$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa File: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (raw, json) Hash identifier: RF38Bjpp823JDXqLKsrAUYWB/3BPbPZ7MdCkTro+SRU= Subject key identifier: CB:04:B5:25:66:29:53:96:FA:A1:1D:DA:86:4D:D3:E8:BD:51:08:6E Certificate issuer: /CN=0673A8A85FD75BDF7374650633566E470F5D792A Certificate serial: 7394913103DA4DD546ECBAFAEA8510E4A63D1375 Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa Signing time: Tue 04 Nov 2025 14:16:58 +0000 ROA not before: Tue 04 Nov 2025 14:11:58 +0000 ROA not after: Tue 03 Nov 2026 14:16:58 +0000 asID: 263266 IP address blocks: 170.82.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:94:91:31:03:da:4d:d5:46:ec:ba:fa:ea:85:10:e4:a6:3d:13:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A Validity Not Before: Nov 4 14:11:58 2025 GMT Not After : Nov 3 14:16:58 2026 GMT Subject: CN=CB04B52566295396FAA11DDA864DD3E8BD51086E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:9c:09:9a:a0:68:85:ab:10:99:c5:f1:8d: 2b:10:3f:6e:09:19:07:07:5a:0d:79:a1:78:43:6c: ef:87:44:72:b2:da:f8:4f:97:67:a2:f2:78:fc:29: 3e:f5:54:c0:a5:af:1f:cb:00:e2:32:3b:55:cb:2e: 00:76:48:19:e4:a7:4e:d7:27:82:81:a8:13:d1:9c: c8:60:67:d1:0c:5e:f8:f0:45:89:b6:5c:ac:79:b5: 3f:91:02:f4:8d:cc:23:6e:05:6f:d4:aa:88:6c:0b: 31:b2:11:a1:a4:22:86:0c:52:0d:00:c6:87:12:a4: be:71:a8:76:96:fe:5e:48:86:70:a1:a7:f6:1f:c5: f7:da:78:52:e3:28:07:4e:84:c1:a2:75:fe:4e:00: a1:5e:ff:01:59:ce:ab:4a:e1:9a:fa:ca:d8:40:76: ee:97:fb:98:b4:ce:55:21:61:59:16:4f:93:07:24: 5b:a6:2d:72:e4:5e:45:aa:eb:fa:63:00:d9:ca:98: 81:cb:26:04:68:76:b1:70:f6:64:33:7a:91:ca:5d: 5c:a6:16:ee:54:16:b3:f2:b6:38:8d:42:50:53:f8: 50:ea:69:e4:f4:1e:06:c6:99:de:2e:de:2e:98:32: fd:f6:f0:ed:03:d4:80:51:e1:83:a7:f7:3b:55:f7: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:04:B5:25:66:29:53:96:FA:A1:1D:DA:86:4D:D3:E8:BD:51:08:6E X509v3 Authority Key Identifier: keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.108.0/22 Signature Algorithm: sha256WithRSAEncryption 74:81:1a:7f:3d:49:9a:27:88:b6:8c:d3:73:3d:5e:75:bc:6e: 47:6d:07:59:5e:34:bd:d4:a7:fa:81:d6:9f:24:c0:7b:15:7b: 33:12:2d:12:6c:58:40:bb:bb:9e:72:30:9d:80:66:4d:64:95: 70:64:b3:8c:ab:cf:02:24:ae:a2:ec:77:4d:c7:54:7e:b6:c6: 46:c1:86:9f:b5:19:3d:ee:2b:54:82:70:39:d9:7a:16:82:5e: c5:d0:5c:cc:cc:ca:b5:03:57:43:00:b2:c8:68:35:ea:78:00: f7:96:d1:45:10:4c:64:72:47:48:fe:60:fb:3f:83:ea:b2:1d: c4:00:90:d9:02:6e:69:f2:62:db:96:33:26:e2:46:a7:a7:63: 48:5d:29:57:58:f9:0c:17:f6:9d:72:15:6c:0e:2b:33:34:9d: a4:16:a1:38:b2:85:fb:18:9c:52:15:6b:11:33:b7:f2:19:f7: ff:97:15:6f:2b:f6:b6:49:4f:73:9a:f7:e2:1d:5c:8a:35:4b: 0a:f7:87:2f:69:3f:fa:87:7f:f8:bd:06:79:cf:87:c6:7a:3d: 36:56:73:ae:c7:34:ff:cb:30:52:74:ab:a3:9d:33:16:1f:34: 73:3e:23:8a:8c:75:de:0a:17:34:f4:05:0f:92:5d:db:9b:f1: e0:cf:5f:e0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUc5SRMQPaTdVG7Lr66oUQ5KY9E3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3M0E4QTg1RkQ3NUJERjczNzQ2NTA2MzM1NjZFNDcw RjVENzkyQTAeFw0yNTExMDQxNDExNThaFw0yNjExMDMxNDE2NThaMDMxMTAvBgNV BAMTKENCMDRCNTI1NjYyOTUzOTZGQUExMUREQTg2NEREM0U4QkQ1MTA4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/pwJmqBohasQmcXxjSsQP24J GQcHWg15oXhDbO+HRHKy2vhPl2ei8nj8KT71VMClrx/LAOIyO1XLLgB2SBnkp07X J4KBqBPRnMhgZ9EMXvjwRYm2XKx5tT+RAvSNzCNuBW/UqohsCzGyEaGkIoYMUg0A xocSpL5xqHaW/l5IhnChp/YfxffaeFLjKAdOhMGidf5OAKFe/wFZzqtK4Zr6ythA du6X+5i0zlUhYVkWT5MHJFumLXLkXkWq6/pjANnKmIHLJgRodrFw9mQzepHKXVym Fu5UFrPytjiNQlBT+FDqaeT0HgbGmd4u3i6YMv328O0D1IBR4YOn9ztV9zybAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUywS1JWYpU5b6oR3ahk3T6L1RCG4wHwYDVR0j BBgwFoAUBnOoqF/XW99zdGUGM1ZuRw9deSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1Jn ZTIvMC8wNjczQThBODVGRDc1QkRGNzM3NDY1MDYzMzU2NkU0NzBGNUQ3OTJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NzNBOEE4NUZENzVCREY3 Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJVV2o3V01hS1I3YkduaTVib1JzYjYzbzZVeEw5Qzc5dTV1YjZObmtSZ2UyLzAv MzEzNzMwMmUzODMyMmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzMzMjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKqUmwwDQYJKoZIhvcNAQELBQADggEBAHSBGn89 SZoniLaM03M9XnW8bkdtB1leNL3Up/qB1p8kwHsVezMSLRJsWEC7u55yMJ2AZk1k lXBks4yrzwIkrqLsd03HVH62xkbBhp+1GT3uK1SCcDnZehaCXsXQXMzMyrUDV0MA sshoNep4APeW0UUQTGRyR0j+YPs/g+qyHcQAkNkCbmnyYtuWMybiRqenY0hdKVdY +QwX9p1yFWwOKzM0naQWoTiyhfsYnFIVaxEzt/IZ9/+XFW8r9rZJT3Oa9+IdXIo1 Swr3hy9pP/qHf/i9BnnPh8Z6PTZWc67HNP/LMFJ0q6OdMxYfNHM+I4qMdd4KFzT0 BQ+SXdub8eDPX+A= -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:19 2025 by rpki-client