$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3234203d3e203238323230.roa File: 3133382e3132322e3233362e302f32322d3234203d3e203238323230.roa (raw, json) Hash identifier: E9EOn3KOfJNCOKei86w0P1hD5lI0Ym45j3PWzSxH3Gc= Subject key identifier: BD:B6:0B:72:7C:75:EC:04:09:E2:79:F1:85:60:CD:69:F2:44:88:C1 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 34EFC74C85C9D3B6AE83DD7B6EB7513C1601BF27 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3234203d3e203238323230.roa Signing time: Sat 18 Oct 2025 23:01:01 +0000 ROA not before: Sat 18 Oct 2025 22:56:01 +0000 ROA not after: Sat 17 Oct 2026 23:01:01 +0000 asID: 28220 IP address blocks: 138.122.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ef:c7:4c:85:c9:d3:b6:ae:83:dd:7b:6e:b7:51:3c:16:01:bf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:01 2025 GMT Not After : Oct 17 23:01:01 2026 GMT Subject: CN=BDB60B727C75EC0409E279F18560CD69F24488C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:1b:0a:ef:0e:b8:e9:c7:8d:b2:a7:6e:0d: eb:0c:75:9f:59:75:ac:a5:f9:66:76:db:78:3a:e1: ab:c5:23:ae:74:bc:e5:28:12:cc:b0:a8:f5:e2:75: 72:39:06:48:7c:ae:3a:c2:90:b1:8c:23:85:91:b8: 17:26:dd:64:9a:24:a4:87:36:14:76:16:80:36:f7: 4f:b7:98:1f:2b:52:2a:60:3d:0a:74:5f:16:51:ec: 6c:04:e8:bc:57:13:80:a5:f8:a5:4c:67:ca:8b:51: cd:54:66:a5:d6:67:9c:de:37:d6:5b:98:52:bb:9b: 99:79:98:5c:fd:e7:4c:1c:a2:3a:39:af:24:31:b5: ad:31:8a:09:b4:12:ee:db:df:f6:b0:f1:39:e8:2b: 20:41:37:89:29:71:2a:06:7a:1c:71:6c:6b:f1:d2: 56:d1:c5:27:bc:44:0a:48:91:9c:ad:7f:18:31:62: c9:1c:a2:f8:4e:0f:86:d1:c6:ca:ab:2f:fa:34:a0: 78:f8:0a:73:0c:b4:26:7f:1b:06:b0:7c:60:18:e6: d1:a8:56:1f:d5:98:f5:33:94:21:e6:7d:86:ad:a6: c9:38:3d:b3:bf:07:85:54:5f:8e:a3:7f:93:75:53: 0b:94:97:a8:f0:34:3c:56:8d:45:d6:a5:5e:69:82: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B6:0B:72:7C:75:EC:04:09:E2:79:F1:85:60:CD:69:F2:44:88:C1 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32322d3234203d3e203238323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.236.0/22 Signature Algorithm: sha256WithRSAEncryption 37:03:65:d6:29:d2:b9:05:e3:bd:67:9a:0c:e5:c9:8e:54:26: 1a:44:cf:1d:09:db:dc:41:c8:27:27:8c:25:6a:b9:8c:8b:f6: ee:64:63:70:cb:0f:ea:88:c2:48:2d:ab:4e:55:91:03:a7:4c: 95:52:68:ee:02:1a:de:3b:34:f4:68:ab:1c:60:3f:47:f9:f8: a5:d0:5a:2a:6e:73:cf:b7:94:bd:7b:5b:ff:18:6b:72:32:47: ec:fb:cb:01:7f:7d:3d:2e:b9:e9:79:99:89:e1:b2:9d:01:f7: 6c:32:77:9a:4a:d4:a5:a7:9c:fe:72:b5:dc:1f:85:82:15:77: 9d:95:d5:88:a8:f1:4d:08:e7:f9:d6:3f:11:c1:68:b4:ee:46: be:fd:bb:09:cd:e7:69:3f:70:4a:9a:e5:24:22:89:4e:9d:8c: 2b:50:1c:1d:2a:7a:d1:0c:7e:aa:b3:9c:ef:c8:ac:fd:e9:0b: 83:43:2d:4f:44:37:18:24:29:6a:75:c5:2f:62:de:07:4a:27: 9c:01:b9:76:81:dc:4a:2d:da:82:27:57:a3:e4:1d:47:88:66: 3b:a6:08:94:b0:83:eb:80:cb:cb:22:07:24:1a:6c:c7:c6:92: 4a:a2:40:f7:2b:b7:b8:6a:a4:1a:04:07:de:af:29:78:6f:9c: 65:5a:d6:55 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUNO/HTIXJ07aug917brdRPBYBvycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDFaFw0yNjEwMTcyMzAxMDFaMDMxMTAvBgNV BAMTKEJEQjYwQjcyN0M3NUVDMDQwOUUyNzlGMTg1NjBDRDY5RjI0NDg4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6RsK7w646ceNsqduDesMdZ9Z dayl+WZ223g64avFI650vOUoEsywqPXidXI5Bkh8rjrCkLGMI4WRuBcm3WSaJKSH NhR2FoA290+3mB8rUipgPQp0XxZR7GwE6LxXE4Cl+KVMZ8qLUc1UZqXWZ5zeN9Zb mFK7m5l5mFz950wcojo5ryQxta0xigm0Eu7b3/aw8TnoKyBBN4kpcSoGehxxbGvx 0lbRxSe8RApIkZytfxgxYskcovhOD4bRxsqrL/o0oHj4CnMMtCZ/GwawfGAY5tGo Vh/VmPUzlCHmfYatpsk4PbO/B4VUX46jf5N1UwuUl6jwNDxWjUXWpV5pgqsDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUvbYLcnx17AQJ4nnxhWDNafJEiMEwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzMzM4MmUzMTMyMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKeuwwDQYJKoZIhvcNAQELBQADggEBADcDZdYp 0rkF471nmgzlyY5UJhpEzx0J29xByCcnjCVquYyL9u5kY3DLD+qIwkgtq05VkQOn TJVSaO4CGt47NPRoqxxgP0f5+KXQWipuc8+3lL17W/8Ya3IyR+z7ywF/fT0uuel5 mYnhsp0B92wyd5pK1KWnnP5ytdwfhYIVd52V1Yio8U0I5/nWPxHBaLTuRr79uwnN 52k/cEqa5SQiiU6djCtQHB0qetEMfqqznO/IrP3pC4NDLU9ENxgkKWp1xS9i3gdK J5wBuXaB3Eot2oInV6PkHUeIZjumCJSwg+uAy8siByQabMfGkkqiQPcrt7hqpBoE B96vKXhvnGVa1lU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:58:02 2025 by rpki-client