$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa File: 3138392e312e3134342e302f32302d3332203d3e203238363638.roa (raw, json) Hash identifier: ZHXtOSkm1F/Hw26hnb/NDs7e4v2IdU1fFMHb3tlvP8A= Subject key identifier: A9:B7:A1:93:7D:BE:E3:7B:87:01:23:75:47:4D:4E:E9:09:0F:77:AF Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Certificate serial: 04E540738662E3A747DABF6DFF7B42470C935C19 Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa Signing time: Fri 15 Aug 2025 20:31:23 +0000 ROA not before: Fri 15 Aug 2025 20:26:23 +0000 ROA not after: Fri 14 Aug 2026 20:31:23 +0000 asID: 28668 IP address blocks: 189.1.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e5:40:73:86:62:e3:a7:47:da:bf:6d:ff:7b:42:47:0c:93:5c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Validity Not Before: Aug 15 20:26:23 2025 GMT Not After : Aug 14 20:31:23 2026 GMT Subject: CN=A9B7A1937DBEE37B87012375474D4EE9090F77AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:66:b7:64:6e:91:7d:5d:44:23:bd:79:ae: 9b:09:38:a8:45:92:54:59:a6:e3:e0:b4:57:04:78: 58:91:6d:fd:80:1a:a8:ba:f8:c5:c6:30:9c:42:ea: 0c:38:b8:b0:cd:3c:46:8a:99:ad:d3:3f:1b:69:05: d2:57:f6:f7:9c:b8:11:7c:55:d0:41:6e:1c:e0:5c: 68:ec:94:7c:92:93:50:dd:e1:93:c9:8d:3f:cc:0b: 71:d6:3c:90:5e:50:15:b4:b3:05:95:08:6e:a1:0d: 9c:39:bd:f5:96:28:66:be:7b:ab:41:d7:c2:2e:f1: 72:dc:5e:7e:71:7b:38:74:44:e1:99:76:b0:70:27: 9b:52:92:4c:d9:04:75:15:34:90:87:1b:6b:49:4a: 6d:6b:e0:dd:b9:9c:f5:23:6a:f6:ea:43:19:e2:f6: ba:69:c2:a7:58:5a:7e:ac:fa:84:2a:7d:7a:14:1a: 74:c1:1f:40:92:27:a1:61:d8:90:fc:69:6b:14:23: d6:57:d0:17:f8:c4:63:57:c9:48:72:25:45:31:9c: 11:2d:40:22:96:52:f8:25:52:38:07:b7:c5:67:7f: 4e:d3:33:a4:82:52:06:81:ff:b1:35:5b:38:0b:1e: aa:69:4e:43:e9:c2:f6:92:1b:41:4a:cd:1c:3e:d3: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:A1:93:7D:BE:E3:7B:87:01:23:75:47:4D:4E:E9:09:0F:77:AF X509v3 Authority Key Identifier: keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.1.144.0/20 Signature Algorithm: sha256WithRSAEncryption 07:92:db:04:1e:16:19:fe:b5:1e:1d:aa:7c:c1:72:1a:28:25: 0c:60:ee:a7:76:82:21:13:42:a0:d0:81:d2:ed:3c:2c:6a:a7: 9d:09:48:32:4e:55:aa:6b:c5:e9:f8:82:d4:ff:3f:62:5b:e2: 9b:4e:75:c0:1b:76:92:a6:4d:54:ad:03:7f:18:b3:f9:5e:fc: a7:12:28:f3:d0:93:ee:49:6a:85:a2:79:9a:f4:b2:39:4c:0f: ca:2e:45:9f:5c:7b:7d:1f:dd:62:63:77:b4:19:16:6d:32:82: 8a:51:aa:2c:bc:38:3c:dc:8b:d5:36:16:35:15:24:7e:27:97: 98:e4:4d:d6:8b:9b:2a:89:b2:b2:79:88:0c:45:e6:fa:a5:6e: 31:c4:01:9f:d8:9c:31:76:f8:2d:5b:8f:d9:d5:a2:de:98:00: d2:bf:a6:5f:a7:36:7d:7d:27:d9:a3:e5:cc:4f:a0:a9:76:5f: 21:74:65:7b:35:dd:21:00:13:1e:e8:e6:53:36:ab:5e:b1:1e: dc:5d:ac:f1:8b:27:9e:ec:33:07:6b:d6:03:14:a4:ba:45:08: 13:89:05:14:b5:32:58:80:f3:5f:2d:6f:05:33:58:c4:d2:32: 19:67:3b:68:dd:f5:3c:61:6f:64:0f:0c:e3:8b:a5:11:df:66: fa:fb:12:b0 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUBOVAc4Zi46dH2r9t/3tCRwyTXBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG RjBDNTY1MjAeFw0yNTA4MTUyMDI2MjNaFw0yNjA4MTQyMDMxMjNaMDMxMTAvBgNV BAMTKEE5QjdBMTkzN0RCRUUzN0I4NzAxMjM3NTQ3NEQ0RUU5MDkwRjc3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxGa3ZG6RfV1EI715rpsJOKhF klRZpuPgtFcEeFiRbf2AGqi6+MXGMJxC6gw4uLDNPEaKma3TPxtpBdJX9vecuBF8 VdBBbhzgXGjslHySk1Dd4ZPJjT/MC3HWPJBeUBW0swWVCG6hDZw5vfWWKGa+e6tB 18Iu8XLcXn5xezh0ROGZdrBwJ5tSkkzZBHUVNJCHG2tJSm1r4N25nPUjavbqQxni 9rppwqdYWn6s+oQqfXoUGnTBH0CSJ6Fh2JD8aWsUI9ZX0Bf4xGNXyUhyJUUxnBEt QCKWUvglUjgHt8Vnf07TM6SCUgaB/7E1WzgLHqppTkPpwvaSG0FKzRw+08o7AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUqbehk32+43uHASN1R01O6QkPd68wHwYDVR0j BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv MzEzODM5MmUzMTJlMzEzNDM0MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODM2 MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBL0BkDANBgkqhkiG9w0BAQsFAAOCAQEAB5LbBB4WGf61 Hh2qfMFyGiglDGDup3aCIRNCoNCB0u08LGqnnQlIMk5VqmvF6fiC1P8/Ylvim051 wBt2kqZNVK0Dfxiz+V78pxIo89CT7klqhaJ5mvSyOUwPyi5Fn1x7fR/dYmN3tBkW bTKCilGqLLw4PNyL1TYWNRUkfieXmORN1oubKomysnmIDEXm+qVuMcQBn9icMXb4 LVuP2dWi3pgA0r+mX6c2fX0n2aPlzE+gqXZfIXRlezXdIQATHujmUzarXrEe3F2s 8YsnnuwzB2vWAxSkukUIE4kFFLUyWIDzXy1vBTNYxNIyGWc7aN31PGFvZA8M44ul Ed9m+vsSsA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:38 2025 by rpki-client