$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa File: 3137302e3234372e35322e302f32322d3232203d3e203238323730.roa (raw, json) Hash identifier: k4K6Uc9koPCMoqKK6AO9jhRI/7hIhhROBJtf+4s92g4= Subject key identifier: A1:53:84:87:94:A4:7B:5A:8C:F1:CC:E6:4D:CE:C1:CC:22:80:B5:51 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 7A570D81722AFB6A0EC778AA9E8DF71B4813F57F Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:03 +0000 ROA not before: Sat 18 Oct 2025 22:56:03 +0000 ROA not after: Sat 17 Oct 2026 23:01:03 +0000 asID: 28270 IP address blocks: 170.247.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:57:0d:81:72:2a:fb:6a:0e:c7:78:aa:9e:8d:f7:1b:48:13:f5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:03 2025 GMT Not After : Oct 17 23:01:03 2026 GMT Subject: CN=A153848794A47B5A8CF1CCE64DCEC1CC2280B551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:c4:bb:65:7e:18:37:dc:29:05:b0:b2:ab: 04:7b:d3:a7:a8:02:f6:f3:4e:11:31:b1:51:15:f3: e4:2e:c3:f8:73:22:83:99:c1:18:29:a8:07:dd:40: 01:8d:83:3f:ae:d1:25:24:58:64:e5:eb:97:98:15: e3:17:9d:6b:eb:ac:da:e9:85:0d:0c:e4:8e:be:ba: a1:5c:17:63:b0:fe:20:eb:fa:75:a1:00:70:5a:a7: f4:46:9b:e3:bc:0b:b0:99:da:a4:09:76:8d:21:d8: cf:bd:66:d4:49:80:39:51:1f:79:4b:68:b0:62:90: 41:43:2b:40:ee:e0:e7:4e:d0:51:12:57:01:a5:e3: cf:40:da:c2:7a:9b:cd:3c:c3:b7:dd:8e:45:cb:49: a2:8d:82:7a:45:d8:a2:c5:77:52:21:2e:70:5b:06: f6:06:9e:b7:ad:9e:1f:8d:21:51:70:93:a8:c7:b6: fb:11:e5:76:69:e6:26:b1:02:c7:89:41:1d:fa:91: 7f:f1:5b:5d:93:6a:a4:62:cc:a6:fd:f4:ea:5f:48: c5:c0:bc:1a:f8:85:47:24:89:1d:bd:05:d0:41:b3: 2c:ed:34:e2:c8:8e:71:ca:fe:ce:1c:06:b1:34:56: d7:6e:51:0a:ca:16:02:78:8e:8e:fa:74:62:5f:c1: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:53:84:87:94:A4:7B:5A:8C:F1:CC:E6:4D:CE:C1:CC:22:80:B5:51 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.52.0/22 Signature Algorithm: sha256WithRSAEncryption 97:dc:3a:0b:e7:99:8c:4e:24:be:0e:eb:5f:96:b8:8a:af:26: 1f:92:1a:7c:44:81:fc:82:32:b9:6e:68:0b:95:78:ec:07:7a: 36:32:fd:07:bb:b5:dc:de:04:a9:c2:70:e1:9a:8e:2b:5a:1e: b4:3b:07:d4:f7:c3:37:dc:09:0f:11:77:86:da:ba:51:11:62: 52:a9:44:f4:3d:19:94:6b:a5:98:ee:11:56:23:cf:84:0c:58: fc:dc:77:65:a7:42:b6:37:c8:6f:1e:c9:fc:9c:71:73:7e:0b: 96:bc:0b:54:77:e6:6c:cc:01:bc:c1:e1:ad:72:00:56:f4:ca: 58:d4:2a:22:39:35:f5:96:ff:b6:0c:81:1f:27:f8:42:2c:8e: 9e:08:a4:eb:be:9a:fd:2b:e0:7e:83:c4:51:58:60:85:19:ab: 11:ee:9c:44:f2:9f:63:ea:03:65:af:bd:7e:31:89:71:44:a5: 41:7d:4e:a2:94:09:4c:79:18:04:cb:ab:bb:ca:b3:66:ec:e4: 26:b0:c2:a6:76:ea:fc:ae:f8:cd:bd:af:4f:18:85:41:26:3d: d8:27:2b:f3:63:dc:70:a8:1e:01:66:fb:40:6b:4a:86:03:1c: 0b:b9:57:aa:51:fa:7f:ed:66:a4:59:6c:db:d3:f7:35:0f:fd: 3a:8d:02:fc -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUelcNgXIq+2oOx3iqno33G0gT9X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDNaFw0yNjEwMTcyMzAxMDNaMDMxMTAvBgNV BAMTKEExNTM4NDg3OTRBNDdCNUE4Q0YxQ0NFNjREQ0VDMUNDMjI4MEI1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxsS7ZX4YN9wpBbCyqwR706eo AvbzThExsVEV8+Quw/hzIoOZwRgpqAfdQAGNgz+u0SUkWGTl65eYFeMXnWvrrNrp hQ0M5I6+uqFcF2Ow/iDr+nWhAHBap/RGm+O8C7CZ2qQJdo0h2M+9ZtRJgDlRH3lL aLBikEFDK0Du4OdO0FESVwGl489A2sJ6m808w7fdjkXLSaKNgnpF2KLFd1IhLnBb BvYGnretnh+NIVFwk6jHtvsR5XZp5iaxAseJQR36kX/xW12TaqRizKb99OpfSMXA vBr4hUckiR29BdBBsyztNOLIjnHK/s4cBrE0VtduUQrKFgJ4jo76dGJfwR1hAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUoVOEh5Ske1qM8czmTc7BzCKAtVEwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzMwMmUzMjM0MzcyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4 MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqvc0MA0GCSqGSIb3DQEBCwUAA4IBAQCX3DoL55mM TiS+DutflriKryYfkhp8RIH8gjK5bmgLlXjsB3o2Mv0Hu7Xc3gSpwnDhmo4rWh60 OwfU98M33AkPEXeG2rpREWJSqUT0PRmUa6WY7hFWI8+EDFj83Hdlp0K2N8hvHsn8 nHFzfguWvAtUd+ZszAG8weGtcgBW9MpY1CoiOTX1lv+2DIEfJ/hCLI6eCKTrvpr9 K+B+g8RRWGCFGasR7pxE8p9j6gNlr71+MYlxRKVBfU6ilAlMeRgEy6u7yrNm7OQm sMKmdur8rvjNva9PGIVBJj3YJyvzY9xwqB4BZvtAa0qGAxwLuVeqUfp/7WakWWzb 0/c1D/06jQL8 -----END CERTIFICATE-----Generated at Mon Oct 20 19:49:04 2025 by rpki-client