$ rpki-client -vvf rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa File: 3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa (raw, json) Hash identifier: MK0u1J0qHracVd3QCLPP497bdJP46gdfgqWbqN0UK1o= Subject key identifier: 7E:38:7C:65:E9:50:E0:44:F0:C7:8F:CA:7C:29:9B:07:4A:A1:28:8B Certificate issuer: /CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF Certificate serial: 42B0B31DF93AA35ADF3DC14CCFE5036B191C1CD2 Authority key identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer Subject info access: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa Signing time: Tue 28 Oct 2025 12:11:10 +0000 ROA not before: Tue 28 Oct 2025 12:06:10 +0000 ROA not after: Tue 27 Oct 2026 12:11:10 +0000 asID: 265408 IP address blocks: 168.195.44.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 03:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b0:b3:1d:f9:3a:a3:5a:df:3d:c1:4c:cf:e5:03:6b:19:1c:1c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF Validity Not Before: Oct 28 12:06:10 2025 GMT Not After : Oct 27 12:11:10 2026 GMT Subject: CN=7E387C65E950E044F0C78FCA7C299B074AA1288B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:7d:5e:bb:d1:42:59:2b:91:6f:04:9b:96: 0d:17:7c:da:02:cb:28:01:a1:8a:6f:0d:a1:ad:5f: 34:1c:72:ae:db:d8:81:27:ea:e9:36:c8:62:7c:48: 4c:b2:5b:f8:fe:b6:5a:0e:95:b1:13:05:c0:39:89: 6e:cb:87:d6:44:1a:49:c4:2f:77:42:d4:78:0e:9e: 5b:20:3d:af:ea:d3:04:25:a9:e8:ab:08:31:81:b6: b7:b2:e0:e6:6f:5a:99:b7:63:d4:50:2b:d5:e0:b0: ca:c5:f3:a1:e2:1b:ae:4c:c0:70:93:89:df:5b:b3: 4f:01:ef:13:af:ec:4b:64:88:4c:cc:75:64:b5:b9: 7e:a0:29:d1:60:ff:2c:57:e5:75:1b:61:27:69:71: 3e:e6:d4:58:90:89:94:8e:ef:df:ac:b1:b0:9a:e4: 50:ee:03:7b:a2:67:23:34:88:3e:16:ae:0e:0c:88: ea:1c:37:ec:f1:83:e1:11:da:0d:8b:35:ba:7a:ae: cd:40:58:0f:2b:40:f1:3b:56:26:55:cd:84:89:f0: 04:bd:2f:40:b7:d5:ea:ca:b3:a2:07:ba:c6:86:82: fe:ee:2b:fe:74:c2:64:23:90:bf:fc:a9:08:53:61: ae:4f:1f:61:ee:52:01:10:10:d3:a7:07:76:f5:be: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:7C:65:E9:50:E0:44:F0:C7:8F:CA:7C:29:9B:07:4A:A1:28:8B X509v3 Authority Key Identifier: keyid:2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.44.