$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa File: 3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa (raw, json) Hash identifier: wPcZEPMOwF2p0BbN4NuQGOKO4vSnDPlz0lGEZW2DWts= Subject key identifier: D7:34:A3:7A:17:B4:6A:6B:C4:12:A2:F8:15:EE:11:66:22:38:69:20 Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 66DF724389A65A4F39A4F43AF9D63701F61BAE8A Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa Signing time: Mon 13 Oct 2025 13:46:26 +0000 ROA not before: Mon 13 Oct 2025 13:41:26 +0000 ROA not after: Mon 12 Oct 2026 13:46:26 +0000 asID: 1251 IP address blocks: 200.136.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:df:72:43:89:a6:5a:4f:39:a4:f4:3a:f9:d6:37:01:f6:1b:ae:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Oct 13 13:41:26 2025 GMT Not After : Oct 12 13:46:26 2026 GMT Subject: CN=D734A37A17B46A6BC412A2F815EE116622386920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:68:bc:46:d2:41:cb:11:78:45:01:f2:43: ed:e3:e2:33:40:00:14:13:9f:80:ba:06:e9:7e:b3: cf:ff:9b:21:f1:d5:40:b4:95:89:02:b5:1c:22:ff: 09:47:3f:77:a9:d6:7b:57:f9:02:1f:9d:48:ea:e7: 6a:da:86:94:8f:b4:88:ff:d0:a6:9f:08:7e:ba:76: e0:86:67:b6:06:b1:26:06:22:10:b2:67:08:db:b6: c7:f6:d1:2d:f1:49:4c:37:3c:6b:78:34:c8:1b:2b: ba:b1:2d:45:17:c1:10:d3:b6:5d:2a:cc:d0:0d:cc: f9:82:28:18:aa:7e:2a:ad:24:45:66:e4:f0:d0:87: 9c:9f:63:df:3f:16:29:33:e5:f6:c7:d8:56:db:ff: fe:44:92:99:2a:55:c7:41:0e:b0:f3:36:ee:f8:b2: 00:12:32:cb:a1:49:c4:cc:26:3e:48:88:33:09:e6: 85:bd:46:c4:52:83:87:cb:1c:60:fa:9d:ae:ad:59: 55:a5:c7:52:a6:cd:a2:d8:ba:64:37:b4:33:25:74: 65:4f:ea:64:c5:d0:30:67:aa:9a:f9:db:7b:7b:68: bb:59:19:30:09:23:ce:f0:29:cd:87:f7:15:9e:f1: 59:a0:f1:23:4f:91:ef:b5:35:d0:9e:b6:73:b6:99: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:34:A3:7A:17:B4:6A:6B:C4:12:A2:F8:15:EE:11:66:22:38:69:20 X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.136.108.0/23 Signature Algorithm: sha256WithRSAEncryption 08:6e:ed:fa:ff:9b:c3:e2:3b:eb:f9:29:c1:00:23:a7:b9:83: 3e:64:be:84:4c:25:e4:30:39:3e:d9:b2:5b:56:13:e0:80:23: 46:52:52:b6:e8:cb:cf:16:02:7f:af:15:bc:3e:74:41:27:ca: fc:68:10:2c:b3:90:48:83:2a:90:75:8d:61:06:d5:49:26:c7: 9b:6b:73:14:c4:0c:19:75:e6:9e:c8:27:53:86:ed:38:8b:55: 3b:da:f4:dd:c9:c6:12:ec:06:f0:5c:9a:e2:07:88:65:4e:19: 7a:e3:10:43:40:fd:18:9e:40:ff:35:60:40:c4:36:17:f1:bd: 5d:53:cb:1f:75:6e:70:f8:c6:28:43:9f:9c:8e:f4:ac:ea:2a: 7f:df:21:4a:22:a1:1f:46:80:6f:b2:6f:f7:28:81:00:51:90: 58:d2:f2:b9:21:44:14:3f:81:65:7a:55:49:ba:74:33:3d:1c: f2:57:9d:09:79:42:52:7c:45:f5:2b:a6:79:4a:f8:1c:b3:40: ab:bc:b7:a3:36:bc:be:6d:f8:fe:48:e7:6b:e4:8a:2c:a6:b6: df:1f:ff:cd:6b:56:5e:02:70:7d:13:46:93:33:9f:0d:c2:2e: c6:8f:fc:f5:1b:e2:3f:cd:4c:48:4d:60:09:f0:2b:c6:ed:2e: b3:c7:09:f8 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZt9yQ4mmWk85pPQ6+dY3AfYbroowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNTEwMTMxMzQxMjZaFw0yNjEwMTIxMzQ2MjZaMDMxMTAvBgNV BAMTKEQ3MzRBMzdBMTdCNDZBNkJDNDEyQTJGODE1RUUxMTY2MjIzODY5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/Wi8RtJByxF4RQHyQ+3j4jNA ABQTn4C6Bul+s8//myHx1UC0lYkCtRwi/wlHP3ep1ntX+QIfnUjq52rahpSPtIj/ 0KafCH66duCGZ7YGsSYGIhCyZwjbtsf20S3xSUw3PGt4NMgbK7qxLUUXwRDTtl0q zNANzPmCKBiqfiqtJEVm5PDQh5yfY98/Fikz5fbH2Fbb//5EkpkqVcdBDrDzNu74 sgASMsuhScTMJj5IiDMJ5oW9RsRSg4fLHGD6na6tWVWlx1KmzaLYumQ3tDMldGVP 6mTF0DBnqpr523t7aLtZGTAJI87wKc2H9xWe8Vmg8SNPke+1NdCetnO2mWw1AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU1zSjehe0amvEEqL4Fe4RZiI4aSAwHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTMzMzYyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMx MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQByIhsMA0GCSqGSIb3DQEBCwUAA4IBAQAIbu36/5vD 4jvr+SnBACOnuYM+ZL6ETCXkMDk+2bJbVhPggCNGUlK26MvPFgJ/rxW8PnRBJ8r8 aBAss5BIgyqQdY1hBtVJJseba3MUxAwZdeaeyCdThu04i1U72vTdycYS7AbwXJri B4hlThl64xBDQP0YnkD/NWBAxDYX8b1dU8sfdW5w+MYoQ5+cjvSs6ip/3yFKIqEf RoBvsm/3KIEAUZBY0vK5IUQUP4FlelVJunQzPRzyV50JeUJSfEX1K6Z5Svgcs0Cr vLejNry+bfj+SOdr5IosprbfH//Na1ZeAnB9E0aTM58Nwi7Gj/z1G+I/zUxITWAJ 8CvG7S6zxwn4 -----END CERTIFICATE-----Generated at Mon Oct 20 20:48:46 2025 by rpki-client