$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa File: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (raw, json) Hash identifier: 3hBRIGCUqb3DIjYAKZm9OcITGyCs0TuU0X+4zHfoRVQ= Subject key identifier: 4F:76:91:E1:A1:F2:66:5B:4E:C0:B8:FF:5B:A1:15:2F:E9:19:BD:49 Certificate issuer: /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Certificate serial: 27AAC4248F44469013F8D4909B4081A012AE773B Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa Signing time: Tue 02 Sep 2025 17:41:37 +0000 ROA not before: Tue 02 Sep 2025 17:36:37 +0000 ROA not after: Tue 01 Sep 2026 17:41:37 +0000 asID: 263963 IP address blocks: 170.246.168.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:aa:c4:24:8f:44:46:90:13:f8:d4:90:9b:40:81:a0:12:ae:77:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F Validity Not Before: Sep 2 17:36:37 2025 GMT Not After : Sep 1 17:41:37 2026 GMT Subject: CN=4F7691E1A1F2665B4EC0B8FF5BA1152FE919BD49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:83:37:8a:bd:ce:d3:62:2f:dc:35:84:08: 16:0e:d4:29:82:28:3c:23:36:f3:6c:86:1a:80:b5: 7a:46:cf:db:91:d1:e6:05:7b:7e:f6:0c:4a:d7:0a: 0e:51:e7:5a:cc:59:3f:92:c7:30:1b:54:4f:c1:8d: b6:c3:88:9a:0b:2c:a4:b9:40:f4:c8:85:1d:25:72: d5:47:f6:25:8d:aa:0a:28:4c:6d:28:05:12:cd:4c: c1:a0:fd:99:1d:cc:35:a6:f4:3a:22:06:01:e3:3d: 0c:d6:b1:0f:71:ae:ad:53:d5:a5:ff:53:65:80:b3: 15:c4:a7:a2:6b:95:09:09:49:5b:cf:09:b1:be:15: 3b:09:61:60:63:4f:32:35:0d:fa:fe:0e:eb:3f:fc: 7d:b5:e4:82:96:26:b0:c9:b0:a6:b8:90:b3:23:66: 81:de:dd:4c:8f:12:38:6c:73:3c:18:17:9e:08:44: 44:3b:bc:fc:de:b1:18:38:e9:b6:e6:4c:44:9b:42: 7e:f7:16:32:31:a4:18:ab:47:8e:13:56:8e:11:ff: 83:ed:25:0e:a4:f4:e2:ca:84:f3:2f:be:ab:51:16: 41:d3:73:4a:84:67:2f:12:58:4e:37:fe:ac:e2:f9: 3d:c6:c1:57:cd:1d:13:c4:cd:41:dd:c9:8a:f9:9e: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:91:E1:A1:F2:66:5B:4E:C0:B8:FF:5B:A1:15:2F:E9:19:BD:49 X509v3 Authority Key Identifier: keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.246.168.0/22 Signature Algorithm: sha256WithRSAEncryption 62:0f:62:58:c8:6a:8d:01:ab:ec:c8:e8:e6:fb:9b:4e:3f:1c: e8:29:3f:f7:b0:19:5c:f4:6f:09:67:ba:14:24:51:d9:dd:47: 60:37:3a:bd:99:51:d5:da:09:a5:10:9c:cc:fd:fe:8c:20:01: d4:e6:fa:6b:c2:1d:9e:02:bc:d7:2c:e6:93:39:a6:0b:24:99: 6d:5a:0a:d7:37:c7:9c:78:7e:74:70:8c:0b:e2:94:61:a9:a1: 