$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa File: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (raw, json) Hash identifier: dgQenF0SOCgMjKxMC4O4DFcfxi1LaXIDVtj0og24Gxc= Subject key identifier: 2E:98:77:CF:78:18:25:C2:D1:B3:10:85:BF:0A:03:AB:02:B7:B7:49 Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 6E2155403A86A894799C479EDB9A3BEEAEF1359F Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa Signing time: Tue 02 Sep 2025 17:41:14 +0000 ROA not before: Tue 02 Sep 2025 17:36:14 +0000 ROA not after: Tue 01 Sep 2026 17:41:14 +0000 asID: 263963 IP address blocks: 138.219.220.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:55:40:3a:86:a8:94:79:9c:47:9e:db:9a:3b:ee:ae:f1:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Sep 2 17:36:14 2025 GMT Not After : Sep 1 17:41:14 2026 GMT Subject: CN=2E9877CF781825C2D1B31085BF0A03AB02B7B749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:b8:fc:6e:f9:b2:83:44:f9:34:4f:e9:86: 32:8a:c4:57:ce:86:bd:0a:0e:fc:c5:8e:3f:3f:29: 41:00:b5:75:b6:04:1d:48:7c:77:ef:6c:dd:9b:4a: 7b:ff:38:4e:bb:e0:39:da:b7:84:5e:26:09:e0:03: 9e:7f:73:90:55:b6:48:0f:f2:4c:49:a6:3f:71:c7: b2:79:e2:d8:b3:58:94:06:9f:93:92:69:2e:4a:a0: 4a:fb:4d:ce:ef:69:34:a1:2f:53:67:5f:a3:27:9f: 13:ba:33:df:2c:64:2d:6e:6e:a2:a2:fb:af:45:aa: a9:cf:10:38:7e:16:1c:68:ec:b0:9a:f3:ac:45:4d: 8c:cb:a9:6a:ed:6c:38:73:43:c7:37:29:b9:dd:1a: 12:f3:0c:b8:80:57:82:98:f2:b4:ed:6d:f0:d6:8f: 76:38:4e:ac:a2:1e:17:41:ef:9e:98:c0:82:77:9c: 03:a1:fb:6e:c9:3b:3c:05:3b:45:ca:0b:8d:8c:4f: 88:6e:9c:2f:5a:d0:77:0f:5e:c9:bf:93:52:d7:f6: 42:07:fc:9c:c7:c6:1a:29:0b:5a:f1:63:2a:e3:57: 87:12:f0:90:b4:64:d0:8f:96:12:ae:27:32:a4:c5: cb:73:8b:00:bf:64:74:fe:2e:aa:29:ca:5f:53:95: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:77:CF:78:18:25:C2:D1:B3:10:85:BF:0A:03:AB:02:B7:B7:49 X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.220.0/22 Signature Algorithm: sha256WithRSAEncryption 17:29:65:f3:0f:d1:4c:dc:a3:11:e0:ba:fb:c1:f2:df:c6:14: 4a:3c:9e:1e:13:44:63:d8:10:4d:ab:af:dd:eb:c7:fc:e3:9c: ec:d9:f1:9e:6d:9e:5b:ca:45:b7:20:bb:e6:ef:a9:bc:25:b7: 28:b4:56:26:6b:33:bb:57:6d:ef:d5:be:62:1b:a6:9d:04:79: 80:b8:67:93:5c:61:84:1d:0b:9c:26:8a:ab:dd:ed:51:93:35: db:0d:bd:dd:59:61:a2:7d:ac:49:8d:d9:a6:66:ce:df:61:f4: 78:7d:5c:10:ec:a5:59:93:f2:e1:df:08:8f:06:ab:9d:e7:90: e8:c1:6b:63:8f:d6:33:ae:d2:ca:15:4a:4f:ea:a6:12:c2:e6: 53:c7:ab:c1:50:f1:a5:83:96:bc:b5:70:98:7c:ce:48:5b:ab: 6a:73:65:5b:32:9f:1a:2c:27:a5:71:e1:79:ad:f8:ec:72:6a: d6:20:51:3c:0c:67:2f:81:b5:ed:49:8d:aa:d0:c8:bc:47:87: f4:b3:d3:2f:6a:2d:a6:ca:48:8a:37:0c:49:37:09:6b:0c:66: b5:a7:bf:c7:2c:ce:ab:c8:1e:d3:51:50:3a:7a:5b:1a:34:e6: e8:79:6d:24:11:ac:25:c9:be:db:85:02:a3:b6:90:9f:cf:af: 3c:77:7b:66 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUbiFVQDqGqJR5nEee25o77q7xNZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTA5MDIxNzM2MTRaFw0yNjA5MDExNzQxMTRaMDMxMTAvBgNV BAMTKDJFOTg3N0NGNzgxODI1QzJEMUIzMTA4NUJGMEEwM0FCMDJCN0I3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHrj8bvmyg0T5NE/phjKKxFfO hr0KDvzFjj8/KUEAtXW2BB1IfHfvbN2bSnv/OE674Dnat4ReJgngA55/c5BVtkgP 8kxJpj9xx7J54tizWJQGn5OSaS5KoEr7Tc7vaTShL1NnX6MnnxO6M98sZC1ubqKi +69FqqnPEDh+Fhxo7LCa86xFTYzLqWrtbDhzQ8c3KbndGhLzDLiAV4KY8rTtbfDW j3Y4TqyiHhdB756YwIJ3nAOh+27JOzwFO0XKC42MT4hunC9a0HcPXsm/k1LX9kIH /JzHxhopC1rxYyrjV4cS8JC0ZNCPlhKuJzKkxctziwC/ZHT+Lqopyl9TldtBAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQULph3z3gYJcLRsxCFvwoDqwK3t0kwHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dhSkFuRDVQTktweEt4cTlkUUpHZjJuUU5KNU1wVG5xdzVQN2ExWFh4SGZHLzAv MzEzMzM4MmUzMjMxMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzMzM5MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorb3DANBgkqhkiG9w0BAQsFAAOCAQEAFyll 8w/RTNyjEeC6+8Hy38YUSjyeHhNEY9gQTauv3evH/OOc7Nnxnm2eW8pFtyC75u+p vCW3KLRWJmszu1dt79W+YhumnQR5gLhnk1xhhB0LnCaKq93tUZM12w293Vlhon2s SY3ZpmbO32H0eH1cEOylWZPy4d8IjwarneeQ6MFrY4/WM67SyhVKT+qmEsLmU8er wVDxpYOWvLVwmHzOSFuranNlWzKfGiwnpXHhea347HJq1iBRPAxnL4G17UmNqtDI vEeH9LPTL2otpspIijcMSTcJawxmtae/xyzOq8ge01FQOnpbGjTm6HltJBGsJcm+ 24UCo7aQn8+vPHd7Zg== -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:48 2025 by rpki-client