$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131312e302f32342d3234203d3e203131303937.roa File: 3230302e3133362e3131312e302f32342d3234203d3e203131303937.roa (raw, json) Hash identifier: Z4eGm8qdUNVBrE2e/VEj8rWtLunl+Gj1EuzE8aWJvwY= Subject key identifier: 34:33:5F:E0:CA:1D:C7:B5:AF:B5:6F:DC:31:7B:A3:A1:7B:69:8D:A9 Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 7764BF0C506A89E94DD1041FABF48C01BA3593D3 Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131312e302f32342d3234203d3e203131303937.roa Signing time: Mon 13 Oct 2025 13:46:30 +0000 ROA not before: Mon 13 Oct 2025 13:41:30 +0000 ROA not after: Mon 12 Oct 2026 13:46:30 +0000 asID: 11097 IP address blocks: 200.136.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:64:bf:0c:50:6a:89:e9:4d:d1:04:1f:ab:f4:8c:01:ba:35:93:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Oct 13 13:41:30 2025 GMT Not After : Oct 12 13:46:30 2026 GMT Subject: CN=34335FE0CA1DC7B5AFB56FDC317BA3A17B698DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:ef:5b:a0:63:55:5c:b2:26:33:a8:b0:60: 20:50:1a:a3:dc:6e:9a:f3:ef:ca:df:74:9c:87:3c: 4c:85:c6:f1:58:ec:2e:67:c5:28:81:a0:3b:7a:51: 72:7c:a1:a2:d0:7c:7a:84:8f:21:f5:4f:ba:b7:0f: 7f:99:fd:b7:e7:86:8e:4b:35:09:bb:86:5f:69:1a: df:66:16:9f:52:08:41:37:f5:81:61:91:0e:b7:d2: e2:a1:43:4f:7e:ae:b7:3b:8d:3d:04:45:d2:0b:77: ca:46:42:fb:42:bf:37:1d:db:9e:51:22:5e:16:9a: 39:62:91:7a:1f:6c:cb:19:ce:4c:eb:19:f3:ed:b8: 7b:72:47:f7:a1:9b:72:db:39:22:52:f7:5e:13:66: 93:1c:64:11:08:40:bb:d0:f0:c8:f6:38:f8:d5:49: 6c:ca:3f:b4:0b:03:94:13:5c:b1:40:ea:ab:ba:85: 92:c6:db:e7:bb:23:7c:2b:93:0a:cb:0f:dd:18:0a: 43:6d:60:04:ee:c9:10:1e:10:a4:98:9d:7e:36:58: 6e:30:d3:6e:0c:3b:89:8b:b5:48:3d:2c:e2:fe:13: 7f:64:12:d9:a7:d1:27:2f:3b:84:db:74:8d:44:0a: 7c:30:f3:b1:16:7a:88:25:91:a8:cd:36:25:9f:2e: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:33:5F:E0:CA:1D:C7:B5:AF:B5:6F:DC:31:7B:A3:A1:7B:69:8D:A9 X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131312e302f32342d3234203d3e203131303937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.136.111.0/24 Signature Algorithm: sha256WithRSAEncryption 55:63:f1:08:69:12:e9:4d:3e:2e:3a:54:8d:87:4f:db:11:50: 65:f4:db:a5:85:5b:6e:35:05:e1:2a:ba:ae:cb:3a:55:28:e5: b7:c9:99:a3:66:d0:79:98:ca:8f:31:78:e3:75:77:d3:73:11: 1f:71:20:42:e2:af:bf:cb:47:84:ed:ab:9d:2e:f3:9f:e3:91: 54:17:02:4c:c4:3f:6c:e9:44:f5:24:24:ff:08:c7:0e:d8:3f: 79:7e:2c:97:2a:24:9c:de:3f:47:a7:79:a1:fb:80:e8:16:1b: 2f:82:2d:e8:d8:a2:ec:e1:d2:f4:1b:06:9a:a6:db:08:12:a9: 77:ee:a9:b0:ad:36:83:a1:81:b7:4b:2c:72:90:bb:39:14:b4: 29:99:49:79:19:60:44:39:49:ba:3a:19:b8:0b:72:34:ee:e4: f9:45:53:50:d2:78:f4:51:74:9d:d9:f6:bf:80:d9:ed:77:51: 7f:48:eb:58:87:57:83:27:63:f8:ce:ef:0e:28:59:61:32:fb: ad:08:a5:77:a7:ea:8d:8f:84:17:14:62:50:f5:1f:ee:a8:7c: 8e:06:86:95:45:a9:17:1a:89:7b:c8:de:7e:47:09:68:de:db: ee:64:96:77:47:fb:47:07:21:66:18:8b:9a:10:7d:20:f7:ec: 22:19:bd:a0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUd2S/DFBqielN0QQfq/SMAbo1k9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNTEwMTMxMzQxMzBaFw0yNjEwMTIxMzQ2MzBaMDMxMTAvBgNV BAMTKDM0MzM1RkUwQ0ExREM3QjVBRkI1NkZEQzMxN0JBM0ExN0I2OThEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/e9boGNVXLImM6iwYCBQGqPc bprz78rfdJyHPEyFxvFY7C5nxSiBoDt6UXJ8oaLQfHqEjyH1T7q3D3+Z/bfnho5L NQm7hl9pGt9mFp9SCEE39YFhkQ630uKhQ09+rrc7jT0ERdILd8pGQvtCvzcd255R Il4WmjlikXofbMsZzkzrGfPtuHtyR/ehm3LbOSJS914TZpMcZBEIQLvQ8Mj2OPjV SWzKP7QLA5QTXLFA6qu6hZLG2+e7I3wrkwrLD90YCkNtYATuyRAeEKSYnX42WG4w 024MO4mLtUg9LOL+E39kEtmn0ScvO4TbdI1ECnww87EWeoglkajNNiWfLsU1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUNDNf4Modx7WvtW/cMXujoXtpjakwHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTMzMzYyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx MzEzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADIiG8wDQYJKoZIhvcNAQELBQADggEBAFVj8Qhp EulNPi46VI2HT9sRUGX026WFW241BeEquq7LOlUo5bfJmaNm0HmYyo8xeON1d9Nz ER9xIELir7/LR4Ttq50u85/jkVQXAkzEP2zpRPUkJP8Ixw7YP3l+LJcqJJzeP0en eaH7gOgWGy+CLejYouzh0vQbBpqm2wgSqXfuqbCtNoOhgbdLLHKQuzkUtCmZSXkZ YEQ5Sbo6GbgLcjTu5PlFU1DSePRRdJ3Z9r+A2e13UX9I61iHV4MnY/jO7w4oWWEy +60IpXen6o2PhBcUYlD1H+6ofI4GhpVFqRcaiXvI3n5HCWje2+5klndH+0cHIWYY i5oQfSD37CIZvaA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:48:56 2025 by rpki-client