$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32322d3232203d3e20323632343438.roa File: 3133382e3131382e3137322e302f32322d3232203d3e20323632343438.roa (raw, json) Hash identifier: bY+iM8f5fnQ1feQxpVFDwGgvdym6OZCtDKPxjLUlY1Q= Subject key identifier: F2:25:04:AE:2D:9E:58:90:96:DF:8F:DB:00:25:4D:DF:44:36:18:FB Certificate issuer: /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97 Certificate serial: 42701F82B852CF21109F932B82E8D1EC13972E0C Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer Subject info access: rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32322d3232203d3e20323632343438.roa Signing time: Thu 07 Aug 2025 03:44:17 +0000 ROA not before: Thu 07 Aug 2025 03:39:17 +0000 ROA not after: Thu 06 Aug 2026 03:44:17 +0000 asID: 262448 IP address blocks: 138.118.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 22:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:70:1f:82:b8:52:cf:21:10:9f:93:2b:82:e8:d1:ec:13:97:2e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97 Validity Not Before: Aug 7 03:39:17 2025 GMT Not After : Aug 6 03:44:17 2026 GMT Subject: CN=F22504AE2D9E589096DF8FDB00254DDF443618FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:f9:94:17:63:a3:39:96:71:c5:fc:1f:90: e4:e6:14:03:5d:bc:b7:dc:48:a9:39:1d:2c:2a:48: 2f:ac:03:73:ce:94:56:bb:90:15:41:fc:6f:13:22: 06:60:41:55:93:44:32:ce:9a:48:37:24:11:3d:18: 8a:b7:13:00:5f:d1:9d:7c:16:15:6c:01:9b:41:3d: 32:60:9a:49:f5:51:23:92:75:90:5f:2e:8d:9f:d1: 7f:10:12:99:d0:10:8a:be:ff:ef:c8:08:2e:81:4d: 05:df:b1:d8:b6:93:ff:b6:17:38:57:2e:dc:a2:51: cf:f5:05:02:b3:f0:cb:88:be:df:33:93:8e:3c:d8: 90:99:93:e5:5c:b8:d4:3d:18:77:1c:b0:26:6e:9b: d2:38:7d:f1:55:5d:6d:77:d4:62:01:b3:97:e4:d3: fb:05:88:ee:93:6d:b4:60:8f:41:fd:7d:b7:ad:c0: 07:3c:da:1d:5f:76:e7:81:bf:73:3f:b5:15:23:cd: 97:31:cc:44:fd:39:92:47:30:4c:12:3e:77:36:78: bc:91:6c:92:50:31:99:ba:99:87:e7:3e:e1:06:e2: f9:44:21:12:18:8d:da:8e:db:bf:67:5c:3d:25:eb: e5:e4:b4:16:f0:02:77:d0:5f:37:ae:75:96:b8:6a: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:04:AE:2D:9E:58:90:96:DF:8F:DB:00:25:4D:DF:44:36:18:FB X509v3 Authority Key Identifier: keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32322d3232203d3e20323632343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.172.0/22 Signature Algorithm: sha256WithRSAEncryption a7:30:72:a0:3f:19:0f:ba:51:ef:5d:76:17:35:50:1a:3c:f7: 7e:a6:7c:39:d6:aa:30:8f:c1:f0:62:f9:20:99:4a:11:7e:f5: 2e:e6:af:ce:1d:b5:51:57:d6:92:08:64:31:d3:7e:73:a9:63: 0d:d3:5f:b7:f8:8a:c3:0a:0b:0c:16:bb:ad:e9:a2:00:be:e9: bf:00:26:d5:9c:19:56:d0:a0:3b:3d:bc:50:72:7d:3d:89:d6: f7:e4:6e:0f:33:35:0c:ee:b2:0b:59:ae:6b:da:61:a5:28:82: 50:5a:56:76:dd:b0:f4:45:d4:e2:42:2a:11:be:9e:8d:74:c5: df:b3:f2:86:73:3c:aa:d4:cc:37:f6:6e:d7:ac:de:9f:ca:25: f1:fa:b5:98:a3:4d:56:45:bf:4a:45:f2:38:7b:12:d4:38:22: c7:7b:bd:5b:c4:2b:23:bb:01:2a:7e:24:b2:01:be:ae:4f:1f: 25:3d:80:75:05:f3:c2:a8:23:9e:c2:ef:e8:82:7f:2d:fd:37: 23:f5:68:f5:f3:41:59:71:61:d8:72:64:9c:33:35:67:2a:9e: 16:b1:40:d3:3b:e8:f7:f3:bf:5b:27:6a:8b:71:d0:08:e9:bc: d6:30:17:07:4a:a6:1f:66:4b:c7:fa:68:ec:62:99:e3:71:86: d1:f1:49:39 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQnAfgrhSzyEQn5MrgujR7BOXLgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC MTY2QUU5NzAeFw0yNTA4MDcwMzM5MTdaFw0yNjA4MDYwMzQ0MTdaMDMxMTAvBgNV BAMTKEYyMjUwNEFFMkQ5RTU4OTA5NkRGOEZEQjAwMjU0RERGNDQzNjE4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5/mUF2OjOZZxxfwfkOTmFANd vLfcSKk5HSwqSC+sA3POlFa7kBVB/G8TIgZgQVWTRDLOmkg3JBE9GIq3EwBf0Z18 FhVsAZtBPTJgmkn1USOSdZBfLo2f0X8QEpnQEIq+/+/ICC6BTQXfsdi2k/+2FzhX LtyiUc/1BQKz8MuIvt8zk4482JCZk+VcuNQ9GHccsCZum9I4ffFVXW131GIBs5fk 0/sFiO6TbbRgj0H9fbetwAc82h1fdueBv3M/tRUjzZcxzET9OZJHMEwSPnc2eLyR bJJQMZm6mYfnPuEG4vlEIRIYjdqO279nXD0l6+XktBbwAnfQXzeudZa4aiTDAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU8iUEri2eWJCW34/bACVN30Q2GPswHwYDVR0j BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2 NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv MzEzMzM4MmUzMTMxMzgyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2rDANBgkqhkiG9w0BAQsFAAOCAQEApzBy oD8ZD7pR7112FzVQGjz3fqZ8OdaqMI/B8GL5IJlKEX71Luavzh21UVfWkghkMdN+ c6ljDdNft/iKwwoLDBa7remiAL7pvwAm1ZwZVtCgOz28UHJ9PYnW9+RuDzM1DO6y C1mua9phpSiCUFpWdt2w9EXU4kIqEb6ejXTF37PyhnM8qtTMN/Zu16zen8ol8fq1 mKNNVkW/SkXyOHsS1Dgix3u9W8QrI7sBKn4ksgG+rk8fJT2AdQXzwqgjnsLv6IJ/ Lf03I/Vo9fNBWXFh2HJknDM1ZyqeFrFA0zvo9/O/Wydqi3HQCOm81jAXB0qmH2ZL x/po7GKZ43GG0fFJOQ== -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:41 2025 by rpki-client