$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa File: 3136342e3136332e342e302f32342d3332203d3e20323731343239.roa (raw, json) Hash identifier: TkF+J7KYCL+ggIKxceO08FmAEWoL88TXJoWC/+0N6vM= Subject key identifier: 4E:7F:96:AE:B9:D9:7F:DD:73:EE:6B:C1:57:27:06:CC:A3:EF:A0:A2 Certificate issuer: /CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7 Certificate serial: 0E02DEBEED9D1260462DE36AB9E77C57B7527EBC Authority key identifier: 1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa Signing time: Mon 13 Oct 2025 16:47:56 +0000 ROA not before: Mon 13 Oct 2025 16:42:56 +0000 ROA not after: Mon 12 Oct 2026 16:47:56 +0000 asID: 271429 IP address blocks: 164.163.4.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:02:de:be:ed:9d:12:60:46:2d:e3:6a:b9:e7:7c:57:b7:52:7e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7 Validity Not Before: Oct 13 16:42:56 2025 GMT Not After : Oct 12 16:47:56 2026 GMT Subject: CN=4E7F96AEB9D97FDD73EE6BC1572706CCA3EFA0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:19:1e:1c:e9:2a:fb:db:80:88:25:c4:88: 10:a7:92:cd:e2:19:3d:5f:9c:85:5d:a0:da:c2:ae: 4a:07:33:20:36:57:ab:d4:59:31:76:a1:28:66:d5: 33:75:cf:57:5b:38:03:5a:b8:b9:2e:45:ee:13:6a: cf:33:98:6b:7f:01:0e:15:21:9b:25:e1:0d:37:84: 18:fc:b6:56:fa:37:8d:ae:95:6d:58:9c:bd:c5:a1: cd:8a:c9:a1:c2:3b:0c:8c:d1:8c:a9:23:43:69:82: 62:a5:84:b9:17:b3:92:72:15:aa:30:18:9e:9e:92: f8:10:e0:d7:98:ed:7d:28:50:9a:52:f6:07:02:a5: 7c:7d:63:1a:c2:a5:56:8b:d3:2a:83:d7:02:58:9a: f5:f8:55:3c:9a:7a:c8:58:80:da:a4:c7:af:3c:5d: c3:d0:23:54:d6:6a:08:08:40:ad:7d:c2:31:72:7b: 0f:f9:12:28:0f:3d:5e:cd:6b:27:75:13:b1:42:ee: c1:4e:a4:37:03:fe:a8:2c:3d:ba:0d:5b:00:9c:c8: 93:09:0a:e0:55:da:15:4c:60:94:98:38:16:80:67: bb:5f:93:53:d6:44:ff:81:2b:de:d3:ef:29:4b:60: 1c:38:06:26:6a:a9:6c:0b:fe:4a:c8:40:c7:08:1a: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7F:96:AE:B9:D9:7F:DD:73:EE:6B:C1:57:27:06:CC:A3:EF:A0:A2 X509v3 Authority Key Identifier: keyid:1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3332203d3e20323731343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.4.0/24 Signature Algorithm: sha256WithRSAEncryption 16:39:a9:66:e6:c7:fc:aa:0e:d9:9a:c0:07:c0:ae:49:05:1e: 9e:a2:5f:b1:10:d6:b8:c9:f7:2e:3e:0c:63:c5:99:78:4a:73: 81:f1:4e:aa:e6:64:8e:8d:cb:00:04:a4:8f:bd:1e:33:6a:12: be:0d:79:03:27:4d:d8:e2:38:5c:fc:f7:2f:8c:bb:9b:13:b9: 