$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa File: 3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa (raw, json) Hash identifier: PTYAF47n82UjzE1q2h2GEkc5SPozudG3WpptD/wa7lw= Subject key identifier: F3:3D:7C:AD:D1:E3:6E:CE:16:98:AB:6E:F0:B6:B4:FD:01:CB:FF:1D Certificate issuer: /CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F Certificate serial: 298E8C24ADEB723BDC0822A73B17E92872EE2065 Authority key identifier: C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa Signing time: Fri 20 Jun 2025 17:04:27 +0000 ROA not before: Fri 20 Jun 2025 16:59:27 +0000 ROA not after: Fri 19 Jun 2026 17:04:27 +0000 asID: 263878 IP address blocks: 138.204.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.crl rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Jul 2025 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8e:8c:24:ad:eb:72:3b:dc:08:22:a7:3b:17:e9:28:72:ee:20:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C96F475755CA37BC1D53AFDCE8B451F444F7129F Validity Not Before: Jun 20 16:59:27 2025 GMT Not After : Jun 19 17:04:27 2026 GMT Subject: CN=F33D7CADD1E36ECE1698AB6EF0B6B4FD01CBFF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:24:9f:80:a1:85:d6:8b:b8:f8:fc:ca:6c: c0:99:50:2b:ad:af:2d:03:c3:ba:7d:8a:83:bc:d6: f9:3e:6a:67:2f:00:09:db:e6:30:a1:77:69:c6:60: 3d:29:d1:0e:6f:bb:d5:2b:01:9f:a8:6a:33:0e:b0: 82:e9:57:c5:95:3a:00:65:65:15:68:65:d3:4a:4c: 9c:a7:f0:40:22:8f:b6:f2:ed:c3:e8:69:09:04:43: dc:44:2f:8c:5b:2f:32:99:72:ef:9a:d9:11:6a:61: 40:18:a0:75:cd:f5:05:ea:5c:79:a0:11:b0:92:3e: e2:cb:35:bb:58:44:6f:c8:26:69:41:d8:83:dc:17: 2f:67:32:0d:f8:1a:2e:b8:3d:91:f9:d6:c5:c6:d7: d0:11:ed:cd:e2:f4:fb:44:a9:b2:9d:41:de:76:26: 0f:10:2c:d8:9c:0e:78:be:c7:7c:cf:f2:16:7b:cf: c2:d2:d8:82:a2:1a:b8:37:45:38:df:ca:e7:c6:01: 3c:3d:55:ac:b5:94:97:ee:34:97:ff:53:a6:2d:ee: 26:7c:42:e7:21:35:13:08:1b:c4:cb:a1:36:a0:47: ff:92:4c:5f:41:ba:20:09:9e:28:fe:26:ad:0d:65: ca:57:10:98:4c:f2:8a:e3:6b:0d:26:05:45:62:1b: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:7C:AD:D1:E3:6E:CE:16:98:AB:6E:F0:B6:B4:FD:01:CB:FF:1D X509v3 Authority Key Identifier: keyid:C9:6F:47:57:55:CA:37:BC:1D:53:AF:DC:E8:B4:51:F4:44:F7:12:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/C96F475755CA37BC1D53AFDCE8B451F444F7129F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C96F475755CA37BC1D53AFDCE8B451F444F7129F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:f2:f2:66:2e:16:75:93:64:ac:7f:40:88:0a:65:10:06:24: