$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32322d3232203d3e203533313430.roa File: 3138372e3132302e3230342e302f32322d3232203d3e203533313430.roa (raw, json) Hash identifier: 4kuX4+YEgOsvB6g5yTLuxTAjPLFcIIG23lgPhQjTgok= Subject key identifier: D0:68:CD:28:87:3D:5E:6B:54:37:15:82:75:3F:35:83:C7:C9:41:03 Certificate issuer: /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F Certificate serial: 3A8E897778A5D7AC1EF5B523D26B821536FC4844 Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32322d3232203d3e203533313430.roa Signing time: Sat 06 Sep 2025 01:30:12 +0000 ROA not before: Sat 06 Sep 2025 01:25:12 +0000 ROA not after: Sat 05 Sep 2026 01:30:12 +0000 asID: 53140 IP address blocks: 187.120.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8e:89:77:78:a5:d7:ac:1e:f5:b5:23:d2:6b:82:15:36:fc:48:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F Validity Not Before: Sep 6 01:25:12 2025 GMT Not After : Sep 5 01:30:12 2026 GMT Subject: CN=D068CD28873D5E6B54371582753F3583C7C94103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:a6:de:ef:72:64:00:bd:94:40:ba:f4:f2: 52:de:17:fe:cd:0a:95:34:6c:bf:0f:f4:ad:8c:ed: 04:42:3b:c7:b6:9f:77:c6:67:9a:fd:c6:68:27:32: d1:54:9d:b6:aa:3a:84:fa:5d:38:d5:f8:ec:54:08: 9b:40:cd:ec:43:fc:2f:be:4a:98:8f:7e:d3:07:23: 21:ba:5c:38:b6:98:91:73:cb:1e:66:ed:86:a4:b0: 3e:7f:ce:7c:fd:0a:4d:d6:50:9e:cb:32:1f:d6:8e: 47:4c:86:41:3f:45:d0:91:00:c6:40:40:9f:0d:60: 9d:79:0b:16:2d:43:59:22:2b:53:09:fb:cf:cb:02: 91:23:36:bf:8c:d9:3b:54:38:d1:76:f7:eb:45:43: 03:38:78:32:af:2a:40:81:a0:1b:44:0a:ca:85:ed: 29:7f:89:c2:b9:67:ba:96:a6:b2:95:dd:6f:aa:f3: 2d:d8:cb:38:9a:e0:34:ea:83:08:51:c3:40:31:e3: c0:ca:0d:38:e8:f0:24:55:db:25:4e:ce:2b:d5:09: ac:28:d2:cc:1b:a0:3f:cb:74:af:90:14:93:10:38: 4a:29:33:49:3d:9e:23:f4:da:06:5c:97:2c:b0:8d: bc:9f:0e:c9:d2:d9:a0:7d:0e:3b:13:f1:8f:89:d2: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:68:CD:28:87:3D:5E:6B:54:37:15:82:75:3F:35:83:C7:C9:41:03 X509v3 Authority Key Identifier: keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32322d3232203d3e203533313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.120.204.0/22 Signature Algorithm: sha256WithRSAEncryption 56:08:c9:54:e9:66:1e:d5:4d:d3:a2:67:dd:39:bf:61:5f:6a: 07:05:89:67:50:8b:5f:4b:75:bf:f0:84:22:f2:a1:d2:56:be: 70:a5:ee:81:43:93:a7:2c:5d:68:bf:20:c9:c3:8d:18:3b:d6: 1c:7d:bc:5f:85:a3:be:bd:65:fd:b3:f4:18:90:71:0a:d1:7b: