$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa File: 3137372e36372e302e302f32312d3231203d3e20323632353039.roa (raw, json) Hash identifier: GdbrrHicBLx4lhpnFr8a94LzyzbawtOXJrm31CrRE9c= Subject key identifier: CF:CC:7B:71:67:61:F7:AA:B0:E1:9C:2A:06:F6:6F:5D:AF:44:CB:2E Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 2AA4FBE14DA8A46695F7A8F1E364100FCF9172FE Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa Signing time: Sat 18 Oct 2025 23:01:02 +0000 ROA not before: Sat 18 Oct 2025 22:56:02 +0000 ROA not after: Sat 17 Oct 2026 23:01:02 +0000 asID: 262509 IP address blocks: 177.67.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a4:fb:e1:4d:a8:a4:66:95:f7:a8:f1:e3:64:10:0f:cf:91:72:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:02 2025 GMT Not After : Oct 17 23:01:02 2026 GMT Subject: CN=CFCC7B716761F7AAB0E19C2A06F66F5DAF44CB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:85:e8:e6:b2:f1:2f:f1:72:5b:70:f3:00: e1:b7:4b:3c:fb:d7:61:ec:71:69:4e:c5:8b:d4:2e: cf:34:c4:26:2d:f6:fb:0e:45:29:f4:7a:c2:8b:59: 57:35:a4:70:6d:b2:07:dd:4c:ff:07:ab:a8:93:65: 6c:af:f6:71:0c:c1:9c:7f:36:25:9c:bc:5b:12:ac: d6:50:c2:7a:f8:eb:c0:6f:06:f9:8a:0a:a0:a6:c7: 1b:a6:c7:c5:26:4e:93:ad:f5:9e:9a:f0:24:cc:3c: b4:0f:62:a5:34:2b:73:1a:df:5a:4b:a7:ee:07:e5: a3:9b:7b:d7:7e:e0:3c:7d:58:6c:1f:66:57:20:04: 88:fa:26:d8:31:b3:ee:7f:19:63:68:5a:32:c2:51: 37:09:42:f4:07:62:d0:20:59:cd:a6:4f:58:57:e3: 32:7b:c1:c6:a6:da:e6:a9:b4:d6:f6:45:b3:46:2e: b5:36:70:7e:16:21:58:5a:82:5b:3e:36:30:28:28: 39:b9:ad:c9:ab:85:f1:31:2d:97:f7:6c:92:42:4d: 6a:d6:db:27:bb:dd:17:df:72:24:12:74:4f:f9:7e: 52:6b:01:36:b9:90:8a:96:2e:01:46:42:3e:7a:05: 6f:ce:cc:da:65:2f:9b:95:9e:4c:44:7f:bb:60:ca: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CC:7B:71:67:61:F7:AA:B0:E1:9C:2A:06:F6:6F:5D:AF:44:CB:2E X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e20323632353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.67.0.0/21 Signature Algorithm: sha256WithRSAEncryption 84:ad:3c:24:1c:b2:18:1b:db:f5:37:6a:e0:1b:80:52:f3:aa: 55:00:9b:ee:90:90:2f:e2:e4:fd:16:94:3b:0d:e7:2c:37:d7: 9b:68:62:0a:c1:57:d1:27:bc:d1:bb:b9:eb:1a:79:8d:e2:85: b1:7b:a8:59:0c:a4:03:68:d7:d0:e4:b1:70:99:7d:29:3a:39: 64:d6:cc:90:1e:7a:8e:c1:ad:54:e6:c9:54:db:d4:79:f0:06: 25:b0:f1:3b:73:6b:75:e0:cd:a3:e7:0e:7f:8a:67:cf:ed:1d: 3c:8c:34:9f:03:5f:a9:41:b4:7c:0b:a4:c0:b4:aa:5f:2a:11: 36:0a:c1:15:10:57:44:ae:b9:79:cb:d2:8a:4e:be:d1:49:dd: 82:82:6a:b5:d8:ba:5e:a1:9f:e0:dd:2a:b2:2e:ab:28:9c:12: aa:57:a8:97:be:50:92:8a:04:f8:44:c2:9f:c6:40:4e:14:1b: f7:f7:97:82:7e:75:50:8f:f3:6c:01:eb:08:6a:d1:64:6a:b5: 3a:f6:65:ec:94:f6:70:e2:c7:d6:1f:f4:9f:dd:1d:4f:42:be: c9:50:87:76:c5:02:1f:b0:69:44:d3:98:5c:8b:91:99:11:e5: 04:ce:d4:ac:a4:d6:15:a5:10:bc:25:2e:d7:39:18:06:ab:db: 6e:19:ab:19 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUKqT74U2opGaV96jx42QQD8+Rcv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDJaFw0yNjEwMTcyMzAxMDJaMDMxMTAvBgNV BAMTKENGQ0M3QjcxNjc2MUY3QUFCMEUxOUMyQTA2RjY2RjVEQUY0NENCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSYXo5rLxL/FyW3DzAOG3Szz7 12HscWlOxYvULs80xCYt9vsORSn0esKLWVc1pHBtsgfdTP8Hq6iTZWyv9nEMwZx/ NiWcvFsSrNZQwnr468BvBvmKCqCmxxumx8UmTpOt9Z6a8CTMPLQPYqU0K3Ma31pL p+4H5aObe9d+4Dx9WGwfZlcgBIj6Jtgxs+5/GWNoWjLCUTcJQvQHYtAgWc2mT1hX 4zJ7wcam2uaptNb2RbNGLrU2cH4WIVhagls+NjAoKDm5rcmrhfExLZf3bJJCTWrW 2ye73RffciQSdE/5flJrATa5kIqWLgFGQj56BW/OzNplL5uVnkxEf7tgylB7AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUz8x7cWdh96qw4ZwqBvZvXa9Eyy4wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzM3MmUzNjM3MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzYzMjM1 MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEA7FDADANBgkqhkiG9w0BAQsFAAOCAQEAhK08JByyGBvb 9Tdq4BuAUvOqVQCb7pCQL+Lk/RaUOw3nLDfXm2hiCsFX0Se80bu56xp5jeKFsXuo WQykA2jX0OSxcJl9KTo5ZNbMkB56jsGtVObJVNvUefAGJbDxO3NrdeDNo+cOf4pn z+0dPIw0nwNfqUG0fAukwLSqXyoRNgrBFRBXRK65ecvSik6+0UndgoJqtdi6XqGf 4N0qsi6rKJwSqleol75QkooE+ETCn8ZAThQb9/eXgn51UI/zbAHrCGrRZGq1OvZl 7JT2cOLH1h/0n90dT0K+yVCHdsUCH7BpRNOYXIuRmRHlBM7UrKTWFaUQvCUu1zkY BqvbbhmrGQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:03 2025 by rpki-client