$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32332d3234203d3e203238363536.roa File: 3133312e3235352e3131322e302f32332d3234203d3e203238363536.roa (raw, json) Hash identifier: BPzMFJYVIp2343o4JBYK/GOOKed3pUuOSRm46O4E3d8= Subject key identifier: 4E:69:EF:3D:F4:5C:8A:4C:34:4A:65:22:4C:3B:B1:3C:BF:CE:18:37 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 07921D231F9647CB6589DF82FF983F709084A202 Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32332d3234203d3e203238363536.roa Signing time: Mon 22 Sep 2025 14:42:44 +0000 ROA not before: Mon 22 Sep 2025 14:37:44 +0000 ROA not after: Mon 21 Sep 2026 14:42:44 +0000 asID: 28656 IP address blocks: 131.255.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:92:1d:23:1f:96:47:cb:65:89:df:82:ff:98:3f:70:90:84:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Sep 22 14:37:44 2025 GMT Not After : Sep 21 14:42:44 2026 GMT Subject: CN=4E69EF3DF45C8A4C344A65224C3BB13CBFCE1837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:85:34:d0:f3:2b:e6:37:7a:8e:e6:82:ff: 2d:88:40:38:7c:18:20:6f:50:e0:11:a4:96:f3:fe: af:30:4a:01:5f:07:e6:02:3c:2f:15:2f:86:13:3b: 22:a0:99:14:fd:09:fe:5d:63:41:bd:02:f2:9f:e8: 5c:9e:4f:22:98:a9:23:19:5c:54:d5:8c:a1:85:a8: 6d:f7:a7:57:66:2e:07:d7:2a:65:a0:65:0d:ec:43: 5a:cd:28:a9:f8:d2:3f:96:d5:1f:e2:97:9e:dc:5f: 48:e7:ad:7c:d9:e7:39:a4:48:60:ad:dc:4d:2c:09: de:cf:96:db:7f:75:53:9e:cf:0a:9d:67:83:2e:f8: 8e:c4:a1:95:9e:87:3d:46:ee:b5:a6:5b:aa:35:19: 7f:0c:be:9c:f9:5a:6f:0a:96:7d:0d:e1:f7:72:06: 7d:8f:dc:f8:b2:7c:13:6c:0d:52:2f:32:f4:9b:85: 9d:6e:16:72:7d:b0:c3:4a:0d:04:65:4d:f4:78:a2: cf:57:b6:c3:df:33:7d:82:77:ba:81:cb:bc:73:f6: b4:1c:04:47:56:dc:0b:03:5a:d1:48:da:ee:6d:7f: 37:d6:09:dd:35:ed:6b:81:e6:d0:f9:b6:71:21:8d: ac:15:67:40:ad:91:89:5a:44:2b:f6:ee:bb:fb:1e: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:EF:3D:F4:5C:8A:4C:34:4A:65:22:4C:3B:B1:3C:BF:CE:18:37 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131322e302f32332d3234203d3e203238363536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.112.0/23 Signature Algorithm: sha256WithRSAEncryption 92:8a:b1:20:92:67:3a:9b:97:42:41:6c:d7:eb:1f:af:69:3e: 1d:2c:f0:84:4d:7b:24:c7:5b:19:f7:8d:1a:76:12:3c:a4:ac: 6e:15:d6:ac:0a:71:5f:f3:be:96:11:74:86:8d:f7:c1:72:9c: 3b:05:bc:8c:30:ad:e3:7b:34:f7:73:fc:54:bd:0c:60:ae:7f: 12:fd:13:2f:11:d0:31:68:28:72:e2:1a:de:5d:f6:74:72:5a: b2:04:a9:24:67:a7:5b:a5:c8:f5:d7:22:d9:17:80:91:77:fb: 45:e0:ae:69:82:52:5c:80:8d:8d:dc:39:82:f9:71:aa:4c:98: 77:55:7e:b0:2f:1a:c8:c5:5a:0d:99:bc:23:51:05:64:5c:68: fa:b1:d8:aa:a8:06:29:f2:82:ac:b2:5a:70:ef:41:ae:8e:c0: 48:a2:f6:59:53:3e:8d:34:76:35:37:f5:dd:76:fa:e0:b5:f2: 53:0a:64:39:06:c5:f8:00:5f:34:05:e2:71:5a:84:0b:ca:da: c3:6a:ba:4a:25:52:76:d2:3d:c8:12:3d:ee:76:15:1b:fc:89: 11:84:2d:4b:d2:63:a9:ca:66:21:c3:9a:f2:89:9b:64:43:8f: 30:e0:16:c5:7a:c3:0b:cc:59:b0:0f:b0:de:e5:98:95:fc:a9: b2:74:95:d1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUB5IdIx+WR8tlid+C/5g/cJCEogIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNTA5MjIxNDM3NDRaFw0yNjA5MjExNDQyNDRaMDMxMTAvBgNV BAMTKDRFNjlFRjNERjQ1QzhBNEMzNDRBNjUyMjRDM0JCMTNDQkZDRTE4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTYU00PMr5jd6juaC/y2IQDh8 GCBvUOARpJbz/q8wSgFfB+YCPC8VL4YTOyKgmRT9Cf5dY0G9AvKf6FyeTyKYqSMZ XFTVjKGFqG33p1dmLgfXKmWgZQ3sQ1rNKKn40j+W1R/il57cX0jnrXzZ5zmkSGCt 3E0sCd7Pltt/dVOezwqdZ4Mu+I7EoZWehz1G7rWmW6o1GX8Mvpz5Wm8Kln0N4fdy Bn2P3PiyfBNsDVIvMvSbhZ1uFnJ9sMNKDQRlTfR4os9XtsPfM32Cd7qBy7xz9rQc BEdW3AsDWtFI2u5tfzfWCd017WuB5tD5tnEhjawVZ0CtkYlaRCv27rv7HmmlAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUTmnvPfRcikw0SmUiTDuxPL/OGDcwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzEzMzMxMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy MzgzNjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGD/3AwDQYJKoZIhvcNAQELBQADggEBAJKKsSCS Zzqbl0JBbNfrH69pPh0s8IRNeyTHWxn3jRp2EjykrG4V1qwKcV/zvpYRdIaN98Fy nDsFvIwwreN7NPdz/FS9DGCufxL9Ey8R0DFoKHLiGt5d9nRyWrIEqSRnp1ulyPXX ItkXgJF3+0XgrmmCUlyAjY3cOYL5capMmHdVfrAvGsjFWg2ZvCNRBWRcaPqx2Kqo BinygqyyWnDvQa6OwEii9llTPo00djU39d12+uC18lMKZDkGxfgAXzQF4nFahAvK 2sNqukolUnbSPcgSPe52FRv8iRGELUvSY6nKZiHDmvKJm2RDjzDgFsV6wwvMWbAP sN7lmJX8qbJ0ldE= -----END CERTIFICATE-----Generated at Tue Oct 21 04:15:13 2025 by rpki-client