21:8f:f6:9a:4c:cf:29:64:2e:c8:cd:40:d9:d8:75:7d:9f:b3: ff:91:6b:81:80:83:e6:8c:86:8c:08:6f:29:06:0d:8a:72:8d: 20:a1:81:1b:cb:23:e5:5a:60:17:a4:88:c4:4d:15:31:ee:a4: 2c:c5:2a:d8:a8:ba:50:d6:3c:d8:66:4d:66:6e:0f:54:7c:73: 52:64:11:4e:de:db:fd:d4:df:bd:7a:d5:14:18:43:93:1b:a0: 3c:41:6e:ef:2a:79:49:3c:fe:8a:af:fb:db:db:60:c6:4d:88: f7:71:4e:d8:ee:78:ad:74:6e:9c:be:66:40:45:1b:73:68:c8: 6e:ea:67:71:a2:16:82:39:78:8b:dd:c6:95:20:7f:c9:6a:0a: 2b:62:7f:84:9c:4a:4b:9f:cd:16:d9:66:50:09:c3:45:36:d1: f0:c7:13:66 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUJ6rEJI9ERpAT+NSQm0CBoBKudzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFBMjBEMDE3NkE4RTA5OTNFQjYzQzdGNTEwNzE2M0JC RTVEQkE4RjAeFw0yNTA5MDIxNzM2MzdaFw0yNjA5MDExNzQxMzdaMDMxMTAvBgNV BAMTKDRGNzY5MUUxQTFGMjY2NUI0RUMwQjhGRjVCQTExNTJGRTkxOUJENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMIM3ir3O02Iv3DWECBYO1CmC KDwjNvNshhqAtXpGz9uR0eYFe372DErXCg5R51rMWT+SxzAbVE/BjbbDiJoLLKS5 QPTIhR0lctVH9iWNqgooTG0oBRLNTMGg/ZkdzDWm9DoiBgHjPQzWsQ9xrq1T1aX/ U2WAsxXEp6JrlQkJSVvPCbG+FTsJYWBjTzI1Dfr+Dus//H215IKWJrDJsKa4kLMj ZoHe3UyPEjhsczwYF54IREQ7vPzesRg46bbmTESbQn73FjIxpBirR44TVo4R/4Pt JQ6k9OLKhPMvvqtRFkHTc0qEZy8SWE43/qzi+T3GwVfNHRPEzUHdyYr5nn7ZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUT3aR4aHyZltOwLj/W6EVL+kZvUkwHwYDVR0j BBgwFoAU+qINAXao4Jk+tjx/UQcWO75duo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FKQW5ENVBOS3B4S3hxOWRRSkdmMm5RTko1TXBUbnF3NVA3YTFYWHhI ZkcvMC9GQUEyMEQwMTc2QThFMDk5M0VCNjNDN0Y1MTA3MTYzQkJFNURCQThGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBQTIwRDAxNzZBOEUwOTkz RUI2M0M3RjUxMDcxNjNCQkU1REJBOEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dhSkFuRDVQTktweEt4cTlkUUpHZjJuUU5KNU1wVG5xdzVQN2ExWFh4SGZHLzAv MzEzNzMwMmUzMjM0MzYyZTMxMzYzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzMzM5MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr2qDANBgkqhkiG9w0BAQsFAAOCAQEAYg9i WMhqjQGr7Mjo5vubTj8c6Ck/97AZXPRvCWe6FCRR2d1HYDc6vZlR1doJpRCczP3+ jCAB1Ob6a8IdngK81yzmkzmmCySZbVoK1zfHnHh+dHCMC+KUYamhIY/2mkzPKWQu yM1A2dh1fZ+z/5FrgYCD5oyGjAhvKQYNinKNIKGBG8sj5VpgF6SIxE0VMe6kLMUq 2Ki6UNY82GZNZm4PVHxzUmQRTt7b/dTfvXrVFBhDkxugPEFu7yp5STz+iq/729tg xk2I93FO2O54rXRunL5mQEUbc2jIbupncaIWgjl4i93GlSB/yWoKK2J/hJxKS5/N FtlmUAnDRTbR8McTZg== -----END CERTIFICATE-----Generated at Tue Oct 21 01:30:41 2025 by rpki-client