$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa File: 3230302e332e31362e302f32302d3234203d3e203532363839.roa (raw, json) Hash identifier: vGHgtO8ibKMXxeWBo4E7fEjw5gPab7XjuXYqjKBnSLM= Subject key identifier: F2:14:1A:A1:91:1F:93:00:0D:61:00:C1:E7:6F:12:A7:47:7D:F1:57 Certificate issuer: /CN=D4F7947FFA165065796964648407CC7868D8C807 Certificate serial: 4B350CD7D41272AF57A2F76A493912822A7D9AA1 Authority key identifier: D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa Signing time: Mon 15 Sep 2025 00:27:01 +0000 ROA not before: Mon 15 Sep 2025 00:22:01 +0000 ROA not after: Mon 14 Sep 2026 00:27:01 +0000 asID: 52689 IP address blocks: 200.3.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:35:0c:d7:d4:12:72:af:57:a2:f7:6a:49:39:12:82:2a:7d:9a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F7947FFA165065796964648407CC7868D8C807 Validity Not Before: Sep 15 00:22:01 2025 GMT Not After : Sep 14 00:27:01 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:76:a6:08:8b:0c:2e:77:85:08:79:07:5a: 7b:0d:3a:2d:cf:0b:fc:87:15:2f:55:6f:d1:b2:9a: 71:90:11:d3:59:71:b1:df:47:92:32:fe:f8:f2:f1: 37:50:a9:c6:e5:8c:7e:4d:15:32:65:c1:25:29:14: be:67:99:e0:1d:57:a5:af:46:57:61:b3:30:ec:9a: d8:ab:f2:e2:ad:0b:e0:23:ce:8c:3d:9e:cb:c1:52: fb:4b:f5:e6:fd:09:f3:6e:cc:73:41:d0:0c:08:aa: 80:a0:7e:54:41:da:8f:51:c0:69:11:63:e3:83:fb: 22:12:86:f3:be:e7:4d:bc:12:6d:e3:a2:d5:29:8e: 8e:77:2d:b0:23:4d:28:ab:ba:bc:c9:c9:5b:85:9b: 68:47:60:88:e9:37:58:e6:90:c3:ed:6b:6a:19:da: 3a:12:42:29:ce:0d:4e:6c:19:60:0c:ea:cd:bb:01: 0a:9c:86:c0:5a:ca:54:d1:0b:e1:58:01:d8:9e:05: c7:ef:f7:08:ef:1c:b5:b9:0c:e7:b4:57:b5:5f:75: ee:aa:dd:f4:7a:22:50:a5:e1:8d:cf:99:81:25:1a: 7c:13:93:8d:b6:ac:f9:28:7e:52:5c:85:cf:86:1a: 92:9d:b6:41:2c:71:c7:af:d9:11:42:b9:a7:69:21: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:14:1A:A1:91:1F:93:00:0D:61:00:C1:E7:6F:12:A7:47:7D:F1:57 X509v3 Authority Key Identifier: keyid:D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.16.0/20 Signature Algorithm: sha256WithRSAEncryption 58:38:ef:5c:fb:ea:c4:e6:76:69:ff:0c:69:b1:f3:1b:ba:48: a9:e0:72:df:b3:34:54:94:fd:2f:8e:c4:8a:5d:d9:81:83:a1: 3a:91:88:2a:74:7f:e3:56:af:d1:a6:38:de:28:8d:70:48:4b: d0:68:22:44:a4:b1:d7:c0:3a:49:48:93:e7:85:2b:6f:68:4f: d9:a7:15:32:1a:81:05:d2:67:72:a8:d5:b5:02:bb:af:12:82: 21:5a:d0:ac:86:4c:25:e8:5e:b7:ed:0c:ed:f5:b2:55:fa:20: 2a:1a:03:54:7e:e1:fb:2c:ec:ad:99:da:fd:62:ab:73:8d:fe: 0a:df:d0:bc:12:31:33:24:cc:65:0c:bc:2d:02:76:5d:34:6a: e8:f5:2c:ab:d4:18:cc:3b:2d:d7:40:7e:65:02:ef:89:0b:ac: b3:f3:8d:cc:6e:e7:8a:55:48:02:5e:16:45:48:b1:cd:c1:8b: 36:0c:ac:d8:9b:67:e7:26:dc:31:85:f0:17:75:76:de:a3:c2: 70:4f:ae:37:98:f2:d2:c0:97:b8:fb:11:40:c7:e3:bc:2f:64: