$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa File: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (raw, json) Hash identifier: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4= Subject key identifier: A2:A5:BC:CA:3E:0D:4B:44:8F:2F:21:36:94:AE:FB:D5:F7:6C:A1:D5 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 1DBA2EBE5CB7556D26379A750AA2668E8041BD69 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa Signing time: Fri 22 Aug 2025 13:51:45 +0000 ROA not before: Fri 22 Aug 2025 13:46:45 +0000 ROA not after: Fri 21 Aug 2026 13:51:45 +0000 asID: 263359 IP address blocks: 191.37.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ba:2e:be:5c:b7:55:6d:26:37:9a:75:0a:a2:66:8e:80:41:bd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Aug 22 13:46:45 2025 GMT Not After : Aug 21 13:51:45 2026 GMT Subject: CN=A2A5BCCA3E0D4B448F2F213694AEFBD5F76CA1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:45:72:ff:97:c2:45:9b:24:38:dc:00:e6: e6:7e:fb:8e:fa:b4:ef:d7:05:66:4e:7f:5c:96:da: 48:12:35:0f:9a:58:52:a2:df:5b:d1:a1:67:a1:3c: c9:dd:95:b5:63:3e:97:04:2b:47:39:19:8a:6b:ab: 4d:d1:e7:d0:38:8e:6c:cd:e0:75:73:96:f9:55:18: 6c:85:9c:3c:fa:a9:c8:a1:17:1e:2e:73:70:9c:57: 02:98:92:e1:bf:d8:7a:f3:cb:60:53:c4:32:24:da: de:f1:d8:b2:de:33:62:c9:84:ce:fb:66:80:8a:c6: 5c:3d:25:99:76:89:eb:4a:16:19:8d:cb:39:b8:a1: 0b:76:62:37:dc:6e:90:d6:0f:1a:b2:02:56:b7:08: 10:68:f7:c7:b0:f0:d0:64:a5:64:ba:c9:57:70:6c: 27:d5:1c:a0:18:68:a0:c5:fa:e2:88:32:c5:ae:e8: 11:3c:36:59:7a:c7:c8:a8:c8:a1:2a:4d:84:26:b5: 51:3a:47:5a:48:87:4d:5e:1e:d6:9c:96:c5:f5:df: 36:79:af:e2:29:86:e5:85:f3:df:fd:22:42:4e:ae: 8b:1e:90:59:08:53:c2:17:41:d0:3f:a3:73:f3:c1: 39:02:25:9a:d4:26:82:82:c8:2b:2d:16:ce:3a:92: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:BC:CA:3E:0D:4B:44:8F:2F:21:36:94:AE:FB:D5:F7:6C:A1:D5 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.37.128.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:00:13:58:6a:e7:ec:c3:56:69:4a:ce:de:3e:8e:7a:51:b8: a0:61:54:34:ae:ac:fd:2c:b5:e7:c6:60:e3:88:93:87:94:42: f8:e2:70:19:aa:95:11:22:ca:bf:64:a6:9e:5a:ed:48:38:63: e9:e9:3e:b4:34:23:96:c0:8a:80:af:c8:98:05:9a:64:da:9f: 1d:87:f5:fa:a8:5c:21:81:a4:b9:58:c1:82:a3:38:38:da:6d: d4:5c:eb:18:b2:60:db:78:ef:ab:d3:40:6f:5c:49:91:ff:0d: b4:03:25:de:c5:c5:d5:5a:da:a2:a7:ef:8b:4e:0c:b9:5c:70: d6:4a:30:1c:f1:d4:ed:de:df:dc:78:24:ec:d0:ee:c2:61:5d: 0e:d9:33:58:88:d1:c8:ac:0b:60:1e:6b:94:f7:0e:f9:d8:90: 6e:1a:95:ff:ee:2f:c8:f1:ce:51:9d:e0:d4:26:a0:7a:a0:ea: ed:ed:88:c0:f3:b2:74:ce:ec:5e:42:b1:ab:20:50:fb:5e:d7: 4a:ad:1b:46:5a:35:d1:b5:66:25:d5:a0:71:04:a9:ca:bb:6a: cc:b1:c0:56:f5:0a:2c:d0:c8:96:8d:cf:95:f7:6d:fe:45:e9: 9b:17:fa:7e:78:75:34:ef:c5:c2:fc:6c:b6:0d:c4:02:30:56: 63:f9:81:76 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHbouvly3VW0mN5p1CqJmjoBBvWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTA4MjIxMzQ2NDVaFw0yNjA4MjExMzUxNDVaMDMxMTAvBgNV BAMTKEEyQTVCQ0NBM0UwRDRCNDQ4RjJGMjEzNjk0QUVGQkQ1Rjc2Q0ExRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5kVy/5fCRZskONwA5uZ++476 tO/XBWZOf1yW2kgSNQ+aWFKi31vRoWehPMndlbVjPpcEK0c5GYprq03R59A4jmzN 4HVzlvlVGGyFnDz6qcihFx4uc3CcVwKYkuG/2Hrzy2BTxDIk2t7x2LLeM2LJhM77 ZoCKxlw9JZl2ietKFhmNyzm4oQt2YjfcbpDWDxqyAla3CBBo98ew8NBkpWS6yVdw bCfVHKAYaKDF+uKIMsWu6BE8Nll6x8ioyKEqTYQmtVE6R1pIh01eHtaclsX13zZ5 r+IphuWF89/9IkJOrosekFkIU8IXQdA/o3PzwTkCJZrUJoKCyCstFs46kg0zAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUoqW8yj4NS0SPLyE2lK771fdsodUwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzI4dHBBVDJwMVcxZ1RSdDFlcUdjcFBrcHRHVm04UlI2RGFlbnA1VHlTUzhrLzAv MzEzOTMxMmUzMzM3MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2 MzMzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAO/JYAwDQYJKoZIhvcNAQELBQADggEBAI8AE1hq 5+zDVmlKzt4+jnpRuKBhVDSurP0stefGYOOIk4eUQvjicBmqlREiyr9kpp5a7Ug4 Y+npPrQ0I5bAioCvyJgFmmTanx2H9fqoXCGBpLlYwYKjODjabdRc6xiyYNt476vT QG9cSZH/DbQDJd7FxdVa2qKn74tODLlccNZKMBzx1O3e39x4JOzQ7sJhXQ7ZM1iI 0cisC2Aea5T3DvnYkG4alf/uL8jxzlGd4NQmoHqg6u3tiMDzsnTO7F5CsasgUPte 10qtG0ZaNdG1ZiXVoHEEqcq7asyxwFb1CizQyJaNz5X3bf5F6ZsX+n54dTTvxcL8 bLYNxAIwVmP5gXY= -----END CERTIFICATE-----Generated at Thu Sep 18 17:54:48 2025 by rpki-client