$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa File: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (raw, json) Hash identifier: B1N902gGkDJZjUPJf8kMlgOJ/iI731NAEvBLdvSXVgY= Subject key identifier: 47:FA:8E:34:77:E0:2C:37:77:0D:CC:8B:A1:0F:41:24:63:9B:4B:75 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 429C633DDA3F367EDC31C9339A48567545D1946A Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa Signing time: Mon 24 Mar 2025 18:30:57 +0000 ROA not before: Mon 24 Mar 2025 18:25:57 +0000 ROA not after: Mon 23 Mar 2026 18:30:57 +0000 asID: 262482 IP address blocks: 138.185.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9c:63:3d:da:3f:36:7e:dc:31:c9:33:9a:48:56:75:45:d1:94:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: Mar 24 18:25:57 2025 GMT Not After : Mar 23 18:30:57 2026 GMT Subject: CN=47FA8E3477E02C37770DCC8BA10F4124639B4B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:14:98:b9:29:d4:59:2f:2b:1e:3f:af:1e: 07:1b:3b:67:b0:ca:a7:c5:9f:8f:48:5c:1d:34:c1: 7b:a5:41:1c:41:ba:07:17:1e:14:be:a5:99:4d:3b: a7:cd:69:a4:7c:18:17:d2:f7:19:cb:b9:be:5d:9b: ca:4c:1d:1d:a6:dd:68:61:ae:e9:20:b1:58:f3:71: 0b:0e:f1:04:34:f6:06:30:7b:80:0e:25:40:35:a0: c9:1d:3b:86:11:ee:01:e0:ed:09:c3:99:0a:6d:58: d3:76:86:f4:f5:f8:5b:9a:19:7e:bd:3c:ce:d9:d9: 69:3a:9b:55:45:80:3f:e7:8e:a1:e1:2b:70:2c:51: 10:f2:1d:3f:f6:95:81:5a:cb:74:0f:7a:ba:bc:08: 5b:c8:76:33:3f:33:3f:75:02:c8:e5:47:16:ab:7a: ad:98:9b:1f:e9:16:04:aa:1e:7d:74:90:38:c5:c5: 1c:17:d3:3c:a8:2c:19:35:f7:c7:77:bd:13:52:08: 38:a0:bf:de:3c:13:3f:37:dd:ae:29:0a:1f:c7:56: 88:66:19:ef:ba:96:c9:4a:df:95:cd:70:b5:d0:66: 8a:c1:26:3e:76:90:ca:b2:1f:70:30:fe:87:c4:2a: d2:c5:85:e2:5f:1c:f7:80:be:fc:c5:73:8e:39:fd: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FA:8E:34:77:E0:2C:37:77:0D:CC:8B:A1:0F:41:24:63:9B:4B:75 X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.212.0/22 Signature Algorithm: sha256WithRSAEncryption 27:95:05:2d:86:a4:0c:da:56:c6:12:88:ed:b2:5d:53:e9:71: ca:5d:7e:c5:f1:49:b9:97:e5:3e:4a:05:a3:ce:f2:e4:70:c7: 0f:67:b3:c4:3c:5b:11:1d:45:ea:d1:06:e0:be:37:c6:94:e0: 5e:e8:f2:a2:21:ad:52:e5:d5:ff:95:a0:7d:19:13:b3:e4:e9: c4:27:54:35:5b:63:bc:89:6b:1f:96:23:48:16:7d:70:c9:c4: aa:00:d0:18:d7:88:80:75:10:80:c0:3f:50:73:66:2b:44:05: f2:26:5b:81:d2:50:fc:2e:d5:23:5c:35:27:a7:27:2d:8a:f1: 30:31:3d:0d:02:37:69:23:d0:fa:93:16:20:39:08:bc:36:31: 10:af:14:65:f3:c3:1a:82:1c:71:24:34:7d:c6:8a:03:c1:45: 48:29:bd:ed:8a:50:a5:a1:43:d3:40:e5:8b:96:be:c5:d0:91: bd:a3:7e:23:f9:b4:03:4b:8a:7c:3d:c5:37:10:21:7e:e6:94: f7:23:8f:d6:db:03:6a:06:84:44:25:34:d3:ea:08:02:a8:34: 33:67:b9:59:86:a1:70:c8:79:14:46:07:5c:d1:95:ef:e1:e1: 29:5e:e0:24:87:82:bc:99:72:cf:40:05:18:58:c6:56:84:cb: f4:17:a7:c2 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQpxjPdo/Nn7cMckzmkhWdUXRlGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNTAzMjQxODI1NTdaFw0yNjAzMjMxODMwNTdaMDMxMTAvBgNV BAMTKDQ3RkE4RTM0NzdFMDJDMzc3NzBEQ0M4QkExMEY0MTI0NjM5QjRCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+BSYuSnUWS8rHj+vHgcbO2ew yqfFn49IXB00wXulQRxBugcXHhS+pZlNO6fNaaR8GBfS9xnLub5dm8pMHR2m3Whh rukgsVjzcQsO8QQ09gYwe4AOJUA1oMkdO4YR7gHg7QnDmQptWNN2hvT1+FuaGX69 PM7Z2Wk6m1VFgD/njqHhK3AsURDyHT/2lYFay3QPerq8CFvIdjM/Mz91AsjlRxar eq2Ymx/pFgSqHn10kDjFxRwX0zyoLBk198d3vRNSCDigv948Ez833a4pCh/HVohm Ge+6lslK35XNcLXQZorBJj52kMqyH3Aw/ofEKtLFheJfHPeAvvzFc445/d/VAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUR/qONHfgLDd3DcyLoQ9BJGObS3UwHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhNc2FGdHVQbnRDRkNxZzZoZnBTZ1ZtcXkyd2hySmVDWThBSlB2NGVuVjZQLzAv MzEzMzM4MmUzMTM4MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMjM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq51DANBgkqhkiG9w0BAQsFAAOCAQEAJ5UF LYakDNpWxhKI7bJdU+lxyl1+xfFJuZflPkoFo87y5HDHD2ezxDxbER1F6tEG4L43 xpTgXujyoiGtUuXV/5WgfRkTs+TpxCdUNVtjvIlrH5YjSBZ9cMnEqgDQGNeIgHUQ gMA/UHNmK0QF8iZbgdJQ/C7VI1w1J6cnLYrxMDE9DQI3aSPQ+pMWIDkIvDYxEK8U ZfPDGoIccSQ0fcaKA8FFSCm97YpQpaFD00Dli5a+xdCRvaN+I/m0A0uKfD3FNxAh fuaU9yOP1tsDagaERCU00+oIAqg0M2e5WYahcMh5FEYHXNGV7+HhKV7gJIeCvJly z0AFGFjGVoTL9Benwg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:46 2025 by rpki-client