$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa File: 3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: bHjetwbVkzEQMPxVViHYWdyZC+hWJDSRhQmOIpvZLlc= Subject key identifier: 14:7A:96:FC:CE:23:09:28:B2:79:6E:1D:68:F7:39:C6:65:08:EA:BF Certificate issuer: /CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Certificate serial: 0607217FAA010434CA02E6E855A72A0A3F3E3B2C Authority key identifier: C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa Signing time: Thu 25 Sep 2025 13:35:23 +0000 ROA not before: Thu 25 Sep 2025 13:30:23 +0000 ROA not after: Thu 24 Sep 2026 13:35:23 +0000 asID: 53153 IP address blocks: 186.209.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:07:21:7f:aa:01:04:34:ca:02:e6:e8:55:a7:2a:0a:3f:3e:3b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D Validity Not Before: Sep 25 13:30:23 2025 GMT Not After : Sep 24 13:35:23 2026 GMT Subject: CN=147A96FCCE230928B2796E1D68F739C66508EABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:04:02:f7:5a:f8:75:2c:38:9f:ba:3f:8e: e4:29:b9:aa:bc:be:c6:33:84:f4:1c:d2:9d:ad:37: 79:3d:3f:3b:62:ab:26:ef:47:62:d3:47:76:8c:55: 33:a1:12:b9:63:d2:f1:77:41:07:83:ef:89:94:4c: c9:ee:37:f3:d6:a1:2a:de:3a:40:d3:71:f7:bb:07: 85:1a:ca:e0:b9:de:9f:4f:d1:57:94:60:c0:28:2e: f1:8e:89:55:8c:73:79:fd:66:9e:a9:15:4d:0f:0e: 7f:44:ed:58:5c:74:b6:75:0c:b0:9e:e2:d5:70:50: f4:15:81:7f:ac:ed:15:4a:c8:2b:38:28:e4:ec:d9: 19:db:8a:85:4d:84:db:3d:2c:1d:77:e6:fb:23:9a: f5:54:61:02:e5:92:72:89:e2:1c:6c:ff:c4:02:d2: 8f:8a:29:3e:b6:4b:77:d9:9b:e7:ea:67:eb:58:ea: 99:09:1e:fe:a6:fb:43:65:0b:44:cf:b7:94:a4:a2: e4:db:72:66:d7:5f:18:0b:b5:27:ab:00:b1:05:b6: 9a:0f:0a:5d:fb:0e:56:40:ff:69:f4:88:e4:de:4c: 99:cf:a0:a5:61:43:d4:39:7e:9e:b5:1c:e3:2f:6a: 8d:7e:de:3c:45:61:cb:11:13:6a:04:dd:7b:34:1f: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:96:FC:CE:23:09:28:B2:79:6E:1D:68:F7:39:C6:65:08:EA:BF X509v3 Authority Key Identifier: keyid:C9:2E:7B:DC:0C:86:69:C8:6F:BC:CA:E6:F3:42:4D:BF:69:D7:75:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92E7BDC0C8669C86FBCCAE6F3424DBF69D7756D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.108.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ee:de:90:ae:80:0f:59:c3:1b:6e:27:d0:e0:e0:43:03:f7: e7:fe:7f:20:fe:08:d0:3f:10:28:c2:8f:e7:76:16:7b:fa:e0: d2:0f:b3:70:86:5a:47:d5:bd:1c:2f:bf:52:08:27:de:51:aa: 8b:85:bf:da:21:52:97:b5:fa:f1:ca:23:48:b3:88:0a:2f:d3: d5:50:0a:3a:43:ff:de:d8:eb:39:35:27:39:29:05:e9:4b:25: 69:c1:9f:1b:a6:94:05:cf:13:5c:40:2c:d3:9c:d4:43:73:91: d8:85:82:4f:d0:75:fe:5b:14:c0:15:a3:79:c1:2a:df:ab:04: 7c:60:aa:08:a2:0c:60:c6:13:aa:e2:1f:e7:68:fe:2a:f1:44: 8d:b0:7f:2b:3c:a5:1c:8e:c0:ed:33:c1:ac:b6:13:e6:8a:14: 17:f3:40:f6:ea:4f:e4:0f:bd:5f:9e:f8:bd:6c:36:58:b3:a8: 4b:3e:6c:bd:6f:3f:15:90:1b:32:90:d7:e1:80:68:15:3e:34: e5:43:c2:e0:be:62:09:7b:1a:04:fc:a3:ac:39:20:52:be:9c: ae:ac:a8:cd:1a:3a:11:8b:fb:56:bd:d1:ce:a5:ec:dd:a1:4b: 05:d8:5b:ae:d5:f0:5b:cc:62:ca:77:c8:3a:3a:ef:25:2e:07: 26:52:82:35 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUBgchf6oBBDTKAuboVacqCj8+OywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyRTdCREMwQzg2NjlDODZGQkNDQUU2RjM0MjREQkY2 OUQ3NzU2RDAeFw0yNTA5MjUxMzMwMjNaFw0yNjA5MjQxMzM1MjNaMDMxMTAvBgNV BAMTKDE0N0E5NkZDQ0UyMzA5MjhCMjc5NkUxRDY4RjczOUM2NjUwOEVBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRwQC91r4dSw4n7o/juQpuaq8 vsYzhPQc0p2tN3k9PztiqybvR2LTR3aMVTOhErlj0vF3QQeD74mUTMnuN/PWoSre OkDTcfe7B4UayuC53p9P0VeUYMAoLvGOiVWMc3n9Zp6pFU0PDn9E7VhcdLZ1DLCe 4tVwUPQVgX+s7RVKyCs4KOTs2RnbioVNhNs9LB135vsjmvVUYQLlknKJ4hxs/8QC 0o+KKT62S3fZm+fqZ+tY6pkJHv6m+0NlC0TPt5SkouTbcmbXXxgLtSerALEFtpoP Cl37DlZA/2n0iOTeTJnPoKVhQ9Q5fp61HOMvao1+3jxFYcsRE2oE3Xs0H4M3AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUFHqW/M4jCSiyeW4daPc5xmUI6r8wHwYDVR0j BBgwFoAUyS573AyGachvvMrm80JNv2nXdW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC9DOTJFN0JEQzBDODY2OUM4NkZCQ0NBRTZGMzQyNERCRjY5RDc3NTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5MkU3QkRDMEM4NjY5Qzg2 RkJDQ0FFNkYzNDI0REJGNjlENzc1NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzODM2MmUzMjMwMzkyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAC60WwwDQYJKoZIhvcNAQELBQADggEBACTu3pCu gA9ZwxtuJ9Dg4EMD9+f+fyD+CNA/ECjCj+d2Fnv64NIPs3CGWkfVvRwvv1IIJ95R qouFv9ohUpe1+vHKI0iziAov09VQCjpD/97Y6zk1JzkpBelLJWnBnxumlAXPE1xA LNOc1ENzkdiFgk/Qdf5bFMAVo3nBKt+rBHxgqgiiDGDGE6riH+do/irxRI2wfys8 pRyOwO0zway2E+aKFBfzQPbqT+QPvV+e+L1sNlizqEs+bL1vPxWQGzKQ1+GAaBU+ NOVDwuC+Ygl7GgT8o6w5IFK+nK6sqM0aOhGL+1a90c6l7N2hSwXYW67V8FvMYsp3 yDo67yUuByZSgjU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:47:44 2025 by rpki-client