$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e20323632353039.roa File: 3133312e3139362e37382e302f32332d3233203d3e20323632353039.roa (raw, json) Hash identifier: 8r2RnqdRZ9/FowPfgHI58zio8chD5Kg7VnEDFxzoCyE= Subject key identifier: 82:03:76:9D:5B:14:2E:E4:D0:66:0D:00:B4:F1:F6:D4:E5:40:E4:2A Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 3A7DC6B2BB1926F7B284014A1979913E16533587 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e20323632353039.roa Signing time: Sat 18 Oct 2025 23:01:04 +0000 ROA not before: Sat 18 Oct 2025 22:56:04 +0000 ROA not after: Sat 17 Oct 2026 23:01:04 +0000 asID: 262509 IP address blocks: 131.196.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7d:c6:b2:bb:19:26:f7:b2:84:01:4a:19:79:91:3e:16:53:35:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:04 2025 GMT Not After : Oct 17 23:01:04 2026 GMT Subject: CN=8203769D5B142EE4D0660D00B4F1F6D4E540E42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:27:d4:69:50:3f:b9:9f:f3:b1:63:3f:de: 66:b3:d5:11:d2:3f:42:9a:b1:eb:f4:80:ce:68:70: ac:94:cc:9d:dc:bc:e3:2f:cc:c5:96:98:2f:31:e1: 18:d0:10:ef:7f:e8:16:a4:7e:ec:fe:3f:63:67:ec: 57:22:a5:05:25:5b:a7:16:e4:7b:53:44:85:c3:e5: 28:2f:8c:62:c3:e5:98:64:32:78:ed:3e:e3:50:68: cb:8b:cd:12:ec:f0:5d:63:87:16:4b:29:77:f5:ee: eb:3d:fb:e0:bf:f3:e3:3a:9f:f6:c6:e7:f0:02:d7: 43:ec:7e:3c:ee:a5:f4:0a:bd:eb:bc:30:ec:92:67: 47:df:d9:4e:18:3d:a6:42:09:eb:ff:d4:2c:15:76: 89:3e:ae:13:14:90:22:1a:df:59:99:67:1d:90:71: c0:53:ab:29:5c:7d:96:9f:0b:f1:ea:65:6a:2a:41: 3e:9f:ca:3f:57:8a:f4:ba:9b:e8:90:4b:b5:ca:d2: 64:2e:76:7a:ac:14:2e:d7:74:cf:da:ee:81:e4:a6: 6a:d6:cb:1b:e3:85:93:7d:62:12:50:f2:fd:bf:cc: c0:ea:d5:24:f8:0c:7b:d8:ad:c8:78:85:5e:e8:e8: 36:6c:1f:20:a5:64:cd:32:6d:07:27:46:25:d2:16: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:76:9D:5B:14:2E:E4:D0:66:0D:00:B4:F1:F6:D4:E5:40:E4:2A X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e20323632353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.78.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:8c:46:d2:ae:a0:55:50:e2:a4:f0:9d:a9:6b:9e:b2:b1:c1: 9a:86:92:9f:30:90:37:d4:bc:2b:b4:88:fe:83:96:b9:22:12: 3b:ec:9c:e2:41:c5:85:ec:5d:a8:7e:36:c3:61:21:53:40:58: a3:cf:99:ed:25:fe:44:c6:34:49:3a:01:3f:b3:bd:3c:ee:7c: 6a:56:ab:17:e0:a4:73:eb:c1:c2:b5:0c:df:08:24:60:12:e7: ae:33:b0:6a:0c:8d:c1:53:c7:12:dc:21:81:76:8f:ee:a9:ad: ac:77:35:b4:de:26:8e:6e:8e:23:7e:e5:d7:a6:38:59:67:15: ce:31:ed:26:ed:cf:a4:89:05:73:c7:b3:e1:6f:2f:de:9b:29: 52:5b:a1:16:09:f5:cd:17:24:f3:52:a4:d8:e3:38:3d:e3:0f: 7d:05:c2:36:37:e5:80:8c:f3:dd:fc:9b:95:3c:d4:23:cb:00: 43:d2:31:52:ba:11:46:09:18:bf:90:3b:4d:0f:0c:34:4b:72: 40:1e:29:5b:44:13:3f:fe:a8:97:73:9a:8a:2f:e8:16:a5:2f: 2e:4b:73:7e:33:38:61:86:5c:90:85:8c:19:f4:f9:49:db:cf: 40:61:d3:c9:54:17:99:2e:97:9d:b9:3e:04:8d:e4:1a:99:a7: e0:2f:38:ca -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOn3GsrsZJveyhAFKGXmRPhZTNYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDRaFw0yNjEwMTcyMzAxMDRaMDMxMTAvBgNV BAMTKDgyMDM3NjlENUIxNDJFRTREMDY2MEQwMEI0RjFGNkQ0RTU0MEU0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+SfUaVA/uZ/zsWM/3maz1RHS P0Kasev0gM5ocKyUzJ3cvOMvzMWWmC8x4RjQEO9/6Bakfuz+P2Nn7FcipQUlW6cW 5HtTRIXD5SgvjGLD5ZhkMnjtPuNQaMuLzRLs8F1jhxZLKXf17us9++C/8+M6n/bG 5/AC10PsfjzupfQKveu8MOySZ0ff2U4YPaZCCev/1CwVdok+rhMUkCIa31mZZx2Q ccBTqylcfZafC/HqZWoqQT6fyj9XivS6m+iQS7XK0mQudnqsFC7XdM/a7oHkpmrW yxvjhZN9YhJQ8v2/zMDq1ST4DHvYrch4hV7o6DZsHyClZM0ybQcnRiXSFjfdAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUggN2nVsULuTQZg0AtPH21OVA5CowHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzMxMmUzMTM5MzYyZTM3MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2 MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGDxE4wDQYJKoZIhvcNAQELBQADggEBAA6MRtKu oFVQ4qTwnalrnrKxwZqGkp8wkDfUvCu0iP6DlrkiEjvsnOJBxYXsXah+NsNhIVNA WKPPme0l/kTGNEk6AT+zvTzufGpWqxfgpHPrwcK1DN8IJGAS564zsGoMjcFTxxLc IYF2j+6prax3NbTeJo5ujiN+5demOFlnFc4x7Sbtz6SJBXPHs+FvL96bKVJboRYJ 9c0XJPNSpNjjOD3jD30FwjY35YCM8938m5U81CPLAEPSMVK6EUYJGL+QO00PDDRL ckAeKVtEEz/+qJdzmoov6BalLy5Lc34zOGGGXJCFjBn0+Unbz0Bh08lUF5kul525 PgSN5BqZp+AvOMo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:58:24 2025 by rpki-client