$ rpki-client -vvf rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa File: 3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa (raw, json) Hash identifier: xW+amYkFbPDiKQQVHorKWfHVMQbGzYgumLX8RQ0OCdE= Subject key identifier: 00:72:39:8E:12:26:DB:82:02:F8:E6:21:A5:3B:8C:4F:C4:74:F4:2D Certificate issuer: /CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97 Certificate serial: 32973E95BD523184010ACAE696A973352DE9BD0B Authority key identifier: 4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer Subject info access: rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa Signing time: Thu 07 Aug 2025 03:44:22 +0000 ROA not before: Thu 07 Aug 2025 03:39:22 +0000 ROA not after: Thu 06 Aug 2026 03:44:22 +0000 asID: 262448 IP address blocks: 138.118.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:97:3e:95:bd:52:31:84:01:0a:ca:e6:96:a9:73:35:2d:e9:bd:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F10D220B7D557A965AE8B26DDEB1BDDB166AE97 Validity Not Before: Aug 7 03:39:22 2025 GMT Not After : Aug 6 03:44:22 2026 GMT Subject: CN=0072398E1226DB8202F8E621A53B8C4FC474F42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:6e:b0:f8:69:c1:f9:37:8d:26:12:c6:29: ca:12:8c:33:e3:4a:db:97:87:a0:43:a2:a8:63:f2: da:01:4d:1f:3d:da:0c:6b:b3:81:48:2f:eb:fd:5f: 15:59:ae:cb:88:91:22:08:aa:f9:24:18:b5:f2:be: 88:53:bf:f9:2e:7d:59:e1:e2:2e:1c:d5:21:7f:cc: e2:8f:6b:ff:1b:af:d4:6d:3a:95:4d:75:65:4c:f4: 94:e2:7e:0d:e1:3f:40:92:a6:fc:79:cf:96:7d:0d: 85:cd:1a:ed:59:d6:96:32:5c:4e:4f:cc:20:a7:81: 45:4d:30:d7:16:51:60:2a:c7:8c:6e:17:32:dd:ff: 02:8e:82:a1:b2:76:2d:ed:8a:90:f8:e9:d6:56:62: 10:8c:3e:49:eb:06:e9:7a:13:66:ee:3f:2e:ec:63: 9f:95:fa:41:c0:7f:e4:4d:92:87:de:be:91:85:50: bd:28:96:e7:84:52:82:9a:1f:96:36:40:1f:02:4f: 63:f1:33:b8:8d:aa:c8:84:fd:e8:21:69:05:5b:16: ec:1e:c8:4b:ba:c2:f9:e2:9c:aa:8e:6a:9a:c5:c1: df:a6:35:33:bb:63:dd:61:f3:b2:54:47:86:79:fc: 90:a5:d9:ce:0d:ca:cc:b2:b6:00:a5:96:91:ec:c1: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:72:39:8E:12:26:DB:82:02:F8:E6:21:A5:3B:8C:4F:C4:74:F4:2D X509v3 Authority Key Identifier: keyid:4F:10:D2:20:B7:D5:57:A9:65:AE:8B:26:DD:EB:1B:DD:B1:66:AE:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F10D220B7D557A965AE8B26DDEB1BDDB166AE97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvPaMEfPW8YuYzGLV1MtuSwp5L4JHnsqbZgW4oEZJMRM/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.172.