$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa File: 3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa (raw, json) Hash identifier: GJ+IQqZ0fjLWie+QekAjPhGMv+DeI+KX9OM9DMC+6Ws= Subject key identifier: 85:DF:3A:75:69:77:65:73:F9:F3:1F:7D:E3:63:5B:D1:B4:A1:64:F7 Certificate issuer: /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Certificate serial: 2190F84F6257D0F0A8F63E9FEC1B29ADD8B2C434 Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa Signing time: Wed 22 Oct 2025 20:48:47 +0000 ROA not before: Wed 22 Oct 2025 20:43:47 +0000 ROA not after: Wed 21 Oct 2026 20:48:47 +0000 asID: 262765 IP address blocks: 168.232.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:90:f8:4f:62:57:d0:f0:a8:f6:3e:9f:ec:1b:29:ad:d8:b2:c4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Validity Not Before: Oct 22 20:43:47 2025 GMT Not After : Oct 21 20:48:47 2026 GMT Subject: CN=85DF3A7569776573F9F31F7DE3635BD1B4A164F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:81:9b:5e:b4:99:52:00:d5:9d:56:bc:d3: f3:66:82:08:3b:47:ab:d3:c4:0f:38:a9:23:e6:cf: 2b:94:5e:2f:15:63:24:68:ec:99:9a:b5:55:d1:b2: 23:b7:59:17:73:32:23:4d:cb:47:d8:69:e4:a8:31: 5f:67:99:e7:ea:e0:84:2c:01:16:d6:e6:80:ed:8e: a3:fb:54:4e:14:f2:0d:f4:c5:f2:53:03:9f:81:76: fa:5c:d9:2c:2f:db:0e:39:b5:fe:a7:4e:af:07:31: b7:f8:df:05:d9:16:01:08:d7:7d:c7:d3:3b:4b:ee: ea:74:ec:46:b9:76:5d:eb:af:56:ea:b4:65:38:01: 61:60:a7:62:f5:9d:17:f6:f6:15:f5:83:7a:1e:49: e3:ee:50:2e:dc:6d:6c:ae:cb:65:5b:54:89:08:d5: 22:66:40:f5:c6:3c:7b:56:47:98:07:6f:37:26:a2: 28:1f:9a:52:f5:83:90:c9:69:ee:af:39:b4:ab:c7: e8:3c:c9:ad:10:db:8a:1a:4f:5f:61:34:2d:36:dc: 13:09:9a:8b:4c:92:ab:6f:bf:73:af:92:b1:64:33: 0f:10:01:37:31:ec:98:ac:3e:95:82:a4:9f:8b:32: 01:84:5d:4c:d8:00:0a:0c:89:93:c9:36:a2:98:dc: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:3A:75:69:77:65:73:F9:F3:1F:7D:E3:63:5B:D1:B4:A1:64:F7 X509v3 Authority Key Identifier: keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.73.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f9:a6:ad:0b:a1:bd:e7:63:5c:41:fd:95:3c:a1:ab:1c:f8: fb:a8:cb:e6:74:06:27:13:29:b7:88:0b:d7:30:89:0a:41:0d: 69:b7:8d:6d:ac:c4:4f:11:b0:ad:bf:59:61:32:76:e8:f3:28: 6a:58:dc:99:68:52:86:fd:28:67:ec:b9:6d:50:32:49:32:4e: 43:87:33:bc:29:68:10:88:9f:2a:02:8a:44:f8:b6:b2:dc:58: 7a:37:f0:bd:72:a6:51:4f:54:d9:43:3c:09:71:0b:b5:bf:55: 7c:06:84:9e:c0:07:f6:dc:e9:63:d1:71:cb:c5:ff:98:a2:ce: 4f:5a:53:7a:cb:77:7c:e0:24:e6:5f:c3:24:01:2b:e9:37:d4: 77:a2:ba:6e:b6:37:13:aa:fc:ff:64:60:5b:f3:2a:29:28:ad: bd:fb:bf:36:86:1b:97:49:16:5f:b9:10:f5:13:b1:9c:e7:77: 67:3e:30:b0:8a:91:21:84:c9:f8:ad:7c:3d:47:49:04:d3:ae: c1:c5:b0:b1:cb:08:b7:8a:7f:fa:eb:af:57:cf:2e:df:b7:d6: e4:cd:b4:36:7b:83:f6:22:08:06:21:16:a7:21:e6:10:cd:ed: 7a:18:1a:17:98:f5:44:6f:52:6f:32:18:c6:d1:e0:14:91:af: f7:b3:03:45 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUIZD4T2JX0PCo9j6f7BsprdiyxDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1 N0ZFN0JBMDAeFw0yNTEwMjIyMDQzNDdaFw0yNjEwMjEyMDQ4NDdaMDMxMTAvBgNV BAMTKDg1REYzQTc1Njk3NzY1NzNGOUYzMUY3REUzNjM1QkQxQjRBMTY0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuIGbXrSZUgDVnVa80/Nmggg7 R6vTxA84qSPmzyuUXi8VYyRo7JmatVXRsiO3WRdzMiNNy0fYaeSoMV9nmefq4IQs ARbW5oDtjqP7VE4U8g30xfJTA5+Bdvpc2Swv2w45tf6nTq8HMbf43wXZFgEI133H 0ztL7up07Ea5dl3rr1bqtGU4AWFgp2L1nRf29hX1g3oeSePuUC7cbWyuy2VbVIkI 1SJmQPXGPHtWR5gHbzcmoigfmlL1g5DJae6vObSrx+g8ya0Q24oaT19hNC023BMJ motMkqtvv3OvkrFkMw8QATcx7JisPpWCpJ+LMgGEXUzYAAoMiZPJNqKY3D1pAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUhd86dWl3ZXP58x9942Nb0bShZPcwHwYDVR0j BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz NjM4MmUzMjMzMzIyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBACo6EkwDQYJKoZIhvcNAQELBQADggEBAHD5pq0Lob3n Y1xB/ZU8oasc+Puoy+Z0BicTKbeIC9cwiQpBDWm3jW2sxE8RsK2/WWEydujzKGpY 3JloUob9KGfsuW1QMkkyTkOHM7wpaBCInyoCikT4trLcWHo38L1yplFPVNlDPAlx C7W/VXwGhJ7AB/bc6WPRccvF/5iizk9aU3rLd3zgJOZfwyQBK+k31Heium62NxOq /P9kYFvzKikorb37vzaGG5dJFl+5EPUTsZznd2c+MLCKkSGEyfitfD1HSQTTrsHF sLHLCLeKf/rrr1fPLt+31uTNtDZ7g/YiCAYhFqch5hDN7XoYGheY9URvUm8yGMbR 4BSRr/ezA0U= -----END CERTIFICATE-----Generated at Tue Nov 4 01:37:36 2025 by rpki-client