$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa File: 3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa (raw, json) Hash identifier: i9QIkQfb2wzF7Z38NeTTuocSSCD/CMwdqXtnAd1lPss= Subject key identifier: AF:F3:89:35:72:DE:75:E8:44:0A:51:9F:B0:5F:39:CB:DD:D2:CA:14 Certificate issuer: /CN=2A6676986C812A17B00635484B147B51B75ADD4B Certificate serial: 70522CBE26FFDB262C64165B2EAE219951E2BFE6 Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa Signing time: Tue 23 Sep 2025 18:08:08 +0000 ROA not before: Tue 23 Sep 2025 18:03:08 +0000 ROA not after: Tue 22 Sep 2026 18:08:08 +0000 asID: 263355 IP address blocks: 132.255.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:52:2c:be:26:ff:db:26:2c:64:16:5b:2e:ae:21:99:51:e2:bf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B Validity Not Before: Sep 23 18:03:08 2025 GMT Not After : Sep 22 18:08:08 2026 GMT Subject: CN=AFF3893572DE75E8440A519FB05F39CBDDD2CA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:c8:7a:95:a9:8b:6e:37:23:1f:d4:f6:9e: 7f:54:c5:e9:cf:9a:e4:80:cb:07:d8:75:ee:15:b7: 3f:d5:d3:b0:85:30:45:4e:86:57:33:f1:54:3a:4b: 85:83:e0:77:4d:87:6c:f9:12:7f:80:4d:62:bc:f2: 14:37:b6:c6:cd:62:1d:41:c4:a9:eb:da:f1:57:bc: 0f:1a:04:6b:b4:3f:22:76:5c:42:f8:7f:db:a6:0c: 83:ee:b4:9d:27:bd:88:c4:9b:b4:3b:7c:a7:37:d5: e2:94:86:20:a8:fa:a4:2e:f0:83:a9:05:d3:26:09: ba:39:1c:b5:6e:70:f2:b8:46:1b:a5:8f:8d:b7:b8: 9e:bc:41:4c:4f:0c:52:e4:af:e4:d6:81:e7:38:78: d1:11:f5:be:99:c3:3f:7d:e8:87:52:32:ea:b0:8f: cf:7f:bf:0f:c8:95:78:50:7d:db:22:19:1e:80:bf: 65:d4:2d:fe:99:59:24:21:05:63:de:b4:b3:32:ff: 9e:e4:7f:eb:15:eb:da:f7:1a:7b:59:e7:3d:9a:33: 3a:3a:f1:14:1e:2c:90:da:4d:4a:b9:f6:9b:dc:dd: a4:b4:b3:58:f5:4a:ba:56:b6:50:d4:7b:7c:f1:c0: e6:96:ef:23:35:a1:dc:52:eb:88:1e:63:ac:ca:e9: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F3:89:35:72:DE:75:E8:44:0A:51:9F:B0:5F:39:CB:DD:D2:CA:14 X509v3 Authority Key Identifier: keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.104.0/22 Signature Algorithm: sha256WithRSAEncryption a4:b9:e7:45:34:65:c1:de:4e:26:2a:e0:a6:0d:b0:8a:00:9d: 49:94:2a:2f:09:df:4d:bb:6e:dd:d6:a6:eb:e1:f9:25:e8:62: 6f:77:d6:1d:20:ec:12:9f:be:f0:bc:00:c2:9d:55:f0:82:5c: a1:ba:3f:06:84:00:a7:a2:d9:b9:ae:09:00:c3:6a:b7:2b:3e: 1e:69:78:79:a9:83:17:db:b2:7e:a1:54:1e:5c:3c:03:d2:ce: 