$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa File: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (raw, json) Hash identifier: glCLFbOxW2PCoRYdk4hxxyDsKYKPG8LjGydPR561h5I= Subject key identifier: 3E:6B:35:EC:14:26:1A:99:B5:06:1E:7B:42:B4:60:14:BE:65:CD:05 Certificate issuer: /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Certificate serial: 60D46CCEFB7F6E5193CB709DBEEAD65BC75840FA Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa Signing time: Fri 24 Oct 2025 14:52:05 +0000 ROA not before: Fri 24 Oct 2025 14:47:05 +0000 ROA not after: Fri 23 Oct 2026 14:52:05 +0000 asID: 263486 IP address blocks: 191.242.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d4:6c:ce:fb:7f:6e:51:93:cb:70:9d:be:ea:d6:5b:c7:58:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Validity Not Before: Oct 24 14:47:05 2025 GMT Not After : Oct 23 14:52:05 2026 GMT Subject: CN=3E6B35EC14261A99B5061E7B42B46014BE65CD05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:3a:cc:b0:63:a4:2c:b0:fe:ff:e5:34:fa: e4:b5:cd:82:7f:9e:16:93:bd:dd:ff:9a:a0:74:fc: e5:bb:e9:b5:98:20:bc:d7:5c:27:91:f7:9b:f6:a8: a7:30:18:42:43:54:4e:77:9e:ee:a9:ad:ca:e3:55: 6b:88:7d:eb:99:37:17:6d:f8:a0:39:68:d7:73:38: 98:43:c2:c9:50:d5:83:74:2c:2b:20:c3:65:7e:82: d5:e0:42:a3:fc:18:88:8b:2f:61:c0:ea:e2:09:f4: 41:94:34:47:7e:00:cb:df:5c:70:5a:5f:2d:de:60: ca:62:81:f8:fd:b6:00:50:87:f8:3a:5a:fe:dc:e7: ae:90:94:45:08:9b:ef:ae:f3:f3:e3:37:02:67:4b: 1d:81:4a:5f:17:c7:de:ac:46:82:b1:d3:3d:fa:ef: ba:0b:d0:13:24:f0:05:c5:4b:35:75:84:63:c2:b7: 8b:a8:cd:3c:fc:81:c6:e3:db:14:62:c6:2f:5d:d4: 21:ed:1c:ca:ef:e1:a7:f6:46:fc:87:71:39:88:71: de:21:8b:e9:0e:cb:2f:bc:d6:90:c8:67:36:6c:a6: 1d:a7:d5:86:cc:cd:9a:89:dc:ad:78:8b:39:a8:ff: bd:d7:60:e2:d8:de:d6:c4:a2:c0:21:d1:a2:b0:24: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:35:EC:14:26:1A:99:B5:06:1E:7B:42:B4:60:14:BE:65:CD:05 X509v3 Authority Key Identifier: keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.248.0/21 Signature Algorithm: sha256WithRSAEncryption 64:46:e3:58:76:77:7a:e0:9e:ec:63:2a:ad:e9:88:29:b3:a6: 53:73:7a:6b:51:57:4f:c9:e7:2e:0e:97:68:e9:ef:06:5c:96: b3:6f:c8:1a:54:2c:66:60:a6:70:02:c8:58:05:19:8e:de:4b: 9c:7b:6a:dc:ce:6b:41:42:4f:a0:c6:f3:99:b5:c9:5a:e5:b0: dd:f7:03:3e:23:0b:8d:05:50:29:ec:06:30:00:66:46:ee:72: ac:56:40:6a:95:ea:81:f2:ee:1a:05:68:70:95:ba:34:bd:8f: 08:aa:75:b0:e9:18:2f:9f:cd:33:b3:51:fe:45:2f:3c:db:c0: 1e:2f:7e:ef:0e:95:20:6e:4d:ff:bb:e4:be:f9:6b:1c:8e:98: 5e:93:c1:62:84:7a:67:c0:2d:5c:cb:97:37:2b:85:41:6c:b9: 8f:1e:cb:56:d8:c5:aa:b7:a9:9a:ad:b3:f0:06:20:39:bf:d1: c4:2b:65:58:d7:e1:98:b7:25:4b:9c:e3:57:41:8c:64:db:56: 36:af:a9:29:fb:c4:77:f9:75:30:c3:8f:8d:28:44:fb:ed:35: e3:15:59:03:ce:a4:4d:bb:0c:6c:14:32:ac:a7:92:56:87:77: 75:a9:a5:5a:0e:ab:ac:16:d5:c9:d0:17:e8:13:fe:d5:9f:c7: f6:a1:99:7b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUYNRszvt/blGTy3CdvurWW8dYQPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxNTdDRUZFRUJEMEM3RDhBMjlFQ0U0QTI0MzQzMjc3 MzJGRkRGNjAeFw0yNTEwMjQxNDQ3MDVaFw0yNjEwMjMxNDUyMDVaMDMxMTAvBgNV BAMTKDNFNkIzNUVDMTQyNjFBOTlCNTA2MUU3QjQyQjQ2MDE0QkU2NUNEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihTrMsGOkLLD+/+U0+uS1zYJ/ nhaTvd3/mqB0/OW76bWYILzXXCeR95v2qKcwGEJDVE53nu6prcrjVWuIfeuZNxdt +KA5aNdzOJhDwslQ1YN0LCsgw2V+gtXgQqP8GIiLL2HA6uIJ9EGUNEd+AMvfXHBa Xy3eYMpigfj9tgBQh/g6Wv7c566QlEUIm++u8/PjNwJnSx2BSl8Xx96sRoKx0z36 77oL0BMk8AXFSzV1hGPCt4uozTz8gcbj2xRixi9d1CHtHMrv4af2RvyHcTmIcd4h i+kOyy+81pDIZzZsph2n1YbMzZqJ3K14izmo/73XYOLY3tbEosAh0aKwJFODAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUPms17BQmGpm1Bh57QrRgFL5lzQUwHwYDVR0j BBgwFoAUMBV87+69DH2KKezkokNDJ3Mv/fYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz ZmEvMC8zMDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMTU3Q0VGRUVCRDBDN0Q4 QTI5RUNFNEEyNDM0MzI3NzMyRkZERjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGVEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAv MzEzOTMxMmUzMjM0MzIyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy MzYzMzM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7/y+DANBgkqhkiG9w0BAQsFAAOCAQEAZEbj WHZ3euCe7GMqremIKbOmU3N6a1FXT8nnLg6XaOnvBlyWs2/IGlQsZmCmcALIWAUZ jt5LnHtq3M5rQUJPoMbzmbXJWuWw3fcDPiMLjQVQKewGMABmRu5yrFZAapXqgfLu GgVocJW6NL2PCKp1sOkYL5/NM7NR/kUvPNvAHi9+7w6VIG5N/7vkvvlrHI6YXpPB YoR6Z8AtXMuXNyuFQWy5jx7LVtjFqrepmq2z8AYgOb/RxCtlWNfhmLclS5zjV0GM ZNtWNq+pKfvEd/l1MMOPjShE++014xVZA86kTbsMbBQyrKeSVod3damlWg6rrBbV ydAX6BP+1Z/H9qGZew== -----END CERTIFICATE-----Generated at Mon Nov 3 19:24:58 2025 by rpki-client