$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa File: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (raw, json) Hash identifier: BUK0GzbNyD/abJDFa7an7fqiO0Un2af6pmFESK0VwW8= Subject key identifier: 5F:B8:33:96:F9:D4:FF:A7:6D:00:CA:AD:6D:B2:8B:B8:18:0E:26:F1 Certificate issuer: /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Certificate serial: 2BF14ECB81FFBE3E57E2BEBB1878D70E48A9B75B Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa Signing time: Mon 27 Oct 2025 14:50:41 +0000 ROA not before: Mon 27 Oct 2025 14:45:41 +0000 ROA not after: Mon 26 Oct 2026 14:50:41 +0000 asID: 263026 IP address blocks: 138.36.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 06:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f1:4e:cb:81:ff:be:3e:57:e2:be:bb:18:78:d7:0e:48:a9:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Validity Not Before: Oct 27 14:45:41 2025 GMT Not After : Oct 26 14:50:41 2026 GMT Subject: CN=5FB83396F9D4FFA76D00CAAD6DB28BB8180E26F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:da:01:bb:e3:d1:bb:01:db:85:06:d3:27: 22:19:ac:8a:24:f1:0b:d4:98:e6:ec:ff:52:cf:9e: cd:11:14:03:f6:5c:7a:1e:13:69:f6:46:c2:2e:a4: 54:e6:c3:9e:ac:f0:77:c7:25:51:d8:0b:38:97:b0: 11:19:92:4c:4e:ea:d8:87:3d:8f:72:6d:77:d8:57: 8b:01:2a:9c:bf:37:5e:2e:ab:ec:c3:33:b6:5d:75: b5:57:5a:15:59:32:35:c6:98:94:4e:ad:49:9a:6e: 73:cf:3c:81:ab:59:9f:73:bc:61:e7:be:c3:e9:c6: e6:35:f1:df:4f:d6:b8:34:0b:19:23:86:0a:d3:0f: 33:26:6c:5e:42:d2:b3:f2:4d:ff:8f:3c:9c:46:e1: a1:19:09:76:34:74:c8:ce:9d:b9:c3:22:5b:be:b2: ab:e5:e9:10:72:d1:9e:c3:18:0b:b5:d1:0f:42:2e: 1a:d8:f6:4b:9b:c4:04:4e:cc:2d:3d:76:66:85:dd: ff:28:c7:3b:f2:0f:a7:d5:5f:58:e4:45:44:c2:b8: 0f:f8:fa:17:da:e4:7d:2f:76:82:13:df:af:9d:61: e6:6e:be:97:08:0a:87:a6:64:f2:f2:4f:2e:b1:3d: e7:ea:f3:92:20:b7:8e:f4:21:06:21:1e:94:25:4c: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:33:96:F9:D4:FF:A7:6D:00:CA:AD:6D:B2:8B:B8:18:0E:26:F1 X509v3 Authority Key Identifier: keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.20.0/22 Signature Algorithm: sha256WithRSAEncryption 94:15:c7:e8:3d:30:1e:05:22:25:d1:d9:bd:33:a1:52:18:4e: fe:d8:76:a2:45:23:94:2b:7a:58:bc:0a:6a:d7:c1:5b:c6:bc: 48:a7:a4:8c:69:47:e1:88:f2:99:bc:73:f8:b7:ce:c9:4b:e0: 88:3a:17:d3:5d:77:e4:eb:bf:11:3c:13:f7:23:74:fd:39:3b: ad:12:3a:64:33:77:c5:11:49:e0:ec:99:3b:ed:cb:33:54:39: 88:98:78:2a:b7:fa:c3:cb:22:6a:db:2d:ca:8b:ed:6c:36:e0: 67:7e:e8:50:76:3f:95:8d:f2:7d:2a:b4:94:ba:7a:dd:d8:31: 60:2c:55:dd:05:be:3d:4a:47:fb:86:ef:98:07:4a:2c:44:07: 64:3d:71:3b:78:93:5e:35:1a:74:f2:32:bc:45:3b:83:47:ea: 80:de:89:41:f3:3d:6d:94:56:24:23:f1:e4:b6:30:92:9a:36: 83:a7:64:28:b2:b8:ef:25:5e:9b:80:91:7d:e6:3a:d1:ab:68: 22:13:90:c5:10:0e:a4:56:13:48:46:da:ec:5d:df:0c:08:82: d4:7e:5b:b9:30:62:da:6f:24:29:7c:42:22:94:83:77:f9:5d: c7:1c:66:81:46:d1:a7:fe:df:d1:d3:78:f2:91:77:bc:f4:03: ea:52:1a:f3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUK/FOy4H/vj5X4r67GHjXDkipt1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFC RkFFMEE2ODAeFw0yNTEwMjcxNDQ1NDFaFw0yNjEwMjYxNDUwNDFaMDMxMTAvBgNV BAMTKDVGQjgzMzk2RjlENEZGQTc2RDAwQ0FBRDZEQjI4QkI4MTgwRTI2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVtoBu+PRuwHbhQbTJyIZrIok 8QvUmObs/1LPns0RFAP2XHoeE2n2RsIupFTmw56s8HfHJVHYCziXsBEZkkxO6tiH PY9ybXfYV4sBKpy/N14uq+zDM7ZddbVXWhVZMjXGmJROrUmabnPPPIGrWZ9zvGHn vsPpxuY18d9P1rg0CxkjhgrTDzMmbF5C0rPyTf+PPJxG4aEZCXY0dMjOnbnDIlu+ sqvl6RBy0Z7DGAu10Q9CLhrY9kubxAROzC09dmaF3f8oxzvyD6fVX1jkRUTCuA/4 +hfa5H0vdoIT36+dYeZuvpcICoemZPLyTy6xPefq85Igt470IQYhHpQlTJtjAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUX7gzlvnU/6dtAMqtbbKLuBgOJvEwHwYDVR0j BBgwFoAUQf0zKbruf96fpq6GrkAlsb+uCmgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj LzAvNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFCRkFFMEE2OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MUZEMzMyOUJBRUU3RkRFOUZB NkFFODZBRTQwMjVCMUJGQUUwQTY4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94 WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz MzM4MmUzMzM2MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzAz MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCiiQUMA0GCSqGSIb3DQEBCwUAA4IBAQCUFcfoPTAeBSIl 0dm9M6FSGE7+2HaiRSOUK3pYvApq18FbxrxIp6SMaUfhiPKZvHP4t87JS+CIOhfT XXfk678RPBP3I3T9OTutEjpkM3fFEUng7Jk77cszVDmImHgqt/rDyyJq2y3Ki+1s NuBnfuhQdj+VjfJ9KrSUunrd2DFgLFXdBb49Skf7hu+YB0osRAdkPXE7eJNeNRp0 8jK8RTuDR+qA3olB8z1tlFYkI/HktjCSmjaDp2QosrjvJV6bgJF95jrRq2giE5DF EA6kVhNIRtrsXd8MCILUflu5MGLabyQpfEIilIN3+V3HHGaBRtGn/t/R03jykXe8 9APqUhrz -----END CERTIFICATE-----Generated at Tue Nov 4 06:36:09 2025 by rpki-client