$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa File: 3138362e3233332e37322e302f32312d3231203d3e203238323730.roa (raw, json) Hash identifier: AVJCVvbYL3pGF1O30IAKsCha7T+37axr48oIeQIJfxA= Subject key identifier: B7:25:4C:53:07:D9:20:3C:2E:55:2A:98:F1:E7:62:29:44:13:97:78 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 76AF359D902B2BFC2A6EA2DD797CF9FF5040E392 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:05 +0000 ROA not before: Sat 18 Oct 2025 22:56:05 +0000 ROA not after: Sat 17 Oct 2026 23:01:05 +0000 asID: 28270 IP address blocks: 186.233.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:af:35:9d:90:2b:2b:fc:2a:6e:a2:dd:79:7c:f9:ff:50:40:e3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:05 2025 GMT Not After : Oct 17 23:01:05 2026 GMT Subject: CN=B7254C5307D9203C2E552A98F1E7622944139778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:b3:a7:53:71:07:a1:45:c2:54:3b:cc:5a: 88:e4:f0:83:ca:e0:d6:32:ac:2f:a6:30:4f:3f:54: b9:59:7c:01:05:38:a6:c6:21:c7:f9:9a:1f:ca:6d: 39:15:48:cc:41:a4:a6:3b:57:b1:32:a6:a0:53:fb: 66:71:41:13:81:5a:3b:b2:3a:98:56:11:a3:d9:ac: 87:0c:4e:97:d4:b2:52:c5:6d:e2:d9:29:a6:a5:20: 32:9c:f6:a4:08:f4:42:81:74:d6:a1:64:ba:cd:b9: 68:93:2a:1d:38:3c:d7:93:d8:e1:3c:8e:00:93:2f: 9d:25:c3:1f:fd:aa:95:69:17:57:19:a5:7d:54:6c: 5f:7c:ec:59:ac:0d:c1:9b:2f:00:09:56:74:38:01: 2a:82:3f:94:f2:4e:4b:82:93:35:0e:2b:ac:a0:9d: a2:ff:be:dd:16:08:3c:57:9c:66:5a:83:c4:a0:11: 14:c7:b7:08:d3:d2:7b:d2:97:e3:9c:26:33:59:3e: eb:9d:23:22:46:45:d5:bc:84:77:d3:9a:3c:eb:96: 07:61:9d:d7:87:9c:c8:c4:5e:e3:0e:06:ef:49:9e: 85:6d:b3:93:d7:63:80:8c:f3:28:dc:6d:4c:0a:ee: d9:02:b2:b0:dd:98:4b:6b:7f:3b:80:58:12:c1:d1: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:25:4C:53:07:D9:20:3C:2E:55:2A:98:F1:E7:62:29:44:13:97:78 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.233.72.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:a2:93:a1:d5:3a:53:ae:56:fb:74:31:15:a6:64:5e:09:e5: be:e3:f6:1b:13:25:c8:6c:69:1c:e7:88:bf:7b:84:a8:1b:d2: 2d:a5:9f:e5:6c:4a:a2:37:15:f9:88:12:35:d3:93:71:05:9a: b7:d1:e8:05:56:8b:7c:43:23:87:c2:65:3a:ab:e8:4b:33:fc: be:2e:cc:40:38:57:84:79:e8:ef:2e:22:e5:80:79:9c:9f:67: 04:d4:41:43:2e:6d:e1:e5:6d:9c:7e:6f:fd:6a:c7:8a:70:96: d2:95:60:71:37:6f:6c:96:4c:ec:ea:b4:c6:6c:cc:cd:01:39: 1e:a3:62:68:c5:b6:d6:97:1d:c2:a2:54:c9:e3:a3:bc:f5:a9: 57:a2:b1:48:77:28:87:90:d2:42:ba:01:f8:ef:df:4a:c4:36: 8f:e9:2c:bb:77:78:9d:1d:a5:a9:10:a6:ce:38:bc:f6:4a:38: 2f:64:d3:25:08:d2:0a:97:9e:39:5d:a3:06:02:b0:eb:fd:7e: d8:81:96:40:08:a7:df:75:da:d6:2f:2c:dd:f5:b4:0f:24:85: 35:52:35:e7:f4:f5:90:91:6b:71:9f:f0:cc:70:67:d7:53:40: a6:79:4e:c4:31:8d:82:08:39:8f:d5:f0:b7:43:56:a9:63:e3: 6e:48:66:e0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUdq81nZArK/wqbqLdeXz5/1BA45IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDVaFw0yNjEwMTcyMzAxMDVaMDMxMTAvBgNV BAMTKEI3MjU0QzUzMDdEOTIwM0MyRTU1MkE5OEYxRTc2MjI5NDQxMzk3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/LOnU3EHoUXCVDvMWojk8IPK 4NYyrC+mME8/VLlZfAEFOKbGIcf5mh/KbTkVSMxBpKY7V7EypqBT+2ZxQROBWjuy OphWEaPZrIcMTpfUslLFbeLZKaalIDKc9qQI9EKBdNahZLrNuWiTKh04PNeT2OE8 jgCTL50lwx/9qpVpF1cZpX1UbF987FmsDcGbLwAJVnQ4ASqCP5TyTkuCkzUOK6yg naL/vt0WCDxXnGZag8SgERTHtwjT0nvSl+OcJjNZPuudIyJGRdW8hHfTmjzrlgdh ndeHnMjEXuMOBu9JnoVts5PXY4CM8yjcbUwK7tkCsrDdmEtrfzuAWBLB0WdBAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUtyVMUwfZIDwuVSqY8ediKUQTl3gwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzODM2MmUzMjMzMzMyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4 MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDuulIMA0GCSqGSIb3DQEBCwUAA4IBAQAtopOh1TpT rlb7dDEVpmReCeW+4/YbEyXIbGkc54i/e4SoG9ItpZ/lbEqiNxX5iBI105NxBZq3 0egFVot8QyOHwmU6q+hLM/y+LsxAOFeEeejvLiLlgHmcn2cE1EFDLm3h5W2cfm/9 aseKcJbSlWBxN29slkzs6rTGbMzNATkeo2JoxbbWlx3ColTJ46O89alXorFIdyiH kNJCugH4799KxDaP6Sy7d3idHaWpEKbOOLz2SjgvZNMlCNIKl545XaMGArDr/X7Y gZZACKffddrWLyzd9bQPJIU1UjXn9PWQkWtxn/DMcGfXU0CmeU7EMY2CCDmP1fC3 Q1apY+NuSGbg -----END CERTIFICATE-----Generated at Tue Oct 21 00:29:23 2025 by rpki-client