$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa File: 3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa (raw, json) Hash identifier: xUweNh8J3NlW54zPzRgwazhPDtiu71rnKj8539jNgWc= Subject key identifier: 5E:D3:F7:28:29:5B:ED:F9:6A:36:DF:64:9E:FF:A4:35:BD:F6:13:E7 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 3D135C12C05E057ADB8D9A1DBD04807309A63090 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa Signing time: Sat 18 Oct 2025 23:01:06 +0000 ROA not before: Sat 18 Oct 2025 22:56:06 +0000 ROA not after: Sat 17 Oct 2026 23:01:06 +0000 asID: 271724 IP address blocks: 179.191.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:13:5c:12:c0:5e:05:7a:db:8d:9a:1d:bd:04:80:73:09:a6:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:06 2025 GMT Not After : Oct 17 23:01:06 2026 GMT Subject: CN=5ED3F728295BEDF96A36DF649EFFA435BDF613E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:bb:bb:8f:93:ab:fe:4b:f4:4f:d3:d9:40: 4d:7d:fe:2f:f2:46:d4:00:22:1e:0c:6e:de:6c:3b: 5a:a1:6d:86:f3:28:d1:98:34:fb:29:7d:c9:ea:fa: 6d:b8:94:17:37:74:0f:90:c9:f8:3d:1b:cc:1a:b5: 4c:db:1c:ca:b3:44:85:c2:89:aa:ca:01:94:29:3a: 14:21:a4:46:8d:cc:6a:ab:e6:80:70:17:1f:de:b1: bf:a3:ff:1d:4c:a1:81:a8:1e:a1:50:47:c4:ba:b5: 62:47:98:58:79:94:47:13:47:62:e9:b0:ca:f7:69: ed:fd:f2:64:f8:0e:23:0e:4d:fe:85:1b:10:fc:14: 0b:7e:01:a6:78:65:dd:4a:a8:56:da:50:1c:c0:59: fe:0a:45:f1:e4:8a:07:d0:47:4a:53:7b:74:c5:f9: 8b:38:4b:70:3f:41:42:66:6f:02:60:6d:63:8b:e3: f6:42:71:9b:d3:f2:e6:d8:d9:1e:c0:92:6a:08:23: a0:a9:f1:aa:23:b1:18:75:81:72:0e:ec:59:45:51: a7:f5:9d:9a:99:8e:c0:a5:80:b4:58:de:68:9d:c5: 31:74:7d:d1:d0:30:99:ae:76:42:ef:1a:5a:0c:60: 5f:9e:2b:8a:56:d2:d3:b2:ee:14:c9:56:70:41:63: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:F7:28:29:5B:ED:F9:6A:36:DF:64:9E:FF:A4:35:BD:F6:13:E7 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.191.128.0/20 Signature Algorithm: sha256WithRSAEncryption a0:cc:44:3b:86:0d:48:7a:50:52:b4:55:22:0a:40:4c:1b:c4: 42:a9:68:4a:b0:e9:7b:ee:ff:fb:50:fc:b1:45:06:8c:20:ce: b6:82:08:31:77:c0:bf:54:c8:62:28:a1:af:7e:9f:8f:dd:e9: d2:a3:40:ef:e4:e3:35:03:56:7b:1a:e0:ca:7f:45:2a:21:42: 3b:78:63:9e:d0:5f:8a:52:c5:5d:74:0c:0d:b3:ef:38:82:fd: fe:61:47:ea:b8:9d:b6:26:53:f4:cd:09:db:7f:75:1a:c6:d0: 49:04:c8:62:99:f4:db:98:48:cd:d9:7f:3e:5d:dd:a8:0f:e8: b9:bf:a7:66:a5:d8:f9:ea:0b:52:0d:38:0b:0d:cb:7b:01:6b: ca:d1:7e:37:96:ba:a1:e3:03:15:23:aa:9c:87:ae:ae:59:16: ce:51:de:13:74:ca:66:7b:cb:ee:db:98:f6:17:0e:4e:a7:d0: 95:d5:90:82:63:91:74:54:ae:99:82:91:1a:37:4a:c4:a5:e7: d8:8c:4e:22:21:71:f5:c2:bd:ad:bd:be:0c:d9:38:21:26:9a: 8a:8c:43:81:34:00:41:10:b6:5a:15:88:7c:e7:3f:16:f4:4e: 7d:6a:f7:f2:da:1d:90:c5:f6:5e:71:a1:af:09:62:94:80:c8: fb:83:20:6e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUPRNcEsBeBXrbjZodvQSAcwmmMJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDZaFw0yNjEwMTcyMzAxMDZaMDMxMTAvBgNV BAMTKDVFRDNGNzI4Mjk1QkVERjk2QTM2REY2NDlFRkZBNDM1QkRGNjEzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSru7j5Or/kv0T9PZQE19/i/y RtQAIh4Mbt5sO1qhbYbzKNGYNPspfcnq+m24lBc3dA+Qyfg9G8watUzbHMqzRIXC iarKAZQpOhQhpEaNzGqr5oBwFx/esb+j/x1MoYGoHqFQR8S6tWJHmFh5lEcTR2Lp sMr3ae398mT4DiMOTf6FGxD8FAt+AaZ4Zd1KqFbaUBzAWf4KRfHkigfQR0pTe3TF +Ys4S3A/QUJmbwJgbWOL4/ZCcZvT8ubY2R7AkmoII6Cp8aojsRh1gXIO7FlFUaf1 nZqZjsClgLRY3midxTF0fdHQMJmudkLvGloMYF+eK4pW0tOy7hTJVnBBYwHlAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUXtP3KClb7flqNt9knv+kNb32E+cwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLO/gDANBgkqhkiG9w0BAQsFAAOCAQEAoMxE O4YNSHpQUrRVIgpATBvEQqloSrDpe+7/+1D8sUUGjCDOtoIIMXfAv1TIYiihr36f j93p0qNA7+TjNQNWexrgyn9FKiFCO3hjntBfilLFXXQMDbPvOIL9/mFH6ridtiZT 9M0J2391GsbQSQTIYpn025hIzdl/Pl3dqA/oub+nZqXY+eoLUg04Cw3LewFrytF+ N5a6oeMDFSOqnIeurlkWzlHeE3TKZnvL7tuY9hcOTqfQldWQgmORdFSumYKRGjdK xKXn2IxOIiFx9cK9rb2+DNk4ISaaioxDgTQAQRC2WhWIfOc/FvROfWr38todkMX2 XnGhrwlilIDI+4Mgbg== -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:06 2025 by rpki-client