$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa File: 3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa (raw, json) Hash identifier: Vy2avViqP/0tiZogzluuUnbhPwhezsyOnRwSFhYsWLc= Subject key identifier: 59:A6:D7:E7:A1:55:0E:D0:EF:97:32:25:9C:0E:B0:7E:E4:D1:3C:70 Certificate issuer: /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408 Certificate serial: 1156A7BBC0DAD94E45234C9390EA8A7BBB072832 Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa Signing time: Mon 01 Sep 2025 13:53:23 +0000 ROA not before: Mon 01 Sep 2025 13:48:23 +0000 ROA not after: Mon 31 Aug 2026 13:53:23 +0000 asID: 263907 IP address blocks: 138.204.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:56:a7:bb:c0:da:d9:4e:45:23:4c:93:90:ea:8a:7b:bb:07:28:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408 Validity Not Before: Sep 1 13:48:23 2025 GMT Not After : Aug 31 13:53:23 2026 GMT Subject: CN=59A6D7E7A1550ED0EF9732259C0EB07EE4D13C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:d9:de:d5:26:56:2c:73:06:bf:d6:07:08: 86:73:42:26:7e:db:a9:47:9d:b7:fa:58:2b:1b:6d: 8e:91:c2:4b:b3:49:d7:ed:cd:d4:ad:d2:10:2c:ef: 02:1c:17:8c:59:c6:6e:1a:4f:6d:07:69:5e:1a:1e: 6e:16:e0:50:b1:14:8d:69:08:67:f2:28:cc:52:ed: 56:78:77:6a:05:db:70:36:40:0f:e7:e1:ea:aa:9d: bf:85:fe:f7:86:af:7f:ab:f6:e9:f4:c9:08:17:7f: 6f:4c:50:b4:cb:6a:c7:a3:5e:94:bd:7b:b2:2b:7d: bb:a3:b3:d7:ff:cc:01:3b:c0:31:a5:2a:d4:c7:d9: 1f:aa:b6:3f:b4:3c:c5:1c:1e:7e:9b:50:52:f6:b5: a5:d6:82:f0:43:9d:c3:ae:f9:b3:e0:62:4d:8d:dc: ba:89:87:c4:c2:cb:f4:80:8e:67:f5:59:f7:2b:a1: 74:27:af:92:d5:d5:0f:cd:4a:58:d2:e3:47:71:91: f4:8f:24:16:7e:49:27:a7:15:5a:a4:10:9b:53:b4: 00:57:e4:55:da:e4:fc:92:2a:a5:78:d5:19:38:26: bc:7a:9e:78:89:0a:ea:ca:0d:d9:cf:e4:08:39:c3: b7:15:b7:24:eb:32:5d:54:ed:7c:3b:98:7e:96:78: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:D7:E7:A1:55:0E:D0:EF:97:32:25:9C:0E:B0:7E:E4:D1:3C:70 X509v3 Authority Key Identifier: keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.186.0/23 Signature Algorithm: sha256WithRSAEncryption e4:17:c0:1f:c1:db:17:3f:bd:80:8a:aa:5d:06:ff:e5:73:f2: d8:0a:9d:3f:b4:bf:e2:38:d6:a2:8e:2a:2b:e5:e8:53:9e:1c: 77:a2:8c:07:41:2c:de:b4:4c:11:86:bf:0a:46:05:25:4f:4d: d8:2d:44:76:58:5c:ac:ad:6c:b6:df:77:34:74:16:9c:8c:1f: b7:10:28:2f:65:8e:9c:5c:0a:a7:1f:b1:90:26:7f:38:ed:80: b1:3c:5d:9a:1f:3b:e2:b5:11:aa:40:2c:6d:6e:94:9a:b0:9f: 78:2e:02:45:6a:59:fd:0c:65:9c:34:8e:47:05:b3:8a:fd:07: ab:9f:10:3b:64:f9:23:23:45:36:c0:69:de:14:a2:f5:b5:f1: 9b:2e:f9:2b:15:79:87:36:4f:89:5f:5c:0e:06:d5:b5:e6:df: d1:35:24:76:38:d9:c3:b1:56:d0:53:5b:3b:b3:5b:56:cb:12: c9:10:e8:0a:c6:57:b4:0d:78:a5:ee:07:d4:9d:8b:d0:03:3f: a7:70:ef:11:f0:1b:8f:b7:ae:45:07:31:f7:a1:fb:68:bb:db: 8d:ce:87:8a:8a:38:00:9d:a6:33:b3:b9:73:c6:15:6f:42:d2: 87:57:be:2e:82:3a:8c:88:66:b6:76:02:8d:4b:a4:b7:a4:5b: 8c:88:7d:f5 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUEVanu8Da2U5FI0yTkOqKe7sHKDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEQjE1RDNGNjZCQTcyNURFN0U3MDczMzM0NkMwM0Mw RTREMTQwODAeFw0yNTA5MDExMzQ4MjNaFw0yNjA4MzExMzUzMjNaMDMxMTAvBgNV BAMTKDU5QTZEN0U3QTE1NTBFRDBFRjk3MzIyNTlDMEVCMDdFRTREMTNDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR99ne1SZWLHMGv9YHCIZzQiZ+ 26lHnbf6WCsbbY6RwkuzSdftzdSt0hAs7wIcF4xZxm4aT20HaV4aHm4W4FCxFI1p CGfyKMxS7VZ4d2oF23A2QA/n4eqqnb+F/veGr3+r9un0yQgXf29MULTLasejXpS9 e7Irfbujs9f/zAE7wDGlKtTH2R+qtj+0PMUcHn6bUFL2taXWgvBDncOu+bPgYk2N 3LqJh8TCy/SAjmf1WfcroXQnr5LV1Q/NSljS40dxkfSPJBZ+SSenFVqkEJtTtABX 5FXa5PySKqV41Rk4Jrx6nniJCurKDdnP5Ag5w7cVtyTrMl1U7Xw7mH6WeGj/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUWabX56FVDtDvlzIlnA6wfuTRPHAwHwYDVR0j BBgwFoAU8NsV0/ZrpyXefnBzM0bAPA5NFAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS ekovMC9GMERCMTVEM0Y2NkJBNzI1REU3RTcwNzMzMzQ2QzAzQzBFNEQxNDA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwREIxNUQzRjY2QkE3MjVE RTdFNzA3MzMzNDZDMDNDMEU0RDE0MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy MzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMujANBgkqhkiG9w0BAQsFAAOCAQEA5BfA H8HbFz+9gIqqXQb/5XPy2AqdP7S/4jjWoo4qK+XoU54cd6KMB0Es3rRMEYa/CkYF JU9N2C1EdlhcrK1stt93NHQWnIwftxAoL2WOnFwKpx+xkCZ/OO2AsTxdmh874rUR qkAsbW6UmrCfeC4CRWpZ/QxlnDSORwWziv0Hq58QO2T5IyNFNsBp3hSi9bXxmy75 KxV5hzZPiV9cDgbVtebf0TUkdjjZw7FW0FNbO7NbVssSyRDoCsZXtA14pe4H1J2L 0AM/p3DvEfAbj7euRQcx96H7aLvbjc6Hioo4AJ2mM7O5c8YVb0LSh1e+LoI6jIhm tnYCjUukt6RbjIh99Q== -----END CERTIFICATE-----Generated at Thu Sep 18 15:52:20 2025 by rpki-client