$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa File: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (raw, json) Hash identifier: 5vvwC6MQU7dBy4VA97gpDUDkn4tFUMFLR4X0/id2YOc= Subject key identifier: 71:33:3D:2C:CB:3E:72:FA:07:32:0E:F1:A6:BC:04:5F:70:26:08:F4 Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Certificate serial: 79B3770CE9044E42DBB5F7C8F96475BBE779088E Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa Signing time: Wed 08 Oct 2025 15:54:55 +0000 ROA not before: Wed 08 Oct 2025 15:49:55 +0000 ROA not after: Wed 07 Oct 2026 15:54:55 +0000 asID: 263911 IP address blocks: 138.204.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b3:77:0c:e9:04:4e:42:db:b5:f7:c8:f9:64:75:bb:e7:79:08:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Validity Not Before: Oct 8 15:49:55 2025 GMT Not After : Oct 7 15:54:55 2026 GMT Subject: CN=71333D2CCB3E72FA07320EF1A6BC045F702608F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:3b:4d:0f:9b:ba:cb:f6:4a:25:72:3c:fa: 0a:6b:31:96:70:ba:20:f1:c8:ed:52:e3:19:29:d7: 07:66:cc:03:56:f1:e5:9e:08:bb:01:b7:ac:45:68: 53:1e:c4:d0:da:41:a6:0f:e8:04:cd:a1:27:c9:5a: 67:08:97:33:e2:6b:29:f3:76:87:71:55:d5:24:fb: 9d:f7:52:fd:82:4f:95:b4:72:50:44:61:47:03:02: 3e:f5:36:cd:48:98:a2:0f:95:b5:3a:87:99:f9:b5: 5d:12:9d:57:55:9e:6c:eb:40:2b:0a:d7:20:2c:ca: b4:b0:87:a5:07:60:01:d5:72:3d:00:f2:1b:a2:28: 47:43:f7:51:3f:c9:ea:09:1f:db:4b:56:ba:31:d3: e9:2d:b0:20:fc:f7:4d:74:ed:22:54:69:f4:70:6e: 33:67:f1:f5:6e:69:ed:8a:75:04:aa:31:b2:5f:66: c0:33:d1:f2:e0:da:97:74:f4:17:b6:4a:ec:9b:6b: 1d:95:8d:87:48:6a:c4:04:61:27:c8:b7:96:a8:cb: fd:07:a6:3c:96:4b:75:55:13:e8:57:7c:57:51:b7: f8:73:b7:ae:a4:84:a6:a6:9f:b8:6b:fc:f5:d2:6c: bf:b9:b7:3f:67:17:4e:1a:a9:14:31:bf:dc:6d:9e: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:3D:2C:CB:3E:72:FA:07:32:0E:F1:A6:BC:04:5F:70:26:08:F4 X509v3 Authority Key Identifier: keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.172.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:e9:a2:18:d2:48:2a:f3:7d:6c:80:d2:cc:0c:cb:1f:08:db: 79:36:53:f3:49:11:97:8e:ad:8f:94:f1:77:07:fe:e2:22:60: 37:72:48:a9:dc:ee:4a:cf:4b:7f:bd:48:61:38:ed:44:1b:e2: f6:40:f7:08:20:b2:73:a4:9c:23:2d:b5:99:71:52:26:1b:c6: 56:aa:55:46:8f:7d:96:e9:51:4b:2f:47:2c:19:ba:d1:26:77: fc:a7:84:84:53:65:33:9a:01:fa:9e:20:55:9b:ab:fe:b6:6b: 1d:f1:d6:7f:aa:28:e8:25:4d:32:e3:36:3f:22:76:4a:77:81: ff:b3:5d:54:9f:51:da:1f:27:51:f1:21:61:44:ef:b6:46:19: 70:f9:3a:4a:fe:06:9e:a8:1f:85:7b:38:f3:45:00:36:e9:21: 4c:b7:e8:a0:23:73:46:fc:f0:b9:8f:e6:61:0f:41:71:d9:7d: 71:83:23:1d:b6:2e:14:32:c4:cf:32:42:a2:11:46:37:ff:8d: 39:f2:97:57:a5:09:1b:89:72:09:be:da:d6:6c:ed:14:61:e9: d1:ea:d5:e7:be:15:73:9f:1b:ac:a8:4e:82:8d:58:97:83:21: 41:5b:17:34:33:25:23:d4:96:7a:41:01:d6:0a:39:b4:c6:ce: a9:6e:4c:4e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUebN3DOkETkLbtffI+WR1u+d5CI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTVaFw0yNjEwMDcxNTU0NTVaMDMxMTAvBgNV BAMTKDcxMzMzRDJDQ0IzRTcyRkEwNzMyMEVGMUE2QkMwNDVGNzAyNjA4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uztND5u6y/ZKJXI8+gprMZZw uiDxyO1S4xkp1wdmzANW8eWeCLsBt6xFaFMexNDaQaYP6ATNoSfJWmcIlzPiaynz dodxVdUk+533Uv2CT5W0clBEYUcDAj71Ns1ImKIPlbU6h5n5tV0SnVdVnmzrQCsK 1yAsyrSwh6UHYAHVcj0A8huiKEdD91E/yeoJH9tLVrox0+ktsCD890107SJUafRw bjNn8fVuae2KdQSqMbJfZsAz0fLg2pd09Be2Suybax2VjYdIasQEYSfIt5aoy/0H pjyWS3VVE+hXfFdRt/hzt66khKamn7hr/PXSbL+5tz9nF04aqRQxv9xtnnFfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUcTM9LMs+cvoHMg7xprwEX3AmCPQwHwYDVR0j BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMrDANBgkqhkiG9w0BAQsFAAOCAQEAO+mi GNJIKvN9bIDSzAzLHwjbeTZT80kRl46tj5Txdwf+4iJgN3JIqdzuSs9Lf71IYTjt RBvi9kD3CCCyc6ScIy21mXFSJhvGVqpVRo99lulRSy9HLBm60SZ3/KeEhFNlM5oB +p4gVZur/rZrHfHWf6oo6CVNMuM2PyJ2SneB/7NdVJ9R2h8nUfEhYUTvtkYZcPk6 Sv4GnqgfhXs480UANukhTLfooCNzRvzwuY/mYQ9Bcdl9cYMjHbYuFDLEzzJCohFG N/+NOfKXV6UJG4lyCb7a1mztFGHp0erV574Vc58brKhOgo1Yl4MhQVsXNDMlI9SW ekEB1go5tMbOqW5MTg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:37 2025 by rpki-client