4c:db:af:3b:63:03:27:34:a5:d1:d6:7d:c0:d3:43:68:2e:c7: c8:1c:44:5f:31:e0:b0:e2:ca:ff:4b:6a:6a:10:78:3f:c9:0a: ce:41:55:27:a2:be:d3:bf:eb:d2:33:92:f3:04:11:00:79:91: ef:fb:b5:e7:03:95:e2:25:1d:77:61:e8:cc:60:2f:c8:1a:c2: 52:74:d0:90:dd:d5:70:26:73:18:16:f4:5d:69:79:60:ff:da: 52:5c:71:dc:22:01:0e:90:ff:36:12:18:bf:3f:81:98:91:68: 90:a7:70:f6:4a:06:71:ad:04:60:00:71:c5:fd:af:05:63:60: 3b:4b:33:20:94:50:41:dd:b3:fa:d5:11:d2:14:4e:4c:bf:1e: d9:6e:59:2e:67:2e:ec:06:81:8b:d4:92:f6:c2:8f:89:90:a2: 1a:47:db:3e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcFIsvib/2yYsZBZbLq4hmVHiv+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2Njc2OTg2QzgxMkExN0IwMDYzNTQ4NEIxNDdCNTFC NzVBREQ0QjAeFw0yNTA5MjMxODAzMDhaFw0yNjA5MjIxODA4MDhaMDMxMTAvBgNV BAMTKEFGRjM4OTM1NzJERTc1RTg0NDBBNTE5RkIwNUYzOUNCREREMkNBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOsh6lamLbjcjH9T2nn9UxenP muSAywfYde4Vtz/V07CFMEVOhlcz8VQ6S4WD4HdNh2z5En+ATWK88hQ3tsbNYh1B xKnr2vFXvA8aBGu0PyJ2XEL4f9umDIPutJ0nvYjEm7Q7fKc31eKUhiCo+qQu8IOp BdMmCbo5HLVucPK4Rhulj423uJ68QUxPDFLkr+TWgec4eNER9b6Zwz996IdSMuqw j89/vw/IlXhQfdsiGR6Av2XULf6ZWSQhBWPetLMy/57kf+sV69r3GntZ5z2aMzo6 8RQeLJDaTUq59pvc3aS0s1j1SrpWtlDUe3zxwOaW7yM1odxS64geY6zK6da/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUr/OJNXLedehEClGfsF85y93SyhQwHwYDVR0j BBgwFoAUKmZ2mGyBKhewBjVISxR7Ubda3UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOERmQjhEV3V0d2dQaXNtcjJjdDJOTFJZU3F4c29BSEJyS0FaZUxSaGht U3cvMC8yQTY2NzY5ODZDODEyQTE3QjAwNjM1NDg0QjE0N0I1MUI3NUFERDRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjY3Njk4NkM4MTJBMTdC MDA2MzU0ODRCMTQ3QjUxQjc1QURENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhEZkI4RFd1dHdnUGlzbXIyY3QyTkxSWVNxeHNvQUhCcktBWmVMUmhobVN3LzAv MzEzMzMyMmUzMjM1MzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/aDANBgkqhkiG9w0BAQsFAAOCAQEApLnn RTRlwd5OJirgpg2wigCdSZQqLwnfTbtu3dam6+H5Jehib3fWHSDsEp++8LwAwp1V 8IJcobo/BoQAp6LZua4JAMNqtys+Hml4eamDF9uyfqFUHlw8A9LOTNuvO2MDJzSl 0dZ9wNNDaC7HyBxEXzHgsOLK/0tqahB4P8kKzkFVJ6K+07/r0jOS8wQRAHmR7/u1 5wOV4iUdd2HozGAvyBrCUnTQkN3VcCZzGBb0XWl5YP/aUlxx3CIBDpD/NhIYvz+B mJFokKdw9koGca0EYABxxf2vBWNgO0szIJRQQd2z+tUR0hROTL8e2W5ZLmcu7AaB i9SS9sKPiZCiGkfbPg== -----END CERTIFICATE-----Generated at Mon Oct 20 22:03:44 2025 by rpki-client