eb:9c:24:99:cf:4a:60:40:2b:bf:93:a8:25:44:21:fa:29:d1: f3:64:e1:18:d9:40:72:a9:8d:e6:7b:8c:a7:ab:85:e4:12:c9: 69:db:df:d4:e6:88:9f:de:d9:ac:67:f9:85:34:be:e1:df:c0: 14:5e:ed:7c:a7:a3:1e:e4:af:94:47:52:93:4f:e5:9e:97:5f: 02:f7:09:9e:7e:40:a8:48:c1:5c:96:07:7d:45:b9:c8:3e:9e: 6d:29:dd:8b:9b:32:90:30:f2:2d:8c:4a:07:51:8c:dc:e5:ed: 0c:43:0d:53:79:7a:83:25:43:08:82:49:0d:34:28:55:ba:53: 8e:03:cc:bf:67:6a:7b:f9:86:74:9f:ee:5a:86:9a:74:32:67: bc:91:b9:81:2e:63:46:b3:1c:79:5a:47:c9:2f:27:fd:a3:65: c9:45:0d:c6:85:e4:2c:9c:35:ba:59:0c:27:64:ec:7e:07:7e: c0:1f:9a:c5:eb:91:77:b4:01:b8:02:23:e1:d0:48:0b:01:96: 98:23:f6:61:5d:2b:b2:1b:be:05:c6:0a:12:ea:56:e9:87:7a: c4:41:ee:21:d5:6e:9a:73:ec:c2:aa:32:30:b5:ef:7a:35:dd: 83:17:ad:73 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUKY6MJK3rcjvcCCKnOxfpKHLuIGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk2RjQ3NTc1NUNBMzdCQzFENTNBRkRDRThCNDUxRjQ0 NEY3MTI5RjAeFw0yNTA2MjAxNjU5MjdaFw0yNjA2MTkxNzA0MjdaMDMxMTAvBgNV BAMTKEYzM0Q3Q0FERDFFMzZFQ0UxNjk4QUI2RUYwQjZCNEZEMDFDQkZGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQySfgKGF1ou4+PzKbMCZUCut ry0Dw7p9ioO81vk+amcvAAnb5jChd2nGYD0p0Q5vu9UrAZ+oajMOsILpV8WVOgBl ZRVoZdNKTJyn8EAij7by7cPoaQkEQ9xEL4xbLzKZcu+a2RFqYUAYoHXN9QXqXHmg EbCSPuLLNbtYRG/IJmlB2IPcFy9nMg34Gi64PZH51sXG19AR7c3i9PtEqbKdQd52 Jg8QLNicDni+x3zP8hZ7z8LS2IKiGrg3RTjfyufGATw9Vay1lJfuNJf/U6Yt7iZ8 QuchNRMIG8TLoTagR/+STF9BuiAJnij+Jq0NZcpXEJhM8orjaw0mBUViGyjRAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU8z18rdHjbs4WmKtu8La0/QHL/x0wHwYDVR0j BBgwFoAUyW9HV1XKN7wdU6/c6LRR9ET3Ep8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEg5YlJSUkNEVnFmY21hSnp3NzZwOVVYWE1Rb2FIaXd4cGRldWhuZVpG VFgvMC9DOTZGNDc1NzU1Q0EzN0JDMUQ1M0FGRENFOEI0NTFGNDQ0RjcxMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NkY0NzU3NTVDQTM3QkMx RDUzQUZEQ0U4QjQ1MUY0NDRGNzEyOUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRIOWJSUlJDRFZxZmNtYUp6dzc2cDlVWFhNUW9hSGl3eHBkZXVobmVaRlRYLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzMzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKzBQwDQYJKoZIhvcNAQELBQADggEBAEry8mYu FnWTZKx/QIgKZRAGJOucJJnPSmBAK7+TqCVEIfop0fNk4RjZQHKpjeZ7jKerheQS yWnb39TmiJ/e2axn+YU0vuHfwBRe7Xynox7kr5RHUpNP5Z6XXwL3CZ5+QKhIwVyW B31Fucg+nm0p3YubMpAw8i2MSgdRjNzl7QxDDVN5eoMlQwiCSQ00KFW6U44DzL9n anv5hnSf7lqGmnQyZ7yRuYEuY0azHHlaR8kvJ/2jZclFDcaF5CycNbpZDCdk7H4H fsAfmsXrkXe0AbgCI+HQSAsBlpgj9mFdK7IbvgXGChLqVumHesRB7iHVbppz7MKq MjC173o13YMXrXM= -----END CERTIFICATE-----Generated at Sat Jul 5 22:13:23 2025 by rpki-client