$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa File: 3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa (raw, json) Hash identifier: OKxWWzGEBMxnVvl+7cmZX8RNnumjW08yDHr0GwoRLK0= Subject key identifier: 33:1D:E3:9A:28:C2:97:CC:CE:29:EF:93:F1:B7:74:D9:ED:2E:52:78 Certificate issuer: /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569 Certificate serial: 1EFF58EF42C5F5C09200DE15A28977DE304EB447 Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer Subject info access: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa Signing time: Fri 12 Sep 2025 15:36:23 +0000 ROA not before: Fri 12 Sep 2025 15:31:23 +0000 ROA not after: Fri 11 Sep 2026 15:36:23 +0000 asID: 265461 IP address blocks: 168.196.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 22:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ff:58:ef:42:c5:f5:c0:92:00:de:15:a2:89:77:de:30:4e:b4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569 Validity Not Before: Sep 12 15:31:23 2025 GMT Not After : Sep 11 15:36:23 2026 GMT Subject: CN=331DE39A28C297CCCE29EF93F1B774D9ED2E5278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:da:9e:65:d8:75:84:39:df:4c:85:33:c9: 3a:17:b6:36:59:c3:d1:a7:78:dd:9e:45:c7:94:00: 03:51:81:c9:68:f7:0b:0a:1d:2c:d8:ba:13:61:d6: 19:80:0e:fe:83:da:7d:a4:e8:6a:53:d9:6d:49:9f: 47:1f:0f:f3:5c:83:6a:35:a6:f4:0d:35:9b:ac:79: c2:a5:bf:04:11:54:20:1c:77:54:29:25:5f:ea:aa: bc:c7:3f:07:4f:5e:10:5b:27:e4:c0:a4:72:b8:4a: 34:41:bc:4d:86:24:74:f8:e2:a6:28:e6:e9:5f:2b: e5:e8:28:0e:c9:ee:64:4e:84:20:b2:21:a9:0f:5f: bb:f0:64:f1:cf:c8:e2:b4:00:e4:c5:72:d0:0d:0d: 1e:06:95:6f:84:2e:d2:4d:e4:00:49:aa:01:fb:4d: 0b:55:c1:67:0d:ba:fe:53:9d:1d:57:a4:9f:96:95: 28:58:59:04:9e:6f:c6:88:0f:fb:fb:da:98:b1:f1: 21:e0:97:5e:09:13:77:2a:3c:14:e2:d8:79:0e:62: 74:af:60:7f:65:57:03:0a:79:34:1e:94:97:43:4a: fc:f7:7c:4e:2e:ed:ff:8f:48:13:59:2e:b8:a4:30: 63:07:56:2c:2e:a6:e0:31:d9:a0:64:7d:00:98:3b: e1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:E3:9A:28:C2:97:CC:CE:29:EF:93:F1:B7:74:D9:ED:2E:52:78 X509v3 Authority Key Identifier: keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135332e302f32342d3234203d3e20323635343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.196.153.0/24 Signature Algorithm: sha256WithRSAEncryption a3:b5:da:af:e3:62:f0:b6:35:97:cd:b8:ef:f2:e6:53:06:8e: 71:28:55:19:d9:12:15:13:8c:e7:a3:c1:cc:f1:cd:cc:39:c9: ef:d9:e4:8a:b2:7a:71:a7:f6:ad:c0:17:ae:29:48:c4:05:5c: ec:9c:f0:96:16:c3:a6:37:b5:14:da:3b:12:84:63:18:93:09: 21:a8:38:20:8b:87:0f:59:6a:e4:cc:81:d2:6b:6d:2a:01:ca: 2f:6a:60:77:0a:98:3e:63:9b:07:2e:f5:9f:f0:6c:a4:45:95: 93:26:79:e8:7a:3e:38:6c:95:2f:d9:83:99:fe:75:28:67:5b: 8e:be:6d:7c:69:a4:f7:b5:e5:a6:fb:3d:72:09:3d:f6:34:42: d1:59:8b:97:08:0a:f6:2f:8d:9b:da:34:eb:2e:d4:e5:74:81: aa:d1:73:aa:f6:55:e3:8c:4c:06:d5:90:ac:09:a1:fd:90:95: 7c:dc:17:e0:bf:6e:0f:d7:ae:61:f4:87:63:45:25:ec:65:d9: d5:75:9d:65:d3:2a:29:1c:e0:5b:7c:9b:d4:e1:26:64:b9:e6: e4:41:bd:ff:5e:3d:b8:f3:2e:b6:a0:1f:c1:c2:67:fb:ae:2f: 33:29:c7:70:98:62:95:f0:30:b3:a7:cd:ea:d3:f4:03:1a:6d: 5c:0c:71:72 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUHv9Y70LF9cCSAN4Vool33jBOtEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx QzQzQzU2OTAeFw0yNTA5MTIxNTMxMjNaFw0yNjA5MTExNTM2MjNaMDMxMTAvBgNV BAMTKDMzMURFMzlBMjhDMjk3Q0NDRTI5RUY5M0YxQjc3NEQ5RUQyRTUyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs+tqeZdh1hDnfTIUzyToXtjZZ w9GneN2eRceUAANRgclo9wsKHSzYuhNh1hmADv6D2n2k6GpT2W1Jn0cfD/Ncg2o1 pvQNNZusecKlvwQRVCAcd1QpJV/qqrzHPwdPXhBbJ+TApHK4SjRBvE2GJHT44qYo 5ulfK+XoKA7J7mROhCCyIakPX7vwZPHPyOK0AOTFctANDR4GlW+ELtJN5ABJqgH7 TQtVwWcNuv5TnR1XpJ+WlShYWQSeb8aID/v72pix8SHgl14JE3cqPBTi2HkOYnSv YH9lVwMKeTQelJdDSvz3fE4u7f+PSBNZLrikMGMHViwupuAx2aBkfQCYO+F3AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUMx3jmijCl8zOKe+T8bd02e0uUngwHwYDVR0j BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv MzEzNjM4MmUzMTM5MzYyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEmTANBgkqhkiG9w0BAQsFAAOCAQEAo7Xa r+Ni8LY1l8247/LmUwaOcShVGdkSFROM56PBzPHNzDnJ79nkirJ6caf2rcAXrilI xAVc7JzwlhbDpje1FNo7EoRjGJMJIag4IIuHD1lq5MyB0mttKgHKL2pgdwqYPmOb By71n/BspEWVkyZ56Ho+OGyVL9mDmf51KGdbjr5tfGmk97Xlpvs9cgk99jRC0VmL lwgK9i+Nm9o06y7U5XSBqtFzqvZV44xMBtWQrAmh/ZCVfNwX4L9uD9euYfSHY0Ul 7GXZ1XWdZdMqKRzgW3yb1OEmZLnm5EG9/149uPMutqAfwcJn+64vMynHcJhilfAw s6fN6tP0AxptXAxxcg== -----END CERTIFICATE-----Generated at Thu Sep 18 23:50:18 2025 by rpki-client