$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa File: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (raw, json) Hash identifier: TKxrWI/UtQO06f0V4oMpRtshZID0kbklXgTB/FM6dPM= Subject key identifier: DB:0B:05:08:18:C0:57:70:C0:5E:84:D1:86:CD:1D:44:0B:EF:D3:4A Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Certificate serial: 7301C11D6EE8B223F24F1A0FC934635F1EF2B216 Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa Signing time: Wed 08 Oct 2025 15:54:57 +0000 ROA not before: Wed 08 Oct 2025 15:49:57 +0000 ROA not after: Wed 07 Oct 2026 15:54:57 +0000 asID: 263911 IP address blocks: 138.204.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:01:c1:1d:6e:e8:b2:23:f2:4f:1a:0f:c9:34:63:5f:1e:f2:b2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Validity Not Before: Oct 8 15:49:57 2025 GMT Not After : Oct 7 15:54:57 2026 GMT Subject: CN=DB0B050818C05770C05E84D186CD1D440BEFD34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:4c:9e:8c:c8:7f:88:06:0c:c4:4e:e8:78: a2:eb:5f:b8:92:b6:04:f6:a4:40:e8:f6:6f:c7:e7: b8:41:b8:38:1d:fd:d9:95:0c:ec:e0:7f:27:6b:b2: 18:5d:cf:78:16:56:8e:f7:13:d6:12:8c:e7:fa:ba: b4:73:25:c3:64:f5:34:18:b0:8b:d3:0a:80:8e:42: f1:21:f8:47:a4:6c:66:be:30:06:09:ce:f8:b0:5a: a0:80:41:22:33:90:c3:9e:9e:a0:2f:25:84:c6:00: 8b:4a:e1:bc:ff:75:c0:92:bf:6b:cc:c0:a6:9b:16: 99:51:a7:58:f3:00:03:3a:02:42:e6:91:6d:61:10: e7:ea:83:cb:63:8d:fd:2b:5b:1e:d1:eb:09:13:b4: 15:10:73:87:76:a9:26:e5:bd:97:50:7c:64:c3:61: bd:47:4d:17:be:9e:c4:02:76:72:6f:e4:55:76:c9: 06:62:2b:36:8f:27:b6:76:5f:86:41:44:47:9e:25: 82:96:71:07:9d:1f:a8:c4:22:68:22:7a:ff:61:f1: 57:1d:ec:bf:b7:e6:e3:47:a3:4c:d7:76:ca:59:cd: b1:80:07:2c:49:58:cc:fa:e7:8e:d3:05:41:82:dc: c7:1d:29:5b:dd:92:e7:da:e4:30:9a:c8:49:7e:dc: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0B:05:08:18:C0:57:70:C0:5E:84:D1:86:CD:1D:44:0B:EF:D3:4A X509v3 Authority Key Identifier: keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.172.0/22 Signature Algorithm: sha256WithRSAEncryption 55:f7:26:45:09:8b:ea:a8:cb:76:cf:1d:3e:2b:d7:53:cc:ff: 36:85:bf:d4:05:b1:79:f3:da:10:16:78:52:b4:47:15:b3:3a: 74:d7:6b:b9:c4:f5:68:b1:ca:b5:92:0f:ea:78:fd:92:51:43: d0:55:67:4a:3d:6f:17:00:4c:0d:34:cc:bc:48:12:67:90:59: 3a:cf:3a:be:1a:f9:b5:50:7a:34:20:94:14:cb:25:a1:66:40: 89:40:e3:8f:2f:40:3e:04:d5:6f:29:21:ca:1b:6c:07:b5:ba: 40:83:83:7b:00:08:74:54:69:d3:94:5b:cc:8f:99:be:9a:34: 1c:4c:d6:a1:e9:d6:4f:81:71:b6:dc:94:c9:03:e4:3e:0a:ec: 7c:6b:c2:0c:17:a9:90:e0:3b:b4:89:57:47:b7:ba:c8:db:c0: 38:a1:fd:cf:69:e6:94:51:23:c1:f9:1e:16:66:c3:02:01:3a: 28:7e:8d:f0:3a:0b:15:b1:47:6f:3c:8c:e2:dc:18:93:ac:b0: a6:e3:24:09:6b:d3:09:77:64:3c:17:a7:94:59:d9:69:06:59: 96:58:65:6e:86:ee:25:2f:cc:95:ac:cc:d0:13:f9:3a:ff:c1: 5f:14:fc:fb:a4:6a:c8:59:a8:44:c3:47:3c:74:0f:68:b0:20: d0:a5:eb:08 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcwHBHW7osiPyTxoPyTRjXx7yshYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTdaFw0yNjEwMDcxNTU0NTdaMDMxMTAvBgNV BAMTKERCMEIwNTA4MThDMDU3NzBDMDVFODREMTg2Q0QxRDQ0MEJFRkQzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpfkyejMh/iAYMxE7oeKLrX7iS tgT2pEDo9m/H57hBuDgd/dmVDOzgfydrshhdz3gWVo73E9YSjOf6urRzJcNk9TQY sIvTCoCOQvEh+EekbGa+MAYJzviwWqCAQSIzkMOenqAvJYTGAItK4bz/dcCSv2vM wKabFplRp1jzAAM6AkLmkW1hEOfqg8tjjf0rWx7R6wkTtBUQc4d2qSblvZdQfGTD Yb1HTRe+nsQCdnJv5FV2yQZiKzaPJ7Z2X4ZBREeeJYKWcQedH6jEImgiev9h8Vcd 7L+35uNHo0zXdspZzbGAByxJWMz6547TBUGC3McdKVvdkufa5DCayEl+3KExAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU2wsFCBjAV3DAXoTRhs0dRAvv00owHwYDVR0j BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMrDANBgkqhkiG9w0BAQsFAAOCAQEAVfcm RQmL6qjLds8dPivXU8z/NoW/1AWxefPaEBZ4UrRHFbM6dNdrucT1aLHKtZIP6nj9 klFD0FVnSj1vFwBMDTTMvEgSZ5BZOs86vhr5tVB6NCCUFMsloWZAiUDjjy9APgTV bykhyhtsB7W6QIODewAIdFRp05RbzI+Zvpo0HEzWoenWT4FxttyUyQPkPgrsfGvC DBepkOA7tIlXR7e6yNvAOKH9z2nmlFEjwfkeFmbDAgE6KH6N8DoLFbFHbzyM4twY k6ywpuMkCWvTCXdkPBenlFnZaQZZllhlbobuJS/MlazM0BP5Ov/BXxT8+6RqyFmo RMNHPHQPaLAg0KXrCA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:50 2025 by rpki-client