$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa File: 3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa (raw, json) Hash identifier: 4mu/HXIAEaAIVlUnhOtxW1hAozgDnrkPxz8p+7dyVTU= Subject key identifier: 7A:EB:A3:D1:89:6F:F6:2D:C7:58:8B:83:AA:75:14:7A:1A:FC:75:99 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 4DE4C6466AB7401F25478EC2271E2E698A77DBD4 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa Signing time: Sat 18 Oct 2025 23:01:04 +0000 ROA not before: Sat 18 Oct 2025 22:56:04 +0000 ROA not after: Sat 17 Oct 2026 23:01:04 +0000 asID: 262509 IP address blocks: 168.121.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e4:c6:46:6a:b7:40:1f:25:47:8e:c2:27:1e:2e:69:8a:77:db:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:04 2025 GMT Not After : Oct 17 23:01:04 2026 GMT Subject: CN=7AEBA3D1896FF62DC7588B83AA75147A1AFC7599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:a1:1d:e0:a4:79:b1:92:09:6a:7f:50:0d: 27:c5:e8:c5:45:9f:52:be:ac:7a:1d:ca:33:f1:56: 9b:9d:22:42:77:94:ec:44:09:f7:06:d6:37:ae:53: da:64:98:05:dc:6d:5f:42:f8:7f:61:ab:52:f2:60: a0:08:46:17:90:50:ed:86:e8:6a:5e:79:de:c2:9a: d9:0c:cc:d8:53:ba:8c:67:8a:f5:6d:9f:7f:eb:83: 5a:f6:27:14:f1:65:12:19:c7:83:0e:80:57:ca:5f: 21:2c:ef:9c:64:0d:d2:48:0a:83:b1:e6:95:e4:7e: 97:9d:e3:e3:c3:c0:7d:b4:9d:8a:06:61:ec:74:2c: 02:4c:c5:91:a0:d0:8e:20:aa:5f:6c:48:36:73:8b: ae:8b:4d:51:0c:21:75:47:77:56:2c:32:23:33:91: a2:eb:cc:2d:af:ce:60:0c:b3:91:d3:a4:54:25:c0: d5:dc:23:8c:ba:65:7b:49:82:ae:04:e5:15:9f:a1: 66:52:b0:e7:b1:6c:2d:07:11:93:ad:c5:e4:c1:0a: f2:94:5b:79:b9:47:be:bd:bc:c9:b8:b4:1d:0b:47: 64:46:13:aa:bc:81:25:49:c0:35:67:11:14:d8:a5: 48:b8:f9:62:b7:53:49:1d:0c:9c:63:45:2a:c6:60: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:A3:D1:89:6F:F6:2D:C7:58:8B:83:AA:75:14:7A:1A:FC:75:99 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.52.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:b1:8b:07:00:22:cc:f9:c2:3b:2d:77:6b:f0:2d:a9:75:14: 7f:5a:64:45:f1:f6:8b:84:15:f1:da:38:91:8f:a5:81:cb:41: bb:47:ad:1b:f0:91:c3:89:0d:3e:00:10:fb:5c:66:8c:bf:d1: 7e:b0:9c:f2:41:79:df:ae:5a:31:48:05:f5:6d:b7:d1:8c:61: db:1b:08:61:77:83:81:16:b8:42:94:57:e5:8b:5c:9e:96:3f: 75:1f:a4:47:ce:1a:4f:28:ba:57:d7:de:dc:14:54:46:9b:a5: 9b:b4:b1:98:68:cd:bc:86:8c:3f:99:c5:28:2c:04:7f:9c:a5: a1:c7:a9:9f:e7:13:e9:cb:81:f3:e3:01:87:d4:e8:e4:20:1e: 6d:c7:44:28:c3:dc:ab:db:e1:b2:84:e0:52:3f:8f:f5:36:e7: 45:23:5d:61:59:1f:0a:1b:17:77:c6:10:85:e7:8c:eb:43:2a: 18:3d:13:02:66:1f:ca:b8:37:c9:8f:6e:ec:7b:e8:6a:02:46: e3:0b:2e:c8:8e:49:a7:be:c6:9f:15:1f:21:1d:66:a9:2a:b7: 7a:c1:44:57:ca:7e:b4:ba:50:c3:43:83:70:b6:dc:c9:47:d2: e1:e5:03:c7:c0:ca:d6:18:c2:e3:82:44:a5:d6:f8:d5:98:23: e4:31:06:3d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTeTGRmq3QB8lR47CJx4uaYp329QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDRaFw0yNjEwMTcyMzAxMDRaMDMxMTAvBgNV BAMTKDdBRUJBM0QxODk2RkY2MkRDNzU4OEI4M0FBNzUxNDdBMUFGQzc1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yKEd4KR5sZIJan9QDSfF6MVF n1K+rHodyjPxVpudIkJ3lOxECfcG1jeuU9pkmAXcbV9C+H9hq1LyYKAIRheQUO2G 6Gpeed7CmtkMzNhTuoxnivVtn3/rg1r2JxTxZRIZx4MOgFfKXyEs75xkDdJICoOx 5pXkfped4+PDwH20nYoGYex0LAJMxZGg0I4gql9sSDZzi66LTVEMIXVHd1YsMiMz kaLrzC2vzmAMs5HTpFQlwNXcI4y6ZXtJgq4E5RWfoWZSsOexbC0HEZOtxeTBCvKU W3m5R769vMm4tB0LR2RGE6q8gSVJwDVnERTYpUi4+WK3U0kdDJxjRSrGYDoTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUeuuj0Ylv9i3HWIuDqnUUehr8dZkwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNjM4MmUzMTMyMzEyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKoeTQwDQYJKoZIhvcNAQELBQADggEBAIqxiwcA Isz5wjstd2vwLal1FH9aZEXx9ouEFfHaOJGPpYHLQbtHrRvwkcOJDT4AEPtcZoy/ 0X6wnPJBed+uWjFIBfVtt9GMYdsbCGF3g4EWuEKUV+WLXJ6WP3UfpEfOGk8oulfX 3twUVEabpZu0sZhozbyGjD+ZxSgsBH+cpaHHqZ/nE+nLgfPjAYfU6OQgHm3HRCjD 3Kvb4bKE4FI/j/U250UjXWFZHwobF3fGEIXnjOtDKhg9EwJmH8q4N8mPbux76GoC RuMLLsiOSae+xp8VHyEdZqkqt3rBRFfKfrS6UMNDg3C23MlH0uHlA8fAytYYwuOC RKXW+NWYI+QxBj0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:20 2025 by rpki-client