be:9c:6b:ec:9b:4b:c1:5c:0e:b4:05:a6:45:2c:63:98:78:78: eb:aa:20:73:4f:4d:e3:4d:14:82:c6:b5:86:d5:b5:59:4f:75: 30:41:6e:6a:46:11:74:dc:e0:4a:cc:b4:5e:5d:92:d4:94:5b: 95:2f:be:d5:36:9b:93:1c:f6:1b:ce:2f:01:ed:00:55:dd:cb: bb:36:7c:57:d3:1d:25:41:24:a9:a3:5e:c1:cc:eb:e1:3d:a3: 20:11:d7:2f:bf:ff:31:73:94:13:ed:7b:d7:60:01:87:93:c3: 37:e9:cc:98:1c:a7:25:c4:d6:05:bb:0d:a1:b2:d5:9e:e9:cf: ab:6d:5f:42:9e:ec:f2:07:f1:6b:03:e2:48:8a:28:33:3c:e5: 2a:ec:68:06:64:1d:a2:c2:d9:f9:ff:86:ad:3a:3b:09:3e:5e: fc:b1:52:6c:d5:e5:c4:54:ae:fb:22:c4:7d:8e:78:0d:14:be: 4e:24:aa:82 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOo6Jd3il16we9bUj0muCFTb8SEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0MjZBM0M2MTc0OUQwQ0ZGRjdBM0MzNTVEMDY4NTRF RDVDMUIwRjAeFw0yNTA5MDYwMTI1MTJaFw0yNjA5MDUwMTMwMTJaMDMxMTAvBgNV BAMTKEQwNjhDRDI4ODczRDVFNkI1NDM3MTU4Mjc1M0YzNTgzQzdDOTQxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoM6be73JkAL2UQLr08lLeF/7N CpU0bL8P9K2M7QRCO8e2n3fGZ5r9xmgnMtFUnbaqOoT6XTjV+OxUCJtAzexD/C++ SpiPftMHIyG6XDi2mJFzyx5m7YaksD5/znz9Ck3WUJ7LMh/WjkdMhkE/RdCRAMZA QJ8NYJ15CxYtQ1kiK1MJ+8/LApEjNr+M2TtUONF29+tFQwM4eDKvKkCBoBtECsqF 7Sl/icK5Z7qWprKV3W+q8y3Yyzia4DTqgwhRw0Ax48DKDTjo8CRV2yVOzivVCawo 0swboD/LdK+QFJMQOEopM0k9niP02gZclyywjbyfDsnS2aB9DjsT8Y+J0pu9AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU0GjNKIc9XmtUNxWCdT81g8fJQQMwHwYDVR0j BBgwFoAUSkJqPGF0nQz/96PDVdBoVO1cGw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2ZNWXRHWUJXemdwRWt0RmVzQ3ZZYUgzZXRTQlJqQ0VEZWt5VXBzMnNR aFkvMC80QTQyNkEzQzYxNzQ5RDBDRkZGN0EzQzM1NUQwNjg1NEVENUMxQjBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNDI2QTNDNjE3NDlEMENG RkY3QTNDMzU1RDA2ODU0RUQ1QzFCMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dmTVl0R1lCV3pncEVrdEZlc0N2WWFIM2V0U0JSakNFRGVreVVwczJzUWhZLzAv MzEzODM3MmUzMTMyMzAyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1 MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK7eMwwDQYJKoZIhvcNAQELBQADggEBAFYIyVTp Zh7VTdOiZ905v2FfagcFiWdQi19Ldb/whCLyodJWvnCl7oFDk6csXWi/IMnDjRg7 1hx9vF+Fo769Zf2z9BiQcQrRe76ca+ybS8FcDrQFpkUsY5h4eOuqIHNPTeNNFILG tYbVtVlPdTBBbmpGEXTc4ErMtF5dktSUW5UvvtU2m5Mc9hvOLwHtAFXdy7s2fFfT HSVBJKmjXsHM6+E9oyAR1y+//zFzlBPte9dgAYeTwzfpzJgcpyXE1gW7DaGy1Z7p z6ttX0Ke7PIH8WsD4kiKKDM85SrsaAZkHaLC2fn/hq06Owk+XvyxUmzV5cRUrvsi xH2OeA0Uvk4kqoI= -----END CERTIFICATE-----Generated at Mon Nov 3 19:37:06 2025 by rpki-client