$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa File: 3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: 86mb9dYbzBN0W7PGuJXJ9vq6zPWFJEEepmnOwoD2CdQ= Subject key identifier: 4A:97:BD:CA:41:2E:0E:76:33:23:C8:25:C6:4D:21:E9:BF:51:27:C4 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 7BE94211107F7B023B40CB0EF36D5B00EDAD8313 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:02 +0000 ROA not before: Sat 18 Oct 2025 22:56:02 +0000 ROA not after: Sat 17 Oct 2026 23:01:02 +0000 asID: 28270 IP address blocks: 168.232.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e9:42:11:10:7f:7b:02:3b:40:cb:0e:f3:6d:5b:00:ed:ad:83:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:02 2025 GMT Not After : Oct 17 23:01:02 2026 GMT Subject: CN=4A97BDCA412E0E763323C825C64D21E9BF5127C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:35:11:17:b7:89:ef:5a:7a:fa:b4:57:8d: 3f:14:00:15:1c:dc:c9:40:fd:c5:be:b5:bf:7d:9c: cd:d2:65:02:6c:a3:ed:dc:d9:e5:41:62:7d:0c:01: e8:87:56:06:18:a8:1f:00:9e:8a:e3:b8:94:33:47: 24:d7:32:99:71:0e:58:4a:a9:50:e8:79:ed:e1:53: 26:97:79:12:e6:f4:4f:46:09:b8:4b:15:2e:da:d6: 60:7b:69:ca:3c:92:ab:61:a9:f4:2d:1f:a6:8d:80: c6:49:2b:2b:73:45:5a:1c:c4:bf:a1:2c:f5:cb:87: cb:44:56:f2:c4:79:b7:2d:32:fc:3f:58:50:5d:e9: 54:72:44:9a:32:4e:73:a0:38:4c:4e:b9:49:ff:ed: 08:70:0d:84:94:c7:3c:db:ba:b1:42:43:17:72:f8: 9c:b0:b1:e3:3b:9d:49:ee:6d:91:74:dd:53:d8:f4: 69:47:bc:9c:bb:d8:2b:f1:46:34:e9:7d:60:c4:f6: 7c:b2:18:c6:da:84:77:3b:9d:86:8a:6d:4c:52:6a: 87:d1:67:c4:7e:8e:a0:b5:c4:d6:2f:b6:9a:8f:81: bc:81:43:6f:4f:1c:31:f6:17:ea:7a:68:d4:20:68: 32:38:39:21:89:3a:98:b9:90:32:ad:41:30:87:3d: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:BD:CA:41:2E:0E:76:33:23:C8:25:C6:4D:21:E9:BF:51:27:C4 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.116.0/22 Signature Algorithm: sha256WithRSAEncryption 68:24:74:8d:78:6c:ce:9e:e3:e6:cf:96:f3:bb:37:43:ee:ab: da:95:49:55:38:47:0c:35:80:24:46:14:d2:a6:a3:3a:9b:1c: 17:b6:44:43:d8:cf:13:51:6f:95:a4:49:49:b8:b4:c7:fe:50: 99:22:f4:ca:77:3e:00:1a:67:c6:93:32:0a:5c:4a:c6:44:24: a4:e5:6c:32:a7:aa:cd:87:b0:c6:77:87:ab:67:df:f7:42:c2: 4f:eb:76:73:db:0e:da:31:cd:78:92:38:24:99:d0:21:7c:0e: 0e:ae:15:3d:e8:73:5f:2b:f3:e7:5a:95:f5:f5:12:c7:06:b5: 73:91:ae:44:a9:8c:c7:09:ee:c3:83:d3:32:24:84:e6:e8:89: 84:f3:77:eb:ea:db:8d:e4:1a:8d:42:3c:62:df:09:3e:db:42: c2:c1:3b:e9:4a:bb:82:dd:39:04:ca:2b:94:65:c5:99:b7:07: a2:cd:7d:f2:11:64:fa:f3:a6:41:bc:00:aa:67:f0:1b:a2:5f: e5:aa:84:c2:59:63:aa:20:de:e7:e8:0b:ff:64:5b:9c:38:e5: 8b:99:41:6b:77:f5:62:b0:d8:1b:23:aa:f6:20:d1:b0:0c:03: d9:ad:6c:5a:00:30:8d:f4:02:1a:aa:e9:53:dd:bb:9e:80:ad: 19:06:7a:67 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUe+lCERB/ewI7QMsO821bAO2tgxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDJaFw0yNjEwMTcyMzAxMDJaMDMxMTAvBgNV BAMTKDRBOTdCRENBNDEyRTBFNzYzMzIzQzgyNUM2NEQyMUU5QkY1MTI3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiTURF7eJ71p6+rRXjT8UABUc 3MlA/cW+tb99nM3SZQJso+3c2eVBYn0MAeiHVgYYqB8AnorjuJQzRyTXMplxDlhK qVDoee3hUyaXeRLm9E9GCbhLFS7a1mB7aco8kqthqfQtH6aNgMZJKytzRVocxL+h LPXLh8tEVvLEebctMvw/WFBd6VRyRJoyTnOgOExOuUn/7QhwDYSUxzzburFCQxdy +JywseM7nUnubZF03VPY9GlHvJy72CvxRjTpfWDE9nyyGMbahHc7nYaKbUxSaofR Z8R+jqC1xNYvtpqPgbyBQ29PHDH2F+p6aNQgaDI4OSGJOpi5kDKtQTCHPWoTAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUSpe9ykEuDnYzI8glxk0h6b9RJ8QwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNjM4MmUzMjMzMzIyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKo6HQwDQYJKoZIhvcNAQELBQADggEBAGgkdI14 bM6e4+bPlvO7N0Puq9qVSVU4Rww1gCRGFNKmozqbHBe2REPYzxNRb5WkSUm4tMf+ UJki9Mp3PgAaZ8aTMgpcSsZEJKTlbDKnqs2HsMZ3h6tn3/dCwk/rdnPbDtoxzXiS OCSZ0CF8Dg6uFT3oc18r8+dalfX1EscGtXORrkSpjMcJ7sOD0zIkhOboiYTzd+vq 243kGo1CPGLfCT7bQsLBO+lKu4LdOQTKK5RlxZm3B6LNffIRZPrzpkG8AKpn8Bui X+WqhMJZY6og3ufoC/9kW5w45YuZQWt39WKw2BsjqvYg0bAMA9mtbFoAMI30Ahqq 6VPdu56ArRkGemc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:08 2025 by rpki-client