$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa File: 3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa (raw, json) Hash identifier: ErjwRVssjzFtWoU9n5jewvIXlxD9QMGq0OTUg7Bpv4I= Subject key identifier: C3:5E:F2:78:EC:DC:29:11:B8:50:14:76:5B:F2:80:B9:3F:81:C9:0B Certificate issuer: /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408 Certificate serial: 497364AC44DCDDCE8A80EA93B625EB4DA67E0EBC Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa Signing time: Mon 01 Sep 2025 13:53:24 +0000 ROA not before: Mon 01 Sep 2025 13:48:24 +0000 ROA not after: Mon 31 Aug 2026 13:53:24 +0000 asID: 263907 IP address blocks: 138.204.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:73:64:ac:44:dc:dd:ce:8a:80:ea:93:b6:25:eb:4d:a6:7e:0e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408 Validity Not Before: Sep 1 13:48:24 2025 GMT Not After : Aug 31 13:53:24 2026 GMT Subject: CN=C35EF278ECDC2911B85014765BF280B93F81C90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:11:6f:9f:90:c3:e9:77:2b:47:38:bd:d7: db:f3:f5:a6:4c:6d:9a:9b:3a:dc:1e:e4:7e:af:0a: 93:4d:30:fe:2b:32:e0:84:86:a0:4a:2e:34:d4:88: e8:a0:c8:19:80:ea:29:b8:84:07:53:56:52:8d:27: a6:1c:dc:a1:d0:19:6e:3c:cb:2a:86:73:5b:cd:a1: f9:e6:95:3b:23:29:44:44:b9:1a:0a:86:8a:3c:4d: af:c5:e8:a8:a9:be:59:b6:fb:48:18:f0:d2:00:43: 40:c9:8c:a4:5e:25:3a:28:01:2e:9c:7d:4b:a7:05: 80:13:c1:14:e4:55:78:15:1d:67:9e:50:08:b2:79: 64:fa:03:60:f1:44:da:7a:42:77:cf:cb:5e:e9:22: 40:27:05:5d:aa:a7:ad:be:98:1f:ed:7e:9a:06:ee: 9b:17:fa:12:a0:51:c6:62:16:e7:c2:58:37:bd:43: 63:b9:2e:eb:c9:96:3e:8f:07:e8:08:1b:93:bd:83: 0a:ef:16:31:b1:f7:4f:40:67:1c:5d:0e:13:e0:9b: ed:a8:48:31:77:6e:c9:2c:a4:c7:db:4b:42:ca:1f: 65:a7:a6:89:62:10:a8:ae:a8:71:df:c3:3f:2e:c0: 13:bb:8e:da:fe:82:72:e3:ef:dd:70:0b:86:47:63: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:F2:78:EC:DC:29:11:B8:50:14:76:5B:F2:80:B9:3F:81:C9:0B X509v3 Authority Key Identifier: keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.186.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ba:f1:e1:03:c9:a8:cb:41:6a:90:dd:35:98:10:da:27:4c: 7d:48:39:23:59:55:58:5d:d6:73:5f:5e:45:9a:1f:fc:ed:15: 0b:ee:b1:09:75:4c:f8:68:63:24:47:fc:24:43:3d:50:f2:55: 99:1a:5e:6c:de:ce:9b:e3:41:6f:ff:37:dc:2a:7e:8d:ea:93: 8c:a1:2f:af:0d:59:bd:69:27:e4:01:16:6f:8e:b1:d9:d7:3d: 1a:ff:e6:7e:b4:e6:c8:82:66:d4:ab:2b:18:7a:a6:3d:c6:e2: 49:71:3a:aa:98:f4:dc:32:07:db:17:9c:18:86:0a:fc:08:8f: 37:68:d0:9d:15:4d:9a:b8:56:a9:15:1a:9c:8a:df:a3:76:16: 14:c0:a6:82:65:55:03:10:fb:86:a8:24:3c:a9:90:8e:be:02: 9d:f9:aa:04:d7:73:d6:1a:25:b5:08:e5:3d:3a:1f:ea:3b:c7: cf:9d:28:ba:60:a0:6d:eb:40:3c:a6:6b:8f:8e:ec:e6:1c:1b: ed:6a:dc:11:88:31:ff:ea:2e:91:d8:5d:b1:38:51:75:85:80: 0f:2d:f5:40:ce:57:6d:4b:4b:86:8a:b1:0c:6f:07:7d:c6:38: d0:71:ac:77:65:dd:5c:5d:c4:a0:61:14:0a:a3:57:96:97:82: c8:3d:66:92 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUSXNkrETc3c6KgOqTtiXrTaZ+DrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEQjE1RDNGNjZCQTcyNURFN0U3MDczMzM0NkMwM0Mw RTREMTQwODAeFw0yNTA5MDExMzQ4MjRaFw0yNjA4MzExMzUzMjRaMDMxMTAvBgNV BAMTKEMzNUVGMjc4RUNEQzI5MTFCODUwMTQ3NjVCRjI4MEI5M0Y4MUM5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8xFvn5DD6XcrRzi919vz9aZM bZqbOtwe5H6vCpNNMP4rMuCEhqBKLjTUiOigyBmA6im4hAdTVlKNJ6Yc3KHQGW48 yyqGc1vNofnmlTsjKUREuRoKhoo8Ta/F6Kipvlm2+0gY8NIAQ0DJjKReJTooAS6c fUunBYATwRTkVXgVHWeeUAiyeWT6A2DxRNp6QnfPy17pIkAnBV2qp62+mB/tfpoG 7psX+hKgUcZiFufCWDe9Q2O5LuvJlj6PB+gIG5O9gwrvFjGx909AZxxdDhPgm+2o SDF3bskspMfbS0LKH2WnpoliEKiuqHHfwz8uwBO7jtr+gnLj791wC4ZHYzZ1AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUw17yeOzcKRG4UBR2W/KAuT+ByQswHwYDVR0j BBgwFoAU8NsV0/ZrpyXefnBzM0bAPA5NFAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS ekovMC9GMERCMTVEM0Y2NkJBNzI1REU3RTcwNzMzMzQ2QzAzQzBFNEQxNDA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwREIxNUQzRjY2QkE3MjVE RTdFNzA3MzMzNDZDMDNDMEU0RDE0MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv MzEzMzM4MmUzMjMwMzQyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMujANBgkqhkiG9w0BAQsFAAOCAQEAFrrx 4QPJqMtBapDdNZgQ2idMfUg5I1lVWF3Wc19eRZof/O0VC+6xCXVM+GhjJEf8JEM9 UPJVmRpebN7Om+NBb/833Cp+jeqTjKEvrw1ZvWkn5AEWb46x2dc9Gv/mfrTmyIJm 1KsrGHqmPcbiSXE6qpj03DIH2xecGIYK/AiPN2jQnRVNmrhWqRUanIrfo3YWFMCm gmVVAxD7hqgkPKmQjr4CnfmqBNdz1holtQjlPTof6jvHz50oumCgbetAPKZrj47s 5hwb7WrcEYgx/+oukdhdsThRdYWADy31QM5XbUtLhoqxDG8HfcY40HGsd2XdXF3E oGEUCqNXlpeCyD1mkg== -----END CERTIFICATE-----Generated at Thu Sep 18 15:51:53 2025 by rpki-client