$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa File: 3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: p6aL1xCm3NNCz3HS78BufcH/6ioRBiPic17ezmpv7ek= Subject key identifier: E9:00:01:20:0C:C4:F3:4F:C9:47:31:0A:61:7A:C4:F8:5D:B2:83:EE Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 6B166BED1CE0C9E5150293F3827422EF1AE4FB29 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:04 +0000 ROA not before: Sat 18 Oct 2025 22:56:04 +0000 ROA not after: Sat 17 Oct 2026 23:01:04 +0000 asID: 28270 IP address blocks: 170.245.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:16:6b:ed:1c:e0:c9:e5:15:02:93:f3:82:74:22:ef:1a:e4:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:04 2025 GMT Not After : Oct 17 23:01:04 2026 GMT Subject: CN=E90001200CC4F34FC947310A617AC4F85DB283EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:57:3d:d9:c0:0b:65:a5:d1:2b:f7:4b:b1: 31:5a:a2:c5:31:c7:20:47:e3:52:9c:5f:e1:8f:16: d5:b8:4b:d2:b9:42:8a:03:44:56:81:d0:7e:89:36: 63:b6:15:13:96:9f:77:63:a9:c6:a7:7a:46:96:15: 90:94:a6:04:16:99:61:63:a4:85:50:f0:3e:7c:1c: 3e:04:4c:cc:74:89:e9:5d:36:6a:41:85:b3:17:1f: f1:60:88:e5:d3:34:76:42:81:bc:52:f0:3c:77:8e: ad:68:37:39:80:ae:89:aa:ee:05:3b:34:61:11:5f: e9:ce:99:f1:78:36:b3:7f:c2:88:58:ae:d1:e9:da: 05:15:29:36:7b:c2:ad:ac:85:12:c9:6d:62:de:3c: 47:a6:0d:48:41:f8:1b:44:81:0b:23:92:8f:69:ff: d5:c3:60:ff:50:76:67:2a:c8:8f:26:f3:26:8d:39: c7:28:47:d9:f6:17:fe:04:95:99:51:ee:0a:fe:66: 5d:0f:c2:01:a5:97:f8:a8:60:cf:c8:da:24:ae:6d: 33:cc:d0:40:56:83:71:31:f7:59:c9:6c:ac:63:4e: 1c:d0:a9:69:50:91:c8:32:cf:00:b3:33:05:fb:4c: 74:de:42:28:be:2b:5e:13:39:28:8e:d8:01:fe:00: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:00:01:20:0C:C4:F3:4F:C9:47:31:0A:61:7A:C4:F8:5D:B2:83:EE X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:60:d8:b5:3a:ab:9d:52:ca:dc:52:1c:6d:7e:a0:0f:79:d4: 9a:0b:eb:99:8b:1f:ef:90:9d:06:a8:d5:19:cb:7e:45:e3:57: d9:e0:4c:65:f5:11:ae:63:b4:4d:8c:ba:11:00:db:b9:04:bc: 82:3c:a0:aa:52:60:08:86:52:3f:6a:29:2c:64:73:81:20:59: a7:84:6e:64:7a:20:5b:39:48:79:e7:d1:be:49:cc:b9:0f:87: 53:d1:04:aa:52:b2:95:02:cd:04:a5:f5:b7:2f:60:74:b7:2d: 1f:de:5a:dd:e1:8c:0a:ce:3d:fa:f4:62:fd:e2:66:ca:55:b8: 0a:06:fe:55:60:b5:3d:39:e6:4e:5b:cf:d8:d0:df:83:07:83: 58:eb:33:6a:0d:ba:6f:c6:a1:4b:86:57:ec:c7:b0:72:97:b8: 34:f5:9e:ba:9c:fc:02:7d:a0:f5:aa:94:96:81:88:0b:0e:3d: 06:5a:b0:60:73:37:61:b3:24:6e:b4:da:6e:79:14:6b:dd:d2: 31:b8:4c:b8:a2:53:d5:7d:69:bb:d7:3c:e0:6b:b1:08:a2:51: 73:34:ed:60:f6:07:c5:3d:f7:50:83:1a:eb:dd:c8:5b:97:77: e3:a9:63:61:d7:99:f8:57:74:2f:5c:94:7e:c7:b4:ca:dd:a1: ef:96:4f:04 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUaxZr7RzgyeUVApPzgnQi7xrk+ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDRaFw0yNjEwMTcyMzAxMDRaMDMxMTAvBgNV BAMTKEU5MDAwMTIwMENDNEYzNEZDOTQ3MzEwQTYxN0FDNEY4NURCMjgzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfN1c92cALZaXRK/dLsTFaosUx xyBH41KcX+GPFtW4S9K5QooDRFaB0H6JNmO2FROWn3djqcanekaWFZCUpgQWmWFj pIVQ8D58HD4ETMx0ieldNmpBhbMXH/FgiOXTNHZCgbxS8Dx3jq1oNzmAromq7gU7 NGERX+nOmfF4NrN/wohYrtHp2gUVKTZ7wq2shRLJbWLePEemDUhB+BtEgQsjko9p /9XDYP9QdmcqyI8m8yaNOccoR9n2F/4ElZlR7gr+Zl0PwgGll/ioYM/I2iSubTPM 0EBWg3Ex91nJbKxjThzQqWlQkcgyzwCzMwX7THTeQii+K14TOSiO2AH+AK1DAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU6QABIAzE80/JRzEKYXrE+F2yg+4wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzMwMmUzMjM0MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq9WQwDQYJKoZIhvcNAQELBQADggEBAI9g2LU6 q51SytxSHG1+oA951JoL65mLH++QnQao1RnLfkXjV9ngTGX1Ea5jtE2MuhEA27kE vII8oKpSYAiGUj9qKSxkc4EgWaeEbmR6IFs5SHnn0b5JzLkPh1PRBKpSspUCzQSl 9bcvYHS3LR/eWt3hjArOPfr0Yv3iZspVuAoG/lVgtT055k5bz9jQ34MHg1jrM2oN um/GoUuGV+zHsHKXuDT1nrqc/AJ9oPWqlJaBiAsOPQZasGBzN2GzJG602m55FGvd 0jG4TLiiU9V9abvXPOBrsQiiUXM07WD2B8U991CDGuvdyFuXd+OpY2HXmfhXdC9c lH7HtMrdoe+WTwQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:44:41 2025 by rpki-client