$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323230.roa File: 3138362e3231392e3135322e302f32312d3231203d3e203238323230.roa (raw, json) Hash identifier: zTJqvzm6COsXAJaYAXXZUon04X6OxjzXpxwjXbfptQg= Subject key identifier: 4D:BF:8C:93:68:05:44:C9:B6:3D:BB:34:C1:F9:5C:EC:63:F3:D4:2E Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 4627585EC296E058AC54AB280D1B6352DD0AB5C1 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323230.roa Signing time: Sat 18 Oct 2025 23:01:03 +0000 ROA not before: Sat 18 Oct 2025 22:56:03 +0000 ROA not after: Sat 17 Oct 2026 23:01:03 +0000 asID: 28220 IP address blocks: 186.219.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:27:58:5e:c2:96:e0:58:ac:54:ab:28:0d:1b:63:52:dd:0a:b5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:03 2025 GMT Not After : Oct 17 23:01:03 2026 GMT Subject: CN=4DBF8C93680544C9B63DBB34C1F95CEC63F3D42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:60:95:97:93:d5:2e:1a:e8:b5:7e:89:0a: 63:fe:8f:a9:bd:54:8a:e9:b0:4f:3a:cf:25:57:bd: 44:44:a8:b1:d1:6e:4b:03:a6:16:ac:5d:4a:21:de: 24:dd:46:0a:8f:c4:c4:a2:48:25:75:23:c1:ca:87: d6:d7:e9:26:2f:a0:a9:d3:52:36:23:52:f8:5b:20: 24:73:c5:4e:84:77:ca:bd:6a:29:65:cf:3a:ad:dd: b3:ed:cf:b5:e4:ae:26:fc:79:62:56:d5:9a:2e:c3: 4c:49:9b:42:30:2e:c2:c1:d0:c9:1b:92:ea:64:48: c9:89:de:18:f4:b4:3a:6e:06:89:06:e6:ab:a7:58: 5f:a4:14:94:4b:cf:f9:29:69:20:7e:1e:a2:d4:ec: 69:b5:f1:a3:3a:08:c9:03:f3:b1:bb:6c:c7:be:5a: cd:c0:1b:99:45:0d:fb:ce:88:d2:80:a5:ec:83:38: 3e:ff:c2:39:0f:8a:23:17:c4:ef:ee:0b:e4:27:72: aa:4c:fd:29:67:cc:59:2e:a8:e4:db:9f:13:85:c3: 8b:14:08:d6:d9:04:20:d0:89:f6:a9:a1:f0:63:4d: 32:e5:f8:3d:b5:86:71:23:f0:16:6e:72:a1:43:03: 79:00:ab:a0:f5:fe:86:37:02:f9:f3:0b:ea:af:62: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:8C:93:68:05:44:C9:B6:3D:BB:34:C1:F9:5C:EC:63:F3:D4:2E X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.219.152.0/21 Signature Algorithm: sha256WithRSAEncryption b2:cf:55:80:5c:98:84:bd:5a:ae:18:bf:50:90:e0:13:09:b9: 6a:e4:a6:42:8c:04:e4:69:8e:2b:b0:3a:76:f4:c4:10:46:50: 52:7d:8b:27:8b:a4:3a:7c:36:9c:1c:40:16:b8:fa:c4:fd:c3: 35:20:db:02:83:b7:25:95:92:ce:df:f0:5e:85:44:ff:eb:7d: a7:db:c6:f1:bd:89:97:30:28:64:d2:52:3a:f2:52:5b:37:86: a9:6f:7a:a1:b6:25:9e:b0:6b:68:9d:83:c7:e3:20:22:7d:6b: 56:e5:ae:e4:89:02:2e:1b:a1:db:1b:a1:b5:e7:ea:68:10:41: 0e:c2:8d:29:c2:64:47:4c:de:94:80:bd:07:10:33:56:e9:29: 74:65:f1:e7:93:76:8a:4e:b7:5c:de:f6:d5:cb:a6:b7:64:3b: 05:bf:41:b6:b6:aa:81:7b:12:49:c3:09:4b:69:b5:8f:27:bf: df:c4:48:4a:76:50:01:5a:8a:fa:78:ed:e9:a7:59:8c:c6:dd: 67:d4:41:44:2f:39:51:59:21:4d:dc:d4:06:9a:06:92:67:f3: 0c:77:9f:34:31:7c:35:37:1e:97:30:81:65:0d:e5:1f:4d:43: df:4b:8d:b3:d2:f4:65:6b:1c:74:6e:16:de:43:b4:5c:a7:6b: d4:a1:38:ba -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURidYXsKW4FisVKsoDRtjUt0KtcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDNaFw0yNjEwMTcyMzAxMDNaMDMxMTAvBgNV BAMTKDREQkY4QzkzNjgwNTQ0QzlCNjNEQkIzNEMxRjk1Q0VDNjNGM0Q0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zmCVl5PVLhrotX6JCmP+j6m9 VIrpsE86zyVXvUREqLHRbksDphasXUoh3iTdRgqPxMSiSCV1I8HKh9bX6SYvoKnT UjYjUvhbICRzxU6Ed8q9aillzzqt3bPtz7Xkrib8eWJW1Zouw0xJm0IwLsLB0Mkb kupkSMmJ3hj0tDpuBokG5qunWF+kFJRLz/kpaSB+HqLU7Gm18aM6CMkD87G7bMe+ Ws3AG5lFDfvOiNKApeyDOD7/wjkPiiMXxO/uC+QncqpM/SlnzFkuqOTbnxOFw4sU CNbZBCDQifapofBjTTLl+D21hnEj8BZucqFDA3kAq6D1/oY3AvnzC+qvYh9NAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTb+Mk2gFRMm2Pbs0wflc7GPz1C4wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzODM2MmUzMjMxMzkyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAO625gwDQYJKoZIhvcNAQELBQADggEBALLPVYBc mIS9Wq4Yv1CQ4BMJuWrkpkKMBORpjiuwOnb0xBBGUFJ9iyeLpDp8NpwcQBa4+sT9 wzUg2wKDtyWVks7f8F6FRP/rfafbxvG9iZcwKGTSUjryUls3hqlveqG2JZ6wa2id g8fjICJ9a1blruSJAi4bodsbobXn6mgQQQ7CjSnCZEdM3pSAvQcQM1bpKXRl8eeT dopOt1ze9tXLprdkOwW/Qba2qoF7EknDCUtptY8nv9/ESEp2UAFaivp47emnWYzG 3WfUQUQvOVFZIU3c1AaaBpJn8wx3nzQxfDU3HpcwgWUN5R9NQ99LjbPS9GVrHHRu Ft5DtFyna9ShOLo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:58:23 2025 by rpki-client