$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa File: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (raw, json) Hash identifier: WD7M6wU3eaRd4QLn0BTsaWspALy2joQNSK7F8VMXY7o= Subject key identifier: 3C:FB:AB:22:5E:10:75:AB:C0:51:2D:B8:81:F7:23:E3:B0:C3:7C:6B Certificate issuer: /CN=0B31CCC1E89F4389597737BE4B57373331925A2F Certificate serial: 3468F3C3F8757E3D777A51DA6C5ED86B7052BEAA Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa Signing time: Thu 06 Mar 2025 21:46:05 +0000 ROA not before: Thu 06 Mar 2025 21:41:05 +0000 ROA not after: Thu 05 Mar 2026 21:46:05 +0000 asID: 264118 IP address blocks: 138.97.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:68:f3:c3:f8:75:7e:3d:77:7a:51:da:6c:5e:d8:6b:70:52:be:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F Validity Not Before: Mar 6 21:41:05 2025 GMT Not After : Mar 5 21:46:05 2026 GMT Subject: CN=3CFBAB225E1075ABC0512DB881F723E3B0C37C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:20:5b:3a:ff:3e:2e:e2:2c:27:b4:3f:34: ba:6a:a4:0c:8b:76:a8:b7:3b:ae:d9:bb:24:37:ba: 0f:d3:2a:39:1f:31:52:01:02:e6:e5:5a:57:db:0a: ab:a0:98:4b:5f:5a:19:a1:96:6d:1b:e0:6d:fd:19: d6:b2:1b:ba:8c:3d:6b:98:bc:ad:fd:5d:dc:ab:2f: cb:4a:d8:9b:47:f0:04:a1:4e:55:92:e1:08:6b:bc: 08:9e:e1:76:df:eb:f4:fb:30:0c:ce:19:ee:22:f5: 61:73:ee:28:f1:ed:f8:8b:e7:a0:a7:46:84:35:61: 38:9c:9f:71:2b:af:ab:1e:2b:d9:57:55:60:1c:c3: e5:dc:c0:ad:81:f5:34:04:6e:32:c7:04:9f:4f:1a: 45:04:48:4b:b5:09:0c:44:22:25:9d:d9:0e:04:cc: b6:a7:ea:3b:08:77:1c:90:4f:4c:be:9d:30:ef:a8: 93:19:7e:51:be:42:31:10:64:3f:5f:df:0b:66:59: 53:d8:2a:1b:22:bb:b4:a3:d4:46:06:2f:87:bb:87: 93:30:e4:2a:6c:35:9c:2c:ab:7a:8b:29:c6:1c:2e: a5:4f:21:73:9c:f5:7d:50:b9:62:e7:db:38:be:0b: eb:d4:a1:c0:91:9a:77:1c:76:9e:ef:31:cf:4e:21: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FB:AB:22:5E:10:75:AB:C0:51:2D:B8:81:F7:23:E3:B0:C3:7C:6B X509v3 Authority Key Identifier: keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:8c:5b:c1:8a:b4:41:8f:e2:6d:76:4a:b7:f0:f7:cf:cc:8d: 1b:b1:a7:81:bc:de:91:8e:ee:24:9c:f8:6b:1d:f7:98:65:58: 3b:d9:4c:a4:db:2a:88:44:22:5e:e2:6b:75:f9:55:db:70:59: a8:2b:b0:e3:20:32:e3:e4:bd:d3:da:b5:21:43:11:a9:0a:ae: 8f:32:7c:a4:65:f9:e8:32:69:4a:8e:d8:9d:54:70:a7:b8:7e: a2:b4:5d:81:a3:9e:1e:36:fc:e1:fc:62:3e:c3:31:5f:ff:30: 8d:aa:84:ae:78:d5:50:cc:af:d5:88:91:39:f6:a6:a1:67:72: d7:02:18:6e:ab:fc:ca:71:33:94:04:39:01:70:62:2d:e9:20: c6:ca:ae:76:75:b4:89:dc:4d:c3:11:33:6e:74:91:18:8e:38: e7:d5:17:9d:5a:40:fd:f5:02:c1:92:6b:ce:17:2a:d3:ab:1a: 88:86:7e:f7:bb:82:c6:0b:6a:91:67:b9:71:a6:d9:eb:8e:26: 6e:59:47:0d:bb:5f:32:bf:ff:ad:5f:40:89:b9:2b:c8:89:ff: 46:0a:6d:5e:c0:12:d2:05:1e:7c:c2:f9:d4:24:36:11:1d:cf: 94:a5:38:74:b7:91:4e:e6:04:c6:1e:85:21:00:9e:0f:1e:af: 7a:a6:75:b4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUNGjzw/h1fj13elHabF7Ya3BSvqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIzMUNDQzFFODlGNDM4OTU5NzczN0JFNEI1NzM3MzMz MTkyNUEyRjAeFw0yNTAzMDYyMTQxMDVaFw0yNjAzMDUyMTQ2MDVaMDMxMTAvBgNV BAMTKDNDRkJBQjIyNUUxMDc1QUJDMDUxMkRCODgxRjcyM0UzQjBDMzdDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPyBbOv8+LuIsJ7Q/NLpqpAyL dqi3O67ZuyQ3ug/TKjkfMVIBAublWlfbCqugmEtfWhmhlm0b4G39GdayG7qMPWuY vK39XdyrL8tK2JtH8AShTlWS4QhrvAie4Xbf6/T7MAzOGe4i9WFz7ijx7fiL56Cn RoQ1YTicn3Err6seK9lXVWAcw+XcwK2B9TQEbjLHBJ9PGkUESEu1CQxEIiWd2Q4E zLan6jsIdxyQT0y+nTDvqJMZflG+QjEQZD9f3wtmWVPYKhsiu7Sj1EYGL4e7h5Mw 5CpsNZwsq3qLKcYcLqVPIXOc9X1QuWLn2zi+C+vUocCRmnccdp7vMc9OIRpbAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUPPurIl4QdavAUS24gfcj47DDfGswHwYDVR0j BBgwFoAUCzHMweifQ4lZdze+S1c3MzGSWi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhLa0d6WXdXZHRUcjduanoxQjZzRmNjc0FLSnRaWjNrREtwdFhNM0FT cXgvMS8wQjMxQ0NDMUU4OUY0Mzg5NTk3NzM3QkU0QjU3MzczMzMxOTI1QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMzFDQ0MxRTg5RjQzODk1 OTc3MzdCRTRCNTczNzMzMzE5MjVBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JIS2tHell3V2R0VHI3bmp6MUI2c0ZjY3NBS0p0Wloza0RLcHRYTTNBU3F4LzEv MzEzMzM4MmUzOTM3MmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0 MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCimEYMA0GCSqGSIb3DQEBCwUAA4IBAQAfjFvBirRB j+Jtdkq38PfPzI0bsaeBvN6Rju4knPhrHfeYZVg72Uyk2yqIRCJe4mt1+VXbcFmo K7DjIDLj5L3T2rUhQxGpCq6PMnykZfnoMmlKjtidVHCnuH6itF2Bo54eNvzh/GI+ wzFf/zCNqoSueNVQzK/ViJE59qahZ3LXAhhuq/zKcTOUBDkBcGIt6SDGyq52dbSJ 3E3DETNudJEYjjjn1RedWkD99QLBkmvOFyrTqxqIhn73u4LGC2qRZ7lxptnrjiZu WUcNu18yv/+tX0CJuSvIif9GCm1ewBLSBR58wvnUJDYRHc+UpTh0t5FO5gTGHoUh AJ4PHq96pnW0 -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:52 2025 by rpki-client