$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa File: 3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: 3xWVWpe6F8PEak9kWyM9EQ3pwi4mlovPBjEB2WhuY2E= Subject key identifier: 43:F4:2C:72:09:B1:FD:20:70:DE:28:0E:BB:40:BB:A1:E1:1B:F8:42 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 5FE4A9B232A6013FE4A1EB8ED91853A11122AFAB Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:01 +0000 ROA not before: Sat 18 Oct 2025 22:56:01 +0000 ROA not after: Sat 17 Oct 2026 23:01:01 +0000 asID: 28270 IP address blocks: 143.255.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e4:a9:b2:32:a6:01:3f:e4:a1:eb:8e:d9:18:53:a1:11:22:af:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:01 2025 GMT Not After : Oct 17 23:01:01 2026 GMT Subject: CN=43F42C7209B1FD2070DE280EBB40BBA1E11BF842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:ff:82:eb:7d:9b:89:b8:0c:90:fc:eb:b9: f3:9b:5b:c7:6d:56:f0:11:00:5a:94:86:c7:c0:3f: 1a:6d:3e:de:8d:9d:0c:83:e9:ef:94:d5:ed:b1:9b: 9a:b9:55:4f:9d:cf:ba:30:63:a3:9f:1c:ca:6d:ca: ea:a5:d0:78:c3:40:25:bf:dd:bb:4e:3e:f4:35:0f: dd:c7:4c:85:65:f9:39:83:52:06:e1:d0:d9:e2:ed: d2:14:16:dd:dd:7a:ce:a7:dd:eb:4f:f3:35:b4:9e: 06:06:3a:b2:37:5e:bb:1c:bc:06:b0:6e:db:b8:7d: 41:8b:b1:9d:fd:66:84:82:fb:b6:68:69:ad:8d:ca: 04:6d:ab:c5:88:68:26:8c:dd:b3:00:a5:56:f2:69: dd:75:9c:c8:79:15:0e:49:7f:9a:80:bd:9a:ed:37: f7:12:31:35:ed:22:fd:b3:06:75:98:5f:cf:64:2c: 63:61:4c:18:74:28:bf:9e:6d:46:34:f0:d7:03:df: f2:ad:58:81:97:ba:cc:0b:b2:93:94:b8:f5:ac:c9: a2:e1:b0:5a:2b:6e:b4:d2:62:76:c3:f0:05:92:57: a6:7a:5d:62:e8:0d:7b:1b:af:5e:f9:03:4e:0c:1d: 70:78:2e:27:9d:19:8d:db:a6:2a:d6:83:56:6a:e8: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F4:2C:72:09:B1:FD:20:70:DE:28:0E:BB:40:BB:A1:E1:1B:F8:42 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.112.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:fa:58:a0:9f:8a:7a:77:82:2a:c9:5b:0b:b6:b7:94:3b:24: b6:78:b7:93:0a:f2:be:a9:86:47:46:74:cd:ab:62:80:8c:57: ad:d0:8d:bc:bd:5d:fe:9a:83:df:bd:08:de:a4:0f:68:92:65: 13:93:42:ec:15:6d:86:ac:03:4a:9c:2e:79:12:f4:05:55:6a: ad:ca:09:72:8a:09:79:08:fc:39:a7:46:35:00:f7:1f:3b:f6: ed:58:e1:7f:a2:e1:94:27:30:45:3f:c3:0e:e4:94:a8:81:cd: fc:da:cd:ce:54:4f:a5:5b:54:a7:35:6c:67:87:98:44:9b:07: 9f:ea:ef:e0:09:03:d4:d2:03:6c:81:c0:57:14:d7:14:c1:bb: 93:db:c2:1e:bc:87:06:8b:53:4f:6f:97:59:96:50:8e:3c:f7: ee:b3:55:29:60:52:e8:b0:9e:e5:b5:90:c8:04:00:54:b0:fb: 92:55:5d:0d:36:64:1a:92:74:27:2c:7d:e0:b4:ea:99:60:79: 49:02:fc:36:46:bc:47:18:4a:5d:46:2c:46:e8:b7:e4:14:d7: 38:fc:e1:87:1d:7a:bb:9a:d7:d4:1e:6d:7e:f4:5f:9b:29:7e: 39:03:d0:64:36:25:a0:ee:77:c9:d4:ad:42:73:5c:04:34:07: 7e:d4:a0:34 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUX+SpsjKmAT/koeuO2RhToREir6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDFaFw0yNjEwMTcyMzAxMDFaMDMxMTAvBgNV BAMTKDQzRjQyQzcyMDlCMUZEMjA3MERFMjgwRUJCNDBCQkExRTExQkY4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDNP+C632bibgMkPzrufObW8dt VvARAFqUhsfAPxptPt6NnQyD6e+U1e2xm5q5VU+dz7owY6OfHMptyuql0HjDQCW/ 3btOPvQ1D93HTIVl+TmDUgbh0Nni7dIUFt3des6n3etP8zW0ngYGOrI3XrscvAaw btu4fUGLsZ39ZoSC+7Zoaa2NygRtq8WIaCaM3bMApVbyad11nMh5FQ5Jf5qAvZrt N/cSMTXtIv2zBnWYX89kLGNhTBh0KL+ebUY08NcD3/KtWIGXuswLspOUuPWsyaLh sForbrTSYnbD8AWSV6Z6XWLoDXsbr175A04MHXB4LiedGY3bpirWg1Zq6JLVAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQ/Qscgmx/SBw3igOu0C7oeEb+EIwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNDMzMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKP/3AwDQYJKoZIhvcNAQELBQADggEBACr6WKCf inp3girJWwu2t5Q7JLZ4t5MK8r6phkdGdM2rYoCMV63Qjby9Xf6ag9+9CN6kD2iS ZROTQuwVbYasA0qcLnkS9AVVaq3KCXKKCXkI/DmnRjUA9x879u1Y4X+i4ZQnMEU/ ww7klKiBzfzazc5UT6VbVKc1bGeHmESbB5/q7+AJA9TSA2yBwFcU1xTBu5Pbwh68 hwaLU09vl1mWUI489+6zVSlgUuiwnuW1kMgEAFSw+5JVXQ02ZBqSdCcsfeC06plg eUkC/DZGvEcYSl1GLEbot+QU1zj84Ycderua19QebX70X5spfjkD0GQ2JaDud8nU rUJzXAQ0B37UoDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:44:40 2025 by rpki-client