$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/3230302e392e32382e302f32322d3234203d3e20323638373931.roa File: 3230302e392e32382e302f32322d3234203d3e20323638373931.roa (raw, json) Hash identifier: b9Lk2HKPVAwl88t/aO7v/kvwU0g4h4TtO520VveoY3I= Subject key identifier: C9:0E:57:BE:AC:D3:27:23:0B:7B:C9:50:85:44:1D:81:63:8F:1A:8E Certificate issuer: /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Certificate serial: 3E5839C9F3D1644C31E51097312BE6C1CDD748BA Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/3230302e392e32382e302f32322d3234203d3e20323638373931.roa Signing time: Wed 23 Jul 2025 05:18:00 +0000 ROA not before: Wed 23 Jul 2025 05:13:00 +0000 ROA not after: Wed 22 Jul 2026 05:18:00 +0000 asID: 268791 IP address blocks: 200.9.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 11:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:58:39:c9:f3:d1:64:4c:31:e5:10:97:31:2b:e6:c1:cd:d7:48:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Validity Not Before: Jul 23 05:13:00 2025 GMT Not After : Jul 22 05:18:00 2026 GMT Subject: CN=C90E57BEACD327230B7BC95085441D81638F1A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:ff:6d:ce:97:36:b1:f3:15:60:8e:19:a2: 60:6a:f7:fb:c0:cc:5f:22:58:1b:56:34:5d:52:44: 0f:52:95:12:2d:de:a0:21:7c:91:42:bf:21:a2:ad: 82:d1:30:c7:24:7e:a6:c2:6d:08:91:a2:65:39:1a: eb:da:30:45:78:48:c2:0c:d4:ea:76:b4:99:32:af: 3c:08:b0:61:c2:5e:b7:b0:6f:dc:28:b3:ed:9c:ee: 15:c0:d6:37:0f:9c:ed:9a:cd:00:85:43:b6:fe:86: e7:42:c5:78:9a:69:10:54:62:db:20:a3:4b:af:b5: 8b:61:24:a1:62:ff:f8:61:72:b8:03:31:4b:6a:bb: 7f:89:f4:1a:6a:5a:da:31:5e:4f:52:f6:2f:6e:01: ff:18:98:1f:6e:89:9f:d7:c9:28:8a:43:24:e5:8e: 74:eb:32:21:10:3b:26:5d:c8:47:10:47:eb:54:3f: 3d:7f:e2:aa:92:78:8c:9b:8d:da:f3:40:8a:cb:d0: 87:f7:48:6a:9d:0c:5d:05:ab:8e:05:ad:26:60:d3: 04:1a:05:7c:d0:be:8d:d8:53:dd:2e:ab:61:b4:b1: 62:8b:58:c3:70:c0:09:44:0b:dc:37:1d:f2:09:08: bd:c7:47:de:2d:0e:46:57:90:40:63:9c:1c:9d:1a: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:57:BE:AC:D3:27:23:0B:7B:C9:50:85:44:1D:81:63:8F:1A:8E X509v3 Authority Key Identifier: keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/3230302e392e32382e302f32322d3234203d3e20323638373931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.28.