$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa File: 3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa (raw, json) Hash identifier: lqLHp+7XcAH3nHI+XrQcEw9plsMuwmTC9NE9YFcVCQc= Subject key identifier: C0:C3:98:B7:93:F3:EF:7D:F0:1B:B6:FA:6A:B7:0D:BF:68:D1:A8:D4 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 47DBAFF65B6A4504AFE048E5A27FC27CC3FA325D Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:03 +0000 ROA not before: Sat 18 Oct 2025 22:56:03 +0000 ROA not after: Sat 17 Oct 2026 23:01:03 +0000 asID: 28270 IP address blocks: 138.121.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:af:f6:5b:6a:45:04:af:e0:48:e5:a2:7f:c2:7c:c3:fa:32:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:03 2025 GMT Not After : Oct 17 23:01:03 2026 GMT Subject: CN=C0C398B793F3EF7DF01BB6FA6AB70DBF68D1A8D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:e8:88:52:3a:36:e0:fa:fb:85:38:b9:38: 31:ff:e6:f7:f1:41:f4:91:91:e7:98:b1:31:bb:df: 08:43:4e:b7:0f:77:69:c6:23:6f:e1:c6:7f:db:ae: 04:a5:c1:08:1c:9a:f9:71:5d:65:9d:98:4a:ce:09: 31:a3:aa:9f:8f:62:8a:14:34:a4:5a:57:70:47:9b: 80:a7:d4:ca:74:e0:d4:6a:90:21:1d:19:36:66:fb: e0:d6:73:b0:3f:70:29:25:6e:75:d4:78:94:8e:b5: 70:da:5d:ec:22:08:17:98:cb:c9:fa:e4:8c:2e:e5: 23:a0:ba:c5:9a:c3:6c:b7:c3:98:c8:2e:61:d5:12: df:c1:9e:b8:dd:77:a8:85:48:67:02:58:05:79:6c: 78:7d:fc:5b:36:b0:7f:c8:28:55:36:cb:8a:fa:4b: 7e:a2:0b:91:d1:6d:f2:5c:73:77:7d:6a:fd:42:d3: 91:a3:de:de:65:ef:86:ee:8d:f8:1c:f4:3a:4b:7a: 1c:15:c7:c4:6c:21:59:a7:2c:bb:d5:87:ee:ed:05: 36:e5:b9:f5:94:34:38:dc:79:f5:47:41:86:f9:a9: a8:05:13:2e:53:e2:b3:45:ee:2f:f8:81:ee:08:aa: 92:c4:f4:ea:fb:10:45:92:41:2f:8c:57:a7:48:77: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:98:B7:93:F3:EF:7D:F0:1B:B6:FA:6A:B7:0D:BF:68:D1:A8:D4 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.220.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:95:6d:85:71:cf:bf:f1:01:a4:58:c7:53:97:70:f9:65:c0: f3:ef:e2:e3:1b:b7:eb:f4:f6:ed:00:0c:d2:af:51:de:aa:a2: 29:47:ec:e9:4b:4b:56:2e:7d:d6:f8:fc:bc:0e:1b:bf:39:70: d0:ec:7a:f8:cd:6e:91:86:25:4f:b7:ad:7a:d0:5b:82:08:50: 18:99:89:94:7a:b5:8c:c2:b4:59:16:7f:0e:d3:13:af:9f:c9: d6:8c:cd:76:a1:26:14:8e:41:bf:ca:9f:d8:aa:27:bf:ee:77: 8f:26:4f:c7:3f:1b:40:e9:0b:cc:8c:d8:09:01:21:b0:55:14: 99:b7:7e:89:78:66:db:08:76:b7:5c:63:1c:5a:d6:4e:cc:51: fa:b3:26:ca:1d:9a:98:66:82:b7:98:4a:56:18:ca:10:e6:3d: d2:e9:c5:69:65:6d:b2:13:96:c1:cf:18:08:93:b0:74:fa:b4: 77:12:41:db:b2:28:be:f5:a6:4e:d6:19:5e:e7:6e:1d:99:c9: b3:ea:d7:a2:03:ea:03:2a:34:d8:0b:93:de:b6:24:ca:28:22: e6:69:6f:c2:d9:b3:d9:e6:e3:c1:2d:2c:7d:3a:99:f1:57:85: 8c:c7:7e:98:0d:f1:af:56:fa:02:4c:75:99:e7:67:93:83:c6: ee:85:cb:a7 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUR9uv9ltqRQSv4Ejlon/CfMP6Ml0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDNaFw0yNjEwMTcyMzAxMDNaMDMxMTAvBgNV BAMTKEMwQzM5OEI3OTNGM0VGN0RGMDFCQjZGQTZBQjcwREJGNjhEMUE4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshOiIUjo24Pr7hTi5ODH/5vfx QfSRkeeYsTG73whDTrcPd2nGI2/hxn/brgSlwQgcmvlxXWWdmErOCTGjqp+PYooU NKRaV3BHm4Cn1Mp04NRqkCEdGTZm++DWc7A/cCklbnXUeJSOtXDaXewiCBeYy8n6 5Iwu5SOgusWaw2y3w5jILmHVEt/Bnrjdd6iFSGcCWAV5bHh9/Fs2sH/IKFU2y4r6 S36iC5HRbfJcc3d9av1C05Gj3t5l74bujfgc9DpLehwVx8RsIVmnLLvVh+7tBTbl ufWUNDjcefVHQYb5qagFEy5T4rNF7i/4ge4IqpLE9Or7EEWSQS+MV6dId7frAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUwMOYt5Pz733wG7b6arcNv2jRqNQwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzM4MmUzMTMyMzEyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKedwwDQYJKoZIhvcNAQELBQADggEBAGqVbYVx z7/xAaRYx1OXcPllwPPv4uMbt+v09u0ADNKvUd6qoilH7OlLS1Yufdb4/LwOG785 cNDsevjNbpGGJU+3rXrQW4IIUBiZiZR6tYzCtFkWfw7TE6+fydaMzXahJhSOQb/K n9iqJ7/ud48mT8c/G0DpC8yM2AkBIbBVFJm3fol4ZtsIdrdcYxxa1k7MUfqzJsod mphmgreYSlYYyhDmPdLpxWllbbITlsHPGAiTsHT6tHcSQduyKL71pk7WGV7nbh2Z ybPq16ID6gMqNNgLk962JMooIuZpb8LZs9nm48EtLH06mfFXhYzHfpgN8a9W+gJM dZnnZ5ODxu6Fy6c= -----END CERTIFICATE-----Generated at Tue Oct 21 00:40:44 2025 by rpki-client