$ rpki-client -vvf rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa File: 3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa (raw, json) Hash identifier: EfeDTyXlAV/AcyIAL99jnZrUZwoBsQqBhvHzOD2I31Q= Subject key identifier: AE:C3:CB:C7:01:55:B9:10:87:88:F2:40:99:DD:9F:6F:AB:A6:A6:00 Certificate issuer: /CN=BB0E18F43E99502212097842E9F81169A8D29D2E Certificate serial: 3B8520C9A3077089A93470B385D3EB49D312672A Authority key identifier: BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa Signing time: Mon 15 Sep 2025 00:33:02 +0000 ROA not before: Mon 15 Sep 2025 00:28:02 +0000 ROA not after: Mon 14 Sep 2026 00:33:02 +0000 asID: 61908 IP address blocks: 138.121.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 00:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:85:20:c9:a3:07:70:89:a9:34:70:b3:85:d3:eb:49:d3:12:67:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0E18F43E99502212097842E9F81169A8D29D2E Validity Not Before: Sep 15 00:28:02 2025 GMT Not After : Sep 14 00:33:02 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:d7:35:34:33:3c:da:7e:d2:a7:58:5d:32: 44:1f:7b:94:fb:4a:ed:4e:8a:3d:cc:1d:f9:e8:cd: c6:fb:38:ed:76:e7:35:a3:d1:b3:78:ca:d2:a3:41: 22:f3:33:5b:2c:55:1c:56:b0:7f:cd:ee:97:3a:8d: 3a:6b:69:56:ac:f5:b2:cf:58:02:07:85:b4:11:66: d7:41:80:66:3c:79:a8:7e:cb:8c:40:3d:7a:68:2f: 2c:75:4c:7e:b5:f3:73:79:98:b1:71:1e:79:28:b7: f2:1f:48:de:a0:2e:ea:c1:e4:ac:f5:7f:52:a9:9b: 5c:02:28:f4:ed:3c:f1:ee:a4:c3:61:74:c4:b0:79: d7:e8:d4:e8:49:7e:92:ae:c7:78:65:ef:74:b5:fe: ce:dc:94:37:6e:1a:ac:bc:b5:f8:33:fa:fb:39:38: 1c:85:80:08:5f:9b:d9:cc:fe:57:5a:f8:7a:ae:72: e4:80:f9:eb:4e:fc:33:a7:71:3a:22:e8:2e:80:11: 51:de:eb:d2:c0:ac:0d:ec:8a:7b:27:6b:68:24:a9: 83:cd:f4:f5:b2:01:16:99:c3:9b:11:13:dc:47:06: fd:c9:fe:3f:89:3b:6b:93:f2:79:07:27:9a:47:c6: 9d:cb:4a:50:67:ed:c0:98:7b:6e:e2:df:1a:20:69: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:CB:C7:01:55:B9:10:87:88:F2:40:99:DD:9F:6F:AB:A6:A6:00 X509v3 Authority Key Identifier: keyid:BB:0E:18:F4:3E:99:50:22:12:09:78:42:E9:F8:11:69:A8:D2:9D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/BB0E18F43E99502212097842E9F81169A8D29D2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0E18F43E99502212097842E9F81169A8D29D2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqaPW3yMaZm5zCsnbtzHWqUXWe6UiqfHKjW9rVAyEizG/0/3133382e3132312e3230342e302f32322d3234203d3e203631393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.204.0/22 Signature Algorithm: sha256WithRSAEncryption 55:b0:51:82:89:c5:c5:99:7b:6a:24:5a:b5:09:2b:19:26:3d: f1:4c:22:f9:d8:6a:12:8f:68:0c:b4:9b:be:50:b4:76:21:d8: f5:89:e0:dd:96:c3:62:f8:ff:9a:76:be:68:d2:53:ac:37:6b: 00:45:48:40:83:a4:5d:61:06:05:cf:0c:57:3e:d7:2d:69:47: b7:72:a1:80:f9:e5:2b:f0:14:07:52:5e:74:6a:c3:8e:c9:84: da:3f:a4:eb:b3:c8:83:04:92:01:16:b1:01:60:7f:31:04:40: ef:5d:fb:e9:78:e3:1e:dd:db:df:3d:53:2e:48:44:4d:be:05: