$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa File: 3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (raw, json) Hash identifier: RTeDdlDDGbKb6QV/Wn8L4QCyiHo/okFCJ8OTUYfFUTQ= Subject key identifier: 9D:66:A5:3B:D1:7D:69:64:10:48:37:64:15:DA:37:20:89:95:B9:63 Certificate issuer: /CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F Certificate serial: 119FFBCD79CCFC2DADD582446A1C031F8B98C164 Authority key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa Signing time: Fri 05 Sep 2025 17:21:30 +0000 ROA not before: Fri 05 Sep 2025 17:16:30 +0000 ROA not after: Fri 04 Sep 2026 17:21:30 +0000 asID: 265419 IP address blocks: 168.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9f:fb:cd:79:cc:fc:2d:ad:d5:82:44:6a:1c:03:1f:8b:98:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F Validity Not Before: Sep 5 17:16:30 2025 GMT Not After : Sep 4 17:21:30 2026 GMT Subject: CN=9D66A53BD17D69641048376415DA37208995B963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:e8:19:db:cb:71:d5:d0:a7:29:c8:3a:0c: 9f:a5:c0:c9:71:69:67:b7:54:b8:3f:1b:30:02:f0: 98:ae:8b:5a:00:85:27:5a:a1:f8:4b:fe:0c:0b:a7: 8d:53:0f:c4:bb:7b:33:d8:75:06:6e:5f:56:68:02: be:5b:1a:cc:ed:5c:05:ea:e6:d6:49:9f:b6:0a:03: c4:9c:a2:51:4c:3a:87:b5:73:1a:46:2b:1f:59:43: dc:b0:ff:e2:53:97:96:cb:52:cc:e7:3a:45:c3:94: 52:80:0e:c9:8e:ef:8b:d5:6c:ba:16:f4:08:80:3b: f1:b6:6c:af:88:55:b0:41:04:13:a8:25:54:6e:6a: 11:eb:0a:24:8f:af:2e:6a:bd:1d:3f:34:3d:df:eb: 8f:c8:33:7b:c3:57:00:e9:95:df:b6:33:e6:ff:ba: a0:6b:c2:45:df:7d:eb:f1:29:14:7a:f3:15:3f:5b: 78:25:16:ef:45:e8:d4:c8:01:c3:13:4a:77:82:b0: d3:cf:0b:b2:f8:a4:9a:37:6d:01:78:ad:46:1f:9e: 52:70:66:07:8c:38:f4:e4:d7:b7:ec:87:1c:1a:92: a3:34:a3:64:f9:4a:c8:91:c0:e9:84:d1:ee:97:c6: cf:34:2f:f3:54:8a:23:8e:49:d7:61:20:33:bf:51: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:A5:3B:D1:7D:69:64:10:48:37:64:15:DA:37:20:89:95:B9:63 X509v3 Authority Key Identifier: keyid:09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.23.0/24 Signature Algorithm: sha256WithRSAEncryption 53:bc:8e:bf:83:ea:98:b4:df:c5:c5:28:af:00:ab:b3:ea:a7: 1a:b2:85:69:40:b1:f4:27:fa:8d:dc:83:ac:b9:76:89:d5:ad: 09:e9:db:a7:93:0b:ca:a9:fa:95:97:10:86:da:b5:cc:96:be: 28:62:2b:b6:da:2f:e5:95:31:3a:03:4b:df:0c:97:03:ff:d5: a5:be:bc:cb:6d:ad:85:94:1f:50:15:fc:e8:ed:1d:0a:95:75: bc:77:b3:7b:36:e1:59:e8:8b:86:40:0b:e6:78:47:68:11:a1: a0:4c:07:aa:d0:89:af:07:f0:66:41:85:37:f1:c9:f3:7a:ef: b1:70:74:c9:01:07:7f:38:77:86:8e:10:4f:6e:14:a0:56:92: 5d:76:d3:4a:77:b9:27:56:53:cd:99:a2:c7:dc:b3:fc:9b:33: 02:e5:4b:fb:fd:20:6a:cb:32:b3:8a:db:7f:5b:aa:3b:5e:ad: 00:30:30:8f:c9:e2:62:a4:24:06:26:0c:be:8f:64:a1:10:30: 3b:4a:0c:6d:d5:bf:d5:58:68:69:2c:5d:a0:83:09:6c:aa:05: 17:11:1a:5c:f0:d2:37:d9:4f:8c:c2:cd:30:09:b7:1e:38:7b: af:45:12:58:a3:48:0f:c4:6a:e5:24:e6:46:cb:b4:d4:90:80: aa:57:d5:69 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEZ/7zXnM/C2t1YJEahwDH4uYwWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGQUY3RkMyMDYxMjI0QzM3RDdDQTE2RTcxODRFNUJF M0YxMjc5RjAeFw0yNTA5MDUxNzE2MzBaFw0yNjA5MDQxNzIxMzBaMDMxMTAvBgNV BAMTKDlENjZBNTNCRDE3RDY5NjQxMDQ4Mzc2NDE1REEzNzIwODk5NUI5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtugZ28tx1dCnKcg6DJ+lwMlx aWe3VLg/GzAC8Jiui1oAhSdaofhL/gwLp41TD8S7ezPYdQZuX1ZoAr5bGsztXAXq 5tZJn7YKA8ScolFMOoe1cxpGKx9ZQ9yw/+JTl5bLUsznOkXDlFKADsmO74vVbLoW 9AiAO/G2bK+IVbBBBBOoJVRuahHrCiSPry5qvR0/ND3f64/IM3vDVwDpld+2M+b/ uqBrwkXffevxKRR68xU/W3glFu9F6NTIAcMTSneCsNPPC7L4pJo3bQF4rUYfnlJw ZgeMOPTk17fshxwakqM0o2T5SsiRwOmE0e6Xxs80L/NUiiOOSddhIDO/UQQFAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUnWalO9F9aWQQSDdkFdo3IImVuWMwHwYDVR0j BBgwFoAUCfr3/CBhIkw318oW5xhOW+PxJ58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry OGMvMC8wOUZBRjdGQzIwNjEyMjRDMzdEN0NBMTZFNzE4NEU1QkUzRjEyNzlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RkFGN0ZDMjA2MTIyNEMz N0Q3Q0ExNkU3MTg0RTVCRTNGMTI3OUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv MzEzNjM4MmUzMTM5MzUyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzUzNDMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACowxcwDQYJKoZIhvcNAQELBQADggEBAFO8jr+D 6pi038XFKK8Aq7PqpxqyhWlAsfQn+o3cg6y5donVrQnp26eTC8qp+pWXEIbatcyW vihiK7baL+WVMToDS98MlwP/1aW+vMttrYWUH1AV/OjtHQqVdbx3s3s24Vnoi4ZA C+Z4R2gRoaBMB6rQia8H8GZBhTfxyfN677FwdMkBB384d4aOEE9uFKBWkl1200p3 uSdWU82Zosfcs/ybMwLlS/v9IGrLMrOK239bqjterQAwMI/J4mKkJAYmDL6PZKEQ MDtKDG3Vv9VYaGksXaCDCWyqBRcRGlzw0jfZT4zCzTAJtx44e69FElijSA/EauUk 5kbLtNSQgKpX1Wk= -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:25 2025 by rpki-client