$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa File: 3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa (raw, json) Hash identifier: fEKFXlW0XsjKfHT/NMd5Wo5Jnby043YjS7feIIhSyvo= Subject key identifier: 99:C7:CB:C8:60:6B:CF:03:E2:E6:92:80:B8:84:E8:D8:3A:CD:86:41 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 253C03DBBF4C1B81D6E81A8392D6733B5AFBA13C Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa Signing time: Sat 18 Oct 2025 23:01:03 +0000 ROA not before: Sat 18 Oct 2025 22:56:03 +0000 ROA not after: Sat 17 Oct 2026 23:01:03 +0000 asID: 262509 IP address blocks: 170.247.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3c:03:db:bf:4c:1b:81:d6:e8:1a:83:92:d6:73:3b:5a:fb:a1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:03 2025 GMT Not After : Oct 17 23:01:03 2026 GMT Subject: CN=99C7CBC8606BCF03E2E69280B884E8D83ACD8641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d7:7a:56:82:d8:32:67:d2:a0:90:d1:41:27: ce:06:61:48:f5:4d:bf:15:e8:7d:b9:10:ca:35:34: 57:ae:81:dc:82:9d:00:16:7a:e0:a8:b4:b7:42:e6: 59:2b:03:86:26:cf:96:3d:20:10:16:79:28:ca:25: 9b:f6:33:fe:78:51:da:6d:e4:1d:42:20:ae:2e:5d: 6f:1f:aa:48:f6:fc:3a:41:2f:c8:f1:e9:8d:59:ec: 2b:77:19:08:ca:87:e7:bf:86:42:53:a8:90:f9:9f: d3:e9:b4:59:1d:0d:43:d8:c9:7d:fc:32:e6:f7:5f: ad:7a:42:8e:98:9d:03:5b:c0:65:b1:7a:b3:bf:35: c3:bc:5c:07:7a:ee:45:0f:da:79:be:ae:ef:78:e8: c5:7b:e1:bd:b5:4b:74:b7:41:ba:ac:51:aa:79:71: 55:cd:a2:32:c5:3a:9a:47:24:59:38:49:ef:9f:64: 3d:b2:d9:81:97:99:1f:e5:2f:76:d6:7c:4b:c5:f6: b7:6b:d7:ec:00:6c:13:c3:48:ad:af:d4:11:f3:ca: b8:a5:c6:7c:de:42:aa:0a:72:a2:b1:53:54:ed:3f: b1:9a:a7:48:5c:56:3c:cc:96:48:7c:da:7c:81:83: fa:86:03:35:fd:4b:45:71:f7:af:0a:ec:00:c5:48: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:CB:C8:60:6B:CF:03:E2:E6:92:80:B8:84:E8:D8:3A:CD:86:41 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.52.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:83:8e:2f:f7:2c:9d:51:02:e6:64:ed:00:6d:8a:c4:61:5f: 80:e7:6b:7b:54:31:a8:87:c3:3d:15:44:b1:af:51:8e:1a:60: 1f:45:70:1b:f4:ba:e5:9a:f4:a8:64:cf:b5:43:7c:49:d9:d4: ac:46:17:1d:0b:7a:8c:d2:f9:01:b1:cd:67:f4:2a:7e:e4:24: c2:51:b5:68:ff:0a:5e:bb:22:50:55:79:5f:33:28:fa:50:04: 00:69:03:49:69:bf:53:e0:22:89:94:f0:51:ad:a3:92:d4:44: 95:7b:72:39:df:25:35:2a:da:cf:1a:69:71:07:17:d7:d8:5a: a9:60:ea:c7:8f:c8:45:1d:c2:09:99:a0:e2:1f:de:27:f9:e7: c1:9f:33:c6:45:08:de:1a:d2:38:04:cc:64:88:0a:58:ef:27: d2:2e:01:63:81:b2:b5:78:ec:fe:36:9a:2b:72:55:b9:2f:87: 3c:71:51:ad:f3:d0:40:05:6b:5b:3b:25:cc:91:61:2e:94:c5: c3:57:63:50:9c:42:42:b9:14:9b:ce:9f:ba:45:f8:12:4b:5e: a3:3f:0b:ec:9e:1c:f1:09:71:a8:b5:72:91:06:03:83:5f:8d: c7:ae:28:5e:3a:16:b8:10:c5:ff:c6:d9:2c:af:f6:af:95:d9: 76:fc:a4:98 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJTwD279MG4HW6BqDktZzO1r7oTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDNaFw0yNjEwMTcyMzAxMDNaMDMxMTAvBgNV BAMTKDk5QzdDQkM4NjA2QkNGMDNFMkU2OTI4MEI4ODRFOEQ4M0FDRDg2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO13pWgtgyZ9KgkNFBJ84GYUj1 Tb8V6H25EMo1NFeugdyCnQAWeuCotLdC5lkrA4Ymz5Y9IBAWeSjKJZv2M/54Udpt 5B1CIK4uXW8fqkj2/DpBL8jx6Y1Z7Ct3GQjKh+e/hkJTqJD5n9PptFkdDUPYyX38 Mub3X616Qo6YnQNbwGWxerO/NcO8XAd67kUP2nm+ru946MV74b21S3S3QbqsUap5 cVXNojLFOppHJFk4Se+fZD2y2YGXmR/lL3bWfEvF9rdr1+wAbBPDSK2v1BHzyril xnzeQqoKcqKxU1TtP7Gap0hcVjzMlkh82nyBg/qGAzX9S0Vx968K7ADFSF+bAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmcfLyGBrzwPi5pKAuITo2DrNhkEwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzMwMmUzMjM0MzcyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq9zQwDQYJKoZIhvcNAQELBQADggEBAGyDji/3 LJ1RAuZk7QBtisRhX4Dna3tUMaiHwz0VRLGvUY4aYB9FcBv0uuWa9Khkz7VDfEnZ 1KxGFx0LeozS+QGxzWf0Kn7kJMJRtWj/Cl67IlBVeV8zKPpQBABpA0lpv1PgIomU 8FGto5LURJV7cjnfJTUq2s8aaXEHF9fYWqlg6sePyEUdwgmZoOIf3if558GfM8ZF CN4a0jgEzGSICljvJ9IuAWOBsrV47P42mityVbkvhzxxUa3z0EAFa1s7JcyRYS6U xcNXY1CcQkK5FJvOn7pF+BJLXqM/C+yeHPEJcai1cpEGA4NfjceuKF46FrgQxf/G 2Syv9q+V2Xb8pJg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:57 2025 by rpki-client