d2:78:8b:a0:22:e1:e7:fa:a0:8b:07:49:d6:c3:7d:e1:75:55: c7:a4:f3:25:c2:4b:9f:3f:53:1c:68:0a:c0:72:79:32:5e:3c: 31:8b:c3:18:fc:88:ca:f1:48:ed:05:a2:14:3a:26:11:db:53: 38:01:3a:19:25:fe:b5:ed:85:58:ff:8b:fa:db:00:cb:72:7b: 23:aa:9e:b9:c7:2b:3b:4d:97:bf:3c:b1:a4:45:b4:09:d1:8f: a2:85:b7:a2:b4:09:4b:f1:f5:c7:fc:30:ca:f7:e2:d1:99:05: d1:ac:03:62:cf:e6:20:ca:83:e1:62:f2:ed:88:9e:ad:de:e2: 8f:8c:6a:d9 -----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIUO4UgyaMHcImpNHCzhdPrSdMSZyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwRTE4RjQzRTk5NTAyMjEyMDk3ODQyRTlGODExNjlB OEQyOUQyRTAeFw0yNTA5MTUwMDI4MDJaFw0yNjA5MTQwMDMzMDJaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzYxOUQ3MzUzNDMzM0NEQTdF RDJBNzU4NUQzMjQ0MUY3Qjk0RkI0QUVENEU4QTNEQ0MxREY5RThDREM2RkIzOEVE NzZFNzM1QTNEMUIzNzhDQUQyQTM0MTIyRjMzMzVCMkM1NTFDNTZCMDdGQ0RFRTk3 M0E4RDNBNkI2OTU2QUNGNUIyQ0Y1ODAyMDc4NUI0MTE2NkQ3NDE4MDY2M0M3OUE4 N0VDQjhDNDAzRDdBNjgyRjJDNzU0QzdFQjVGMzczNzk5OEIxNzExRTc5MjhCN0Yy MUY0OERFQTAyRUVBQzFFNEFDRjU3RjUyQTk5QjVDMDIyOEY0RUQzQ0YxRUVBNEMz NjE3NEM0QjA3OUQ3RThENEU4NDk3RTkyQUVDNzc4NjVFRjc0QjVGRUNFREM5NDM3 NkUxQUFDQkNCNUY4MzNGQUZCMzkzODFDODU4MDA4NUY5QkQ5Q0NGRTU3NUFGODdB QUU3MkU0ODBGOUVCNEVGQzMzQTc3MTNBMjJFODJFODAxMTUxREVFQkQyQzBBQzBE RUM4QTdCMjc2QjY4MjRBOTgzQ0RGNEY1QjIwMTE2OTlDMzlCMTExM0RDNDcwNkZE QzlGRTNGODkzQjZCOTNGMjc5MDcyNzlBNDdDNjlEQ0I0QTUwNjdFREMwOTg3QjZF RTJERjFBMjA2OURCNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxhnXNTQzPNp+0qdYXTJEH3uU+0rtToo9zB356M3G+zjtduc1o9Gz eMrSo0Ei8zNbLFUcVrB/ze6XOo06a2lWrPWyz1gCB4W0EWbXQYBmPHmofsuMQD16 aC8sdUx+tfNzeZixcR55KLfyH0jeoC7qweSs9X9SqZtcAij07Tzx7qTDYXTEsHnX 6NToSX6Srsd4Ze90tf7O3JQ3bhqsvLX4M/r7OTgchYAIX5vZzP5XWvh6rnLkgPnr Tvwzp3E6IugugBFR3uvSwKwN7Ip7J2toJKmDzfT1sgEWmcObERPcRwb9yf4/iTtr k/J5ByeaR8ady0pQZ+3AmHtu4t8aIGnbQwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE FK7Dy8cBVbkQh4jyQJndn2+rpqYAMB8GA1UdIwQYMBaAFLsOGPQ+mVAiEgl4Qun4 EWmo0p0uMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RxYVBXM3lNYVptNXpD c25idHpIV3FVWFdlNlVpcWZIS2pXOXJWQXlFaXpHLzAvQkIwRTE4RjQzRTk5NTAy MjEyMDk3ODQyRTlGODExNjlBOEQyOUQyRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9CQjBFMThGNDNFOTk1MDIyMTIwOTc4NDJFOUY4MTE2OUE4RDI5 RDJFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EcWFQVzN5TWFabTV6Q3NuYnR6 SFdxVVhXZTZVaXFmSEtqVzlyVkF5RWl6Ry8wLzMxMzMzODJlMzEzMjMxMmUzMjMw MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzkzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC innMMA0GCSqGSIb3DQEBCwUAA4IBAQBVsFGCicXFmXtqJFq1CSsZJj3xTCL52GoS j2gMtJu+ULR2Idj1ieDdlsNi+P+adr5o0lOsN2sARUhAg6RdYQYFzwxXPtctaUe3 cqGA+eUr8BQHUl50asOOyYTaP6Trs8iDBJIBFrEBYH8xBEDvXfvpeOMe3dvfPVMu SERNvgXSeIugIuHn+qCLB0nWw33hdVXHpPMlwkufP1McaArAcnkyXjwxi8MY/IjK 8UjtBaIUOiYR21M4AToZJf617YVY/4v62wDLcnsjqp65xys7TZe/PLGkRbQJ0Y+i hbeitAlL8fXH/DDK9+LRmQXRrANiz+YgyoPhYvLtiJ6t3uKPjGrZ -----END CERTIFICATE-----Generated at Tue Oct 21 03:45:34 2025 by rpki-client