$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa File: 3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa (raw, json) Hash identifier: XQ7DZeHPQyB89UHVLv4Cp/k4A0v1QwCnktw2XBdxuGM= Subject key identifier: B1:5C:3A:A5:4A:14:6C:FC:3C:3A:9E:72:CA:68:B1:42:BE:C5:3D:6A Certificate issuer: /CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C Certificate serial: 4E3DA2D41E4F227FECC082E8678C6C0AE519F139 Authority key identifier: B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer Subject info access: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa Signing time: Fri 26 Sep 2025 14:28:04 +0000 ROA not before: Fri 26 Sep 2025 14:23:04 +0000 ROA not after: Fri 25 Sep 2026 14:28:04 +0000 asID: 264288 IP address blocks: 138.121.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:a2:d4:1e:4f:22:7f:ec:c0:82:e8:67:8c:6c:0a:e5:19:f1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C Validity Not Before: Sep 26 14:23:04 2025 GMT Not After : Sep 25 14:28:04 2026 GMT Subject: CN=B15C3AA54A146CFC3C3A9E72CA68B142BEC53D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:5a:f8:73:fb:72:91:bb:68:c9:6e:f0:73: 88:e6:98:77:3c:53:15:d0:18:ce:7f:bb:6d:24:27: d6:fe:5d:2b:2f:f6:d1:21:c1:83:f5:41:22:c4:0c: 8d:fe:b9:fb:d8:ca:92:a0:19:71:55:d7:7c:04:16: 9b:97:41:cf:a7:6d:ff:55:3d:15:04:98:19:02:c8: 2e:ae:13:41:b5:f4:05:f6:01:e4:dc:49:c1:f2:51: d8:12:61:8b:91:9b:9d:ee:4d:99:06:58:2b:49:4c: 98:c6:f0:23:2f:aa:c7:08:3d:30:b4:cb:fc:63:20: 57:91:b7:34:1f:54:bc:36:3a:cf:41:f0:8e:de:a2: a7:05:47:16:dd:93:93:98:20:e4:70:4c:36:41:94: bb:5d:cb:04:fc:22:99:bb:9e:5e:da:c0:be:db:67: 16:74:21:88:9f:ab:56:50:95:80:0a:07:3d:73:66: b9:28:8a:d8:9a:d7:27:de:86:fa:e8:e4:d5:10:22: 66:9f:a1:ca:98:fa:91:2a:0f:60:a3:3e:09:f8:82: 57:83:73:97:9d:2c:73:6a:8a:70:ec:fc:06:6d:f0: 2e:4e:1b:28:5b:da:bf:ef:a5:79:15:cb:c1:f1:7f: fd:67:0a:5d:1c:a8:a9:a8:54:e0:55:8d:d4:22:05: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:3A:A5:4A:14:6C:FC:3C:3A:9E:72:CA:68:B1:42:BE:C5:3D:6A X509v3 Authority Key Identifier: keyid:B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/3133382e3132312e33322e302f32322d3234203d3e20323634323838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.32.0/22 Signature Algorithm: sha256WithRSAEncryption 23:f6:59:ff:2a:40:03:7b:ff:19:74:b7:6e:ac:ca:dc:b6:73: 24:04:0e:9a:8b:98:7b:c9:60:c1:76:b1:9a:46:9e:dc:e2:57: a3:b0:d4:63:62:93:d6:7f:2f:82:da:e0:22:70:fc:84:87:f3: 