$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130382e302f32332d3234203d3e203238353731.roa File: 3230302e31382e3130382e302f32332d3234203d3e203238353731.roa (raw, json) Hash identifier: FXdE4VA8ZY+ZEpWaFxeELV6PKBYt9mMm6SItE8X0ZUU= Subject key identifier: 2C:29:9B:F3:E1:BA:67:AD:86:D4:69:9E:F8:27:96:71:C3:54:B8:1C Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 3F5E83128D182040C06E7D6844B7255C08990938 Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130382e302f32332d3234203d3e203238353731.roa Signing time: Mon 13 Oct 2025 13:46:34 +0000 ROA not before: Mon 13 Oct 2025 13:41:34 +0000 ROA not after: Mon 12 Oct 2026 13:46:34 +0000 asID: 28571 IP address blocks: 200.18.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5e:83:12:8d:18:20:40:c0:6e:7d:68:44:b7:25:5c:08:99:09:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Oct 13 13:41:34 2025 GMT Not After : Oct 12 13:46:34 2026 GMT Subject: CN=2C299BF3E1BA67AD86D4699EF8279671C354B81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:7d:3c:bd:a1:6c:4e:dd:f7:e3:09:19:13: f9:39:8b:1c:10:a3:e8:e2:50:ff:ca:2d:0f:91:c8: 98:93:47:df:e0:8d:02:46:e8:6c:d8:54:c1:71:5f: d2:9e:8c:12:93:a7:b2:19:1b:f3:d2:20:07:95:4b: ee:55:8b:28:a8:89:a5:aa:92:d9:aa:9e:65:92:99: d5:65:3c:c8:b9:5c:af:6e:9a:7c:05:41:ec:8f:a7: 8d:ea:cb:81:07:1b:91:0e:3f:26:de:b8:8b:3a:f1: 4d:38:1f:1b:b1:95:f8:49:07:33:60:ee:00:ae:c6: f7:b9:db:94:d5:04:b3:33:15:f7:ae:5b:48:d1:4b: 4f:15:55:ee:90:6b:3c:2a:c9:5b:54:66:6a:4a:3b: 3a:10:cd:d0:8d:19:90:e9:46:58:94:aa:7e:2d:cd: ce:5c:67:5a:f2:64:a5:21:46:bc:d2:fd:15:29:18: b1:38:a0:2a:54:c9:6f:4e:03:66:bb:96:4e:82:24: fd:b1:63:86:bf:a6:d1:36:36:23:5f:ad:2f:3c:9f: 53:05:ed:db:2e:f9:25:de:02:6b:1d:a7:c3:73:21: ae:ac:f8:7e:44:19:58:6b:aa:f8:4c:c9:cf:c7:51: 55:90:77:84:ea:0c:4a:98:4f:99:33:ee:0c:3e:ed: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:9B:F3:E1:BA:67:AD:86:D4:69:9E:F8:27:96:71:C3:54:B8:1C X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130382e302f32332d3234203d3e203238353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.18.108.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:27:42:b9:13:47:8b:bc:1c:e8:5f:7a:2f:fd:45:63:84:1a: 0f:ee:6c:3b:57:2e:15:04:1c:76:cd:d3:8a:75:62:36:72:03: dc:e2:3e:58:67:b6:bc:d3:16:4f:40:a5:05:d6:78:74:f4:6f: 43:a4:27:29:80:a2:4f:94:3a:b8:89:d3:4f:ea:52:79:fc:94: 2d:ec:a4:1c:e8:20:9e:bc:0a:dc:e5:79:b4:8c:82:17:bc:5f: a3:ac:62:8c:6f:ff:d5:1e:00:4d:38:51:57:cf:8a:da:0c:e4: f6:cf:8e:b8:ba:db:fe:14:d6:a0:9b:50:6c:40:ce:bc:7e:ef: 4a:59:2c:85:88:81:67:38:d1:ee:e4:e9:c3:fb:f8:94:90:de: 14:fd:1f:47:b9:66:3e:a3:68:49:5c:70:6c:d3:cb:16:0b:e0: 10:09:c9:82:69:60:c9:17:b0:26:a4:94:43:50:e4:98:87:2b: 05:b9:e3:e3:da:3f:51:bc:95:07:79:59:94:9a:92:4b:df:fc: a5:9b:9a:3c:f5:4d:3e:c2:d1:d3:84:ed:3c:d1:3d:9e:b3:87: 48:d8:c3:cb:ec:5e:08:33:e0:c8:69:ab:e2:49:ea:c6:f2:89: 3c:e3:ea:8d:f7:26:16:de:60:b1:d8:43:16:4a:30:c8:2e:5d: f1:61:0b:76 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUP16DEo0YIEDAbn1oRLclXAiZCTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNTEwMTMxMzQxMzRaFw0yNjEwMTIxMzQ2MzRaMDMxMTAvBgNV BAMTKDJDMjk5QkYzRTFCQTY3QUQ4NkQ0Njk5RUY4Mjc5NjcxQzM1NEI4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YX08vaFsTt334wkZE/k5ixwQ o+jiUP/KLQ+RyJiTR9/gjQJG6GzYVMFxX9KejBKTp7IZG/PSIAeVS+5ViyioiaWq ktmqnmWSmdVlPMi5XK9umnwFQeyPp43qy4EHG5EOPybeuIs68U04HxuxlfhJBzNg 7gCuxve525TVBLMzFfeuW0jRS08VVe6QazwqyVtUZmpKOzoQzdCNGZDpRliUqn4t zc5cZ1ryZKUhRrzS/RUpGLE4oCpUyW9OA2a7lk6CJP2xY4a/ptE2NiNfrS88n1MF 7dsu+SXeAmsdp8NzIa6s+H5EGVhrqvhMyc/HUVWQd4TqDEqYT5kz7gw+7fsJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQULCmb8+G6Z62G1Gme+CeWccNUuBwwHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTM4MmUzMTMwMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM4 MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQByBJsMA0GCSqGSIb3DQEBCwUAA4IBAQA6J0K5E0eL vBzoX3ov/UVjhBoP7mw7Vy4VBBx2zdOKdWI2cgPc4j5YZ7a80xZPQKUF1nh09G9D pCcpgKJPlDq4idNP6lJ5/JQt7KQc6CCevArc5Xm0jIIXvF+jrGKMb//VHgBNOFFX z4raDOT2z464utv+FNagm1BsQM68fu9KWSyFiIFnONHu5OnD+/iUkN4U/R9HuWY+ o2hJXHBs08sWC+AQCcmCaWDJF7AmpJRDUOSYhysFuePj2j9RvJUHeVmUmpJL3/yl m5o89U0+wtHThO080T2es4dI2MPL7F4IM+DIaaviSerG8ok84+qN9yYW3mCx2EMW SjDILl3xYQt2 -----END CERTIFICATE-----Generated at Mon Nov 3 19:11:01 2025 by rpki-client