$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231312e302f32342d3234203d3e203238323936.roa File: 3138392e33362e3231312e302f32342d3234203d3e203238323936.roa (raw, json) Hash identifier: mWnJ/rF2yrOSLMDxpBce1m2SVfKjNGc7zBoFSBqSuOA= Subject key identifier: AF:89:5F:E8:8F:4D:4E:C4:C8:6C:19:02:0E:7A:33:6D:EC:15:85:0B Certificate issuer: /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F Certificate serial: 58D1AFFFA1463B048F4E62F5C854AA110C1CEF58 Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231312e302f32342d3234203d3e203238323936.roa Signing time: Fri 03 Oct 2025 02:29:18 +0000 ROA not before: Fri 03 Oct 2025 02:24:18 +0000 ROA not after: Fri 02 Oct 2026 02:29:18 +0000 asID: 28296 IP address blocks: 189.36.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d1:af:ff:a1:46:3b:04:8f:4e:62:f5:c8:54:aa:11:0c:1c:ef:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F Validity Not Before: Oct 3 02:24:18 2025 GMT Not After : Oct 2 02:29:18 2026 GMT Subject: CN=AF895FE88F4D4EC4C86C19020E7A336DEC15850B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:36:7e:4a:47:f2:c8:33:9c:71:24:88:30:53: f4:d6:a4:d5:89:bb:96:1a:43:69:59:fe:9c:ce:03: ad:01:28:7a:74:85:44:2d:b4:2b:ab:b7:3e:17:3c: 53:42:f7:10:7a:85:22:06:4c:c6:90:01:c4:74:9e: 8e:16:ac:7e:b0:b2:33:8c:73:ad:fa:2f:84:87:78: 53:80:38:0d:fb:4f:9a:0b:fd:a7:cf:ac:24:96:35: ab:5c:bf:74:dc:0c:bb:2b:8b:71:04:c5:7b:ab:2f: 26:bf:74:e0:23:83:50:73:71:35:cf:8d:d9:cd:53: ca:ef:a5:3b:5a:1a:f4:a4:27:08:8a:1f:db:2f:e7: 08:43:d1:a8:14:6a:81:a5:af:e6:9c:58:24:6a:41: 7a:7d:7c:c9:31:32:a1:41:9e:35:6b:9f:30:72:9c: 3f:9d:2a:6a:dd:15:84:22:85:38:c4:72:5b:3b:de: 9c:6d:35:80:0a:3d:3a:73:c4:da:3d:1b:08:e0:94: 73:37:17:e4:74:28:f7:64:06:00:7d:43:7b:98:c8: 10:ed:11:e1:f3:2d:ba:e0:61:1b:e5:e4:76:36:35: 04:e7:57:ac:8f:fd:f0:fc:d4:bb:5d:68:9d:b1:ce: 43:19:21:33:db:5d:59:5b:7e:d8:1f:4c:65:a9:de: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:5F:E8:8F:4D:4E:C4:C8:6C:19:02:0E:7A:33:6D:EC:15:85:0B X509v3 Authority Key Identifier: keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231312e302f32342d3234203d3e203238323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.36.211.0/24 Signature Algorithm: sha256WithRSAEncryption 75:7d:db:8d:6f:cd:52:9e:4f:70:dc:9e:f8:44:6a:04:8e:d8: 76:97:e9:bf:ae:ea:d4:91:a4:58:08:b7:3e:0d:ad:4a:06:22: ef:bf:3c:95:07:41:24:ae:fe:bf:2b:f4:79:07:3b:ba:47:45: db:24:88:df:ca:d9:5b:57:ae:3b:d6:38:a1:a9:1f:8a:3a:30: 74:9f:83:0b:0c:7b:5e:de:4e:68:15:d4:66:eb:b6:81:b2:55: 99:e8:60:bb:aa:0a:5f:21:92:f3:b7:e9:de:e3:e6:16:d6:39: f3:00:5f:ef:bf:c6:c4:87:7b:17:af:f9:a0:12:93:87:b9:64: 78:8c:5b:0a:32:64:c9:03:cd:60:22:92:d5:f8:09:fe:c5:da: 87:26:a5:dc:bc:f3:b3:d8:d6:2f:b6:05:3e:6f:65:6b:6f:49: 8e:65:11:6b:b6:24:63:cc:56:34:8f:03:0f:5c:76:ac:5d:e8: 4b:9c:f4:65:58:52:d7:ae:e8:00:d3:dd:ab:b2:a3:08:6f:2d: 56:06:b8:3e:d5:de:cd:fd:3c:56:db:39:45:f7:14:fa:48:e5: 0c:aa:ed:f1:ee:be:bb:1f:ee:c7:b7:b7:12:c0:27:89:62:a1: 1d:9e:30:98:0a:d1:53:0f:2b:a0:d3:3c:25:21:b4:a2:35:96: bb:c9:26:5d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUWNGv/6FGOwSPTmL1yFSqEQwc71gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCOUM2NTgyM0I1MjkxMjEzMzM1NjVFMUZCQkMwQUZD QUE2MkEyRjAeFw0yNTEwMDMwMjI0MThaFw0yNjEwMDIwMjI5MThaMDMxMTAvBgNV BAMTKEFGODk1RkU4OEY0RDRFQzRDODZDMTkwMjBFN0EzMzZERUMxNTg1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyNn5KR/LIM5xxJIgwU/TWpNWJ u5YaQ2lZ/pzOA60BKHp0hUQttCurtz4XPFNC9xB6hSIGTMaQAcR0no4WrH6wsjOM c636L4SHeFOAOA37T5oL/afPrCSWNatcv3TcDLsri3EExXurLya/dOAjg1BzcTXP jdnNU8rvpTtaGvSkJwiKH9sv5whD0agUaoGlr+acWCRqQXp9fMkxMqFBnjVrnzBy nD+dKmrdFYQihTjEcls73pxtNYAKPTpzxNo9GwjglHM3F+R0KPdkBgB9Q3uYyBDt EeHzLbrgYRvl5HY2NQTnV6yP/fD81LtdaJ2xzkMZITPbXVlbftgfTGWp3hCVAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUr4lf6I9NTsTIbBkCDnozbewVhQswHwYDVR0j BBgwFoAUcLnGWCO1KRITM1ZeH7vAr8qmKi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo R2UvMC83MEI5QzY1ODIzQjUyOTEyMTMzMzU2NUUxRkJCQzBBRkNBQTYyQTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQjlDNjU4MjNCNTI5MTIx MzMzNTY1RTFGQkJDMEFGQ0FBNjJBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JMYUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAv MzEzODM5MmUzMzM2MmUzMjMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4 MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAvSTTMA0GCSqGSIb3DQEBCwUAA4IBAQB1fduNb81S nk9w3J74RGoEjth2l+m/rurUkaRYCLc+Da1KBiLvvzyVB0Ekrv6/K/R5Bzu6R0Xb JIjfytlbV6471jihqR+KOjB0n4MLDHte3k5oFdRm67aBslWZ6GC7qgpfIZLzt+ne 4+YW1jnzAF/vv8bEh3sXr/mgEpOHuWR4jFsKMmTJA81gIpLV+An+xdqHJqXcvPOz 2NYvtgU+b2Vrb0mOZRFrtiRjzFY0jwMPXHasXehLnPRlWFLXrugA092rsqMIby1W Brg+1d7N/TxW2zlF9xT6SOUMqu3x7r67H+7Ht7cSwCeJYqEdnjCYCtFTDyug0zwl IbSiNZa7ySZd -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:41 2025 by rpki-client