$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa File: 3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: wYgaeNbvJzB8GygrCCjiK/BL3IX64sLQIlYGisvrmbM= Subject key identifier: D3:FF:91:9C:16:50:CF:D1:DB:CB:70:D2:4C:9A:79:A6:55:CD:0E:1A Certificate issuer: /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Certificate serial: 51BB4737A7BD634FF5701081C7B0D063D6D990FB Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa Signing time: Thu 25 Sep 2025 13:35:24 +0000 ROA not before: Thu 25 Sep 2025 13:30:24 +0000 ROA not after: Thu 24 Sep 2026 13:35:24 +0000 asID: 53153 IP address blocks: 138.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Oct 2025 07:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bb:47:37:a7:bd:63:4f:f5:70:10:81:c7:b0:d0:63:d6:d9:90:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Validity Not Before: Sep 25 13:30:24 2025 GMT Not After : Sep 24 13:35:24 2026 GMT Subject: CN=D3FF919C1650CFD1DBCB70D24C9A79A655CD0E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:65:52:fe:d4:f2:f1:fe:77:e2:57:e2:d4: 1f:7b:4a:3e:a2:bc:be:24:5b:db:99:24:ba:ee:62: 4c:28:4d:5c:6a:ef:d9:1c:fe:8b:d2:c1:01:d6:fd: d0:4c:65:bf:48:4e:bf:70:b6:ff:e9:52:4b:97:ee: 43:c6:f7:49:c4:4d:9e:e2:bf:af:1f:fa:dc:b3:55: 35:a8:18:b1:f1:d4:dd:a7:f4:97:e7:b9:14:22:bc: 99:b7:6d:e2:57:5a:e2:54:5a:c1:68:82:c4:bb:c9: 9b:5e:89:32:83:79:eb:d4:00:6d:71:76:37:43:3d: 42:38:c7:e4:ea:40:ef:c2:0a:d4:8f:91:8b:99:23: 99:a7:72:89:66:b4:e9:bf:4a:4c:a4:3a:a7:95:70: 26:f7:8f:2f:54:c4:4c:3c:26:10:e4:90:4f:b3:1a: f5:4a:3e:99:b4:64:7c:12:ab:40:cd:61:d9:21:c0: d4:a6:40:a1:ec:92:fe:99:3b:60:04:02:7e:3e:a5: 31:f9:eb:ea:dc:86:d2:95:ee:ee:f3:15:ce:4e:a8: 43:44:fa:08:e3:6c:08:ba:62:84:20:19:96:73:9d: da:12:6e:70:c0:32:35:d8:c3:58:bc:92:f7:ea:4b: e5:db:4b:de:ce:1f:b0:b7:80:5a:df:9e:b5:bc:d2: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FF:91:9C:16:50:CF:D1:DB:CB:70:D2:4C:9A:79:A6:55:CD:0E:1A X509v3 Authority Key Identifier: keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.221.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:08:1e:64:d3:c6:d5:78:a4:62:de:e8:81:9a:fa:62:fb:29: 1d:f9:b7:04:71:69:6c:ad:51:b8:63:e3:9f:08:83:26:dd:2b: dd:e3:88:c8:4f:3c:bd:45:bc:48:fd:5f:0d:14:67:a5:46:39: a7:e0:81:bd:80:51:7f:e4:3e:40:cb:eb:17:a4:60:ee:9a:bf: 5a:27:58:06:d0:3d:cc:e1:fb:72:aa:ba:a7:45:e0:1f:e7:da: fe:f4:61:60:83:b4:f6:ae:8d:d9:94:0f:6c:ab:a2:fa:05:ee: 29:ef:cb:26:5a:79:02:d6:90:31:ba:89:f1:8e:f7:cf:d0:8f: aa:2e:4a:ec:34:1a:49:e7:21:5d:ef:89:71:82:21:54:ce:bb: 53:e1:7d:6c:41:ba:a4:21:87:e7:84:c3:71:84:0f:00:0e:cd: 72:26:16:22:b1:f8:99:f3:97:a7:1f:53:58:15:83:62:b7:07: f4:8d:e3:a2:71:5e:89:1e:17:91:35:a3:6f:9c:54:83:6e:0e: ab:b4:ac:fb:cd:86:1a:ee:06:38:72:cd:d8:dc:28:3d:04:68: 8b:7f:56:e1:b1:19:3a:4e:1f:44:58:46:6c:bb:4a:6c:51:2d: c2:55:67:ef:d8:01:fc:d1:a1:be:b1:6f:87:f2:9e:62:41:b2: 98:cd:1e:87 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUbtHN6e9Y0/1cBCBx7DQY9bZkPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2 OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjRaFw0yNjA5MjQxMzM1MjRaMDMxMTAvBgNV BAMTKEQzRkY5MTlDMTY1MENGRDFEQkNCNzBEMjRDOUE3OUE2NTVDRDBFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kWVS/tTy8f534lfi1B97Sj6i vL4kW9uZJLruYkwoTVxq79kc/ovSwQHW/dBMZb9ITr9wtv/pUkuX7kPG90nETZ7i v68f+tyzVTWoGLHx1N2n9JfnuRQivJm3beJXWuJUWsFogsS7yZteiTKDeevUAG1x djdDPUI4x+TqQO/CCtSPkYuZI5mncolmtOm/SkykOqeVcCb3jy9UxEw8JhDkkE+z GvVKPpm0ZHwSq0DNYdkhwNSmQKHskv6ZO2AEAn4+pTH56+rchtKV7u7zFc5OqENE +gjjbAi6YoQgGZZzndoSbnDAMjXYw1i8kvfqS+XbS97OH7C3gFrfnrW80pmHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU0/+RnBZQz9Hby3DSTJp5plXNDhowHwYDVR0j BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2 RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzN0wDQYJKoZIhvcNAQELBQADggEBAG4IHmTT xtV4pGLe6IGa+mL7KR35twRxaWytUbhj458IgybdK93jiMhPPL1FvEj9Xw0UZ6VG Oafggb2AUX/kPkDL6xekYO6av1onWAbQPczh+3KquqdF4B/n2v70YWCDtPaujdmU D2yrovoF7invyyZaeQLWkDG6ifGO98/Qj6ouSuw0GknnIV3viXGCIVTOu1PhfWxB uqQhh+eEw3GEDwAOzXImFiKx+Jnzl6cfU1gVg2K3B/SN46JxXokeF5E1o2+cVINu Dqu0rPvNhhruBjhyzdjcKD0EaIt/VuGxGTpOH0RYRmy7SmxRLcJVZ+/YAfzRob6x b4fynmJBspjNHoc= -----END CERTIFICATE-----Generated at Wed Oct 22 22:40:35 2025 by rpki-client