$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa File: 3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa (raw, json) Hash identifier: XFScd8EJTaxTePQYnSDsz30Kk5WUvSrrA/lxRe6LE9I= Subject key identifier: 83:A4:96:30:DE:85:33:53:50:5E:5F:D7:7C:B0:EE:07:AE:9B:2A:7C Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 4E1AC81F4E072C499D443C148F18B526825A778E Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa Signing time: Sat 18 Oct 2025 23:01:05 +0000 ROA not before: Sat 18 Oct 2025 22:56:05 +0000 ROA not after: Sat 17 Oct 2026 23:01:05 +0000 asID: 28220 IP address blocks: 143.255.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1a:c8:1f:4e:07:2c:49:9d:44:3c:14:8f:18:b5:26:82:5a:77:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:05 2025 GMT Not After : Oct 17 23:01:05 2026 GMT Subject: CN=83A49630DE853353505E5FD77CB0EE07AE9B2A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6a:d2:00:e4:78:c3:b0:df:b2:73:3f:91:fd: b2:32:1a:91:5e:46:3a:84:6c:61:2c:18:cb:f2:56: 24:03:44:9b:b7:d4:c3:44:c7:7e:a6:a4:8b:e4:68: 71:54:20:c4:dd:0a:01:c0:bf:63:a7:17:ad:35:ad: cc:c1:d3:6f:f3:be:66:84:9f:ce:3f:53:b8:b1:53: 41:fc:48:56:4d:51:93:f7:cf:23:55:17:f8:f4:ff: 44:3e:d0:19:e0:57:77:00:b4:94:0d:b6:50:3c:a1: 41:89:13:a8:01:1a:9d:5d:7e:2b:2a:a1:01:db:0b: e0:3e:77:bf:26:6d:50:3e:fe:55:19:73:b9:e4:bc: ee:24:41:29:4b:1d:12:4a:39:8c:61:f0:a8:df:cb: 47:48:d7:e8:4a:92:9e:71:9c:9c:86:22:15:c2:49: df:aa:65:c8:66:ba:c8:49:41:8c:fb:5f:4d:7d:42: 6c:5e:98:29:4d:30:72:13:d8:d9:23:85:42:e2:3f: 55:bc:b4:de:48:ed:b0:05:c8:7b:6d:9f:75:bd:9a: 47:dd:cc:2e:a9:7d:5e:d8:99:72:bd:04:e7:fd:c5: a5:cf:61:78:16:55:e9:2b:ca:a2:3a:40:8b:87:11: dc:b2:6a:06:44:c1:13:58:a1:75:d9:9a:07:8e:fa: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A4:96:30:DE:85:33:53:50:5E:5F:D7:7C:B0:EE:07:AE:9B:2A:7C X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.112.0/22 Signature Algorithm: sha256WithRSAEncryption 16:98:95:7e:92:35:cf:98:4e:94:6c:8d:72:98:e7:0e:9a:e0: 1e:98:8f:6c:8b:e4:0e:52:ec:54:36:dd:38:98:57:8c:46:35: 62:b2:b7:01:bc:a9:43:6e:a8:bd:7d:4a:98:71:b4:7c:2f:26: ac:cc:41:51:c8:e8:4c:14:81:84:36:72:33:24:54:01:52:01: 12:96:84:d1:19:1a:4e:57:1e:b0:40:35:db:f4:36:80:90:4a: 0d:40:0d:64:e8:17:95:ae:fc:9e:61:ff:58:56:e1:f7:50:73: 3d:8c:64:a2:83:d0:eb:9e:00:3b:fb:49:3a:f8:f6:3d:af:d7: e6:9c:f1:92:c4:d6:19:f9:4d:86:a3:82:88:dd:40:d9:93:77: 87:94:6d:fa:02:92:96:b8:02:c5:4a:31:ab:13:cf:36:11:66: c8:0b:90:d5:0e:34:f3:ba:94:dc:74:85:1e:2b:a5:bc:89:68: 9d:76:5a:8f:44:0d:2b:75:fa:83:55:14:e5:38:ea:48:66:af: f2:f5:02:95:9d:80:3b:9f:e7:63:cc:e4:b3:24:09:65:c8:45: 45:64:c1:bc:17:87:14:26:a8:6a:6d:c8:1f:e9:fd:98:32:ed: e2:59:4c:10:7d:6c:b0:76:d2:1c:74:eb:d8:40:e4:49:53:71: a0:b8:90:ca -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUThrIH04HLEmdRDwUjxi1JoJad44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDVaFw0yNjEwMTcyMzAxMDVaMDMxMTAvBgNV BAMTKDgzQTQ5NjMwREU4NTMzNTM1MDVFNUZENzdDQjBFRTA3QUU5QjJBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDratIA5HjDsN+ycz+R/bIyGpFe RjqEbGEsGMvyViQDRJu31MNEx36mpIvkaHFUIMTdCgHAv2OnF601rczB02/zvmaE n84/U7ixU0H8SFZNUZP3zyNVF/j0/0Q+0BngV3cAtJQNtlA8oUGJE6gBGp1dfisq oQHbC+A+d78mbVA+/lUZc7nkvO4kQSlLHRJKOYxh8Kjfy0dI1+hKkp5xnJyGIhXC Sd+qZchmushJQYz7X019QmxemClNMHIT2NkjhULiP1W8tN5I7bAFyHttn3W9mkfd zC6pfV7YmXK9BOf9xaXPYXgWVekryqI6QIuHEdyyagZEwRNYoXXZmgeO+sZ/AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUg6SWMN6FM1NQXl/XfLDuB66bKnwwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNDMzMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKP/3AwDQYJKoZIhvcNAQELBQADggEBABaYlX6S Nc+YTpRsjXKY5w6a4B6Yj2yL5A5S7FQ23TiYV4xGNWKytwG8qUNuqL19SphxtHwv JqzMQVHI6EwUgYQ2cjMkVAFSARKWhNEZGk5XHrBANdv0NoCQSg1ADWToF5Wu/J5h /1hW4fdQcz2MZKKD0OueADv7STr49j2v1+ac8ZLE1hn5TYajgojdQNmTd4eUbfoC kpa4AsVKMasTzzYRZsgLkNUONPO6lNx0hR4rpbyJaJ12Wo9EDSt1+oNVFOU46khm r/L1ApWdgDuf52PM5LMkCWXIRUVkwbwXhxQmqGptyB/p/Zgy7eJZTBB9bLB20hx0 69hA5ElTcaC4kMo= -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:56 2025 by rpki-client