$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323230.roa File: 3133382e3132312e3232302e302f32322d3232203d3e203238323230.roa (raw, json) Hash identifier: DauYsbxnS5N682E62DPkaESHU7pCgVsRymsy9VpHgLk= Subject key identifier: F4:FC:A0:9F:E1:56:9F:AA:0F:99:23:B7:FE:4F:4F:FD:B8:D0:43:CB Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 55E7E8C5965D71F84F3CEF9D7C8C25708913C661 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323230.roa Signing time: Sat 18 Oct 2025 23:01:04 +0000 ROA not before: Sat 18 Oct 2025 22:56:04 +0000 ROA not after: Sat 17 Oct 2026 23:01:04 +0000 asID: 28220 IP address blocks: 138.121.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e7:e8:c5:96:5d:71:f8:4f:3c:ef:9d:7c:8c:25:70:89:13:c6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:04 2025 GMT Not After : Oct 17 23:01:04 2026 GMT Subject: CN=F4FCA09FE1569FAA0F9923B7FE4F4FFDB8D043CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:66:78:18:de:6a:fa:bb:21:73:5a:51:c4: a4:40:cb:78:f9:f6:51:8e:b3:5d:bd:8f:5f:9f:8f: 99:1f:57:48:40:a1:06:94:b8:e7:b9:df:97:06:3b: 93:e6:4b:a5:a1:9b:20:d4:22:b8:eb:a0:d0:ef:60: 80:f8:2b:1c:5a:c7:23:e5:06:65:63:ce:f5:84:09: 81:d8:48:b3:28:42:31:2d:14:a4:75:63:bc:63:83: bb:a0:76:ed:e2:c4:08:f8:b6:5b:22:cd:05:7a:f5: f5:d6:8e:66:fe:ee:26:f2:00:fd:b8:1d:eb:97:2f: ad:cd:18:c5:97:01:c1:23:dc:9f:dc:15:c9:dd:4a: 7f:0a:5e:77:8a:b8:95:14:5a:8a:26:c2:76:d7:f2: 96:1e:26:ab:76:4b:62:e9:43:b4:d2:3c:1f:5d:d7: ab:79:9f:b0:52:49:0b:9e:2c:e7:cf:87:c4:fc:ce: d3:29:b3:78:11:40:70:34:9c:ca:1a:c1:75:3d:72: 16:06:5e:52:4c:c3:a0:ea:d1:63:df:db:16:eb:0d: de:cf:73:7c:48:e1:ad:2a:3f:eb:8a:79:ce:70:15: 72:dc:96:50:d7:61:14:96:30:b6:f9:2a:8a:00:70: 72:46:51:44:03:15:24:56:9c:cd:fa:34:b3:f6:89: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:A0:9F:E1:56:9F:AA:0F:99:23:B7:FE:4F:4F:FD:B8:D0:43:CB X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32322d3232203d3e203238323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.220.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:38:48:29:ec:76:7b:fa:33:99:e8:55:08:5b:11:70:7f:21: 2b:76:fd:84:d7:de:e9:67:67:d8:a8:49:cd:00:4e:bc:0b:6f: be:72:47:0a:bc:aa:e9:a5:50:ca:a0:f1:ca:d5:d8:bf:06:50: 84:40:35:be:03:1e:07:22:39:1a:a4:7f:3e:87:31:41:37:26: 0e:7f:88:06:5a:97:98:55:d2:09:1c:99:61:54:85:01:95:4c: be:7f:b7:31:b1:db:0d:02:cd:d9:10:d3:e9:50:99:ab:46:de: 2e:a5:97:cd:65:70:26:90:76:dc:1c:d1:b2:b0:a0:75:37:43: 6c:91:a5:c0:e4:44:61:39:36:58:e2:10:da:ce:57:35:4d:fa: 1b:12:fe:01:c9:e8:9f:4f:0e:a1:81:8c:2e:82:30:de:b0:68: e2:f4:bb:0a:b4:b6:0b:19:85:77:d9:40:be:33:65:d5:9e:66: 0d:38:bc:ea:97:e5:68:0f:6f:6b:71:e6:76:fe:72:b2:a2:9c: f7:54:14:cb:90:52:68:7a:b0:bc:81:bb:d7:3d:af:75:44:96: 39:d3:e6:95:51:f5:c7:52:6f:39:00:51:e5:ad:5a:20:7c:a4: f7:78:d8:92:dc:92:37:cc:9c:04:d1:ab:6f:88:f7:f5:88:fa: c0:71:7c:b1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUVefoxZZdcfhPPO+dfIwlcIkTxmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDRaFw0yNjEwMTcyMzAxMDRaMDMxMTAvBgNV BAMTKEY0RkNBMDlGRTE1NjlGQUEwRjk5MjNCN0ZFNEY0RkZEQjhEMDQzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qmZ4GN5q+rshc1pRxKRAy3j5 9lGOs129j1+fj5kfV0hAoQaUuOe535cGO5PmS6WhmyDUIrjroNDvYID4KxxaxyPl BmVjzvWECYHYSLMoQjEtFKR1Y7xjg7ugdu3ixAj4tlsizQV69fXWjmb+7ibyAP24 HeuXL63NGMWXAcEj3J/cFcndSn8KXneKuJUUWoomwnbX8pYeJqt2S2LpQ7TSPB9d 16t5n7BSSQueLOfPh8T8ztMps3gRQHA0nMoawXU9chYGXlJMw6Dq0WPf2xbrDd7P c3xI4a0qP+uKec5wFXLcllDXYRSWMLb5KooAcHJGUUQDFSRWnM36NLP2iXNnAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU9Pygn+FWn6oPmSO3/k9P/bjQQ8swHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzM4MmUzMTMyMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKedwwDQYJKoZIhvcNAQELBQADggEBAFs4SCns dnv6M5noVQhbEXB/ISt2/YTX3ulnZ9ioSc0ATrwLb75yRwq8qumlUMqg8crV2L8G UIRANb4DHgciORqkfz6HMUE3Jg5/iAZal5hV0gkcmWFUhQGVTL5/tzGx2w0CzdkQ 0+lQmatG3i6ll81lcCaQdtwc0bKwoHU3Q2yRpcDkRGE5NljiENrOVzVN+hsS/gHJ 6J9PDqGBjC6CMN6waOL0uwq0tgsZhXfZQL4zZdWeZg04vOqX5WgPb2tx5nb+crKi nPdUFMuQUmh6sLyBu9c9r3VEljnT5pVR9cdSbzkAUeWtWiB8pPd42JLckjfMnATR q2+I9/WI+sBxfLE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:58:23 2025 by rpki-client