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:43:87:03:98:13:48:aa:e7:91:ea:bd:79:37:79:f2:34:2a: dd:c2:d2:cc:72:8e:13:c9:ea:50:d6:e8:34:f0:02:8f:3b:0f: e6:ba:ae:71:d4:b8:d5:3d:56:cc:64:10:d1:1b:27:08:9f:ee: 24:d8:ea:7b:74:d4:d8:c6:a1:1d:c7:35:17:fd:29:40:72:97: 01:b7:17:bf:a6:bc:20:e0:c1:33:9a:6b:9b:31:42:28:bd:08: 85:71:b6:c8:45:94:af:24:5d:0b:38:24:d5:7a:b9:3d:8d:a3: c6:d8:e1:20:c7:bd:18:83:73:bb:d6:8b:a1:91:bc:7b:58:e6: 40:b1:e1:9d:17:b5:34:9a:68:8c:c3:fd:b3:8c:ea:0c:94:2c: 07:c5:b3:e0:f8:ed:80:28:09:61:97:23:ba:e3:40:e1:d3:dd: fb:18:02:0f:e7:75:07:14:57:d2:a6:a7:3a:d8:18:c6:c3:59: a3:66:3f:f6:fa:f3:40:5b:2a:ab:55:ac:b8:c7:9a:4a:bc:82: a2:aa:1f:30:65:c3:6a:83:57:5b:53:04:49:a8:da:e3:b9:a0: cc:cc:c8:b1:43:d7:6a:27:1e:86:eb:90:e2:e4:d9:65:0e:83: 60:c4:6e:0f:45:39:22:5e:0e:9e:de:d0:fd:49:1a:c7:3c:4c: fa:3a:77:ed -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUPlg5yfPRZEwx5RCXMSvmwc3XSLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBRjEzMjRBMjNGREM4N0I3MTJBREQyMTg0NkNCMUJG M0NGRURGMjAeFw0yNTA3MjMwNTEzMDBaFw0yNjA3MjIwNTE4MDBaMDMxMTAvBgNV BAMTKEM5MEU1N0JFQUNEMzI3MjMwQjdCQzk1MDg1NDQxRDgxNjM4RjFBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMnv9tzpc2sfMVYI4ZomBq9/vA zF8iWBtWNF1SRA9SlRIt3qAhfJFCvyGirYLRMMckfqbCbQiRomU5GuvaMEV4SMIM 1Op2tJkyrzwIsGHCXrewb9wos+2c7hXA1jcPnO2azQCFQ7b+hudCxXiaaRBUYtsg o0uvtYthJKFi//hhcrgDMUtqu3+J9BpqWtoxXk9S9i9uAf8YmB9uiZ/XySiKQyTl jnTrMiEQOyZdyEcQR+tUPz1/4qqSeIybjdrzQIrL0If3SGqdDF0Fq44FrSZg0wQa BXzQvo3YU90uq2G0sWKLWMNwwAlEC9w3HfIJCL3HR94tDkZXkEBjnBydGr7DAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUyQ5XvqzTJyMLe8lQhUQdgWOPGo4wHwYDVR0j BBgwFoAUv68TJKI/3Ie3Eq3SGEbLG/PP7fIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g5c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpI SjcvMC9CRkFGMTMyNEEyM0ZEQzg3QjcxMkFERDIxODQ2Q0IxQkYzQ0ZFREYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQUYxMzI0QTIzRkRDODdC NzEyQUREMjE4NDZDQjFCRjNDRkVERjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNoOXN3THVpOHBaaFpTVk16MW1UWldDVWNndTU2RDFwTjg2NHlKOTV6SEo3LzAv MzIzMDMwMmUzOTJlMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM3 MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAsgJHDANBgkqhkiG9w0BAQsFAAOCAQEAKkOHA5gTSKrn keq9eTd58jQq3cLSzHKOE8nqUNboNPACjzsP5rqucdS41T1WzGQQ0RsnCJ/uJNjq e3TU2MahHcc1F/0pQHKXAbcXv6a8IODBM5prmzFCKL0IhXG2yEWUryRdCzgk1Xq5 PY2jxtjhIMe9GINzu9aLoZG8e1jmQLHhnRe1NJpojMP9s4zqDJQsB8Wz4PjtgCgJ YZcjuuNA4dPd+xgCD+d1BxRX0qanOtgYxsNZo2Y/9vrzQFsqq1WsuMeaSryCoqof MGXDaoNXW1MESaja47mgzMzIsUPXaicehuuQ4uTZZQ6DYMRuD0U5Il4Ont7Q/Uka xzxM+jp37Q== -----END CERTIFICATE-----Generated at Tue Jul 29 01:22:16 2025 by rpki-client