$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa File: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (raw, json) Hash identifier: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4= Subject key identifier: 9B:3D:AA:6E:27:82:E6:AE:D4:C4:65:1D:0B:7E:DE:EE:97:F3:FD:34 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 4F087B93C045C6672451B338EDE09E8660FDC000 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa Signing time: Mon 10 Mar 2025 19:00:06 +0000 ROA not before: Mon 10 Mar 2025 18:55:06 +0000 ROA not after: Mon 09 Mar 2026 19:00:06 +0000 asID: 263083 IP address blocks: 186.233.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 10:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:08:7b:93:c0:45:c6:67:24:51:b3:38:ed:e0:9e:86:60:fd:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Mar 10 18:55:06 2025 GMT Not After : Mar 9 19:00:06 2026 GMT Subject: CN=9B3DAA6E2782E6AED4C4651D0B7EDEEE97F3FD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:56:26:09:93:85:f9:ee:9e:93:18:e5:44: d2:28:e2:5f:30:3a:91:13:d3:0a:52:be:06:41:22: 9d:3d:72:1b:2f:d3:ef:43:53:19:96:2c:d4:62:09: c8:29:71:35:30:c9:19:35:81:48:0b:dd:c5:06:ae: 91:bf:92:ee:26:6d:64:4c:30:ed:21:69:01:0f:9d: 87:c9:09:85:a6:4d:0e:7b:f9:d1:37:e3:12:0b:b2: e8:7e:6e:22:ec:66:9d:ca:c5:12:c3:53:3d:fb:2d: ec:7b:7a:48:38:03:dd:39:8f:b3:17:cb:f4:66:55: f2:16:67:7f:6a:bb:38:f0:3f:3f:1b:03:df:b7:38: 17:20:e6:f9:ba:a5:30:ec:09:1a:af:51:a9:7e:20: 63:f7:73:65:19:73:13:a1:b8:9a:89:7c:d7:b7:6a: 1a:2b:16:af:d5:86:d2:18:96:65:a3:b1:70:ed:37: 07:a5:f4:88:f9:f6:95:c4:34:00:8e:2c:d0:6a:95: 53:80:f4:75:38:6f:5d:56:f9:53:e0:8b:d0:90:cb: 9c:cb:83:1f:82:66:4d:8a:5b:23:bf:65:f4:4d:50: 66:cb:9d:31:a1:6d:b3:ba:7f:1f:c9:19:8b:6b:36: 5b:08:98:8b:81:0b:f6:b9:d4:5c:b2:e3:a0:7b:3f: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3D:AA:6E:27:82:E6:AE:D4:C4:65:1D:0B:7E:DE:EE:97:F3:FD:34 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.233.12.0/22 Signature Algorithm: sha256WithRSAEncryption 52:ac:be:b2:60:23:b7:30:89:8d:c6:06:08:8a:f3:f8:78:81: 71:7a:21:2b:2b:f5:2e:61:2d:e0:8e:f7:0c:e1:27:b2:3d:e8: 52:f2:a1:9d:50:b3:16:96:19:37:63:65:af:bc:62:dc:a6:5b: c9:63:2c:85:79:5e:e0:72:55:6b:7f:cf:45:a1:61:74:90:46: 74:01:0d:20:68:fc:7b:44:ff:42:9b:33:b9:96:40:8e:dc:98: a2:50:44:6e:41:01:42:2b:d3:38:ba:e4:dc:b9:19:31:4e:a9: c2:1b:b7:1d:c2:c1:38:8b:2d:1e:06:2d:95:49:31:3b:86:c3: ec:4a:5b:d8:3e:f2:94:ec:1a:03:42:98:07:5a:05:70:65:61: a6:dc:6d:c6:d6:47:8a:76:31:be:02:78:f6:09:b8:2d:c2:94: 40:47:39:70:50:70:f7:0e:be:67:c0:08:31:9f:bb:71:87:df: 30:13:af:d5:59:6e:5e:aa:ea:d9:a3:49:80:4a:16:e0:fe:f3: 2a:67:07:06:f5:55:e0:9e:8e:bd:5f:24:1f:86:c1:fb:d9:47: 2d:17:05:7a:15:0e:a8:71:53:10:46:3c:ce:45:c6:1a:3c:79: 68:63:b8:74:6e:85:42:70:97:dd:45:cc:7e:01:2c:8f:28:72: 4a:4d:68:f1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTwh7k8BFxmckUbM47eCehmD9wAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTAzMTAxODU1MDZaFw0yNjAzMDkxOTAwMDZaMDMxMTAvBgNV BAMTKDlCM0RBQTZFMjc4MkU2QUVENEM0NjUxRDBCN0VERUVFOTdGM0ZEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtLlYmCZOF+e6ekxjlRNIo4l8w OpET0wpSvgZBIp09chsv0+9DUxmWLNRiCcgpcTUwyRk1gUgL3cUGrpG/ku4mbWRM MO0haQEPnYfJCYWmTQ57+dE34xILsuh+biLsZp3KxRLDUz37Lex7ekg4A905j7MX y/RmVfIWZ39quzjwPz8bA9+3OBcg5vm6pTDsCRqvUal+IGP3c2UZcxOhuJqJfNe3 ahorFq/VhtIYlmWjsXDtNwel9Ij59pXENACOLNBqlVOA9HU4b11W+VPgi9CQy5zL gx+CZk2KWyO/ZfRNUGbLnTGhbbO6fx/JGYtrNlsImIuBC/a51Fyy46B7PxY5AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmz2qbieC5q7UxGUdC37e7pfz/TQwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzROblo4MmEya0p2Yjlmd2FIZ2pKVm9vYk1WN1duWEs5SEQ0c1B4MVJUbTliLzEv MzEzODM2MmUzMjMzMzMyZTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzMzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAK66QwwDQYJKoZIhvcNAQELBQADggEBAFKsvrJg I7cwiY3GBgiK8/h4gXF6ISsr9S5hLeCO9wzhJ7I96FLyoZ1QsxaWGTdjZa+8Ytym W8ljLIV5XuByVWt/z0WhYXSQRnQBDSBo/HtE/0KbM7mWQI7cmKJQRG5BAUIr0zi6 5Ny5GTFOqcIbtx3CwTiLLR4GLZVJMTuGw+xKW9g+8pTsGgNCmAdaBXBlYabcbcbW R4p2Mb4CePYJuC3ClEBHOXBQcPcOvmfACDGfu3GH3zATr9VZbl6q6tmjSYBKFuD+ 8ypnBwb1VeCejr1fJB+GwfvZRy0XBXoVDqhxUxBGPM5Fxho8eWhjuHRuhUJwl91F zH4BLI8ockpNaPE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:50 2025 by rpki-client