$ rpki-client -vvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa File: 3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (raw, json) Hash identifier: eS5+BzUz/P8gDxELe1obBXuVHdIgN6UEEqiN1aXBrk4= Subject key identifier: 43:F1:3D:36:63:1F:0F:8B:C6:99:1F:1F:FF:EC:7F:D6:B7:D8:27:F6 Certificate issuer: /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Certificate serial: 5BA2CD99C2E9854096A0F2F1994FE25E3526D185 Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa Signing time: Wed 24 Sep 2025 19:09:19 +0000 ROA not before: Wed 24 Sep 2025 19:04:19 +0000 ROA not after: Wed 23 Sep 2026 19:09:19 +0000 asID: 271222 IP address blocks: 190.109.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 19:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a2:cd:99:c2:e9:85:40:96:a0:f2:f1:99:4f:e2:5e:35:26:d1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Validity Not Before: Sep 24 19:04:19 2025 GMT Not After : Sep 23 19:09:19 2026 GMT Subject: CN=43F13D36631F0F8BC6991F1FFFEC7FD6B7D827F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:19:11:e5:15:a6:a5:34:29:fe:28:82:2b: 66:c1:51:04:f1:86:d8:1e:3d:16:55:93:bb:58:e5: 85:e8:a1:b5:ed:77:ce:c9:5d:35:5e:95:b7:65:c9: f5:31:5c:f5:5f:97:58:c6:d6:1f:db:64:08:46:86: 20:b9:83:f6:75:cc:28:cf:d0:e4:66:57:f2:bc:f8: 6a:5a:b5:8b:c9:15:f5:48:12:b0:8c:43:ed:43:e8: bb:a9:2e:6e:29:93:5d:e5:4c:3f:38:be:01:00:6e: df:a7:f3:89:6d:8a:9c:ef:c3:20:f7:26:7f:a1:8e: cd:cd:32:9c:7a:48:48:03:dd:24:3e:cf:7e:00:b6: 99:8a:8b:88:69:63:aa:9b:58:77:30:65:21:0a:91: 45:41:01:08:42:b5:52:07:26:cb:5d:9d:b7:20:3a: 0e:df:cf:f0:f0:9f:c9:93:d7:9a:75:d4:f9:8d:37: 9a:ce:70:0f:63:95:5f:73:40:f2:4e:b1:66:77:a4: 77:f5:b8:24:1a:ed:6a:84:b1:d6:c6:9a:2b:a2:e3: a0:44:a5:9f:0b:4b:e0:d3:cd:36:35:ab:df:43:e9: 6b:92:c9:54:a4:81:68:6f:87:74:51:67:b5:d6:a5: b7:ff:7c:50:4b:bf:84:ed:ad:da:8f:b9:d8:2a:df: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F1:3D:36:63:1F:0F:8B:C6:99:1F:1F:FF:EC:7F:D6:B7:D8:27:F6 X509v3 Authority Key Identifier: keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.109.96.0/23 Signature Algorithm: sha256WithRSAEncryption be:5e:fd:fc:8e:a5:28:80:6a:ce:8f:d5:fd:7e:cf:7d:4f:7b: fc:11:1d:57:12:bc:75:4b:83:90:01:8c:a2:25:9c:8b:68:ad: c3:b6:04:bf:ef:b3:3c:c2:73:f6:cf:9f:a6:be:10:a5:16:66: 21:a8:d2:8c:fe:1a:fe:a8:74:72:04:07:b8:ac:85:70:59:9a: a2:5e:ad:cd:68:0e:53:66:95:70:d1:09:92:61:fb:32:93:dd: dd:ee:0a:e3:ae:6a:a6:c0:ff:cc:54:7e:2e:f7:8b:a2:81:c1: 14:e9:df:91:0c:a6:a4:0d:64:18:8e:71:df:35:fc:72:65:1d: 48:df:6c:fa:fb:e9:54:45:d7:31:b7:2b:73:ae:d8:34:8b:cc: 18:31:b5:e6:b3:38:12:6c:2a:74:ec:1a:fb:5e:ab:05:5b:78: 95:a6:60:b5:2a:41:f2:e3:6d:c7:42:8e:7b:5e:23:e5:f6:af: e9:a5:23:15:9d:2a:fb:18:c3:16:14:af:1d:fa:7a:94:9a:99: e1:7d:84:31:33:26:b1:4d:bb:5e:c7:02:88:ff:ea:b9:7f:93: 65:65:18:de:be:50:83:dc:79:bd:0e:df:5d:2b:18:0f:fa:9e: bd:e6:84:d9:da:c1:65:fe:d1:89:76:da:b2:ba:c2:cc:61:aa: c2:96:ad:f1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUW6LNmcLphUCWoPLxmU/iXjUm0YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFMzNENzZGNkM5RkM5RDBCMEZGN0Y1NTRDMzUxOTI3 MUQxQzgzODAeFw0yNTA5MjQxOTA0MTlaFw0yNjA5MjMxOTA5MTlaMDMxMTAvBgNV BAMTKDQzRjEzRDM2NjMxRjBGOEJDNjk5MUYxRkZGRUM3RkQ2QjdEODI3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZRkR5RWmpTQp/iiCK2bBUQTx htgePRZVk7tY5YXoobXtd87JXTVelbdlyfUxXPVfl1jG1h/bZAhGhiC5g/Z1zCjP 0ORmV/K8+GpatYvJFfVIErCMQ+1D6LupLm4pk13lTD84vgEAbt+n84ltipzvwyD3 Jn+hjs3NMpx6SEgD3SQ+z34AtpmKi4hpY6qbWHcwZSEKkUVBAQhCtVIHJstdnbcg Og7fz/Dwn8mT15p11PmNN5rOcA9jlV9zQPJOsWZ3pHf1uCQa7WqEsdbGmiui46BE pZ8LS+DTzTY1q99D6WuSyVSkgWhvh3RRZ7XWpbf/fFBLv4TtrdqPudgq3+aJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQ/E9NmMfD4vGmR8f/+x/1rfYJ/YwHwYDVR0j BBgwFoAUiuM9dvbJ/J0LD/f1VMNRknHRyDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dz enYvMC84QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRTMzRDc2RjZDOUZDOUQw QjBGRjdGNTU0QzM1MTkyNzFEMUM4MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JuczZUNU05dFJTRndXNndWdXdHYjU1TVNUajltUnZ0YnltbVpvQjN3c3p2LzAv MzEzOTMwMmUzMTMwMzkyZTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3 MzEzMjMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAG+bWAwDQYJKoZIhvcNAQELBQADggEBAL5e/fyO pSiAas6P1f1+z31Pe/wRHVcSvHVLg5ABjKIlnItorcO2BL/vszzCc/bPn6a+EKUW ZiGo0oz+Gv6odHIEB7ishXBZmqJerc1oDlNmlXDRCZJh+zKT3d3uCuOuaqbA/8xU fi73i6KBwRTp35EMpqQNZBiOcd81/HJlHUjfbPr76VRF1zG3K3Ou2DSLzBgxteaz OBJsKnTsGvteqwVbeJWmYLUqQfLjbcdCjnteI+X2r+mlIxWdKvsYwxYUrx36epSa meF9hDEzJrFNu17HAoj/6rl/k2VlGN6+UIPceb0O310rGA/6nr3mhNnawWX+0Yl2 2rK6wsxhqsKWrfE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:40 2025 by rpki-client