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:a1:ba:94:0f:b5:e0:6a:50:a1:21:0a:a6:c4:f3:c1:1d:3d: 57:4d:59:13:fe:9e:75:d8:ce:78:ca:4d:f4:03:a3:1a:53:35: 27:ac:9f:57:66:07:5e:79:3d:57:31:e9:a7:d6:d2:61:48:7a: b6:cf:65:6e:69:df:b1:a4:c3:62:8c:2a:03:99:9e:8f:de:ae: 67:26:e1:bd:5b:31:86:bd:8e:d3:dd:8b:3f:1e:98:21:b4:51: dc:24:55:f0:17:22:1e:5d:ba:93:9d:3a:a5:ad:79:b7:43:ab: b5:48:0d:7e:0c:fe:5f:bb:e0:1f:06:53:f1:a6:b5:cb:c5:7f: a0:94:ae:67:5e:2a:71:e2:6c:38:5a:34:93:60:84:ca:2c:c7: 87:dc:83:5c:92:f6:4c:8e:b3:98:53:2b:60:30:fd:e0:49:02: 67:5a:b4:75:00:b2:4a:71:9a:ab:d9:ff:1b:75:3e:5d:40:c7: 8f:55:f3:2f:1e:49:96:83:58:6d:67:28:68:c9:01:a0:01:ed: 22:cf:f9:7a:13:e2:29:63:e3:f2:90:88:df:34:d4:b9:02:30: 1d:a4:a6:98:e2:4b:af:d0:a8:2a:dd:d3:0b:ab:1e:c1:ba:47: 70:32:76:b5:e1:b2:17:c7:d4:eb:04:f3:82:c8:19:b7:f9:64: b9:ed:8c:b0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQrCzHfk6o1rfPcFMz+UDaxkcHNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY2RTNBODc4QTEyNUI3NEJCMjkyQ0U1NDEyQTUyM0Y0 QjFEQ0JBRjAeFw0yNTEwMjgxMjA2MTBaFw0yNjEwMjcxMjExMTBaMDMxMTAvBgNV BAMTKDdFMzg3QzY1RTk1MEUwNDRGMEM3OEZDQTdDMjk5QjA3NEFBMTI4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+31eu9FCWSuRbwSblg0XfNoC yygBoYpvDaGtXzQccq7b2IEn6uk2yGJ8SEyyW/j+tloOlbETBcA5iW7Lh9ZEGknE L3dC1HgOnlsgPa/q0wQlqeirCDGBtrey4OZvWpm3Y9RQK9XgsMrF86HiG65MwHCT id9bs08B7xOv7EtkiEzMdWS1uX6gKdFg/yxX5XUbYSdpcT7m1FiQiZSO79+ssbCa 5FDuA3uiZyM0iD4Wrg4MiOocN+zxg+ER2g2LNbp6rs1AWA8rQPE7ViZVzYSJ8AS9 L0C31erKs6IHusaGgv7uK/50wmQjkL/8qQhTYa5PH2HuUgEQENOnB3b1voM3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUfjh8ZelQ4ETwx4/KfCmbB0qhKIswHwYDVR0j BBgwFoAUL246h4oSW3S7KSzlQSpSP0sdy68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWtuSDFBZXFkWFQ2R0xtdUpzWnNNcGJKUktXZWtEZUNTcmNYc3lMUERq c2YvMC8yRjZFM0E4NzhBMTI1Qjc0QkIyOTJDRTU0MTJBNTIzRjRCMURDQkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNkUzQTg3OEExMjVCNzRC QjI5MkNFNTQxMkE1MjNGNEIxRENCQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlrbkgxQWVxZFhUNkdMbXVKc1pzTXBiSlJLV2VrRGVDU3JjWHN5TFBEanNmLzAv MzEzNjM4MmUzMTM5MzUyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzUzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKowywwDQYJKoZIhvcNAQELBQADggEBAH6hupQP teBqUKEhCqbE88EdPVdNWRP+nnXYznjKTfQDoxpTNSesn1dmB155PVcx6afW0mFI erbPZW5p37Gkw2KMKgOZno/ermcm4b1bMYa9jtPdiz8emCG0UdwkVfAXIh5dupOd OqWtebdDq7VIDX4M/l+74B8GU/GmtcvFf6CUrmdeKnHibDhaNJNghMosx4fcg1yS 9kyOs5hTK2Aw/eBJAmdatHUAskpxmqvZ/xt1Pl1Ax49V8y8eSZaDWG1nKGjJAaAB 7SLP+XoT4ilj4/KQiN801LkCMB2kppjiS6/QqCrd0wurHsG6R3AydrXhshfH1OsE 84LIGbf5ZLntjLA= -----END CERTIFICATE-----Generated at Tue Nov 4 05:06:09 2025 by rpki-client