$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa File: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (raw, json) Hash identifier: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g= Subject key identifier: 2A:39:4B:FB:97:45:6F:B0:1E:C5:AE:A0:4E:3F:FA:1D:A9:8A:02:49 Certificate issuer: /CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Certificate serial: 4B289DA1F98327D931403142F0CDAE67E1540D93 Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa Signing time: Tue 23 Sep 2025 21:28:28 +0000 ROA not before: Tue 23 Sep 2025 21:23:28 +0000 ROA not after: Tue 22 Sep 2026 21:28:28 +0000 asID: 262588 IP address blocks: 170.83.132.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:28:9d:a1:f9:83:27:d9:31:40:31:42:f0:cd:ae:67:e1:54:0d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Validity Not Before: Sep 23 21:23:28 2025 GMT Not After : Sep 22 21:28:28 2026 GMT Subject: CN=2A394BFB97456FB01EC5AEA04E3FFA1DA98A0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:e0:88:d3:7b:76:3c:b0:27:9c:f5:79:e4: 3c:f3:39:6c:14:46:a0:9e:39:72:03:29:cd:ee:3a: c6:9d:e5:7c:ba:cd:93:73:e3:89:5a:4a:f9:4d:0d: e2:6e:0f:01:eb:f4:26:eb:9f:7c:e8:e1:ee:a1:0c: bc:01:05:94:cd:c6:d2:b6:57:7c:18:8f:89:22:6d: db:9d:7b:a9:c0:5e:7a:cd:90:b9:43:c5:18:d9:22: c9:e6:05:05:24:98:00:43:cc:5e:e8:6c:bc:8a:95: 7d:49:0e:ab:92:d9:3b:6c:6c:a5:7f:f0:0e:d3:5b: 9a:27:e0:1c:da:e1:12:6f:95:ff:83:30:8c:bb:83: 9f:b9:00:ab:77:14:21:a0:3d:ce:5b:da:e6:82:e0: a0:0f:23:ae:16:f1:52:a1:0f:f8:ef:6d:f2:ad:b1: f5:e6:8e:70:98:e1:75:19:42:55:cb:ab:73:1f:06: 0e:84:3f:48:dd:34:c1:16:db:a5:58:f5:de:90:4d: f8:30:3b:00:b8:72:b8:8b:94:18:59:ea:21:25:9c: 84:8d:ec:38:7b:de:c7:eb:af:61:41:cf:e8:f7:54: a2:b6:1e:11:b4:76:3f:10:58:20:5e:8b:44:e4:1c: e4:e6:18:33:7d:1c:2a:dd:e3:ff:bf:56:9e:70:99: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:4B:FB:97:45:6F:B0:1E:C5:AE:A0:4E:3F:FA:1D:A9:8A:02:49 X509v3 Authority Key Identifier: keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.132.0/22 Signature Algorithm: sha256WithRSAEncryption 35:1b:9a:e1:bd:ca:e7:15:ee:12:bb:05:38:a5:11:fc:e7:6b: 33:84:38:65:75:15:48:4e:8b:c3:8f:27:77:ed:5b:a5:ed:f5: f5:cd:34:f1:05:3e:70:88:0b:ef:24:47:50:41:c9:6c:63:d3: 71:f5:d7:2d:3a:26:3e:58:95:18:3d:71:d7:07:de:0b:6d:57: 2b:ac:79:d2:7d:2f:7e:89:0c:0f:f9:19:ac:c0:49:eb:67:bf: 96:86:af:ab:c7:ab:cb:d1:2a:c1:f3:6b:e2:22:0e:1d:a2:0e: 41:3c:bd:b5:31:31:a1:7a:9c:03:bd:1e:08:a1:70:f3:3c:de: df:25:e0:e4:84:c5:c5:b3:f2:12:cb:ff:51:55:a5:a6:69:57: 8b:60:52:a1:4f:40:9f:d7:30:a4:c6:f4:07:48:eb:6b:6e:a1: 8f:3b:0b:73:fa:da:3b:dc:8f:9b:fa:c8:87:08:cc:ed:22:24: 62:03:95:ce:3b:fa:20:06:d9:32:24:d4:24:fa:6d:df:9a:e8: 88:27:96:04:58:2f:72:67:97:9c:f2:f4:06:b8:5e:a2:10:d6: 65:66:ba:a6:96:2c:5b:95:60:8a:26:e8:b3:e7:e2:9e:3d:9d: 4b:11:62:b8:03:6a:5a:0e:f2:bc:d6:a2:3d:7a:c4:71:0c:0e: ad:6c:c9:ea -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUSyidofmDJ9kxQDFC8M2uZ+FUDZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIx MDJFOUU1NzAeFw0yNTA5MjMyMTIzMjhaFw0yNjA5MjIyMTI4MjhaMDMxMTAvBgNV BAMTKDJBMzk0QkZCOTc0NTZGQjAxRUM1QUVBMDRFM0ZGQTFEQTk4QTAyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNOCI03t2PLAnnPV55DzzOWwU RqCeOXIDKc3uOsad5Xy6zZNz44laSvlNDeJuDwHr9Cbrn3zo4e6hDLwBBZTNxtK2 V3wYj4kibdude6nAXnrNkLlDxRjZIsnmBQUkmABDzF7obLyKlX1JDquS2TtsbKV/ 8A7TW5on4Bza4RJvlf+DMIy7g5+5AKt3FCGgPc5b2uaC4KAPI64W8VKhD/jvbfKt sfXmjnCY4XUZQlXLq3MfBg6EP0jdNMEW26VY9d6QTfgwOwC4criLlBhZ6iElnISN 7Dh73sfrr2FBz+j3VKK2HhG0dj8QWCBei0TkHOTmGDN9HCrd4/+/Vp5wmR0RAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUKjlL+5dFb7Aexa6gTj/6HamKAkkwHwYDVR0j BBgwFoAUlH4p83w4epWQwTWug9v2ixAunlcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB LzAvOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIxMDJFOUU1Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NDdFMjlGMzdDMzg3QTk1OTBD MTM1QUU4M0RCRjY4QjEwMkU5RTU3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B R1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRBLzAvMzEz NzMwMmUzODMzMmUzMTMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzIz NTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAKqU4QwDQYJKoZIhvcNAQELBQADggEBADUbmuG9yucV 7hK7BTilEfznazOEOGV1FUhOi8OPJ3ftW6Xt9fXNNPEFPnCIC+8kR1BByWxj03H1 1y06Jj5YlRg9cdcH3gttVyusedJ9L36JDA/5GazASetnv5aGr6vHq8vRKsHza+Ii Dh2iDkE8vbUxMaF6nAO9HgihcPM83t8l4OSExcWz8hLL/1FVpaZpV4tgUqFPQJ/X MKTG9AdI62tuoY87C3P62jvcj5v6yIcIzO0iJGIDlc47+iAG2TIk1CT6bd+a6Ign lgRYL3Jnl5zy9Aa4XqIQ1mVmuqaWLFuVYIom6LPn4p49nUsRYrgDaloO8rzWoj16 xHEMDq1syeo= -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:08 2025 by rpki-client