$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa File: 3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json) Hash identifier: sfP0JtMx8wk8bbHVWh5ubGBFLNB37QOuwYp9//enIpQ= Subject key identifier: DD:9A:18:88:34:BD:6C:B4:D4:A7:32:9D:95:64:04:77:C3:80:0C:AF Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 6FD66D53AC1FCBCA437A407943939687C5106030 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:05 +0000 ROA not before: Sat 18 Oct 2025 22:56:05 +0000 ROA not after: Sat 17 Oct 2026 23:01:05 +0000 asID: 28270 IP address blocks: 186.219.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d6:6d:53:ac:1f:cb:ca:43:7a:40:79:43:93:96:87:c5:10:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:05 2025 GMT Not After : Oct 17 23:01:05 2026 GMT Subject: CN=DD9A188834BD6CB4D4A7329D95640477C3800CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:ab:37:30:fd:37:85:d4:b0:a1:34:4f:e1: f9:88:28:91:9c:18:b7:7b:24:24:f6:07:f4:c5:b9: e4:81:19:96:e7:a0:c5:d8:2a:59:09:eb:ae:72:cb: 29:05:ad:83:51:5e:d0:38:e2:99:58:f0:04:56:6b: ee:6a:ea:c7:f1:d5:3f:01:ee:eb:bd:06:be:e6:b8: fd:18:b0:66:0f:cf:b2:51:78:0a:7d:97:e9:1d:d4: 63:d2:4a:e6:d9:11:26:c3:a7:b1:7b:92:6d:ed:fd: 1c:7a:e5:75:66:a8:c2:3a:f0:57:dd:5b:f5:95:a4: a0:6d:dd:73:4c:ca:c9:d8:dd:47:f2:52:d1:63:9c: 93:2b:a0:9f:de:8b:17:dd:00:b3:be:ab:58:88:59: ff:78:54:e1:dd:42:61:54:32:2d:c3:05:8c:b1:18: 88:1a:76:95:49:2a:af:84:c7:22:99:a0:a3:74:6a: 5d:7d:e2:8e:31:aa:dc:ba:ba:fe:28:03:c6:56:37: d6:bc:da:bc:7a:60:c1:3d:ef:97:88:a7:2f:aa:c2: 22:bb:83:1a:dd:1e:f2:78:d9:85:81:34:9a:24:25: 30:47:e4:dc:17:cd:f0:31:7e:9b:91:7e:1f:1d:5c: 0f:55:5d:ba:4f:1e:5e:74:cb:09:35:8a:5b:57:1e: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9A:18:88:34:BD:6C:B4:D4:A7:32:9D:95:64:04:77:C3:80:0C:AF X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.219.152.0/21 Signature Algorithm: sha256WithRSAEncryption 29:28:d8:81:d3:01:b7:79:94:fc:96:7b:ab:42:9b:2f:ca:95: 83:a6:cb:e9:54:ee:4b:81:9a:8c:06:a8:2c:1c:9c:b9:0d:4d: e6:cf:72:ee:44:99:bb:a4:b8:28:3f:73:f4:34:0a:ca:69:13: 49:66:8f:a8:3c:5a:b4:d0:a8:1b:23:0b:72:0a:74:69:2b:b8: 5b:bc:59:29:55:ef:23:39:83:f7:a0:46:9f:23:79:59:09:be: 47:7c:8c:97:f9:d4:47:ea:ee:58:d0:20:94:ce:74:6f:82:bb: 2b:c7:ce:aa:7e:38:2a:7a:00:b6:93:3a:13:dd:c5:b3:40:70: b3:bb:e1:64:8d:34:50:96:c5:9a:ae:45:15:9f:bf:9a:bf:18: 33:e8:07:aa:21:37:87:27:d5:7a:d8:9b:1e:f8:c7:28:e4:4b: c4:4f:f5:ac:a8:b1:81:35:ca:67:df:eb:5f:1e:6d:60:4f:98: ad:1b:c7:f9:dc:b9:49:ed:05:ac:05:01:61:51:7a:f7:0d:40: 54:78:e4:68:f1:c4:2b:c9:7d:d2:8a:c9:b4:33:60:74:ef:39: 44:b5:71:66:f9:a4:69:14:cb:2c:3e:31:22:7a:c7:b0:11:b5: fc:fa:15:01:59:46:21:3c:ce:6e:a3:2d:9e:25:8b:9e:c9:77: 20:cf:0f:4d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUb9ZtU6wfy8pDekB5Q5OWh8UQYDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDVaFw0yNjEwMTcyMzAxMDVaMDMxMTAvBgNV BAMTKEREOUExODg4MzRCRDZDQjRENEE3MzI5RDk1NjQwNDc3QzM4MDBDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEKs3MP03hdSwoTRP4fmIKJGc GLd7JCT2B/TFueSBGZbnoMXYKlkJ665yyykFrYNRXtA44plY8ARWa+5q6sfx1T8B 7uu9Br7muP0YsGYPz7JReAp9l+kd1GPSSubZESbDp7F7km3t/Rx65XVmqMI68Ffd W/WVpKBt3XNMysnY3UfyUtFjnJMroJ/eixfdALO+q1iIWf94VOHdQmFUMi3DBYyx GIgadpVJKq+ExyKZoKN0al194o4xqty6uv4oA8ZWN9a82rx6YME975eIpy+qwiK7 gxrdHvJ42YWBNJokJTBH5NwXzfAxfpuRfh8dXA9VXbpPHl50ywk1iltXHo/JAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3ZoYiDS9bLTUpzKdlWQEd8OADK8wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzODM2MmUzMjMxMzkyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAO625gwDQYJKoZIhvcNAQELBQADggEBACko2IHT Abd5lPyWe6tCmy/KlYOmy+lU7kuBmowGqCwcnLkNTebPcu5EmbukuCg/c/Q0Cspp E0lmj6g8WrTQqBsjC3IKdGkruFu8WSlV7yM5g/egRp8jeVkJvkd8jJf51Efq7ljQ IJTOdG+CuyvHzqp+OCp6ALaTOhPdxbNAcLO74WSNNFCWxZquRRWfv5q/GDPoB6oh N4cn1XrYmx74xyjkS8RP9ayosYE1ymff618ebWBPmK0bx/ncuUntBawFAWFRevcN QFR45GjxxCvJfdKKybQzYHTvOUS1cWb5pGkUyyw+MSJ6x7ARtfz6FQFZRiE8zm6j LZ4li57JdyDPD00= -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:01 2025 by rpki-client