$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa File: 3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json) Hash identifier: FhmEY7Ejw6vXXNQNlm91UP/A8TH6aHttwIKx0cSOFLI= Subject key identifier: 18:47:BE:F2:46:91:02:F5:4C:A5:52:F2:6B:49:60:1C:A0:4D:7E:DF Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 5BDB9725540402BC857A45C911D686ECA96FDF78 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa Signing time: Sat 18 Oct 2025 23:01:06 +0000 ROA not before: Sat 18 Oct 2025 22:56:06 +0000 ROA not after: Sat 17 Oct 2026 23:01:06 +0000 asID: 271724 IP address blocks: 138.117.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:db:97:25:54:04:02:bc:85:7a:45:c9:11:d6:86:ec:a9:6f:df:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:06 2025 GMT Not After : Oct 17 23:01:06 2026 GMT Subject: CN=1847BEF2469102F54CA552F26B49601CA04D7EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3c:02:74:26:0e:3b:a5:4b:45:12:eb:60:a6: 46:10:06:16:09:b1:c8:80:c5:75:94:f3:a6:e3:c2: 79:7b:4b:88:b0:51:ec:00:bf:0f:01:4b:e5:81:b0: a4:92:ce:a6:be:aa:50:c4:65:61:83:e2:9b:6c:b4: b0:2a:e8:eb:5c:8a:31:24:50:b1:9e:c7:b8:a8:d1: 4d:11:5c:b3:3d:53:a2:83:d7:fb:06:8e:59:ff:6e: 04:76:e7:95:ab:8c:2d:cd:13:c9:55:71:ab:9a:a2: 17:3d:66:a3:1f:86:84:72:13:07:34:67:4a:b2:be: 1c:2f:89:af:1c:d2:9b:87:7c:0f:28:6d:ea:62:92: bb:54:d3:4c:37:7f:1f:5c:b9:17:cd:5c:13:91:19: 0e:25:d0:ab:a0:ce:87:01:24:cb:37:3f:22:43:6d: 1a:f8:69:7e:60:39:16:ef:1b:4f:46:63:3c:a1:8e: 27:6a:56:a8:33:0f:84:ba:45:7f:55:ec:4b:1a:2c: dc:7a:33:cd:55:20:3b:83:10:25:e3:99:b7:8c:2c: ce:73:f6:0c:c2:f5:84:05:82:49:37:e0:a8:d6:bd: 37:10:25:84:d6:97:53:c7:42:4b:a7:cd:86:8e:52: d3:70:a8:ff:de:5a:d1:6a:f8:31:4c:92:e7:47:57: c2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:47:BE:F2:46:91:02:F5:4C:A5:52:F2:6B:49:60:1C:A0:4D:7E:DF X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.124.0/22 Signature Algorithm: sha256WithRSAEncryption 14:e9:dd:9f:df:28:b5:05:67:84:47:c2:e5:c0:c8:a5:5e:b3: f3:58:87:35:d0:e2:3d:6d:c8:1c:88:ef:33:54:97:d3:6f:10: 3e:f2:a2:ac:1e:87:74:9f:7c:f8:03:26:08:a8:2d:68:a2:c6: 5f:27:bb:17:3f:cc:32:1f:e0:a6:53:5a:9f:b8:ae:4c:93:5b: 8e:f3:26:04:f3:39:8a:d4:90:5b:c6:8d:cd:c0:8c:e0:5f:03: 42:57:03:59:ad:b0:71:02:6c:4b:49:03:b3:45:92:3f:8d:b9: 49:6d:52:b1:18:7f:f1:cc:71:90:fa:0a:66:32:33:98:c8:16: 00:ca:6e:8e:3c:af:88:92:4e:85:44:d9:85:59:c4:1a:1d:8f: 74:92:46:c7:f5:e0:80:10:21:c4:b8:08:e2:8e:38:a7:cb:29: 71:f4:8e:c1:9a:ad:d3:20:07:97:db:85:1e:bc:27:d8:02:d0: b4:16:9f:b2:a3:c1:b0:08:90:45:05:af:93:15:a0:a4:bb:1a: 33:48:c2:c2:9c:fa:a6:02:da:d7:9a:13:47:2c:69:dc:33:e5: 62:0e:14:90:65:8b:43:59:1f:ce:8e:ff:8f:d8:bb:62:48:32: 84:7c:cb:24:98:38:fc:10:d6:0b:46:71:b1:63:3e:ee:66:93: bc:cf:24:91 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUW9uXJVQEAryFekXJEdaG7Klv33gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDZaFw0yNjEwMTcyMzAxMDZaMDMxMTAvBgNV BAMTKDE4NDdCRUYyNDY5MTAyRjU0Q0E1NTJGMjZCNDk2MDFDQTA0RDdFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxPAJ0Jg47pUtFEutgpkYQBhYJ sciAxXWU86bjwnl7S4iwUewAvw8BS+WBsKSSzqa+qlDEZWGD4ptstLAq6OtcijEk ULGex7io0U0RXLM9U6KD1/sGjln/bgR255WrjC3NE8lVcauaohc9ZqMfhoRyEwc0 Z0qyvhwvia8c0puHfA8obepikrtU00w3fx9cuRfNXBORGQ4l0KugzocBJMs3PyJD bRr4aX5gORbvG09GYzyhjidqVqgzD4S6RX9V7EsaLNx6M81VIDuDECXjmbeMLM5z 9gzC9YQFgkk34KjWvTcQJYTWl1PHQkunzYaOUtNwqP/eWtFq+DFMkudHV8LvAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUGEe+8kaRAvVMpVLya0lgHKBNft8wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzM4MmUzMTMxMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1fDANBgkqhkiG9w0BAQsFAAOCAQEAFOnd n98otQVnhEfC5cDIpV6z81iHNdDiPW3IHIjvM1SX028QPvKirB6HdJ98+AMmCKgt aKLGXye7Fz/MMh/gplNan7iuTJNbjvMmBPM5itSQW8aNzcCM4F8DQlcDWa2wcQJs S0kDs0WSP425SW1SsRh/8cxxkPoKZjIzmMgWAMpujjyviJJOhUTZhVnEGh2PdJJG x/XggBAhxLgI4o44p8spcfSOwZqt0yAHl9uFHrwn2ALQtBafsqPBsAiQRQWvkxWg pLsaM0jCwpz6pgLa15oTRyxp3DPlYg4UkGWLQ1kfzo7/j9i7YkgyhHzLJJg4/BDW C0ZxsWM+7maTvM8kkQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:49:07 2025 by rpki-client