b1:90:ef:26:b4:93:54:c3:43:fd:91:d0:e8:64:6a:88:f0:73: ba:cc:a6:50:67:7f:a3:40:40:b5:4a:c1:f7:6e:00:fd:b5:a3: 84:a7:64:b6 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUSzUM19QScq9XovdqSTkSgip9mqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRGNzk0N0ZGQTE2NTA2NTc5Njk2NDY0ODQwN0NDNzg2 OEQ4QzgwNzAeFw0yNTA5MTUwMDIyMDFaFw0yNjA5MTQwMDI3MDFaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDcyQjc2QTYwODhCMEMyRTc3 ODUwODc5MDc1QTdCMEQzQTJEQ0YwQkZDODcxNTJGNTU2RkQxQjI5QTcxOTAxMUQz NTk3MUIxREY0NzkyMzJGRUY4RjJGMTM3NTBBOUM2RTU4QzdFNEQxNTMyNjVDMTI1 MjkxNEJFNjc5OUUwMUQ1N0E1QUY0NjU3NjFCMzMwRUM5QUQ4QUJGMkUyQUQwQkUw MjNDRThDM0Q5RUNCQzE1MkZCNEJGNUU2RkQwOUYzNkVDQzczNDFEMDBDMDhBQTgw QTA3RTU0NDFEQThGNTFDMDY5MTE2M0UzODNGQjIyMTI4NkYzQkVFNzREQkMxMjZE RTNBMkQ1Mjk4RThFNzcyREIwMjM0RDI4QUJCQUJDQzlDOTVCODU5QjY4NDc2MDg4 RTkzNzU4RTY5MEMzRUQ2QjZBMTlEQTNBMTI0MjI5Q0UwRDRFNkMxOTYwMENFQUNE QkIwMTBBOUM4NkMwNUFDQTU0RDEwQkUxNTgwMUQ4OUUwNUM3RUZGNzA4RUYxQ0I1 QjkwQ0U3QjQ1N0I1NUY3NUVFQUFEREY0N0EyMjUwQTVFMThEQ0Y5OTgxMjUxQTdD MTM5MzhEQjZBQ0Y5Mjg3RTUyNUM4NUNGODYxQTkyOURCNjQxMkM3MUM3QUZEOTEx NDJCOUE3NjkyMTI2NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA1yt2pgiLDC53hQh5B1p7DTotzwv8hxUvVW/RsppxkBHTWXGx30eS Mv748vE3UKnG5Yx+TRUyZcElKRS+Z5ngHVelr0ZXYbMw7JrYq/LirQvgI86MPZ7L wVL7S/Xm/QnzbsxzQdAMCKqAoH5UQdqPUcBpEWPjg/siEobzvudNvBJt46LVKY6O dy2wI00oq7q8yclbhZtoR2CI6TdY5pDD7WtqGdo6EkIpzg1ObBlgDOrNuwEKnIbA WspU0QvhWAHYngXH7/cI7xy1uQzntFe1X3Xuqt30eiJQpeGNz5mBJRp8E5ONtqz5 KH5SXIXPhhqSnbZBLHHHr9kRQrmnaSEmUwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE FPIUGqGRH5MADWEAwedvEqdHffFXMB8GA1UdIwQYMBaAFNT3lH/6FlBleWlkZIQH zHho2MgHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0OGlEMmg4WHZ3a2lC TkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAvRDRGNzk0N0ZGQTE2NTA2 NTc5Njk2NDY0ODQwN0NDNzg2OEQ4QzgwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9ENEY3OTQ3RkZBMTY1MDY1Nzk2OTY0NjQ4NDA3Q0M3ODY4RDhD ODA3LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85NDhpRDJoOFh2d2tpQk5DQ1RN eFc3MUxDU1VFSG1ZUDQxSDhxZEI5NDN0aS8wLzMyMzAzMDJlMzMyZTMxMzYyZTMw MmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzYzODM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyAMQMA0G CSqGSIb3DQEBCwUAA4IBAQBYOO9c++rE5nZp/wxpsfMbukip4HLfszRUlP0vjsSK XdmBg6E6kYgqdH/jVq/RpjjeKI1wSEvQaCJEpLHXwDpJSJPnhStvaE/ZpxUyGoEF 0mdyqNW1AruvEoIhWtCshkwl6F637Qzt9bJV+iAqGgNUfuH7LOytmdr9Yqtzjf4K 39C8EjEzJMxlDLwtAnZdNGro9Syr1BjMOy3XQH5lAu+JC6yz843MbueKVUgCXhZF SLHNwYs2DKzYm2fnJtwxhfAXdXbeo8JwT643mPLSwJe4+xFAx+O8L2SxkO8mtJNU w0P9kdDoZGqI8HO6zKZQZ3+jQEC1SsH3bgD9taOEp2S2 -----END CERTIFICATE-----Generated at Mon Nov 3 19:17:18 2025 by rpki-client