$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa File: 3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: ZOcDwd5hzuz0J8drwGi03x9agkb94dhg/FMYQAXrAx4= Subject key identifier: FC:C3:91:2D:D1:6B:A3:7C:DF:AE:03:57:DE:27:F9:70:71:DA:3F:A9 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 2EAEAF8B1CD42102A7B434C1BA23E8C287992863 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:02 +0000 ROA not before: Sat 18 Oct 2025 22:56:02 +0000 ROA not after: Sat 17 Oct 2026 23:01:02 +0000 asID: 28270 IP address blocks: 168.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ae:af:8b:1c:d4:21:02:a7:b4:34:c1:ba:23:e8:c2:87:99:28:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:02 2025 GMT Not After : Oct 17 23:01:02 2026 GMT Subject: CN=FCC3912DD16BA37CDFAE0357DE27F97071DA3FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:31:77:82:ea:d2:ed:25:86:5b:77:ed:d3: 3e:02:83:c7:57:fa:d3:fe:8d:85:dd:f7:e2:77:a8: fb:cc:73:d0:c1:fb:c5:43:e4:f5:49:ae:b7:79:d7: 24:d3:ce:03:7c:d2:19:48:99:34:43:37:16:de:b0: 59:a3:ed:09:41:18:3b:7d:de:6d:8d:0e:94:b5:d0: 0e:66:62:ad:cc:53:f6:25:cc:28:4e:b6:09:ce:5e: 59:c3:78:54:d0:a9:d4:10:12:27:e0:dc:14:f9:ec: 09:d1:53:42:be:47:50:d1:e6:88:a6:d8:f7:bd:0d: 88:b5:e5:1a:9c:96:b7:f0:33:34:9a:d2:ec:cc:7d: 5c:a4:82:2e:85:a4:0f:26:14:5a:10:99:f8:f9:7e: 1b:c7:49:c7:c2:dd:c5:93:e9:b7:54:f5:45:79:a8: df:da:a1:b4:e9:5c:f9:73:c6:7e:54:e9:65:d9:a3: e0:19:93:f7:cb:1e:1d:e9:25:03:b9:0d:8d:76:28: 38:07:5b:a1:c3:83:47:67:c9:41:1a:b6:30:8a:27: d1:09:71:97:51:f5:1c:8e:6f:81:53:e3:5c:9a:f5: 9e:e1:4b:a9:aa:fd:55:9b:bf:19:7e:a5:34:e9:25: 5e:99:43:88:18:06:d1:04:d8:6e:b5:4c:1d:31:65: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C3:91:2D:D1:6B:A3:7C:DF:AE:03:57:DE:27:F9:70:71:DA:3F:A9 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232382e3132382e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.128.0/22 Signature Algorithm: sha256WithRSAEncryption bc:40:41:0b:83:62:c3:5f:47:0a:ef:94:80:7c:0b:86:df:69: 70:98:2d:83:83:fb:69:76:cb:f9:ba:93:52:0d:53:ae:0d:c9: a6:3b:b7:c9:f6:b4:5a:61:d6:b7:29:5c:5c:29:c8:e4:66:b9: f8:3a:88:21:5c:e2:4d:46:b0:7c:cd:77:b3:35:cd:5d:88:9e: 22:f4:7c:2c:1c:bb:71:5f:42:0e:a7:fd:a1:dd:ee:13:53:1d: 4c:c0:44:d0:01:0f:fd:a4:b9:88:82:c4:27:f9:81:d9:b2:b6: fa:b6:62:a8:b0:89:c7:33:e5:e4:90:58:88:32:d0:c6:bf:f1: dd:f1:50:80:43:b9:de:91:5c:fa:8b:40:c8:ab:92:41:84:b2: e2:24:e0:61:8b:91:16:fd:11:20:14:47:ec:6a:11:17:56:b9: 92:bc:96:11:45:df:b5:55:6f:04:aa:3a:eb:d8:d4:09:02:44: 8c:4e:0e:29:b8:ca:75:d6:9c:4f:42:5e:b3:8b:d9:37:6b:5c: 31:34:7c:9f:48:33:67:71:fa:18:27:21:05:42:13:d3:57:ec: 5c:27:6a:6f:f0:2b:82:26:1e:c4:d1:23:7f:8b:8d:85:c5:af: 3f:31:c7:8a:e5:79:03:93:1d:db:1f:3e:c9:a2:7c:5f:71:a8: 72:47:af:9a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIULq6vixzUIQKntDTBuiPowoeZKGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDJaFw0yNjEwMTcyMzAxMDJaMDMxMTAvBgNV BAMTKEZDQzM5MTJERDE2QkEzN0NERkFFMDM1N0RFMjdGOTcwNzFEQTNGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvjF3gurS7SWGW3ft0z4Cg8dX +tP+jYXd9+J3qPvMc9DB+8VD5PVJrrd51yTTzgN80hlImTRDNxbesFmj7QlBGDt9 3m2NDpS10A5mYq3MU/YlzChOtgnOXlnDeFTQqdQQEifg3BT57AnRU0K+R1DR5oim 2Pe9DYi15RqclrfwMzSa0uzMfVykgi6FpA8mFFoQmfj5fhvHScfC3cWT6bdU9UV5 qN/aobTpXPlzxn5U6WXZo+AZk/fLHh3pJQO5DY12KDgHW6HDg0dnyUEatjCKJ9EJ cZdR9RyOb4FT41ya9Z7hS6mq/VWbvxl+pTTpJV6ZQ4gYBtEE2G61TB0xZQVNAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU/MORLdFro3zfrgNX3if5cHHaP6kwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNjM4MmUzMjMyMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKo5IAwDQYJKoZIhvcNAQELBQADggEBALxAQQuD YsNfRwrvlIB8C4bfaXCYLYOD+2l2y/m6k1INU64NyaY7t8n2tFph1rcpXFwpyORm ufg6iCFc4k1GsHzNd7M1zV2IniL0fCwcu3FfQg6n/aHd7hNTHUzARNABD/2kuYiC xCf5gdmytvq2Yqiwiccz5eSQWIgy0Ma/8d3xUIBDud6RXPqLQMirkkGEsuIk4GGL kRb9ESAUR+xqERdWuZK8lhFF37VVbwSqOuvY1AkCRIxODim4ynXWnE9CXrOL2Tdr XDE0fJ9IM2dx+hgnIQVCE9NX7Fwnam/wK4ImHsTRI3+LjYXFrz8xx4rleQOTHdsf PsmifF9xqHJHr5o= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:28 2025 by rpki-client