$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa File: 3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa (raw, json) Hash identifier: 4eFxtmgFs2H4YEjT/Yny205/SdOrx5pN9CXDseNGF8c= Subject key identifier: 59:B8:BB:ED:8D:62:CB:E2:A9:2E:33:6B:D8:1D:A1:BE:E2:0E:43:53 Certificate issuer: /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Certificate serial: 0CD637CCDE3D6D74AEBBC7E1575A68D11C892B56 Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa Signing time: Mon 07 Jul 2025 15:19:50 +0000 ROA not before: Mon 07 Jul 2025 15:14:50 +0000 ROA not after: Mon 06 Jul 2026 15:19:50 +0000 asID: 264425 IP address blocks: 131.221.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 21:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:37:cc:de:3d:6d:74:ae:bb:c7:e1:57:5a:68:d1:1c:89:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Validity Not Before: Jul 7 15:14:50 2025 GMT Not After : Jul 6 15:19:50 2026 GMT Subject: CN=59B8BBED8D62CBE2A92E336BD81DA1BEE20E4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:c8:d1:34:29:77:92:9b:de:72:ca:09:ac: a0:f6:45:04:50:df:e8:5b:01:30:b7:de:ac:0b:a3: 64:a3:8c:23:20:9d:88:7b:d3:2b:43:7c:42:b6:ad: 52:f5:30:b6:a6:af:dd:17:7d:80:34:45:79:1a:49: e8:14:58:5c:01:7e:88:43:ea:1e:a2:02:f5:e8:a1: 83:a6:28:2e:14:40:8c:08:f9:b8:7e:16:34:dd:78: 9b:11:9f:89:84:ea:80:82:c5:98:27:45:2a:a7:da: e9:5b:ef:bb:33:bb:b5:44:bf:57:64:10:6b:b1:39: 26:c6:5b:2e:94:7d:f8:f1:07:e0:48:e9:14:93:06: 19:97:2c:ee:7b:7a:42:35:4a:1d:03:b2:46:9c:bd: 28:87:3f:7e:3a:3a:38:06:9a:be:b9:33:37:8f:95: 64:a6:e5:6d:d4:d5:c7:bc:53:1e:37:bb:48:09:fc: 29:0a:3d:a9:bf:d9:d0:5d:0e:b6:05:6d:47:31:96: 15:54:47:e0:62:40:d6:aa:9a:d4:56:d7:fa:32:5e: 1f:f7:4f:a6:c5:06:09:bf:c7:e4:e8:93:c4:c7:16: 2d:16:15:04:ce:e6:72:7f:98:d0:66:f0:c5:2b:7e: e6:6f:6b:3b:eb:5b:6b:2e:d2:36:bf:11:5a:2b:24: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B8:BB:ED:8D:62:CB:E2:A9:2E:33:6B:D8:1D:A1:BE:E2:0E:43:53 X509v3 Authority Key Identifier: keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32332d3233203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.186.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:7b:c8:88:30:dd:03:31:22:ab:cd:11:32:a7:41:e2:b7:8f: fa:3f:16:85:f7:47:b8:90:e3:d2:72:af:41:d1:5c:14:16:58: e5:9c:ba:a6:eb:c2:40:88:81:64:30:37:f8:e1:7c:83:0f:dc: 5f:74:dd:76:47:01:f5:9a:fc:5f:37:b8:3c:af:7c:82:41:5f: b9:93:f7:f3:51:7d:07:34:0c:ca:fe:44:28:1d:27:dc:22:b2: 67:41:d8:3c:5f:e8:9b:d2:3a:74:78:e8:60:ae:21:56:5f:ca: b7:ec:0a:8a:31:8c:47:60:39:e0:00:b9:39:e9:a1:f9:ca:44: 3a:6b:bc:0e:c7:d7:c8:f2:14:90:0b:5c:a5:63:53:e8:46:84: 99:03:93:49:37:06:99:41:0e:7f:f9:1b:ff:42:93:ec:7f:19: 96:44:92:c7:56:ee:6b:58:f8:fe:b1:10:06:f0:37:6d:43:c5: b3:28:d1:8e:6d:70:7a:98:9e:94:62:f1:23:e9:2b:91:71:50: 0f:d2:be:5c:5a:06:24:22:8a:0a:0f:e4:ad:e4:42:2e:33:df: 8b:87:b8:92:3e:f6:c3:7b:af:ff:6c:f2:f9:0d:be:00:53:34: d2:d0:66:d6:1c:3b:c6:65:a3:29:6d:bd:30:4e:8b:27:e4:bd: 37:d8:13:a2 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUDNY3zN49bXSuu8fhV1po0RyJK1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4 REM5NEE5RjAeFw0yNTA3MDcxNTE0NTBaFw0yNjA3MDYxNTE5NTBaMDMxMTAvBgNV BAMTKDU5QjhCQkVEOEQ2MkNCRTJBOTJFMzM2QkQ4MURBMUJFRTIwRTQzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXcjRNCl3kpvecsoJrKD2RQRQ 3+hbATC33qwLo2SjjCMgnYh70ytDfEK2rVL1MLamr90XfYA0RXkaSegUWFwBfohD 6h6iAvXooYOmKC4UQIwI+bh+FjTdeJsRn4mE6oCCxZgnRSqn2ulb77szu7VEv1dk EGuxOSbGWy6UffjxB+BI6RSTBhmXLO57ekI1Sh0DskacvSiHP346OjgGmr65MzeP lWSm5W3U1ce8Ux43u0gJ/CkKPam/2dBdDrYFbUcxlhVUR+BiQNaqmtRW1/oyXh/3 T6bFBgm/x+Tok8THFi0WFQTO5nJ/mNBm8MUrfuZvazvrW2su0ja/EVorJNw5AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUWbi77Y1iy+KpLjNr2B2hvuIOQ1MwHwYDVR0j BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1 NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzEzMzMxMmUzMjMyMzEyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYPdujANBgkqhkiG9w0BAQsFAAOCAQEAPXvI iDDdAzEiq80RMqdB4reP+j8WhfdHuJDj0nKvQdFcFBZY5Zy6puvCQIiBZDA3+OF8 gw/cX3TddkcB9Zr8Xze4PK98gkFfuZP381F9BzQMyv5EKB0n3CKyZ0HYPF/om9I6 dHjoYK4hVl/Kt+wKijGMR2A54AC5Oemh+cpEOmu8DsfXyPIUkAtcpWNT6EaEmQOT STcGmUEOf/kb/0KT7H8ZlkSSx1bua1j4/rEQBvA3bUPFsyjRjm1wepielGLxI+kr kXFQD9K+XFoGJCKKCg/kreRCLjPfi4e4kj72w3uv/2zy+Q2+AFM00tBm1hw7xmWj KW29ME6LJ+S9N9gTog== -----END CERTIFICATE-----Generated at Fri Jul 25 00:26:00 2025 by rpki-client