$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa File: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (raw, json) Hash identifier: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8= Subject key identifier: CA:5C:BD:81:CA:C7:E6:98:E2:3F:52:DD:7B:CD:C1:27:01:94:D0:A4 Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 3BBEE0D10763438DF1914924657D65BDDD68FDB1 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa Signing time: Tue 14 Oct 2025 14:00:25 +0000 ROA not before: Tue 14 Oct 2025 13:55:25 +0000 ROA not after: Tue 13 Oct 2026 14:00:25 +0000 asID: 263905 IP address blocks: 138.204.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:be:e0:d1:07:63:43:8d:f1:91:49:24:65:7d:65:bd:dd:68:fd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Oct 14 13:55:25 2025 GMT Not After : Oct 13 14:00:25 2026 GMT Subject: CN=CA5CBD81CAC7E698E23F52DD7BCDC1270194D0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a6:23:aa:3a:cf:9a:c9:5d:65:1e:b8:1a:73: 82:2f:b8:31:1e:81:5c:12:ba:ba:f4:6a:81:7a:f2: 14:1c:f3:af:95:28:61:9d:72:dc:ec:71:c8:07:e5: e9:98:90:45:bd:28:f1:df:f9:f1:7e:2f:03:f4:07: 8f:7a:f7:7b:bc:63:ad:67:86:0b:62:08:45:09:92: 14:45:f1:e6:9c:6a:ea:d8:87:86:12:ac:fc:88:6e: 39:d6:3a:84:fa:2c:3b:82:99:09:f9:df:94:f9:c7: 2e:be:e5:2e:76:2f:7f:10:2b:e3:cf:cd:7f:63:d4: 2e:01:eb:89:44:f0:43:7f:76:5e:0a:ac:f5:3e:81: e8:1f:92:1e:51:53:1a:bc:b8:8a:7d:b3:15:81:7c: 33:63:08:c9:dc:56:80:13:fa:3e:bc:1a:fe:f4:ee: 25:a7:ef:9e:2f:08:37:f0:81:32:14:97:55:95:6c: 63:18:87:19:5d:15:ec:88:c8:7d:a7:71:83:26:d3: 5e:41:ef:b6:91:4c:26:ea:30:f6:04:e9:c6:a4:81: a5:84:01:dd:42:db:26:4d:01:07:2c:e8:c1:38:66: ee:a0:67:ac:c9:9d:ec:6e:d1:f1:55:c3:ce:7b:c2: 36:51:d4:a0:7a:79:51:46:54:1b:c1:e8:88:c6:1a: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5C:BD:81:CA:C7:E6:98:E2:3F:52:DD:7B:CD:C1:27:01:94:D0:A4 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.200.0/22 Signature Algorithm: sha256WithRSAEncryption c8:0a:d5:8f:47:7f:c8:d8:ed:81:16:ec:16:75:0c:fd:d9:e3: 97:9e:1c:78:98:c1:b4:25:64:71:c7:85:71:1f:9d:6d:8c:8f: 0e:44:9b:0e:6c:ed:aa:af:2f:21:3c:3e:7b:5a:42:da:74:e9: 65:37:d8:19:fe:31:1b:d1:02:f7:55:19:13:80:66:5b:8b:81: bd:35:97:52:c1:49:73:4c:4e:0b:c8:ad:95:c0:cc:ce:83:f6: b7:d3:36:74:48:00:53:17:b5:a4:1e:d4:ed:c6:34:25:6a:9e: 8c:ac:4f:0a:7e:eb:0d:bd:e4:2c:a9:2e:3b:63:bf:5d:55:e7: c0:69:2d:97:c4:2b:a5:41:e9:3f:57:30:66:cc:6b:bd:6a:4f: 93:d3:3b:eb:fe:62:56:03:3b:8d:10:85:f3:92:43:b9:bd:ba: 02:08:ca:46:78:10:18:36:50:fb:02:a0:4a:0c:6e:fa:2a:73: 51:2e:42:c8:08:92:e5:3e:d4:c8:8c:dd:12:52:cc:d8:a3:06: 6b:92:fa:9a:b8:98:29:85:40:a3:63:f2:00:b7:8a:74:8a:d1: a5:d0:8d:76:a8:dd:20:cf:58:e3:52:3e:93:f2:01:13:df:8c: aa:e5:c1:46:0c:cc:9b:63:30:e0:5e:b1:84:62:ad:42:d8:43: 18:8c:88:9c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUO77g0QdjQ43xkUkkZX1lvd1o/bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNTEwMTQxMzU1MjVaFw0yNjEwMTMxNDAwMjVaMDMxMTAvBgNV BAMTKENBNUNCRDgxQ0FDN0U2OThFMjNGNTJERDdCQ0RDMTI3MDE5NEQwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpiOqOs+ayV1lHrgac4IvuDEe gVwSurr0aoF68hQc86+VKGGdctzsccgH5emYkEW9KPHf+fF+LwP0B49693u8Y61n hgtiCEUJkhRF8eacaurYh4YSrPyIbjnWOoT6LDuCmQn535T5xy6+5S52L38QK+PP zX9j1C4B64lE8EN/dl4KrPU+gegfkh5RUxq8uIp9sxWBfDNjCMncVoAT+j68Gv70 7iWn754vCDfwgTIUl1WVbGMYhxldFeyIyH2ncYMm015B77aRTCbqMPYE6cakgaWE Ad1C2yZNAQcs6ME4Zu6gZ6zJnexu0fFVw857wjZR1KB6eVFGVBvB6IjGGiv9AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUyly9gcrH5pjiP1Lde83BJwGU0KQwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNkYjdTYWhadFJWQzhQdU1jZ3l6YkFtZVVmVnd5UmNzeFdtSENHRnZwY3lGLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMyDANBgkqhkiG9w0BAQsFAAOCAQEAyArV j0d/yNjtgRbsFnUM/dnjl54ceJjBtCVkcceFcR+dbYyPDkSbDmztqq8vITw+e1pC 2nTpZTfYGf4xG9EC91UZE4BmW4uBvTWXUsFJc0xOC8itlcDMzoP2t9M2dEgAUxe1 pB7U7cY0JWqejKxPCn7rDb3kLKkuO2O/XVXnwGktl8QrpUHpP1cwZsxrvWpPk9M7 6/5iVgM7jRCF85JDub26AgjKRngQGDZQ+wKgSgxu+ipzUS5CyAiS5T7UyIzdElLM 2KMGa5L6mriYKYVAo2PyALeKdIrRpdCNdqjdIM9Y41I+k/IBE9+MquXBRgzMm2Mw 4F6xhGKtQthDGIyInA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:26:44 2025 by rpki-client