEARGMZb +Bym5qDDoc130d8x00+2K8gToBJKvTKUke3AjyVyqRWDgQctcwz6+ZtehMv5psBt Ogsdwn2C2CAY -----END CERTIFICATE-----Generated at Mon Oct 20 19:49:03 2025 by rpki-client