$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa File: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (raw, json) Hash identifier: tQ9BE7myZWTRJBmbkn0TzJRLKgNbGTDntpPgIeG1AmI= Subject key identifier: B0:99:EC:AE:21:38:CD:81:CE:E2:A4:64:3A:37:31:D0:36:57:50:51 Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Certificate serial: 23E8EF8A0A72B3AE1273BFCCF4E928BADB89DBA0 Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa Signing time: Wed 08 Oct 2025 15:54:56 +0000 ROA not before: Wed 08 Oct 2025 15:49:56 +0000 ROA not after: Wed 07 Oct 2026 15:54:56 +0000 asID: 263911 IP address blocks: 138.204.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e8:ef:8a:0a:72:b3:ae:12:73:bf:cc:f4:e9:28:ba:db:89:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Validity Not Before: Oct 8 15:49:56 2025 GMT Not After : Oct 7 15:54:56 2026 GMT Subject: CN=B099ECAE2138CD81CEE2A4643A3731D036575051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:29:9a:9b:d4:9a:61:93:32:26:e2:45:8e: a4:44:a8:3b:26:d9:4f:7e:36:0e:53:f0:29:10:cf: 46:7b:fb:9b:bb:bd:e5:6d:74:60:06:4a:af:7f:76: f6:d8:c4:bd:d4:99:a4:ee:8a:e0:02:c7:18:e0:ed: c8:77:65:3e:47:1b:32:01:98:fe:77:bd:05:59:1e: 71:7e:b5:60:02:38:ab:b3:fe:d2:fc:f7:64:37:58: 79:0b:45:fc:57:ce:89:91:87:bc:ec:df:05:da:bc: 9b:f3:5f:f4:a5:a0:bb:5d:5a:59:bd:59:d9:af:63: 6d:a3:15:04:44:5e:78:b4:80:a4:aa:25:f4:61:4e: 62:f5:c8:5a:6f:58:d9:2c:53:c7:e6:4d:fe:44:b6: 41:cf:d6:1b:f4:a3:30:20:94:59:3f:9e:e5:04:6a: 32:89:79:8e:65:4f:a3:da:85:d9:1a:1f:cd:42:c2: 42:e0:58:d2:24:ee:50:e3:47:12:f6:e2:15:b7:80: 76:de:8c:0f:31:f5:bd:cd:1d:f6:d6:a9:da:bf:3a: e6:ff:bc:26:17:b8:49:00:fa:90:50:5d:b0:69:54: da:43:96:3f:6b:15:2a:29:7a:d5:2e:5e:d0:95:d1: 78:9b:6e:de:de:6f:aa:c6:e7:f4:5c:8d:61:d1:c6: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:EC:AE:21:38:CD:81:CE:E2:A4:64:3A:37:31:D0:36:57:50:51 X509v3 Authority Key Identifier: keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.174.0/24 Signature Algorithm: sha256WithRSAEncryption 25:2f:d4:7b:1d:15:8a:d5:8d:cb:7e:86:56:1b:1d:c5:84:ee: d8:65:55:25:ad:19:04:c1:48:1f:f6:30:01:6b:1a:3e:0f:49: 78:5d:0e:70:e2:ae:50:38:fa:7a:83:fb:c6:7d:b2:a3:de:c2: e6:cf:a6:ca:14:31:80:b3:8a:5c:37:66:cd:85:ba:3f:28:0c: ba:5b:5f:62:3c:6b:9b:9c:3e:b6:47:64:75:b2:61:79:42:d8: 1a:46:b1:22:7e:66:4c:d2:80:3f:08:ef:de:10:9d:88:53:7a: c1:6f:7d:68:30:2c:e2:59:06:0e:68:35:3b:15:29:10:7a:a2: ce:ae:1f:c1:8d:b4:c1:2f:72:7c:a9:88:6b:4d:c2:19:e9:2b: 18:b8:2d:d1:8e:74:9b:a2:b2:99:9e:e8:64:3d:03:6f:d9:4d: bb:59:af:a8:a2:fe:c8:4f:e6:c5:9a:f3:92:31:99:b4:21:6b: 41:62:b4:6e:df:49:c7:18:13:8e:d4:eb:e5:27:7a:f9:cb:fc: 3c:c7:a9:71:a8:5a:e4:35:08:ca:ef:d4:80:23:2c:89:08:ed: 16:7a:9b:a5:40:a7:a4:50:fe:7e:07:43:69:7c:49:e0:c7:f8: 7e:cf:46:c7:95:19:be:8b:ef:bc:b5:b9:a2:4e:45:7a:a5:4f: 5c:70:97:24 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUI+jvigpys64Sc7/M9OkoutuJ26AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTZaFw0yNjEwMDcxNTU0NTZaMDMxMTAvBgNV BAMTKEIwOTlFQ0FFMjEzOENEODFDRUUyQTQ2NDNBMzczMUQwMzY1NzUwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoimam9SaYZMyJuJFjqREqDsm 2U9+Ng5T8CkQz0Z7+5u7veVtdGAGSq9/dvbYxL3UmaTuiuACxxjg7ch3ZT5HGzIB mP53vQVZHnF+tWACOKuz/tL892Q3WHkLRfxXzomRh7zs3wXavJvzX/SloLtdWlm9 WdmvY22jFQREXni0gKSqJfRhTmL1yFpvWNksU8fmTf5EtkHP1hv0ozAglFk/nuUE ajKJeY5lT6PahdkaH81CwkLgWNIk7lDjRxL24hW3gHbejA8x9b3NHfbWqdq/Oub/ vCYXuEkA+pBQXbBpVNpDlj9rFSopetUuXtCV0Xibbt7eb6rG5/RcjWHRxl6RAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUsJnsriE4zYHO4qRkOjcx0DZXUFEwHwYDVR0j BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMrjANBgkqhkiG9w0BAQsFAAOCAQEAJS/U ex0VitWNy36GVhsdxYTu2GVVJa0ZBMFIH/YwAWsaPg9JeF0OcOKuUDj6eoP7xn2y o97C5s+myhQxgLOKXDdmzYW6PygMultfYjxrm5w+tkdkdbJheULYGkaxIn5mTNKA Pwjv3hCdiFN6wW99aDAs4lkGDmg1OxUpEHqizq4fwY20wS9yfKmIa03CGekrGLgt 0Y50m6KymZ7oZD0Db9lNu1mvqKL+yE/mxZrzkjGZtCFrQWK0bt9JxxgTjtTr5Sd6 +cv8PMepcaha5DUIyu/UgCMsiQjtFnqbpUCnpFD+fgdDaXxJ4Mf4fs9Gx5UZvovv vLW5ok5FeqVPXHCXJA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:37 2025 by rpki-client