$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3130342e302f32312d3234203d3e203532393932.roa File: 3230302e3134342e3130342e302f32312d3234203d3e203532393932.roa (raw, json) Hash identifier: IGiMf0o7L1W6g2ZMrh4YQkiZF+qqzWl+NX9EgEj2oh0= Subject key identifier: 7D:A6:7B:4C:BA:1B:4E:5E:A2:A2:D7:97:60:35:3F:0B:B8:83:2F:2F Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 213735E24CB4AEB172CA579464ABDDCF777F08AC Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3130342e302f32312d3234203d3e203532393932.roa Signing time: Mon 13 Oct 2025 13:46:19 +0000 ROA not before: Mon 13 Oct 2025 13:41:19 +0000 ROA not after: Mon 12 Oct 2026 13:46:19 +0000 asID: 52992 IP address blocks: 200.144.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:37:35:e2:4c:b4:ae:b1:72:ca:57:94:64:ab:dd:cf:77:7f:08:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Oct 13 13:41:19 2025 GMT Not After : Oct 12 13:46:19 2026 GMT Subject: CN=7DA67B4CBA1B4E5EA2A2D79760353F0BB8832F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:1b:2b:8b:27:9a:da:54:5d:27:4c:31:51: b1:79:a3:8a:5b:cd:85:39:f6:aa:61:ab:01:69:27: cc:1a:e4:e5:45:ea:44:f3:fa:e9:10:e2:ed:fe:56: 5d:51:7a:78:8f:15:12:89:1a:3a:61:56:bc:a1:d3: 7b:d0:88:2c:13:a9:26:89:9b:b5:1c:56:38:3d:c3: 78:e8:00:fe:bc:ea:ca:7b:2a:7f:dd:44:9a:01:a1: f1:76:1d:49:ce:4d:2f:e8:6d:e1:b8:6f:a0:91:c0: c9:60:73:65:52:7b:95:aa:ad:a0:63:22:6a:44:72: e3:97:26:cf:37:24:70:3e:82:dc:9c:22:9c:e7:c0: 57:3c:20:ca:62:64:a5:d7:d1:81:d1:34:26:ea:b9: 00:8c:95:8e:b0:67:86:e2:75:7e:6b:cb:41:2b:78: 68:f5:bb:16:e5:31:06:ec:0b:4c:3a:97:7b:33:37: 00:26:ff:b6:db:5a:37:01:ee:66:20:3b:d3:da:aa: c0:45:82:ac:22:51:a4:a3:1e:6f:58:ec:bb:8e:5b: 45:52:03:e7:6c:e4:35:60:9e:6b:60:3b:25:a8:61: d7:ff:a9:3d:a1:30:60:d0:72:2c:2f:31:a4:88:47: 9e:f0:6b:5a:60:79:92:42:8c:f4:c4:6c:30:91:6f: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A6:7B:4C:BA:1B:4E:5E:A2:A2:D7:97:60:35:3F:0B:B8:83:2F:2F X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3130342e302f32312d3234203d3e203532393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.144.104.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:b5:36:b9:41:4b:62:53:88:f8:08:f2:50:7a:68:c4:dd:69: 23:e8:43:67:a8:9e:cc:df:fa:4b:44:01:2d:44:e0:94:8c:43: f4:e1:97:85:67:57:c3:42:9f:e9:89:ad:06:eb:bc:9e:f5:88: 17:a3:3b:80:78:94:ba:73:48:12:89:b9:20:de:a4:c7:46:68: ae:0d:3f:eb:7e:e7:bd:ba:45:32:87:7c:64:52:37:98:de:a0: b8:f7:35:5b:67:a3:7c:35:1a:61:5e:1f:09:3b:65:90:fb:ab: e6:e3:42:76:32:e9:42:1d:c2:3c:fc:80:d8:28:3f:b4:9c:2f: a3:8c:d5:c5:01:af:6c:e4:c1:44:a7:67:0a:a0:53:f0:31:31: df:e5:31:b7:eb:f9:fe:4b:71:1c:59:7e:ea:33:e8:4c:ad:f8: dc:a7:9c:a1:d5:f4:3b:64:bd:c0:62:84:cf:1e:bf:16:06:9b: 8a:bf:8f:d2:fe:ed:61:6b:a8:2a:aa:f8:73:30:0c:b5:5f:02: ed:88:e8:08:5d:71:50:6e:be:60:bc:c7:c6:76:25:0a:b8:bc: 8a:39:1c:5a:18:fa:8c:0c:a3:d8:3d:3f:84:18:ca:2b:22:3d: 83:1c:16:e7:2f:02:5a:e9:86:a0:3b:ea:f0:31:a7:1d:f5:a2: 73:8e:2b:8a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUITc14ky0rrFyyleUZKvdz3d/CKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNTEwMTMxMzQxMTlaFw0yNjEwMTIxMzQ2MTlaMDMxMTAvBgNV BAMTKDdEQTY3QjRDQkExQjRFNUVBMkEyRDc5NzYwMzUzRjBCQjg4MzJGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu6hsriyea2lRdJ0wxUbF5o4pb zYU59qphqwFpJ8wa5OVF6kTz+ukQ4u3+Vl1ReniPFRKJGjphVryh03vQiCwTqSaJ m7UcVjg9w3joAP686sp7Kn/dRJoBofF2HUnOTS/obeG4b6CRwMlgc2VSe5WqraBj ImpEcuOXJs83JHA+gtycIpznwFc8IMpiZKXX0YHRNCbquQCMlY6wZ4bidX5ry0Er eGj1uxblMQbsC0w6l3szNwAm/7bbWjcB7mYgO9PaqsBFgqwiUaSjHm9Y7LuOW0VS A+ds5DVgnmtgOyWoYdf/qT2hMGDQciwvMaSIR57wa1pgeZJCjPTEbDCRb0dtAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUfaZ7TLobTl6ioteXYDU/C7iDLy8wHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTM0MzQyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1 MzIzOTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPIkGgwDQYJKoZIhvcNAQELBQADggEBAHy1NrlB S2JTiPgI8lB6aMTdaSPoQ2eonszf+ktEAS1E4JSMQ/Thl4VnV8NCn+mJrQbrvJ71 iBejO4B4lLpzSBKJuSDepMdGaK4NP+t+5726RTKHfGRSN5jeoLj3NVtno3w1GmFe Hwk7ZZD7q+bjQnYy6UIdwjz8gNgoP7ScL6OM1cUBr2zkwUSnZwqgU/AxMd/lMbfr +f5LcRxZfuoz6Eyt+NynnKHV9DtkvcBihM8evxYGm4q/j9L+7WFrqCqq+HMwDLVf Au2I6AhdcVBuvmC8x8Z2JQq4vIo5HFoY+owMo9g9P4QYyisiPYMcFucvAlrphqA7 6vAxpx31onOOK4o= -----END CERTIFICATE-----Generated at Mon Oct 20 23:04:03 2025 by rpki-client