$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3234203d3e203131393231.roa File: 3230302e3233332e36342e302f32302d3234203d3e203131393231.roa (raw, json) Hash identifier: t50qmUtu9eugrC+Bni41UcD6HNmvVR49VEU89hCguD8= Subject key identifier: C9:64:A0:0B:8B:A6:7B:B0:45:66:1A:92:09:F0:9D:6F:7B:3D:CF:C7 Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B Certificate serial: 4E227E8AA95FC7FE920AE70069FDEAC1B3227FF8 Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3234203d3e203131393231.roa Signing time: Tue 23 Sep 2025 19:32:47 +0000 ROA not before: Tue 23 Sep 2025 19:27:47 +0000 ROA not after: Tue 22 Sep 2026 19:32:47 +0000 asID: 11921 IP address blocks: 200.233.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:22:7e:8a:a9:5f:c7:fe:92:0a:e7:00:69:fd:ea:c1:b3:22:7f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B Validity Not Before: Sep 23 19:27:47 2025 GMT Not After : Sep 22 19:32:47 2026 GMT Subject: CN=C964A00B8BA67BB045661A9209F09D6F7B3DCFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:90:07:e8:b4:80:8b:ea:87:c4:f9:42:28: 1e:95:09:bc:7b:06:d2:89:32:04:a6:42:6b:db:52: c2:69:13:9f:b2:59:24:4f:ec:87:c6:c8:a6:cf:8a: 50:a3:49:55:ff:0d:aa:1e:e0:45:e9:1a:15:45:2f: 7f:3b:b2:af:63:ec:8e:cc:2c:24:43:44:fa:24:2f: a4:e2:00:2f:c1:50:9c:a3:1b:88:86:f4:80:43:1d: cb:d6:1e:e3:1e:48:e4:98:de:80:f5:c6:e5:b5:df: 7a:70:53:5e:43:b2:5d:29:87:f0:63:8d:f1:53:c2: 97:e6:7b:23:eb:11:bb:41:b3:ce:15:ad:3e:c2:6e: e0:c6:49:85:be:c9:d2:8e:20:0a:8c:cc:87:05:58: c2:f0:ca:20:bb:82:cf:1a:e1:29:6a:75:a0:0d:e7: c9:68:a3:00:8f:0f:64:9a:18:91:06:90:8f:2a:1a: ac:7c:dd:44:6a:dd:97:ba:9d:27:c8:51:18:d6:5c: 0b:3f:0d:19:89:76:84:e6:1d:f7:07:a9:ed:27:03: c6:09:f6:29:c0:8e:90:5c:a5:e5:79:51:c5:f7:9e: 46:df:a6:d0:b5:1a:14:5b:96:67:70:3a:da:ed:ef: 66:c5:02:ac:26:d9:da:b9:80:f8:aa:04:c7:aa:03: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:64:A0:0B:8B:A6:7B:B0:45:66:1A:92:09:F0:9D:6F:7B:3D:CF:C7 X509v3 Authority Key Identifier: keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32302d3234203d3e203131393231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.233.64.0/20 Signature Algorithm: sha256WithRSAEncryption 81:43:88:34:45:80:79:1b:ef:f5:44:9e:d6:37:f2:25:c3:79: 71:79:ad:c5:51:50:11:e7:27:1d:bb:33:1a:64:1f:4c:f1:18: 85:c1:11:b0:31:4b:d3:5d:4d:34:d3:1c:6f:c4:97:7c:11:02: 04:ec:b0:d1:1c:9d:91:cf:a7:9b:ac:49:26:6a:26:4e:3d:7c: 0a:b5:f4:22:65:13:c8:5f:11:2c:99:b4:8f:62:0c:de:ab:ba: 1e:b6:2d:b0:49:67:b8:7c:5a:42:d6:91:77:0c:b3:8c:f4:50: e6:b4:a0:a5:54:35:71:81:b8:63:fa:d5:d3:de:c2:97:94:2a: 43:13:a7:80:6d:d6:18:64:29:e3:e1:c1:ae:ff:17:5f:0e:7b: 97:af:51:43:42:47:c5:63:5c:06:5e:89:ed:e7:2a:65:02:09: 90:2e:52:28:cd:30:99:30:4d:0a:44:18:11:32:62:69:f5:d2: d0:04:ff:c0:44:50:2d:75:65:ef:2a:0a:85:e8:fd:7c:8c:0c: 2b:5a:13:a2:cf:e2:a1:18:e1:fd:35:e1:ef:ce:99:ed:99:be: 3f:c2:c0:79:ee:21:71:1c:aa:23:1d:45:58:a6:47:e7:64:96: ea:db:ef:31:ae:41:f5:bd:bc:ae:a8:45:8e:32:12:63:8b:f5: b2:80:f4:57 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUTiJ+iqlfx/6SCucAaf3qwbMif/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG QzU5MEMwQjAeFw0yNTA5MjMxOTI3NDdaFw0yNjA5MjIxOTMyNDdaMDMxMTAvBgNV BAMTKEM5NjRBMDBCOEJBNjdCQjA0NTY2MUE5MjA5RjA5RDZGN0IzRENGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jZAH6LSAi+qHxPlCKB6VCbx7 BtKJMgSmQmvbUsJpE5+yWSRP7IfGyKbPilCjSVX/Daoe4EXpGhVFL387sq9j7I7M LCRDRPokL6TiAC/BUJyjG4iG9IBDHcvWHuMeSOSY3oD1xuW133pwU15Dsl0ph/Bj jfFTwpfmeyPrEbtBs84VrT7CbuDGSYW+ydKOIAqMzIcFWMLwyiC7gs8a4SlqdaAN 58loowCPD2SaGJEGkI8qGqx83URq3Ze6nSfIURjWXAs/DRmJdoTmHfcHqe0nA8YJ 9inAjpBcpeV5UcX3nkbfptC1GhRblmdwOtrt72bFAqwm2dq5gPiqBMeqA+qNAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUyWSgC4ume7BFZhqSCfCdb3s9z8cwHwYDVR0j BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2 cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv MzIzMDMwMmUzMjMzMzMyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTMx MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEyOlAMA0GCSqGSIb3DQEBCwUAA4IBAQCBQ4g0RYB5 G+/1RJ7WN/Ilw3lxea3FUVAR5ycduzMaZB9M8RiFwRGwMUvTXU000xxvxJd8EQIE 7LDRHJ2Rz6ebrEkmaiZOPXwKtfQiZRPIXxEsmbSPYgzeq7oeti2wSWe4fFpC1pF3 DLOM9FDmtKClVDVxgbhj+tXT3sKXlCpDE6eAbdYYZCnj4cGu/xdfDnuXr1FDQkfF Y1wGXont5yplAgmQLlIozTCZME0KRBgRMmJp9dLQBP/ARFAtdWXvKgqF6P18jAwr WhOiz+KhGOH9NeHvzpntmb4/wsB57iFxHKojHUVYpkfnZJbq2+8xrkH1vbyuqEWO MhJji/WygPRX -----END CERTIFICATE-----Generated at Tue Oct 21 00:50:37 2025 by rpki-client