$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa File: 3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (raw, json) Hash identifier: eqEeXjsgpmbgcehXb4rKKeLfygWsFpsOvMEgCMLjbg0= Subject key identifier: BC:D8:7B:93:BF:7D:12:C7:5D:BE:89:93:AF:1F:C4:8E:1F:73:88:17 Certificate issuer: /CN=DDF75D11A85F5023747B20E973994EC53D23A68E Certificate serial: 720FE113233714D8D16A1CC3037DFC0A4556D4C9 Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa Signing time: Thu 09 Oct 2025 21:02:30 +0000 ROA not before: Thu 09 Oct 2025 20:57:30 +0000 ROA not after: Thu 08 Oct 2026 21:02:30 +0000 asID: 263665 IP address blocks: 138.255.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0f:e1:13:23:37:14:d8:d1:6a:1c:c3:03:7d:fc:0a:45:56:d4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E Validity Not Before: Oct 9 20:57:30 2025 GMT Not After : Oct 8 21:02:30 2026 GMT Subject: CN=BCD87B93BF7D12C75DBE8993AF1FC48E1F738817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:f0:b2:c6:6b:cc:8e:a8:ae:08:26:ce:21: 48:00:93:90:f7:b3:16:c9:b0:03:46:a0:7c:77:ed: 32:58:90:65:0a:33:c3:10:a1:42:fc:59:7f:3c:fa: 15:37:8d:f9:c2:16:c6:b6:f5:3c:53:c8:95:73:74: 48:b2:4f:0c:59:ca:6f:2d:58:8b:e7:cd:cd:14:e9: 9c:f0:8c:c1:85:08:7d:a3:62:2a:42:d5:bd:02:5c: f3:95:37:bd:b9:64:fd:de:29:02:3b:5d:d8:13:70: 9f:b7:69:70:5f:0b:30:f1:fc:5c:66:9c:a6:36:0b: b0:34:05:38:38:0c:3b:b3:d2:50:99:9f:5d:6c:0d: 2a:9c:fc:c3:66:cf:40:42:b5:13:11:e1:95:05:08: a8:2c:90:46:26:da:4d:ef:f8:be:50:af:4b:02:ff: 81:eb:dc:2b:6a:cf:ee:9c:d9:a9:0d:e4:89:93:bf: ad:b7:3d:19:0e:f4:7c:33:d8:21:da:e0:c5:b7:43: 83:0c:c3:ca:38:a5:3e:d9:b8:d7:05:83:9d:f7:62: 41:21:fc:0e:72:a3:2e:92:7c:68:f3:67:26:29:39: 23:6c:6f:14:24:b4:51:3e:67:de:c8:13:d1:2c:e9: 77:9a:f4:e0:48:d8:36:6d:be:b3:a8:aa:a0:d0:bd: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:7B:93:BF:7D:12:C7:5D:BE:89:93:AF:1F:C4:8E:1F:73:88:17 X509v3 Authority Key Identifier: keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.172.0/22 Signature Algorithm: sha256WithRSAEncryption 44:b4:ae:93:b3:bb:0c:3f:29:1b:47:f0:38:bd:c1:b3:ea:78: 06:65:d9:93:2d:a8:a7:c8:44:1f:10:f3:4d:5c:c0:ee:11:41: 7b:6d:96:a9:b9:d0:57:38:51:47:3f:73:2e:b6:9e:9d:08:f7: 7d:ba:3c:67:03:4e:da:76:16:b5:19:6e:63:09:6c:e5:0e:c5: d2:85:a2:0a:ea:35:98:6a:29:24:a7:d7:99:79:df:20:c0:7a: 8a:96:cd:16:67:67:e2:64:5f:05:75:f7:7a:0d:0e:bf:2d:db: 78:30:9d:be:d6:02:d3:e7:0d:d4:e1:0f:8b:9d:da:31:6b:6a: 92:f4:be:73:fc:7a:59:d5:0c:db:4d:f7:db:a2:0a:05:be:1a: 65:bc:93:14:2a:5e:7f:14:ff:73:f5:fd:22:88:b1:5e:65:b8: f3:53:5f:c9:5a:4f:47:42:4a:6e:47:1c:5d:f3:69:e8:10:8d: fb:53:e1:a7:1b:68:69:42:5c:35:2b:41:96:b5:b0:9f:ac:17: 26:9f:86:55:e9:df:5a:2f:0b:da:e4:04:49:6b:77:81:3d:61: 5f:1c:7d:ba:8d:0e:a1:b7:07:d0:62:53:78:81:34:6c:98:f2: 3c:06:c2:70:b2:cb:b2:77:c6:37:0f:40:c1:b0:f1:09:9e:27: 04:e1:c5:48 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcg/hEyM3FNjRahzDA338CkVW1MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGNzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUz RDIzQTY4RTAeFw0yNTEwMDkyMDU3MzBaFw0yNjEwMDgyMTAyMzBaMDMxMTAvBgNV BAMTKEJDRDg3QjkzQkY3RDEyQzc1REJFODk5M0FGMUZDNDhFMUY3Mzg4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHV/CyxmvMjqiuCCbOIUgAk5D3 sxbJsANGoHx37TJYkGUKM8MQoUL8WX88+hU3jfnCFsa29TxTyJVzdEiyTwxZym8t WIvnzc0U6ZzwjMGFCH2jYipC1b0CXPOVN725ZP3eKQI7XdgTcJ+3aXBfCzDx/Fxm nKY2C7A0BTg4DDuz0lCZn11sDSqc/MNmz0BCtRMR4ZUFCKgskEYm2k3v+L5Qr0sC /4Hr3Ctqz+6c2akN5ImTv623PRkO9Hwz2CHa4MW3Q4MMw8o4pT7ZuNcFg533YkEh /A5yoy6SfGjzZyYpOSNsbxQktFE+Z97IE9Es6Xea9OBI2DZtvrOoqqDQvSdRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUvNh7k799EsddvomTrx/Ejh9ziBcwHwYDVR0j BBgwFoAU3fddEahfUCN0eyDpc5lOxT0jpo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n cmYvMC9EREY3NUQxMUE4NUY1MDIzNzQ3QjIwRTk3Mzk5NEVDNTNEMjNBNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERjc1RDExQTg1RjUwMjM3 NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv MzEzMzM4MmUzMjM1MzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzM2MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/rDANBgkqhkiG9w0BAQsFAAOCAQEARLSu k7O7DD8pG0fwOL3Bs+p4BmXZky2op8hEHxDzTVzA7hFBe22WqbnQVzhRRz9zLrae nQj3fbo8ZwNO2nYWtRluYwls5Q7F0oWiCuo1mGopJKfXmXnfIMB6ipbNFmdn4mRf BXX3eg0Ovy3beDCdvtYC0+cN1OEPi53aMWtqkvS+c/x6WdUM203326IKBb4aZbyT FCpefxT/c/X9IoixXmW481NfyVpPR0JKbkccXfNp6BCN+1PhpxtoaUJcNStBlrWw n6wXJp+GVenfWi8L2uQESWt3gT1hXxx9uo0OobcH0GJTeIE0bJjyPAbCcLLLsnfG Nw9AwbDxCZ4nBOHFSA== -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:08 2025 by rpki-client