$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa File: 3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa (raw, json) Hash identifier: fCD7FthU6WKoidsH28JhaZ06zfDAC12Eiu+9Twb1bRU= Subject key identifier: C7:2D:3F:94:54:EC:CD:4A:B4:75:31:23:F1:47:E6:D9:7C:56:25:86 Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Certificate serial: 0996CF7648C23A458100150BCBE71F9700AF0B1B Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa Signing time: Thu 26 Jun 2025 11:56:37 +0000 ROA not before: Thu 26 Jun 2025 11:51:37 +0000 ROA not after: Thu 25 Jun 2026 11:56:37 +0000 asID: 53078 IP address blocks: 170.247.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:96:cf:76:48:c2:3a:45:81:00:15:0b:cb:e7:1f:97:00:af:0b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Validity Not Before: Jun 26 11:51:37 2025 GMT Not After : Jun 25 11:56:37 2026 GMT Subject: CN=C72D3F9454ECCD4AB4753123F147E6D97C562586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:e5:d1:e2:0d:8a:36:fd:57:5b:4a:10:de: 0e:b3:89:13:1c:bf:fa:24:eb:30:6f:c9:64:6c:c5: b8:63:3d:46:dc:80:95:85:e1:33:d6:3d:3f:90:9f: e5:3b:0a:29:ea:14:7e:9b:d3:74:38:95:76:8b:e3: e5:e9:e1:a0:27:a5:a1:db:2d:a5:6d:64:ed:b7:ed: fa:e9:69:1d:60:a2:33:f9:76:16:e1:ae:44:6b:1f: 3c:ad:d3:1a:8b:63:86:9d:27:b4:4b:4d:a4:bb:a1: 66:6c:5d:36:1d:81:76:73:ec:93:e7:a2:66:2d:64: ee:1d:15:32:57:01:db:2c:8f:6b:82:c0:f0:df:c8: e7:07:17:1f:83:d6:ef:f1:ce:5b:a8:00:4d:0b:ad: ca:e8:cc:0a:bb:5a:0d:92:c0:a1:35:e4:b8:a6:9f: 35:87:6f:9b:1c:ca:0d:8a:c2:8d:e9:11:41:8d:94: 1b:2f:e8:1a:33:58:b4:71:b4:0e:10:8a:ab:17:ba: 19:12:0c:a8:76:2b:90:de:f2:5d:8b:ac:d2:b0:d9: db:26:75:88:b5:4b:f1:54:cf:39:37:81:f2:3e:8f: 6c:dc:6a:db:93:ed:f7:85:37:77:1c:0d:00:38:1f: 6d:19:10:f9:c3:03:02:eb:3d:2a:87:4c:c8:00:56: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2D:3F:94:54:EC:CD:4A:B4:75:31:23:F1:47:E6:D9:7C:56:25:86 X509v3 Authority Key Identifier: keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.156.0/22 Signature Algorithm: sha256WithRSAEncryption a6:3e:0a:83:72:dd:10:b6:84:43:a9:e9:7a:6f:00:da:ed:4e: 46:51:4e:43:a0:b0:8d:55:e5:df:b4:67:bd:06:ca:82:45:98: 55:75:27:2e:04:db:b1:27:8f:b2:ba:6c:38:c4:ff:3c:a1:5d: 26:05:64:4a:57:2b:2f:9d:3b:23:b7:af:20:b5:c3:c2:1c:60: 2f:0d:4d:1a:e3:cb:70:32:44:54:a1:85:29:80:54:88:45:df: cc:ee:80:00:d5:8c:af:61:f5:26:7d:fa:a0:d2:99:28:d8:bc: 37:3d:76:50:25:63:50:98:e8:05:29:aa:bb:55:70:c4:c2:96: a1:d7:c7:a3:da:a5:39:3b:01:39:fd:d2:35:da:99:81:e6:00: 72:2f:c2:77:69:c0:29:1f:2d:89:82:20:24:48:7f:e5:6e:48: d7:a1:10:7b:bb:bf:99:7d:44:6e:2e:c7:5e:87:c9:d7:10:8a: 13:db:28:37:90:a4:5d:41:e0:ad:eb:27:5b:f3:e2:43:c3:36: 47:bb:32:13:59:3d:62:52:9f:28:c1:25:f5:f2:79:cb:6a:67: b6:ab:5f:87:f2:08:cb:1d:88:86:62:16:c6:d9:07:be:5a:7d: c0:22:23:8c:bd:67:61:32:99:2b:0f:cc:f4:a6:a0:da:2b:4c: d1:90:2a:25 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUCZbPdkjCOkWBABULy+cflwCvCxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5 OEFBMEMyMTAeFw0yNTA2MjYxMTUxMzdaFw0yNjA2MjUxMTU2MzdaMDMxMTAvBgNV BAMTKEM3MkQzRjk0NTRFQ0NENEFCNDc1MzEyM0YxNDdFNkQ5N0M1NjI1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmuXR4g2KNv1XW0oQ3g6ziRMc v/ok6zBvyWRsxbhjPUbcgJWF4TPWPT+Qn+U7CinqFH6b03Q4lXaL4+Xp4aAnpaHb LaVtZO237frpaR1gojP5dhbhrkRrHzyt0xqLY4adJ7RLTaS7oWZsXTYdgXZz7JPn omYtZO4dFTJXAdssj2uCwPDfyOcHFx+D1u/xzluoAE0LrcrozAq7Wg2SwKE15Lim nzWHb5scyg2Kwo3pEUGNlBsv6BozWLRxtA4QiqsXuhkSDKh2K5De8l2LrNKw2dsm dYi1S/FUzzk3gfI+j2zcatuT7feFN3ccDQA4H20ZEPnDAwLrPSqHTMgAVp1BAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUxy0/lFTszUq0dTEj8Ufm2XxWJYYwHwYDVR0j BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5 NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLcWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAv MzEzNzMwMmUzMjM0MzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzMzMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq95wwDQYJKoZIhvcNAQELBQADggEBAKY+CoNy 3RC2hEOp6XpvANrtTkZRTkOgsI1V5d+0Z70GyoJFmFV1Jy4E27Enj7K6bDjE/zyh XSYFZEpXKy+dOyO3ryC1w8IcYC8NTRrjy3AyRFShhSmAVIhF38zugADVjK9h9SZ9 +qDSmSjYvDc9dlAlY1CY6AUpqrtVcMTClqHXx6PapTk7ATn90jXamYHmAHIvwndp wCkfLYmCICRIf+VuSNehEHu7v5l9RG4ux16HydcQihPbKDeQpF1B4K3rJ1vz4kPD Nke7MhNZPWJSnyjBJfXyectqZ7arX4fyCMsdiIZiFsbZB75afcAiI4y9Z2EymSsP zPSmoNorTNGQKiU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:51 2025 by rpki-client