91:e3:7f:e2:7f:46:6b:f7:c7:28:d8:b7:c8:25:5c:72:ba:af: f8:c1:70:57:3d:55:bb:69:37:4c:8d:30:0a:56:df:29:af:33: 16:e3:f2:b0:9a:4a:98:38:05:0b:74:da:26:8c:a0:7a:bc:98: f2:24:ae:7a:14:e1:45:42:7d:8d:05:a8:68:d2:5e:ce:02:44: 21:cc:f7:a3:e6:51:d8:89:82:92:c6:f8:41:d0:27:65:0c:67: 2b:05:b2:f6:e9:9d:f1:ca:15:5e:e4:a4:9b:a8:57:3b:a8:66: 2c:1d:94:c0:d6:bb:61:a5:4c:56:53:09:ea:0a:1f:62:ad:6c: 48:3a:b7:db:48:68:2b:42:5b:5f:2c:94:22:cf:d0:2d:f9:fe: 62:1a:0c:3a:7d:a9:bb:97:c2:e2:34:f2:bc:ec:2b:b4:a6:17: f4:67:d1:6b:5d:6f:af:6e:bc:fa:e1:9e:8a:75:64:54:94:9b: 01:c8:e5:d0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUDgLevu2dEmBGLeNqued8V7dSfrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJCNTQwNjk3QzZBODZGREIwRUVDMzFGMUM0RDU1RDQ5 OUYzRUNENzAeFw0yNTEwMTMxNjQyNTZaFw0yNjEwMTIxNjQ3NTZaMDMxMTAvBgNV BAMTKDRFN0Y5NkFFQjlEOTdGREQ3M0VFNkJDMTU3MjcwNkNDQTNFRkEwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUkRkeHOkq+9uAiCXEiBCnks3i GT1fnIVdoNrCrkoHMyA2V6vUWTF2oShm1TN1z1dbOANauLkuRe4Tas8zmGt/AQ4V IZsl4Q03hBj8tlb6N42ulW1YnL3Foc2KyaHCOwyM0YypI0NpgmKlhLkXs5JyFaow GJ6ekvgQ4NeY7X0oUJpS9gcCpXx9YxrCpVaL0yqD1wJYmvX4VTyaeshYgNqkx688 XcPQI1TWaggIQK19wjFyew/5EigPPV7Nayd1E7FC7sFOpDcD/qgsPboNWwCcyJMJ CuBV2hVMYJSYOBaAZ7tfk1PWRP+BK97T7ylLYBw4BiZqqWwL/krIQMcIGhcbAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUTn+WrrnZf91z7mvBVycGzKPvoKIwHwYDVR0j BBgwFoAUG7VAaXxqhv2w7sMfHE1V1Jnz7NcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2FoS2tnNjRIcGgzNFNWZXBGbzZkVUxaVk1HYUNMQ3FEUDRKSlBpU0x4 eDkvMC8xQkI1NDA2OTdDNkE4NkZEQjBFRUMzMUYxQzRENTVENDk5RjNFQ0Q3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQjU0MDY5N0M2QTg2RkRC MEVFQzMxRjFDNEQ1NUQ0OTlGM0VDRDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdhaEtrZzY0SHBoMzRTVmVwRm82ZFVMWlZNR2FDTENxRFA0SkpQaVNMeHg5LzAv MzEzNjM0MmUzMTM2MzMyZTM0MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMx MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQApKMEMA0GCSqGSIb3DQEBCwUAA4IBAQAWOalm5sf8 qg7ZmsAHwK5JBR6eol+xENa4yfcuPgxjxZl4SnOB8U6q5mSOjcsABKSPvR4zahK+ DXkDJ03Y4jhc/PcvjLubE7mR43/if0Zr98co2LfIJVxyuq/4wXBXPVW7aTdMjTAK Vt8przMW4/KwmkqYOAULdNomjKB6vJjyJK56FOFFQn2NBaho0l7OAkQhzPej5lHY iYKSxvhB0CdlDGcrBbL26Z3xyhVe5KSbqFc7qGYsHZTA1rthpUxWUwnqCh9irWxI OrfbSGgrQltfLJQiz9At+f5iGgw6fam7l8LiNPK87Cu0phf0Z9FrXW+vbrz64Z6K dWRUlJsByOXQ -----END CERTIFICATE-----Generated at Mon Oct 20 23:42:35 2025 by rpki-client