$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa File: 3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa (raw, json) Hash identifier: ZG9o6r6Ida/Cnu7DoOSMBuVXqjjoiS5DyYZm5u0pbpU= Subject key identifier: D1:7A:96:0C:C8:63:E3:AF:B1:48:07:24:BE:C0:14:AC:E2:1F:A2:76 Certificate issuer: /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Certificate serial: 3D1E9D7B80BDDBD90976EF0C10CEDB839EB5EF6D Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa Signing time: Wed 24 Sep 2025 01:44:45 +0000 ROA not before: Wed 24 Sep 2025 01:39:45 +0000 ROA not after: Wed 23 Sep 2026 01:44:45 +0000 asID: 262448 IP address blocks: 138.118.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Oct 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1e:9d:7b:80:bd:db:d9:09:76:ef:0c:10:ce:db:83:9e:b5:ef:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Validity Not Before: Sep 24 01:39:45 2025 GMT Not After : Sep 23 01:44:45 2026 GMT Subject: CN=D17A960CC863E3AFB1480724BEC014ACE21FA276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:a6:60:05:b9:76:8f:06:b1:fb:8a:a1:58: a1:17:cc:dc:df:db:ab:2c:d4:7a:19:2f:7a:1e:3d: dc:31:5e:50:bf:70:19:7c:94:95:c1:9a:4d:58:a6: 99:05:73:ed:ce:e0:f8:fb:86:da:66:1f:ff:f9:41: 33:db:c8:55:bc:43:ca:04:d4:cd:f0:5d:55:eb:5b: ad:61:d1:57:53:b1:65:a3:1d:86:73:95:77:79:8d: 9b:1f:0a:e9:50:e3:30:a9:a6:33:6e:a3:7b:9b:0c: 40:0b:4c:b8:8d:71:79:0c:27:83:73:cf:12:6a:ca: c2:fc:3d:a6:0d:5f:05:60:42:9f:c3:a2:b6:29:f8: 9e:9b:80:73:a7:b4:22:0d:a7:4c:2a:9f:f9:01:95: dd:c3:82:4b:a8:ac:da:ec:da:0e:3a:3a:08:51:53: de:f5:e7:74:a0:93:33:15:93:ce:04:d9:c3:91:5d: a1:b1:3c:84:55:c2:66:48:0d:b7:6e:d8:49:65:2a: d2:2d:4b:0c:f7:ad:45:26:ef:25:33:aa:13:9a:03: a6:a6:0c:fd:67:51:94:af:c2:9e:48:69:b6:35:90: 8f:37:53:cf:a3:3b:09:3b:fd:3e:c2:31:3e:3a:c1: 59:12:2d:f2:43:a2:07:16:60:50:c3:ca:b2:a5:92: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7A:96:0C:C8:63:E3:AF:B1:48:07:24:BE:C0:14:AC:E2:1F:A2:76 X509v3 Authority Key Identifier: keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137322e302f32342d3234203d3e20323632343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.172.0/24 Signature Algorithm: sha256WithRSAEncryption 86:7d:1c:8f:eb:89:d0:63:64:76:de:1f:05:ba:f2:ac:b9:8a: 4b:b3:80:21:c3:d6:35:6c:ea:5e:f0:ca:e2:34:aa:d5:cc:a8: d1:84:1e:13:81:ad:d6:65:ff:43:a4:57:b4:c5:2f:a7:7e:86: 5b:97:b4:fc:0c:31:fb:50:3e:67:a1:33:eb:5d:6e:82:a1:ea: dc:fe:2e:95:a7:19:b6:79:a7:c8:3e:ae:5d:21:19:c6:f1:34: 25:30:9e:8f:df:e9:6b:43:50:e7:7c:7c:dd:8e:53:44:f1:fc: f4:3a:79:bf:65:52:4c:3c:13:50:92:3e:98:6c:31:8f:db:4a: d4:58:42:9c:59:0b:40:03:9a:b8:40:2b:06:51:3e:fc:92:90: dd:ab:a2:33:8c:2e:b4:37:5e:63:c5:e4:74:31:f5:ee:6b:e2: df:10:04:8d:27:cb:c2:1e:0d:80:63:cf:61:e7:39:c4:89:a3: 69:ea:a2:41:fb:1e:eb:53:b8:4c:dc:fd:36:0f:9a:f7:4c:25: 41:45:b6:82:98:94:8a:f3:d5:76:04:7a:40:34:ca:a6:95:c8: 52:5c:47:40:77:b6:86:e9:b9:4f:61:54:c7:f4:72:91:f2:a9: f9:1a:d1:70:99:05:d6:7d:13:fb:15:fe:c5:a3:e1:db:88:20: 8e:40:04:46 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUPR6de4C929kJdu8MEM7bg561720wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBB OEU3MEJDMTAeFw0yNTA5MjQwMTM5NDVaFw0yNjA5MjMwMTQ0NDVaMDMxMTAvBgNV BAMTKEQxN0E5NjBDQzg2M0UzQUZCMTQ4MDcyNEJFQzAxNEFDRTIxRkEyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKP6ZgBbl2jwax+4qhWKEXzNzf 26ss1HoZL3oePdwxXlC/cBl8lJXBmk1YppkFc+3O4Pj7htpmH//5QTPbyFW8Q8oE 1M3wXVXrW61h0VdTsWWjHYZzlXd5jZsfCulQ4zCppjNuo3ubDEALTLiNcXkMJ4Nz zxJqysL8PaYNXwVgQp/DorYp+J6bgHOntCINp0wqn/kBld3DgkuorNrs2g46OghR U97153SgkzMVk84E2cORXaGxPIRVwmZIDbdu2EllKtItSwz3rUUm7yUzqhOaA6am DP1nUZSvwp5IabY1kI83U8+jOwk7/T7CMT46wVkSLfJDogcWYFDDyrKlkt8pAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU0XqWDMhj46+xSAckvsAUrOIfonYwHwYDVR0j BBgwFoAU5xPWUPHLS2M3etnnZij7IKjnC8EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hMVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5 LzAvRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBBOEU3MEJDMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNzEzRDY1MEYxQ0I0QjYzMzc3 QUQ5RTc2NjI4RkIyMEE4RTcwQkMxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h MVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5LzAvMzEz MzM4MmUzMTMxMzgyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz MjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAIp2rDANBgkqhkiG9w0BAQsFAAOCAQEAhn0cj+uJ 0GNkdt4fBbryrLmKS7OAIcPWNWzqXvDK4jSq1cyo0YQeE4Gt1mX/Q6RXtMUvp36G W5e0/Awx+1A+Z6Ez611ugqHq3P4ulacZtnmnyD6uXSEZxvE0JTCej9/pa0NQ53x8 3Y5TRPH89Dp5v2VSTDwTUJI+mGwxj9tK1FhCnFkLQAOauEArBlE+/JKQ3auiM4wu tDdeY8XkdDH17mvi3xAEjSfLwh4NgGPPYec5xImjaeqiQfse61O4TNz9Ng+a90wl QUW2gpiUivPVdgR6QDTKppXIUlxHQHe2hum5T2FUx/RykfKp+RrRcJkF1n0T+xX+ xaPh24ggjkAERg== -----END CERTIFICATE-----Generated at Thu Oct 9 14:45:37 2025 by rpki-client