$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa File: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (raw, json) Hash identifier: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA= Subject key identifier: 6B:8F:0E:C2:5D:DD:20:80:7C:D8:3D:10:93:DB:C4:EF:45:61:54:57 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 668D2E01EB2B91BBEC8871F647B41A2409E48661 Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa Signing time: Fri 01 Aug 2025 10:23:34 +0000 ROA not before: Fri 01 Aug 2025 10:18:34 +0000 ROA not after: Fri 31 Jul 2026 10:23:34 +0000 asID: 265935 IP address blocks: 164.163.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8d:2e:01:eb:2b:91:bb:ec:88:71:f6:47:b4:1a:24:09:e4:86:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Aug 1 10:18:34 2025 GMT Not After : Jul 31 10:23:34 2026 GMT Subject: CN=6B8F0EC25DDD20807CD83D1093DBC4EF45615457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:db:84:22:b8:83:35:24:de:65:98:e4:c6: 41:d3:98:61:3a:98:e0:04:70:12:99:1d:85:e0:77: f4:35:04:68:0c:f4:ac:11:6d:b7:d3:00:96:01:f6: 51:06:70:f7:ce:bb:3b:3d:8d:06:11:0a:b4:6f:32: a1:22:04:99:0c:97:35:09:80:4b:21:6e:52:2d:47: e6:66:4d:b3:4e:51:1e:50:78:c4:58:17:ba:6e:4e: c7:5d:ca:28:ce:c7:45:fd:ce:16:d9:51:f4:fd:3a: ae:df:af:7a:3e:65:92:d5:08:e4:de:44:4e:22:d3: 06:a3:5d:f9:33:6b:ca:71:14:f2:3f:37:2a:72:f2: 7d:88:06:08:e0:73:c3:d1:59:59:1f:2e:96:37:73: 02:71:93:5d:d0:65:b6:95:1d:16:5b:14:1a:74:d9: 69:8b:52:f4:fa:97:04:55:5d:cf:fd:c6:59:11:62: b6:13:97:24:8d:c5:03:e0:3a:35:22:67:71:eb:cd: 57:fb:a1:69:54:5e:34:cc:fb:53:96:4c:ec:72:68: e4:94:09:75:94:32:d2:7f:f3:3d:e0:cd:50:ef:88: a7:d2:69:21:fc:c2:f6:d7:c6:67:39:09:e2:b9:eb: e5:bb:32:2e:bb:5c:c4:13:ac:d9:dd:2d:98:12:28: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8F:0E:C2:5D:DD:20:80:7C:D8:3D:10:93:DB:C4:EF:45:61:54:57 X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.20.0/23 Signature Algorithm: sha256WithRSAEncryption a5:fa:27:00:a9:e3:fe:73:ed:29:1a:d9:22:ae:23:16:2b:7c: 60:40:9c:25:02:52:7f:04:40:2c:76:07:62:ad:e7:fc:24:2c: de:a8:e5:ce:af:de:1a:7a:ff:fc:ed:3a:e7:b5:b4:c3:d8:a6: 88:94:8c:95:92:04:31:3c:48:cc:b3:ac:02:bd:df:b6:21:d9: b7:f7:02:6d:37:27:a3:0f:58:33:1d:ad:ad:20:4d:3a:82:7e: 3b:87:9d:67:87:5f:e1:cc:d0:49:e3:ed:86:f3:91:98:d7:da: e9:14:20:fe:67:3d:88:9d:8f:c6:d1:84:66:1d:e9:eb:a3:00: 76:58:8f:73:ae:55:a8:71:20:bf:44:9d:7f:fd:e7:6d:d1:74: 47:ee:41:81:aa:f9:e8:d9:e8:3c:5e:5c:f2:65:a4:34:52:9c: dd:e5:4f:f1:82:1e:a2:0a:3e:23:26:e7:25:c1:0e:6f:73:2c: 59:ba:e3:c4:84:ae:38:af:91:d9:ea:a8:38:f9:61:7e:1e:87: e9:ab:d9:2a:4c:c8:d3:ff:01:7b:44:52:19:05:2f:b1:b2:f3: 9c:6c:e9:1e:a0:d0:0b:6b:23:dc:3b:7b:3c:9e:6e:63:4a:61: bf:d9:bb:a8:f9:5b:13:b3:e1:7c:e9:2d:04:53:37:23:6a:cc: 30:3f:4d:47 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUZo0uAesrkbvsiHH2R7QaJAnkhmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTA4MDExMDE4MzRaFw0yNjA3MzExMDIzMzRaMDMxMTAvBgNV BAMTKDZCOEYwRUMyNURERDIwODA3Q0Q4M0QxMDkzREJDNEVGNDU2MTU0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITtuEIriDNSTeZZjkxkHTmGE6 mOAEcBKZHYXgd/Q1BGgM9KwRbbfTAJYB9lEGcPfOuzs9jQYRCrRvMqEiBJkMlzUJ gEshblItR+ZmTbNOUR5QeMRYF7puTsddyijOx0X9zhbZUfT9Oq7fr3o+ZZLVCOTe RE4i0wajXfkza8pxFPI/Nypy8n2IBgjgc8PRWVkfLpY3cwJxk13QZbaVHRZbFBp0 2WmLUvT6lwRVXc/9xlkRYrYTlySNxQPgOjUiZ3HrzVf7oWlUXjTM+1OWTOxyaOSU CXWUMtJ/8z3gzVDviKfSaSH8wvbXxmc5CeK56+W7Mi67XMQTrNndLZgSKHd1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUa48Owl3dIIB82D0Qk9vE70VhVFcwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv MzEzNjM0MmUzMTM2MzMyZTMyMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2 MzUzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGkoxQwDQYJKoZIhvcNAQELBQADggEBAKX6JwCp 4/5z7Ska2SKuIxYrfGBAnCUCUn8EQCx2B2Kt5/wkLN6o5c6v3hp6//ztOue1tMPY poiUjJWSBDE8SMyzrAK937Yh2bf3Am03J6MPWDMdra0gTTqCfjuHnWeHX+HM0Enj 7YbzkZjX2ukUIP5nPYidj8bRhGYd6eujAHZYj3OuVahxIL9EnX/9523RdEfuQYGq +ejZ6DxeXPJlpDRSnN3lT/GCHqIKPiMm5yXBDm9zLFm648SErjivkdnqqDj5YX4e h+mr2SpMyNP/AXtEUhkFL7Gy85xs6R6g0AtrI9w7ezyebmNKYb/Zu6j5WxOz4Xzp LQRTNyNqzDA/TUc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:08 2025 by rpki-client