$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa File: 3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa (raw, json) Hash identifier: gThYLIpi1cHw3kJkEH4qhnkVR6xU/45i0czEbtloGTc= Subject key identifier: EE:3D:09:7A:80:A5:AD:A6:97:66:69:B7:CB:4E:F8:BA:F4:08:59:A4 Certificate issuer: /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Certificate serial: 704955C1F8C1040C832B4A3E4D557A210BCB3382 Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa Signing time: Wed 24 Sep 2025 01:44:52 +0000 ROA not before: Wed 24 Sep 2025 01:39:52 +0000 ROA not after: Wed 23 Sep 2026 01:44:52 +0000 asID: 262448 IP address blocks: 138.118.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Oct 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:49:55:c1:f8:c1:04:0c:83:2b:4a:3e:4d:55:7a:21:0b:cb:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Validity Not Before: Sep 24 01:39:52 2025 GMT Not After : Sep 23 01:44:52 2026 GMT Subject: CN=EE3D097A80A5ADA6976669B7CB4EF8BAF40859A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:84:c2:7a:22:bc:9a:15:e4:af:55:3d:a5: c1:df:7b:24:5b:f9:37:a1:df:67:2e:98:2e:e8:21: 2c:df:9c:73:3c:b7:70:dd:82:9b:c3:6a:43:f6:92: 1a:b0:6b:54:8a:eb:ea:ef:f6:ec:b3:8a:32:68:f5: 1b:12:07:ec:f5:e9:b2:2f:49:96:bf:11:c1:08:48: ec:ec:24:a6:d6:98:e3:b1:ef:c4:64:78:2c:c9:b6: 5b:76:5e:b1:aa:ca:59:04:55:a7:15:b3:04:82:78: fb:6c:6a:95:32:a9:fa:e7:e0:8d:50:f3:5e:d9:30: e3:fb:69:9b:9e:a3:b9:0b:3b:2f:41:e4:28:1e:fb: a2:fd:ad:31:d5:07:84:d8:b8:a5:e6:2d:3a:6d:c9: a7:3b:ce:bd:4d:4c:7d:b2:7d:49:23:24:98:a7:0d: 7e:23:a0:9f:d4:9e:5a:ff:9d:5a:47:73:50:7f:1f: ad:8d:19:56:c6:0a:10:2b:f3:be:5d:d3:01:e0:d1: 1c:31:09:9d:ab:e5:75:75:4c:cf:43:c9:c3:71:30: ae:36:b6:9f:cb:bc:6a:21:96:ed:24:04:bc:ba:50: cc:10:09:6d:7b:c5:50:d2:ef:ed:4e:3f:47:d7:ef: 1e:7b:e2:81:93:1d:9a:6d:2b:e3:32:73:37:dc:87: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3D:09:7A:80:A5:AD:A6:97:66:69:B7:CB:4E:F8:BA:F4:08:59:A4 X509v3 Authority Key Identifier: keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3133382e3131382e3137342e302f32342d3234203d3e20323632343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.174.0/24 Signature Algorithm: sha256WithRSAEncryption 54:3e:cf:9e:bb:93:6f:53:f0:43:f2:6a:ec:91:55:60:0d:cc: 44:c0:ed:71:04:c4:d5:db:c7:1c:29:9f:9c:ab:a0:04:3b:37: ab:dc:07:8a:71:9e:c8:6b:3d:be:a9:88:d8:de:1e:e4:ed:85: 7f:ed:32:15:2e:e4:fd:72:90:59:d2:41:33:f3:f8:b4:1c:dd: 79:25:dd:b2:b0:e9:8c:5f:e0:19:c0:4a:51:28:7a:26:d3:bb: 1c:26:e1:03:9f:0a:9d:f9:c4:eb:13:2f:90:30:86:5a:61:89: 23:20:88:e1:09:a8:61:4b:58:33:97:0e:bb:72:d0:c8:92:f5: 39:ea:14:1e:af:03:8a:65:37:ac:cc:fc:e2:89:78:1c:12:5c: ea:31:ff:80:89:0a:81:03:e7:90:f2:84:25:fa:c3:05:b9:72: 6a:43:84:41:81:2b:0a:53:b4:10:de:81:b6:59:a5:66:fe:30: b9:c0:27:65:8b:7b:03:0c:b6:99:b4:13:17:72:1a:99:8e:13: 80:a7:17:76:18:41:f4:42:c9:a9:13:58:0f:e3:e5:95:a3:28: 86:a6:b9:99:d2:a3:c3:2e:51:2d:bb:66:29:14:52:d7:db:6a: 58:0a:27:56:fa:ee:41:30:51:c0:6a:56:49:9f:0b:4f:d5:d3: 09:84:24:d0 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUcElVwfjBBAyDK0o+TVV6IQvLM4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBB OEU3MEJDMTAeFw0yNTA5MjQwMTM5NTJaFw0yNjA5MjMwMTQ0NTJaMDMxMTAvBgNV BAMTKEVFM0QwOTdBODBBNUFEQTY5NzY2NjlCN0NCNEVGOEJBRjQwODU5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKITCeiK8mhXkr1U9pcHfeyRb +Teh32cumC7oISzfnHM8t3DdgpvDakP2khqwa1SK6+rv9uyzijJo9RsSB+z16bIv SZa/EcEISOzsJKbWmOOx78RkeCzJtlt2XrGqylkEVacVswSCePtsapUyqfrn4I1Q 817ZMOP7aZueo7kLOy9B5Cge+6L9rTHVB4TYuKXmLTptyac7zr1NTH2yfUkjJJin DX4joJ/Unlr/nVpHc1B/H62NGVbGChAr875d0wHg0RwxCZ2r5XV1TM9DycNxMK42 tp/LvGohlu0kBLy6UMwQCW17xVDS7+1OP0fX7x574oGTHZptK+Myczfch5BBAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU7j0JeoClraaXZmm3y074uvQIWaQwHwYDVR0j BBgwFoAU5xPWUPHLS2M3etnnZij7IKjnC8EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hMVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5 LzAvRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBBOEU3MEJDMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNzEzRDY1MEYxQ0I0QjYzMzc3 QUQ5RTc2NjI4RkIyMEE4RTcwQkMxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h MVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5LzAvMzEz MzM4MmUzMTMxMzgyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz MjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAIp2rjANBgkqhkiG9w0BAQsFAAOCAQEAVD7PnruT b1PwQ/Jq7JFVYA3MRMDtcQTE1dvHHCmfnKugBDs3q9wHinGeyGs9vqmI2N4e5O2F f+0yFS7k/XKQWdJBM/P4tBzdeSXdsrDpjF/gGcBKUSh6JtO7HCbhA58KnfnE6xMv kDCGWmGJIyCI4QmoYUtYM5cOu3LQyJL1OeoUHq8DimU3rMz84ol4HBJc6jH/gIkK gQPnkPKEJfrDBblyakOEQYErClO0EN6BtlmlZv4wucAnZYt7Awy2mbQTF3IamY4T gKcXdhhB9ELJqRNYD+PllaMohqa5mdKjwy5RLbtmKRRS19tqWAonVvruQTBRwGpW SZ8LT9XTCYQk0A== -----END CERTIFICATE-----Generated at Thu Oct 9 14:44:12 2025 by rpki-client