$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323634343837.roa File: 3133312e3235352e3131342e302f32332d3234203d3e20323634343837.roa (raw, json) Hash identifier: AGfKLjvKOu4ZFpo4+7SVqfCL5q5L/4hiiKgH4dMsAAU= Subject key identifier: F1:BE:51:22:DC:85:0D:E0:4E:BC:B4:01:A3:D5:6E:E7:DF:D5:61:E1 Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Certificate serial: 2036D87D8BEDF798FE8F8B6DA5856C235CED5723 Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323634343837.roa Signing time: Mon 22 Sep 2025 14:41:24 +0000 ROA not before: Mon 22 Sep 2025 14:36:24 +0000 ROA not after: Mon 21 Sep 2026 14:41:24 +0000 asID: 264487 IP address blocks: 131.255.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 21:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:36:d8:7d:8b:ed:f7:98:fe:8f:8b:6d:a5:85:6c:23:5c:ed:57:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Validity Not Before: Sep 22 14:36:24 2025 GMT Not After : Sep 21 14:41:24 2026 GMT Subject: CN=F1BE5122DC850DE04EBCB401A3D56EE7DFD561E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:92:64:da:e0:85:2a:99:77:64:b4:e9:a9: 78:27:48:d1:cc:72:ce:31:f4:14:e8:75:c1:c0:cf: 7b:cd:76:8f:5b:cc:c6:ad:6c:d5:79:08:cf:7c:43: b3:09:0b:0a:33:c2:cd:75:8b:40:33:f1:9e:a8:d0: 90:26:31:51:52:dc:c1:19:d2:a7:f7:ae:08:db:bc: 58:4d:e2:be:2d:a4:ec:e1:54:7f:0f:5d:55:11:c6: aa:99:db:d9:e5:19:3a:c2:97:44:72:f6:ef:e4:bb: 52:97:9f:93:3e:18:03:8d:3b:8d:86:50:bd:d2:8e: 21:5e:40:24:90:c2:40:07:58:0e:62:6e:8a:e2:c2: 94:c9:68:f2:dd:a3:14:b7:14:04:04:a8:3e:c7:3d: d6:d7:96:1d:50:37:64:ff:f0:fc:15:87:70:bf:7f: 4e:4c:27:1d:5e:f7:aa:8a:8e:c1:cc:78:c6:01:3c: d8:d0:25:06:a7:69:5a:e6:34:df:88:74:3b:ba:af: d5:c2:c4:88:fd:9c:66:00:45:5c:d0:81:43:72:f0: c8:30:df:fa:2e:8f:5a:36:63:41:91:23:e1:15:ae: 0a:f4:2c:37:c1:fc:87:d5:fe:6b:72:fd:ba:bd:c5: fc:ee:e2:10:bc:5e:5c:40:ca:eb:de:fb:7c:4b:5d: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BE:51:22:DC:85:0D:E0:4E:BC:B4:01:A3:D5:6E:E7:DF:D5:61:E1 X509v3 Authority Key Identifier: keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3235352e3131342e302f32332d3234203d3e20323634343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.114.0/23 Signature Algorithm: sha256WithRSAEncryption 97:23:8a:e9:de:49:cc:16:ec:bc:88:b1:1d:f4:3f:e9:c1:49: 2c:58:1f:2f:7d:79:61:c0:8f:00:3a:5b:1b:a5:34:a9:5d:57: e5:b2:b1:33:73:ad:22:56:e2:4a:30:81:d0:68:c2:79:ff:5e: 89:57:ca:87:fa:c2:19:c9:68:ec:24:78:3c:cc:31:83:b3:46: 02:9a:a4:53:98:11:75:77:d4:62:fc:53:da:48:49:ce:98:63: f4:69:e2:68:2e:25:b1:df:5f:e1:a9:de:9b:82:99:33:63:5c: 29:4f:d0:4a:15:2c:11:71:3d:38:81:54:28:8c:84:de:04:29: 82:47:9b:29:a7:df:49:69:49:4b:2b:5d:fb:f4:2c:cc:ad:4d: d4:de:a6:f5:47:1d:fb:c5:17:52:f6:c2:26:4c:17:f6:d1:ce: b5:a5:a9:b9:59:37:ec:cf:63:f4:6a:6c:6c:1a:16:42:a9:7d: af:a8:7d:01:75:92:af:a3:9c:33:9b:03:f6:1b:a6:0c:e3:ba: db:6f:85:fc:e9:73:2a:61:da:bf:9c:5a:47:3d:b3:5e:a0:c7: 07:7a:a9:cf:3f:8b:0c:67:f4:e9:9c:b9:42:d4:d7:74:cb:ad: 3c:3b:e5:45:44:6b:9d:a9:e9:27:d3:8e:eb:98:71:f9:fc:a2: 11:58:05:b2 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUIDbYfYvt95j+j4ttpYVsI1ztVyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5 MDkzODQ1ODAeFw0yNTA5MjIxNDM2MjRaFw0yNjA5MjExNDQxMjRaMDMxMTAvBgNV BAMTKEYxQkU1MTIyREM4NTBERTA0RUJDQjQwMUEzRDU2RUU3REZENTYxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2JJk2uCFKpl3ZLTpqXgnSNHM cs4x9BTodcHAz3vNdo9bzMatbNV5CM98Q7MJCwozws11i0Az8Z6o0JAmMVFS3MEZ 0qf3rgjbvFhN4r4tpOzhVH8PXVURxqqZ29nlGTrCl0Ry9u/ku1KXn5M+GAONO42G UL3SjiFeQCSQwkAHWA5iboriwpTJaPLdoxS3FAQEqD7HPdbXlh1QN2T/8PwVh3C/ f05MJx1e96qKjsHMeMYBPNjQJQanaVrmNN+IdDu6r9XCxIj9nGYARVzQgUNy8Mgw 3/ouj1o2Y0GRI+EVrgr0LDfB/IfV/mty/bq9xfzu4hC8XlxAyuve+3xLXYDTAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU8b5RItyFDeBOvLQBo9Vu59/VYeEwHwYDVR0j BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0 SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv MzEzMzMxMmUzMjM1MzUyZTMxMzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy MzYzNDM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYP/cjANBgkqhkiG9w0BAQsFAAOCAQEAlyOK 6d5JzBbsvIixHfQ/6cFJLFgfL315YcCPADpbG6U0qV1X5bKxM3OtIlbiSjCB0GjC ef9eiVfKh/rCGclo7CR4PMwxg7NGApqkU5gRdXfUYvxT2khJzphj9GniaC4lsd9f 4anem4KZM2NcKU/QShUsEXE9OIFUKIyE3gQpgkebKaffSWlJSytd+/QszK1N1N6m 9Ucd+8UXUvbCJkwX9tHOtaWpuVk37M9j9GpsbBoWQql9r6h9AXWSr6OcM5sD9hum DOO622+F/OlzKmHav5xaRz2zXqDHB3qpzz+LDGf06Zy5QtTXdMutPDvlRURrnanp J9OO65hx+fyiEVgFsg== -----END CERTIFICATE-----Generated at Tue Oct 21 01:56:57 2025 by rpki-client