$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa File: 3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa (raw, json) Hash identifier: a/NWSgyqaVrSOBNMkRNffvSTbs66d16QWu+Ch7BcDBU= Subject key identifier: 47:64:3B:70:9F:00:4D:05:21:47:AC:D9:17:7A:97:13:04:E4:56:8F Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 2DA33D741FD9BB645BCB451701B5643FB4BA2EA2 Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa Signing time: Mon 13 Oct 2025 13:46:33 +0000 ROA not before: Mon 13 Oct 2025 13:41:33 +0000 ROA not after: Mon 12 Oct 2026 13:46:33 +0000 asID: 1251 IP address blocks: 200.144.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a3:3d:74:1f:d9:bb:64:5b:cb:45:17:01:b5:64:3f:b4:ba:2e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Oct 13 13:41:33 2025 GMT Not After : Oct 12 13:46:33 2026 GMT Subject: CN=47643B709F004D052147ACD9177A971304E4568F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:11:17:d6:f3:db:38:7c:7b:f0:86:75:b7: 05:ad:d6:bb:39:de:63:e5:23:22:fb:aa:07:b8:c7: b7:b9:5a:82:cc:46:0f:d9:a6:ff:d1:6b:c6:88:66: f2:93:b5:7f:f8:5e:90:f1:97:4c:80:38:b3:9e:85: 84:43:11:62:25:3e:24:be:37:3a:0a:6f:4d:06:6d: 2f:ec:bd:7a:99:c0:ab:2d:ab:df:14:e4:1a:a5:54: 07:45:30:87:2f:80:db:8b:c0:2b:a4:3e:62:d7:6e: 85:f0:4f:25:7d:42:9c:bd:fe:ad:40:d9:6f:d3:5b: 6a:ab:09:06:4c:c6:93:fe:68:65:f4:2a:d6:9f:07: 37:65:35:8c:fb:57:a9:de:59:70:95:97:7c:91:4d: 64:eb:9d:82:64:84:11:b2:63:06:ec:7b:ce:8a:8b: e4:9c:6e:06:76:ab:05:3a:4c:c0:f2:99:87:1e:8c: 43:02:df:4a:74:52:90:59:6b:9a:49:4f:49:0c:95: 7c:01:56:85:be:3e:27:83:6c:41:6e:4d:f2:c7:6e: cf:6b:2d:c2:04:6c:9e:83:cf:2c:72:2c:54:d8:85: 1f:48:3a:ee:25:d0:e6:b8:32:fb:eb:e2:b1:78:f7: dd:4c:10:2f:29:2f:b0:77:02:1d:a2:6c:5e:1b:76: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:3B:70:9F:00:4D:05:21:47:AC:D9:17:7A:97:13:04:E4:56:8F X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.144.120.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:5f:5b:66:2c:a5:26:8a:9c:55:96:cb:0c:2f:65:74:a0:2d: 65:dd:82:1a:a9:bc:37:9a:f9:42:a5:d9:41:8e:e5:11:b1:0d: 96:7f:d4:74:86:43:85:34:e0:86:a9:f1:e6:46:89:be:36:db: b7:d1:55:39:38:5b:7a:3b:79:97:51:45:03:da:1b:f3:0e:3a: 21:f6:e6:b2:5e:1d:f4:9c:b7:04:a0:8b:2b:e6:6c:65:a1:f3: bc:78:6e:b3:c6:ee:6c:77:52:11:ba:45:cf:70:95:45:bd:c2: df:72:ae:66:a1:01:a6:79:f8:74:38:71:2e:cd:6e:0f:e1:51: 04:53:3d:bd:59:96:3e:4a:6d:78:c5:1a:04:a3:35:b2:3e:d3: fc:2e:c5:73:44:87:21:13:a0:73:23:72:c0:8e:1f:fd:38:f4: 80:d2:53:4d:bb:bb:9d:5f:fb:fe:5e:30:d4:d2:b2:af:e4:eb: ca:c0:23:17:52:fc:03:54:72:a4:e6:01:5d:4e:7c:0e:54:e8: 4c:4c:70:bc:8c:6f:a2:cc:4b:49:21:b5:69:8f:fc:f0:6c:bb: 44:99:17:07:8a:71:44:49:a7:d3:68:6e:a2:c1:45:eb:fd:c5: df:25:c9:c7:2f:3e:27:5a:a4:19:64:bd:a8:94:f6:e9:3c:7e: f2:2e:fe:15 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIULaM9dB/Zu2Rby0UXAbVkP7S6LqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNTEwMTMxMzQxMzNaFw0yNjEwMTIxMzQ2MzNaMDMxMTAvBgNV BAMTKDQ3NjQzQjcwOUYwMDREMDUyMTQ3QUNEOTE3N0E5NzEzMDRFNDU2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4xEX1vPbOHx78IZ1twWt1rs5 3mPlIyL7qge4x7e5WoLMRg/Zpv/Ra8aIZvKTtX/4XpDxl0yAOLOehYRDEWIlPiS+ NzoKb00GbS/svXqZwKstq98U5BqlVAdFMIcvgNuLwCukPmLXboXwTyV9Qpy9/q1A 2W/TW2qrCQZMxpP+aGX0KtafBzdlNYz7V6neWXCVl3yRTWTrnYJkhBGyYwbse86K i+ScbgZ2qwU6TMDymYcejEMC30p0UpBZa5pJT0kMlXwBVoW+PieDbEFuTfLHbs9r LcIEbJ6DzyxyLFTYhR9IOu4l0Oa4Mvvr4rF4991MEC8pL7B3Ah2ibF4bdjPlAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUR2Q7cJ8ATQUhR6zZF3qXEwTkVo8wHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTM0MzQyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMx MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDyJB4MA0GCSqGSIb3DQEBCwUAA4IBAQAfX1tmLKUm ipxVlssML2V0oC1l3YIaqbw3mvlCpdlBjuURsQ2Wf9R0hkOFNOCGqfHmRom+Ntu3 0VU5OFt6O3mXUUUD2hvzDjoh9uayXh30nLcEoIsr5mxlofO8eG6zxu5sd1IRukXP cJVFvcLfcq5moQGmefh0OHEuzW4P4VEEUz29WZY+Sm14xRoEozWyPtP8LsVzRIch E6BzI3LAjh/9OPSA0lNNu7udX/v+XjDU0rKv5OvKwCMXUvwDVHKk5gFdTnwOVOhM THC8jG+izEtJIbVpj/zwbLtEmRcHinFESafTaG6iwUXr/cXfJcnHLz4nWqQZZL2o lPbpPH7yLv4V -----END CERTIFICATE-----Generated at Mon Nov 3 19:11:07 2025 by rpki-client