$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa File: 3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa (raw, json) Hash identifier: LmGWyMO+3XZhMui31SJKmhtEFb943k+2pywheF8/mmg= Subject key identifier: BE:19:7D:31:3E:CC:87:05:66:A8:FD:9B:E5:F9:F8:B2:7E:27:13:97 Certificate issuer: /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A Certificate serial: 5347C66C35B584AA93F9B9E425331CF16083132A Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa Signing time: Fri 20 Jun 2025 11:53:25 +0000 ROA not before: Fri 20 Jun 2025 11:48:25 +0000 ROA not after: Fri 19 Jun 2026 11:53:25 +0000 asID: 198949 IP address blocks: 138.117.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 18:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:47:c6:6c:35:b5:84:aa:93:f9:b9:e4:25:33:1c:f1:60:83:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A Validity Not Before: Jun 20 11:48:25 2025 GMT Not After : Jun 19 11:53:25 2026 GMT Subject: CN=BE197D313ECC870566A8FD9BE5F9F8B27E271397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:a2:69:3a:da:49:76:b2:d1:fa:2f:02:48: 50:c8:d2:c4:e5:a4:be:98:4f:a2:76:f7:85:95:5d: c8:a0:52:27:a8:34:c7:ba:c4:bb:24:bf:5e:af:15: 4a:2e:53:c6:bd:09:6f:38:bc:00:07:71:ff:37:36: bd:c2:8c:24:12:e1:66:ad:15:13:d1:4c:ff:b7:20: 51:20:74:a1:c9:3c:58:96:54:2c:69:e2:02:22:a1: 82:83:9e:3a:a5:c7:57:08:a5:3b:ac:c8:15:34:65: 4c:2e:54:ad:31:89:c1:04:10:8d:da:03:30:89:a0: 32:35:d3:d4:1e:f4:bb:46:3e:b0:d2:22:05:d8:70: 72:f1:82:14:ed:4e:ae:1c:c3:75:f9:bf:4c:46:6c: 9f:3c:7b:11:d8:69:69:f4:c0:12:cf:d9:23:21:7a: 67:3b:73:1b:30:8c:66:c1:ef:d7:7a:38:71:2b:fe: 4a:dc:62:2c:a3:7d:1c:0a:b1:1b:83:4d:cc:29:98: 3d:b1:e4:5d:e3:14:a4:80:bc:f8:21:52:45:02:d4: ec:13:c6:7e:55:8f:cb:af:99:bd:1b:f4:df:e6:5d: 72:90:6b:04:cc:af:07:3c:14:3d:8d:b3:cb:0a:ad: 9c:88:69:cc:cb:ae:d8:fc:77:49:11:fb:e3:96:d6: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:19:7D:31:3E:CC:87:05:66:A8:FD:9B:E5:F9:F8:B2:7E:27:13:97 X509v3 Authority Key Identifier: keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.64.0/22 Signature Algorithm: sha256WithRSAEncryption 44:76:15:6b:29:bd:53:1c:16:c7:3e:66:3a:7f:0d:d3:2d:9d: 24:74:6d:a8:89:6d:9d:2a:9a:0c:99:0f:59:83:b6:67:1a:0b: d9:31:57:81:b3:13:72:0b:48:24:82:2d:50:51:70:10:bf:63: d7:5b:f9:ca:55:34:9c:23:12:6e:f6:9e:88:75:df:ee:c4:d5: 7a:a4:4e:13:09:7e:69:cc:c8:73:ec:98:07:71:d5:95:cf:1b: a2:74:7a:77:45:80:cb:96:73:c2:8f:f3:54:6a:fa:47:39:93: d8:3b:9b:5e:4c:c6:2c:28:80:78:1d:01:7a:3c:82:08:34:4a: 60:ca:02:50:05:28:7e:52:f7:a2:e2:88:6d:6b:05:4f:80:b0: a8:4f:76:80:5f:44:b0:da:b5:ea:eb:89:ce:bc:5f:30:2f:fd: 41:ad:43:47:79:34:b6:a3:17:18:51:f5:03:18:20:ea:c4:67: 8d:81:0c:20:ac:21:a6:73:a8:8a:0a:bb:54:4e:6e:0e:ef:7a: 54:3f:1b:5b:3c:0e:bd:47:31:79:2d:06:1f:5b:46:b9:11:5a: 6c:62:e6:50:a0:2b:41:80:78:0c:16:55:b9:cf:5f:1f:09:ce: b5:3b:4f:3d:4e:84:d4:e3:54:cd:ee:5e:63:a3:6a:41:63:e0: 7a:9c:7f:87 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUU0fGbDW1hKqT+bnkJTMc8WCDEyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NkE1QkQ0NUIwRkI4RUI0REM2MDM1MjRGOUFGRTg0 MUQzMEQ1QTAeFw0yNTA2MjAxMTQ4MjVaFw0yNjA2MTkxMTUzMjVaMDMxMTAvBgNV BAMTKEJFMTk3RDMxM0VDQzg3MDU2NkE4RkQ5QkU1RjlGOEIyN0UyNzEzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWaJpOtpJdrLR+i8CSFDI0sTl pL6YT6J294WVXcigUieoNMe6xLskv16vFUouU8a9CW84vAAHcf83Nr3CjCQS4Wat FRPRTP+3IFEgdKHJPFiWVCxp4gIioYKDnjqlx1cIpTusyBU0ZUwuVK0xicEEEI3a AzCJoDI109Qe9LtGPrDSIgXYcHLxghTtTq4cw3X5v0xGbJ88exHYaWn0wBLP2SMh emc7cxswjGbB79d6OHEr/krcYiyjfRwKsRuDTcwpmD2x5F3jFKSAvPghUkUC1OwT xn5Vj8uvmb0b9N/mXXKQawTMrwc8FD2Ns8sKrZyIaczLrtj8d0kR++OW1jL5AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUvhl9MT7MhwVmqP2b5fn4sn4nE5cwHwYDVR0j BBgwFoAUnJalvUWw+4603GA1JPmv6EHTDVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1IzejJwcmM0cnJ1cGVCYmVvekJhVUZVNDlCWUdaNkFuTUVHYWFKM2FM UjEvMC85Qzk2QTVCRDQ1QjBGQjhFQjREQzYwMzUyNEY5QUZFODQxRDMwRDVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDOTZBNUJENDVCMEZCOEVC NERDNjAzNTI0RjlBRkU4NDFEMzBENUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dSM3oycHJjNHJydXBlQmJlb3pCYVVGVTQ5QllHWjZBbk1FR2FhSjNhTFIxLzAv MzEzMzM4MmUzMTMxMzcyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTM5 MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKdUAwDQYJKoZIhvcNAQELBQADggEBAER2FWsp vVMcFsc+Zjp/DdMtnSR0baiJbZ0qmgyZD1mDtmcaC9kxV4GzE3ILSCSCLVBRcBC/ Y9db+cpVNJwjEm72noh13+7E1XqkThMJfmnMyHPsmAdx1ZXPG6J0endFgMuWc8KP 81Rq+kc5k9g7m15MxiwogHgdAXo8ggg0SmDKAlAFKH5S96LiiG1rBU+AsKhPdoBf RLDaterric68XzAv/UGtQ0d5NLajFxhR9QMYIOrEZ42BDCCsIaZzqIoKu1RObg7v elQ/G1s8Dr1HMXktBh9bRrkRWmxi5lCgK0GAeAwWVbnPXx8JzrU7Tz1OhNTjVM3u XmOjakFj4Hqcf4c= -----END CERTIFICATE-----Generated at Wed Jul 2 05:22:08 2025 by rpki-client