$ rpki-client -vvf rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa File: 3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa (raw, json) Hash identifier: UTHo9EEFQO4ipEo8t4TSyRqw0gIG4N/wl0NEzcGwaTQ= Subject key identifier: 98:94:EF:42:B9:6A:1E:5E:6C:E8:E2:9F:0B:50:28:CA:FB:CA:85:DA Certificate issuer: /CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Certificate serial: 35696ED3217C39B060B507C30802DBC2CB303D0B Authority key identifier: 96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa Signing time: Tue 23 Sep 2025 22:28:39 +0000 ROA not before: Tue 23 Sep 2025 22:23:39 +0000 ROA not after: Tue 22 Sep 2026 22:28:39 +0000 asID: 265365 IP address blocks: 168.205.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 17:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:69:6e:d3:21:7c:39:b0:60:b5:07:c3:08:02:db:c2:cb:30:3d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966DD797B84E59CAE6227ED4FB1D4D52011EBA29 Validity Not Before: Sep 23 22:23:39 2025 GMT Not After : Sep 22 22:28:39 2026 GMT Subject: CN=9894EF42B96A1E5E6CE8E29F0B5028CAFBCA85DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:b8:24:79:52:7a:9a:e3:37:35:dc:55:b1: 2d:09:12:d6:7f:03:9d:d9:dc:50:46:99:d6:58:2d: fd:bc:b7:1a:ee:73:ad:4e:10:51:73:15:5f:dc:1e: 4d:90:ef:19:77:e3:1b:24:20:5d:b7:87:f6:ec:05: f7:f1:0d:05:cb:d6:65:7e:57:89:03:c6:58:f5:d1: b4:1d:a6:ce:8d:95:58:e0:7c:65:8a:4c:ff:b9:36: 55:d1:36:33:24:c3:b6:63:b8:91:9e:06:fa:86:64: 50:97:f2:c1:1e:ac:9f:cb:7a:2e:56:3e:55:fb:f8: af:d2:92:22:c7:7f:ab:40:9d:8e:34:05:9a:c1:5e: 0c:45:66:a4:0e:7d:00:16:47:80:71:99:b6:54:0e: e2:8d:c2:bb:ae:66:44:62:b9:25:1b:f5:a0:e3:e0: b2:e7:6d:e0:d6:af:fb:17:2e:e7:0e:af:0e:e6:cb: a5:56:22:d5:d5:3a:76:91:48:a0:04:95:f5:ea:e1: 17:59:bb:a4:af:85:bc:67:6d:61:66:78:2d:7c:02: 50:d5:fa:fe:05:91:bb:26:4b:ab:17:aa:cf:ef:ce: 34:f9:bb:8b:60:26:13:3f:06:82:4a:f3:ae:ed:93: 11:36:b3:92:ee:0a:65:2a:a8:45:68:9a:06:6c:9f: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:94:EF:42:B9:6A:1E:5E:6C:E8:E2:9F:0B:50:28:CA:FB:CA:85:DA X509v3 Authority Key Identifier: keyid:96:6D:D7:97:B8:4E:59:CA:E6:22:7E:D4:FB:1D:4D:52:01:1E:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/966DD797B84E59CAE6227ED4FB1D4D52011EBA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbVCddEgXVq9phfsbPE9ajQ9qRuwJBsf9KWVTcnf6VAS/0/3136382e3230352e3132382e302f32322d3332203d3e20323635333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.128.0/22 Signature Algorithm: sha256WithRSAEncryption 