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a5:dc:25:af:04:f5:39:b4:c2:e0:f4:53:44:b7:66:9d:57: 58:bb:61:ae:1e:b0:79:54:ca:25:5e:bd:dc:7a:81:1b:b0:b3: 53:56:e2:3f:7d:ce:9d:80:cd:55:f6:09:51:a5:4f:7e:b3:77: 49:05:53:af:41:34:f9:82:91:e7:f2:8d:f5:d2:38:c8:38:b4: e3:6d:65:f6:11:be:f0:b8:62:31:10:42:51:a1:ba:d3:5a:4c: 1b:a2:58:6b:9c:f7:53:1e:3f:55:e9:e3:c9:0e:df:64:7d:4d: ed:4a:c3:9c:85:f1:ea:e9:73:fa:d0:a9:da:08:df:8e:b4:ec: e8:4f:c2:2e:0f:27:5b:71:6f:4f:d8:35:26:a3:4e:c0:6b:ea: e5:b2:b9:16:8e:57:18:c0:be:7a:23:dc:6a:b7:44:98:a4:ff: a6:3e:1f:42:51:9b:e4:20:ca:f4:40:52:51:4a:13:b4:0d:0a: 17:ca:cb:6e:81:7d:38:a7:5d:6d:d5:97:50:af:70:db:a5:a9: 07:5a:2f:f6:16:ac:fa:65:90:cf:04:78:6e:64:82:90:27:da: 86:90:af:bf:10:73:52:c9:0e:75:b3:11:7f:d5:00:1d:b0:64: 58:b6:87:23:8b:d7:16:d0:64:57:24:0b:bd:f0:86:de:db:90: b6:19:c8:58 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUMpc+lb1SMYQBCsrmlqlzNS3pvQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYxMEQyMjBCN0Q1NTdBOTY1QUU4QjI2RERFQjFCRERC MTY2QUU5NzAeFw0yNTA4MDcwMzM5MjJaFw0yNjA4MDYwMzQ0MjJaMDMxMTAvBgNV BAMTKDAwNzIzOThFMTIyNkRCODIwMkY4RTYyMUE1M0I4QzRGQzQ3NEY0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4p26w+GnB+TeNJhLGKcoSjDPj StuXh6BDoqhj8toBTR892gxrs4FIL+v9XxVZrsuIkSIIqvkkGLXyvohTv/kufVnh 4i4c1SF/zOKPa/8br9RtOpVNdWVM9JTifg3hP0CSpvx5z5Z9DYXNGu1Z1pYyXE5P zCCngUVNMNcWUWAqx4xuFzLd/wKOgqGydi3tipD46dZWYhCMPknrBul6E2buPy7s Y5+V+kHAf+RNkofevpGFUL0olueEUoKaH5Y2QB8CT2PxM7iNqsiE/eghaQVbFuwe yEu6wvninKqOaprFwd+mNTO7Y91h87JUR4Z5/JCl2c4NysyytgCllpHswZ+FAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUAHI5jhIm24IC+OYhpTuMT8R09C0wHwYDVR0j BBgwFoAUTxDSILfVV6llrosm3esb3bFmrpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3ZQYU1FZlBXOFl1WXpHTFYxTXR1U3dwNUw0Skhuc3FiWmdXNG9FWkpN Uk0vMC80RjEwRDIyMEI3RDU1N0E5NjVBRThCMjZEREVCMUJEREIxNjZBRTk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMTBEMjIwQjdENTU3QTk2 NUFFOEIyNkRERUIxQkREQjE2NkFFOTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d2UGFNRWZQVzhZdVl6R0xWMU10dVN3cDVMNEpIbnNxYlpnVzRvRVpKTVJNLzAv MzEzMzM4MmUzMTMxMzgyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2rDANBgkqhkiG9w0BAQsFAAOCAQEANKXc Ja8E9Tm0wuD0U0S3Zp1XWLthrh6weVTKJV693HqBG7CzU1biP33OnYDNVfYJUaVP frN3SQVTr0E0+YKR5/KN9dI4yDi0421l9hG+8LhiMRBCUaG601pMG6JYa5z3Ux4/ VenjyQ7fZH1N7UrDnIXx6ulz+tCp2gjfjrTs6E/CLg8nW3FvT9g1JqNOwGvq5bK5 Fo5XGMC+eiPcardEmKT/pj4fQlGb5CDK9EBSUUoTtA0KF8rLboF9OKddbdWXUK9w 26WpB1ov9has+mWQzwR4bmSCkCfahpCvvxBzUskOdbMRf9UAHbBkWLaHI4vXFtBk VyQLvfCG3tuQthnIWA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:25 2025 by rpki-client