$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e203238323730.roa File: 3136382e3132312e35322e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: 33UsC8aw/OxOYEv0JIbXP94zO6yi5L0XQLS5H4e6/rQ= Subject key identifier: 72:AA:2B:E5:7B:D3:2A:57:4C:39:E8:B9:5C:51:14:6C:13:BA:2D:AD Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 2094D37879058B69DCEFE7C39D3D1F8ED47C8964 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:06 +0000 ROA not before: Sat 18 Oct 2025 22:56:06 +0000 ROA not after: Sat 17 Oct 2026 23:01:06 +0000 asID: 28270 IP address blocks: 168.121.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:94:d3:78:79:05:8b:69:dc:ef:e7:c3:9d:3d:1f:8e:d4:7c:89:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:06 2025 GMT Not After : Oct 17 23:01:06 2026 GMT Subject: CN=72AA2BE57BD32A574C39E8B95C51146C13BA2DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:51:e8:54:e8:31:b7:6c:8d:2f:8e:9b:28:0b: 26:fc:8a:c2:60:9a:ad:21:9f:6a:f8:06:c2:8a:a0: f5:28:7b:82:11:5d:9e:de:3b:b2:19:0d:36:22:43: 7a:25:6b:32:ca:83:c1:fd:d4:fc:65:83:b6:31:d9: 12:62:25:64:51:62:d3:ec:74:59:d6:4a:e2:81:b3: 98:f4:19:ac:6a:42:0a:01:a9:8a:df:3b:6c:38:69: 3d:eb:d1:ad:73:99:9a:87:ce:ab:bd:d9:9b:e0:d2: a7:40:4c:45:33:b2:a9:11:cf:8a:97:e1:a0:0b:a5: 5d:b3:3e:cc:d5:65:64:c8:28:fb:f9:eb:72:78:51: d0:b1:e9:bd:8f:7a:78:cd:0a:57:11:4f:08:25:12: 65:54:93:07:a5:58:d1:46:9d:42:f5:87:6e:f2:df: 4e:c8:4b:5a:eb:7c:2a:db:1b:a7:8c:d0:f6:8c:f0: 5c:40:0a:17:13:48:9e:ad:23:b1:71:7d:57:71:07: 95:b4:e4:fe:8b:1e:94:8a:3d:ba:5d:bb:58:e1:eb: a2:97:ce:18:e0:e2:5c:d9:39:5c:72:d3:4b:5a:08: 9a:21:cd:bd:52:c4:62:1b:ef:53:2c:23:ab:5a:42: bc:d7:fc:e3:1f:9b:e9:94:31:c5:9a:e7:28:17:ec: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:2B:E5:7B:D3:2A:57:4C:39:E8:B9:5C:51:14:6C:13:BA:2D:AD X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.52.0/22 Signature Algorithm: sha256WithRSAEncryption 20:55:52:35:6f:a7:27:08:a0:10:29:6c:72:d7:ff:d3:2d:9e: 41:da:e2:51:a6:d4:7e:bf:20:86:47:ef:6e:13:8f:35:c7:96: 3b:5e:ed:d4:1a:a1:76:af:2f:ee:d1:e5:ef:3f:09:d0:06:57: 95:3c:d3:09:4a:ef:54:ef:9a:05:89:24:0b:d9:93:c9:8a:46: dd:a9:f3:5c:3a:57:90:c7:41:e6:a3:b5:e8:7f:66:49:d8:43: d3:ae:2f:19:f6:f7:63:f2:22:01:1a:2b:c9:17:c4:73:c6:49: c9:cf:83:31:fa:67:fb:38:e9:bf:e6:01:0b:15:be:fb:77:b9: f2:45:c1:f1:09:a9:72:73:50:1c:b7:fe:b3:03:05:42:2a:28: 1e:e4:01:a3:b4:46:29:5f:20:4f:82:65:57:6c:78:01:61:ae: ab:9b:8f:b9:02:6d:71:0f:90:c5:64:95:ea:27:c5:0e:9a:0c: 1e:d8:b0:f1:d7:7d:0e:00:a5:9b:b6:53:97:c4:c9:dd:7a:00: 9a:cc:dc:46:68:1a:15:18:2e:d2:a7:2b:c8:b8:c1:b1:64:3b: 6b:ab:c2:d9:06:d0:e2:5a:b1:ab:6d:66:35:e3:95:06:b2:2d: 9b:5e:d8:26:f2:23:10:e8:78:43:f6:2e:a3:52:df:7d:0a:33: 98:3a:47:bb -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUIJTTeHkFi2nc7+fDnT0fjtR8iWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDZaFw0yNjEwMTcyMzAxMDZaMDMxMTAvBgNV BAMTKDcyQUEyQkU1N0JEMzJBNTc0QzM5RThCOTVDNTExNDZDMTNCQTJEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzUehU6DG3bI0vjpsoCyb8isJg mq0hn2r4BsKKoPUoe4IRXZ7eO7IZDTYiQ3olazLKg8H91Pxlg7Yx2RJiJWRRYtPs dFnWSuKBs5j0GaxqQgoBqYrfO2w4aT3r0a1zmZqHzqu92Zvg0qdATEUzsqkRz4qX 4aALpV2zPszVZWTIKPv563J4UdCx6b2PenjNClcRTwglEmVUkwelWNFGnUL1h27y 307IS1rrfCrbG6eM0PaM8FxAChcTSJ6tI7FxfVdxB5W05P6LHpSKPbpdu1jh66KX zhjg4lzZOVxy00taCJohzb1SxGIb71MsI6taQrzX/OMfm+mUMcWa5ygX7Ob9AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUcqor5XvTKldMOei5XFEUbBO6La0wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNjM4MmUzMTMyMzEyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4 MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqHk0MA0GCSqGSIb3DQEBCwUAA4IBAQAgVVI1b6cn CKAQKWxy1//TLZ5B2uJRptR+vyCGR+9uE481x5Y7Xu3UGqF2ry/u0eXvPwnQBleV PNMJSu9U75oFiSQL2ZPJikbdqfNcOleQx0Hmo7Xof2ZJ2EPTri8Z9vdj8iIBGivJ F8RzxknJz4Mx+mf7OOm/5gELFb77d7nyRcHxCalyc1Act/6zAwVCKige5AGjtEYp XyBPgmVXbHgBYa6rm4+5Am1xD5DFZJXqJ8UOmgwe2LDx130OAKWbtlOXxMndegCa zNxGaBoVGC7SpyvIuMGxZDtrq8LZBtDiWrGrbWY145UGsi2bXtgm8iMQ6HhD9i6j Ut99CjOYOke7 -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:20 2025 by rpki-client