$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3234203d3e20323633343231.roa File: 3136382e3139352e3232302e302f32322d3234203d3e20323633343231.roa (raw, json) Hash identifier: HaU9wOkv7p56fgFlDOZ39yhsF/iPak/D7KLaASVD2hs= Subject key identifier: 60:C1:F4:32:08:4E:6A:62:2C:D6:B2:07:89:CF:C0:FB:25:EF:B4:E4 Certificate issuer: /CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9 Certificate serial: 4E0A4DF4BC687AEAEF4183117ACDB69CA4BF8176 Authority key identifier: 6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3234203d3e20323633343231.roa Signing time: Fri 17 Oct 2025 14:33:57 +0000 ROA not before: Fri 17 Oct 2025 14:28:57 +0000 ROA not after: Fri 16 Oct 2026 14:33:57 +0000 asID: 263421 IP address blocks: 168.195.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0a:4d:f4:bc:68:7a:ea:ef:41:83:11:7a:cd:b6:9c:a4:bf:81:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9 Validity Not Before: Oct 17 14:28:57 2025 GMT Not After : Oct 16 14:33:57 2026 GMT Subject: CN=60C1F432084E6A622CD6B20789CFC0FB25EFB4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:e2:7f:2c:c2:78:bf:b0:1e:e1:cf:cc:0b: 17:28:5f:e3:95:94:45:5f:4c:0f:2e:90:76:ed:bf: 20:79:3b:f0:2c:bc:d3:3d:fe:ae:73:df:89:78:30: 53:37:8c:13:ad:3e:c9:f3:3d:71:a1:e8:bc:5f:c1: 94:51:32:88:b6:19:af:d1:9e:09:a4:b9:9a:13:6a: 60:09:a3:43:26:50:9d:05:2d:2c:cc:71:87:81:26: 60:88:a9:ca:b4:a7:cd:16:90:2d:0e:63:a3:59:6a: 0d:6b:08:2e:fd:40:06:4a:a5:57:65:83:f6:9d:ee: 53:d4:89:5e:92:4e:ae:55:89:0e:23:81:18:aa:b9: bd:32:3c:2b:90:4c:22:fc:53:31:c4:3a:2b:9b:5e: 6b:28:db:a3:15:c2:83:51:cb:8b:50:17:0f:19:e8: 3b:24:33:69:61:8c:42:0b:df:d5:d1:d0:9f:a2:c1: 75:dc:3f:e1:c9:de:17:0c:d2:e4:84:43:fa:e4:6b: f7:f5:dc:da:8f:b2:42:3b:41:12:96:34:34:3f:7c: ad:85:a3:d1:bd:a5:ff:06:a0:6c:48:3c:1a:0d:4c: 13:97:a6:75:2e:ea:0f:a9:e7:38:ec:62:f3:86:58: 79:a4:1e:0b:5c:48:78:80:10:43:39:db:2a:fc:c8: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:F4:32:08:4E:6A:62:2C:D6:B2:07:89:CF:C0:FB:25:EF:B4:E4 X509v3 Authority Key Identifier: keyid:6C:DA:1E:DF:DE:47:10:5B:DF:F6:61:EE:6D:2E:89:A6:1B:39:1E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CDA1EDFDE47105BDFF661EE6D2E89A61B391ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32322d3234203d3e20323633343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.220.0/22 Signature Algorithm: sha256WithRSAEncryption 67:ef:52:df:31:4c:39:e8:b6:35:ca:b0:52:fe:82:c5:87:1d: e0:0a:ea:5c:38:e2:56:69:d9:07:dc:18:26:a4:99:23:fd:6a: c7:e8:7d:37:12:e5:2b:a2:0f:e4:33:70:8f:08:d1:c9:2f:61: 6a:99:d4:f3:45:e1:aa:6f:26:03:99:2e:06:a5:89:ba:e6:5c: 97:f5:7f:91:4c:59:b2:5e:5d:de:ab:c1:04:60:b5:a7:bb:1b: 19:95:55:61:80:9b:09:06:5a:ac:7f:0d:60:44:8e:66:c5:0e: 23:a9:81:c2:4e:11:98:56:d4:a2:7c:48:ef:45:36:fb:46:2a: 03:84:6d:6a:d7:1b:7a:65:7a:4c:46:93:24:34:64:27:a6:4b: 39:fe:17:a6:8b:9f:9a:3e:d5:c0:7c:0c:cc:5d:8c:00:d5:3b: 45:31:e8:1c:ab:9e:8c:73:64:0c:99:dd:87:36:b3:3f:b9:09: b4:56:b7:65:9a:d7:36:da:bb:9e:5e:63:22:c2:f2:e9:07:3c: 57:36:44:bb:4d:2b:39:22:e0:16:c4:1e:8e:1e:96:9f:37:a8: c1:46:04:e0:1f:e2:31:06:0a:10:1b:ab:37:83:a3:9f:a6:21: fb:bd:3d:4c:5a:09:05:76:42:f8:07:f7:c4:7f:cc:79:44:87: 99:3f:58:39 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUTgpN9LxoeurvQYMRes22nKS/gXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNEQTFFREZERTQ3MTA1QkRGRjY2MUVFNkQyRTg5QTYx QjM5MUVEOTAeFw0yNTEwMTcxNDI4NTdaFw0yNjEwMTYxNDMzNTdaMDMxMTAvBgNV BAMTKDYwQzFGNDMyMDg0RTZBNjIyQ0Q2QjIwNzg5Q0ZDMEZCMjVFRkI0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ9eJ/LMJ4v7Ae4c/MCxcoX+OV lEVfTA8ukHbtvyB5O/AsvNM9/q5z34l4MFM3jBOtPsnzPXGh6LxfwZRRMoi2Ga/R ngmkuZoTamAJo0MmUJ0FLSzMcYeBJmCIqcq0p80WkC0OY6NZag1rCC79QAZKpVdl g/ad7lPUiV6STq5ViQ4jgRiqub0yPCuQTCL8UzHEOiubXmso26MVwoNRy4tQFw8Z 6DskM2lhjEIL39XR0J+iwXXcP+HJ3hcM0uSEQ/rka/f13NqPskI7QRKWNDQ/fK2F o9G9pf8GoGxIPBoNTBOXpnUu6g+p5zjsYvOGWHmkHgtcSHiAEEM52yr8yBGHAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUYMH0MghOamIs1rIHic/A+yXvtOQwHwYDVR0j BBgwFoAUbNoe395HEFvf9mHubS6Jphs5HtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM eUYvMC82Q0RBMUVERkRFNDcxMDVCREZGNjYxRUU2RDJFODlBNjFCMzkxRUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDREExRURGREU0NzEwNUJE RkY2NjFFRTZEMkU4OUE2MUIzOTFFRDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzAv MzEzNjM4MmUzMTM5MzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMzM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjD3DANBgkqhkiG9w0BAQsFAAOCAQEAZ+9S 3zFMOei2NcqwUv6CxYcd4ArqXDjiVmnZB9wYJqSZI/1qx+h9NxLlK6IP5DNwjwjR yS9hapnU80Xhqm8mA5kuBqWJuuZcl/V/kUxZsl5d3qvBBGC1p7sbGZVVYYCbCQZa rH8NYESOZsUOI6mBwk4RmFbUonxI70U2+0YqA4RtatcbemV6TEaTJDRkJ6ZLOf4X poufmj7VwHwMzF2MANU7RTHoHKuejHNkDJndhzazP7kJtFa3ZZrXNtq7nl5jIsLy 6Qc8VzZEu00rOSLgFsQejh6WnzeowUYE4B/iMQYKEBurN4Ojn6Yh+709TFoJBXZC +Af3xH/MeUSHmT9YOQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:41 2025 by rpki-client