98:94:73:b4:d0:16:eb:21:76:35:f7:e0:4c:67:69:cb:2a:6c: db:b2:a9:b7:a1:24:74:6f:84:10:b2:0c:e0:5a:6c:ef:3e:9a: e5:f7:38:dd:9c:69:40:6d:90:63:cf:4a:35:df:1e:24:c7:2c: 8f:90:d9:1f:be:54:21:c9:67:a3:d7:d0:c4:33:8c:fe:d4:c5: f2:73:8d:3e:1d:1d:28:e2:83:fe:ed:31:bd:b6:63:3d:f9:fb: 3a:a0:ca:13:ed:ae:56:dc:bb:4e:71:5f:cd:19:2c:fb:7c:a1: 05:54:13:f7:a6:a1:90:38:4c:78:7b:1c:b9:4c:64:82:20:f9: dd:8a:e4:31:48:1c:8c:f5:b2:d0:ac:97:e5:6c:21:e0:57:0c: a6:9b:3b:b2:c9:55:6e:a7:c0:da:22:41:d2:64:7b:53:4c:84: a7:51:04:de:1d:33:58:78:9f:38:6d:c2:0a:3a:ec:ff:d2:03: 3b:85:8a:af:a8:d6:09:19:64:3f:97:32:57:4a:9d:0a:84:21: 85:fb:38:bf:d2:b2:c3:79:a6:e6:b6:a2:a6:75:fa:cb:f4:98: f1:5c:ed:40:9d:87:f0:9a:55:ab:37:92:bd:d4:0b:ba:05:73: d5:c2:e1:7c:06:81:de:cf:1d:8c:bd:a3:13:c2:84:e8:aa:59: b2:27:43:4c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUNWlu0yF8ObBgtQfDCALbwsswPQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY2REQ3OTdCODRFNTlDQUU2MjI3RUQ0RkIxRDRENTIw MTFFQkEyOTAeFw0yNTA5MjMyMjIzMzlaFw0yNjA5MjIyMjI4MzlaMDMxMTAvBgNV BAMTKDk4OTRFRjQyQjk2QTFFNUU2Q0U4RTI5RjBCNTAyOENBRkJDQTg1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UrgkeVJ6muM3NdxVsS0JEtZ/ A53Z3FBGmdZYLf28txruc61OEFFzFV/cHk2Q7xl34xskIF23h/bsBffxDQXL1mV+ V4kDxlj10bQdps6NlVjgfGWKTP+5NlXRNjMkw7ZjuJGeBvqGZFCX8sEerJ/Lei5W PlX7+K/SkiLHf6tAnY40BZrBXgxFZqQOfQAWR4BxmbZUDuKNwruuZkRiuSUb9aDj 4LLnbeDWr/sXLucOrw7my6VWItXVOnaRSKAElfXq4RdZu6SvhbxnbWFmeC18AlDV +v4FkbsmS6sXqs/vzjT5u4tgJhM/BoJK867tkxE2s5LuCmUqqEVomgZsn2FXAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUmJTvQrlqHl5s6OKfC1AoyvvKhdowHwYDVR0j BBgwFoAUlm3Xl7hOWcrmIn7U+x1NUgEeuikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2JWQ2RkRWdYVnE5cGhmc2JQRTlhalE5cVJ1d0pCc2Y5S1dWVGNuZjZW QVMvMC85NjZERDc5N0I4NEU1OUNBRTYyMjdFRDRGQjFENEQ1MjAxMUVCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NkRENzk3Qjg0RTU5Q0FF NjIyN0VENEZCMUQ0RDUyMDExRUJBMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NiVkNkZEVnWFZxOXBoZnNiUEU5YWpROXFSdXdKQnNmOUtXVlRjbmY2VkFTLzAv MzEzNjM4MmUzMjMwMzUyZTMxMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjNgDANBgkqhkiG9w0BAQsFAAOCAQEAmJRz tNAW6yF2NffgTGdpyyps27Kpt6EkdG+EELIM4Fps7z6a5fc43ZxpQG2QY89KNd8e JMcsj5DZH75UIclno9fQxDOM/tTF8nONPh0dKOKD/u0xvbZjPfn7OqDKE+2uVty7 TnFfzRks+3yhBVQT96ahkDhMeHscuUxkgiD53YrkMUgcjPWy0KyX5Wwh4FcMpps7 sslVbqfA2iJB0mR7U0yEp1EE3h0zWHifOG3CCjrs/9IDO4WKr6jWCRlkP5cyV0qd CoQhhfs4v9Kyw3mm5raipnX6y/SY8VztQJ2H8JpVqzeSvdQLugVz1cLhfAaB3s8d jL2jE8KE6KpZsidDTA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:21:53 2025 by rpki-client