$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa File: 3137372e36372e302e302f32312d3231203d3e203238323730.roa (raw, json) Hash identifier: 6B74PTh2z0cDpX7ldXdh4Sgs3N0qMloXiWOInQ1rGDY= Subject key identifier: 2C:CD:65:5A:BB:6D:4B:36:3A:CF:17:41:63:B4:4C:BA:B6:D0:5F:0A Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 7D5016CEBF44CBF13E4C672115B767C967AD76FD Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa Signing time: Sat 18 Oct 2025 23:01:02 +0000 ROA not before: Sat 18 Oct 2025 22:56:02 +0000 ROA not after: Sat 17 Oct 2026 23:01:02 +0000 asID: 28270 IP address blocks: 177.67.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:50:16:ce:bf:44:cb:f1:3e:4c:67:21:15:b7:67:c9:67:ad:76:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Oct 18 22:56:02 2025 GMT Not After : Oct 17 23:01:02 2026 GMT Subject: CN=2CCD655ABB6D4B363ACF174163B44CBAB6D05F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:1b:64:ed:a1:5d:32:2e:17:f1:c3:ce:11: 8f:2a:77:b8:e4:30:35:f9:58:af:0d:5f:21:4e:9f: 35:31:25:b3:28:b2:5f:fe:56:a8:5a:21:6b:c3:86: 74:2d:75:53:2d:10:9a:d2:aa:44:d6:25:56:c6:f8: 17:e2:76:81:e1:5b:48:09:75:41:58:20:07:f8:e8: 24:b2:fc:c7:fb:c1:6f:0d:a6:93:b6:f7:a4:72:01: c0:5b:1c:39:6b:30:fc:e8:5b:af:a7:a7:b4:91:00: 8f:ef:c1:a3:f8:c6:2d:31:70:e2:e0:cf:d6:a8:9e: 6e:0e:c8:28:73:2f:17:b5:f1:ca:73:78:c7:4f:fd: 03:59:ab:1f:41:38:f4:22:90:30:10:00:c4:37:f0: 22:9f:7e:7a:38:fa:18:58:e3:e7:00:12:7e:01:11: 42:87:c9:19:62:ed:41:6f:b1:25:da:db:d7:6a:f1: 6d:0f:7e:11:79:d1:72:4b:19:1e:b7:14:bb:35:ea: b3:c8:45:f0:f3:09:bf:9e:ff:94:25:1e:bb:37:ab: 8d:71:00:9b:84:aa:3d:b8:15:2c:ef:f7:30:49:64: 45:ed:b5:d8:6f:ea:dc:aa:59:cf:ae:bf:31:e0:c5: 8f:89:4a:07:11:b9:32:c0:e0:fa:b2:d3:fd:16:de: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:65:5A:BB:6D:4B:36:3A:CF:17:41:63:B4:4C:BA:B6:D0:5F:0A X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.67.0.0/21 Signature Algorithm: sha256WithRSAEncryption 71:3d:d7:6f:46:eb:b2:91:9b:5a:87:11:12:21:53:5e:0f:11: 54:e5:cf:d2:cf:4f:43:c6:ce:b8:3d:11:e6:c9:a4:8f:ed:3c: 96:f7:06:ca:52:01:8c:6e:9d:70:39:bc:a6:4e:be:cf:ca:60: b3:2a:fd:1d:4e:92:c1:1f:47:f0:81:14:e3:56:10:fa:67:5c: 95:d9:36:61:ed:98:d4:4a:88:39:1f:9a:38:a5:28:0b:6c:57: 3d:20:06:b2:c1:1f:39:e0:26:0c:23:ee:5b:f3:ac:7e:8d:7d: 3c:4e:5f:bd:f2:b5:3f:fa:b1:97:5a:0b:0e:06:59:85:b0:bf: 79:36:c9:1c:4f:3c:af:f6:43:d1:e6:1d:2a:ab:cf:e9:e5:3f: e0:75:8a:07:af:0b:0a:7c:5f:fc:65:3b:2c:b2:44:fd:f1:54: 7d:d6:a9:04:1c:2c:53:4d:a9:8a:d2:21:21:07:36:f0:8e:a1: 57:84:eb:9d:f3:e2:d6:54:73:af:7b:50:e7:d1:9d:15:21:84: 74:f4:dc:b0:ab:d0:c2:f4:91:25:83:90:ba:a7:c0:99:dd:d8: 74:05:10:7c:84:6b:3e:b1:cf:ef:e9:eb:57:fa:23:32:2c:6d: 9e:1a:1f:a3:e8:75:ab:ae:33:01:a1:aa:f1:1d:64:9b:ae:c1: 90:ca:d6:9b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUfVAWzr9Ey/E+TGchFbdnyWetdv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTEwMTgyMjU2MDJaFw0yNjEwMTcyMzAxMDJaMDMxMTAvBgNV BAMTKDJDQ0Q2NTVBQkI2RDRCMzYzQUNGMTc0MTYzQjQ0Q0JBQjZEMDVGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM2htk7aFdMi4X8cPOEY8qd7jk MDX5WK8NXyFOnzUxJbMosl/+VqhaIWvDhnQtdVMtEJrSqkTWJVbG+BfidoHhW0gJ dUFYIAf46CSy/Mf7wW8NppO296RyAcBbHDlrMPzoW6+np7SRAI/vwaP4xi0xcOLg z9aonm4OyChzLxe18cpzeMdP/QNZqx9BOPQikDAQAMQ38CKffno4+hhY4+cAEn4B EUKHyRli7UFvsSXa29dq8W0PfhF50XJLGR63FLs16rPIRfDzCb+e/5QlHrs3q41x AJuEqj24FSzv9zBJZEXttdhv6tyqWc+uvzHgxY+JSgcRuTLA4Pqy0/0W3k8FAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQULM1lWrttSzY6zxdBY7RMurbQXwowHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv MzEzNzM3MmUzNjM3MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMjM3 MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAOxQwAwDQYJKoZIhvcNAQELBQADggEBAHE9129G67KRm1qH ERIhU14PEVTlz9LPT0PGzrg9EebJpI/tPJb3BspSAYxunXA5vKZOvs/KYLMq/R1O ksEfR/CBFONWEPpnXJXZNmHtmNRKiDkfmjilKAtsVz0gBrLBHzngJgwj7lvzrH6N fTxOX73ytT/6sZdaCw4GWYWwv3k2yRxPPK/2Q9HmHSqrz+nlP+B1igevCwp8X/xl OyyyRP3xVH3WqQQcLFNNqYrSISEHNvCOoVeE653z4tZUc697UOfRnRUhhHT03LCr 0ML0kSWDkLqnwJnd2HQFEHyEaz6xz+/p61f6IzIsbZ4aH6PodauuMwGhqvEdZJuu wZDK1ps= -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:31 2025 by rpki-client