13:49:eb:11:5a:16:c5:a0:c0:66:52:26:b6:6d:b4:33:36:e5: c2:ad:bf:4d:7a:6e:e5:9b:99:ef:39:a4:f8:e0:23:c4:b4:59: ce:32:3b:90:03:87:b2:73:57:f7:12:7e:67:ab:54:a2:3c:c2: 8e:0a:ab:71:c3:74:b0:38:d1:e8:c8:9d:b5:82:aa:ba:9a:3b: f0:da:a5:c6:6d:e5:ab:d3:a0:fd:c5:13:6c:de:8a:11:47:8f: 8b:40:e7:5d:18:e3:ec:24:a3:06:39:32:86:67:79:94:a2:d9: a0:3d:54:0a:6f:76:ce:8a:43:66:68:7e:06:9a:88:28:35:9b: 25:bd:42:b5:1c:f7:8b:af:d1:5b:99:2e:a4:1e:ca:97:26:87: e1:84:c7:81:3d:27:c0:42:c7:ea:7b:8c:be:e2:9f:11:4e:17: a3:f6:ad:99:35:6d:52:b9:f6:1d:69:57:87:12:73:be:4c:40: 61:0f:0c:0a:9c:c7:06:70:a2:33:38:88:a2:13:11:44:5b:2e: 2a:d6:30:fe -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTj2i1B5PIn/swILoZ4xsCuUZ8TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRDRjI1OThCNjI2MUNENTQ4QzVERTM5NjkyRjlBODdF NEJCRTM2QzAeFw0yNTA5MjYxNDIzMDRaFw0yNjA5MjUxNDI4MDRaMDMxMTAvBgNV BAMTKEIxNUMzQUE1NEExNDZDRkMzQzNBOUU3MkNBNjhCMTQyQkVDNTNENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXT1r4c/tykbtoyW7wc4jmmHc8 UxXQGM5/u20kJ9b+XSsv9tEhwYP1QSLEDI3+ufvYypKgGXFV13wEFpuXQc+nbf9V PRUEmBkCyC6uE0G19AX2AeTcScHyUdgSYYuRm53uTZkGWCtJTJjG8CMvqscIPTC0 y/xjIFeRtzQfVLw2Os9B8I7eoqcFRxbdk5OYIORwTDZBlLtdywT8Ipm7nl7awL7b ZxZ0IYifq1ZQlYAKBz1zZrkoitia1yfehvro5NUQImafocqY+pEqD2CjPgn4gleD c5edLHNqinDs/AZt8C5OGyhb2r/vpXkVy8Hxf/1nCl0cqKmoVOBVjdQiBf0fAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUsVw6pUoUbPw8Op5yymixQr7FPWowHwYDVR0j BBgwFoAUtM8lmLYmHNVIxd45aS+ah+S742wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1k0eUxtTnZaS3BORnlzRXVnd2ZXYnlIMzJ0Nlh2ZmFNRExvUEtVYllH MVUvMC9CNENGMjU5OEI2MjYxQ0Q1NDhDNURFMzk2OTJGOUE4N0U0QkJFMzZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0Q0YyNTk4QjYyNjFDRDU0 OEM1REUzOTY5MkY5QTg3RTRCQkUzNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dZNHlMbU52WktwTkZ5c0V1Z3dmV2J5SDMydDZYdmZhTURMb1BLVWJZRzFVLzAv MzEzMzM4MmUzMTMyMzEyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKeSAwDQYJKoZIhvcNAQELBQADggEBACP2Wf8q QAN7/xl0t26syty2cyQEDpqLmHvJYMF2sZpGntziV6Ow1GNik9Z/L4La4CJw/ISH 8xNJ6xFaFsWgwGZSJrZttDM25cKtv016buWbme85pPjgI8S0Wc4yO5ADh7JzV/cS fmerVKI8wo4Kq3HDdLA40ejInbWCqrqaO/DapcZt5avToP3FE2zeihFHj4tA510Y 4+wkowY5MoZneZSi2aA9VApvds6KQ2ZofgaaiCg1myW9QrUc94uv0VuZLqQeypcm h+GEx4E9J8BCx+p7jL7inxFOF6P2rZk1bVK59h1pV4cSc75MQGEPDAqcxwZwojM4 iKITEURbLirWMP4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:28 2025 by rpki-client