$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa File: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (raw, json) Hash identifier: 78++bmMlB0Bovi7AyiX7x6vYCK0aaHsx+gF5MCimEZY= Subject key identifier: 40:8A:A1:8E:E6:D0:11:C8:3D:52:6C:C2:21:A5:9D:7B:B0:EB:E2:BC Certificate issuer: /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Certificate serial: 40E0E6E268AE2A495B7862000D8178D27B22163B Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa Signing time: Sat 12 Jul 2025 23:16:42 +0000 ROA not before: Sat 12 Jul 2025 23:11:42 +0000 ROA not after: Sat 11 Jul 2026 23:16:42 +0000 asID: 61678 IP address blocks: 138.122.140.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e0:e6:e2:68:ae:2a:49:5b:78:62:00:0d:81:78:d2:7b:22:16:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Validity Not Before: Jul 12 23:11:42 2025 GMT Not After : Jul 11 23:16:42 2026 GMT Subject: CN=408AA18EE6D011C83D526CC221A59D7BB0EBE2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:0e:3c:aa:59:5c:c4:78:ae:b9:bc:52:f2: f0:e0:b8:71:2b:35:2d:6b:52:ac:02:c4:96:94:1b: 1f:ac:5d:36:47:b0:16:6f:bc:15:16:77:ec:79:06: ad:71:35:09:61:f7:c6:99:53:01:27:e4:0d:51:5f: ad:f4:7a:b0:9b:83:ed:59:15:19:e1:88:97:65:0f: 22:ce:a4:4e:bb:b0:68:3b:7e:01:67:02:e7:10:3f: 74:f8:80:99:2c:34:9f:63:c5:79:a8:78:69:0e:9e: 4a:9b:e6:2c:c1:9e:7e:2b:94:ee:15:eb:58:35:95: 83:81:4d:d5:ab:15:76:81:c9:84:47:cb:21:ef:17: 91:b0:1c:71:64:d8:51:8f:45:94:76:78:41:48:b7: b7:3e:66:7d:23:69:ff:f7:d2:ed:f0:a5:a7:f3:f9: f5:bc:bb:6c:a2:4e:33:8d:9f:35:39:28:06:3a:8e: df:c0:13:66:4e:f9:9c:4b:ac:d0:74:48:99:d9:16: 2a:e3:24:2f:a5:ac:7a:8b:ff:5a:37:d8:0b:50:c8: fd:de:1f:10:f1:57:d7:1b:cf:1f:83:cb:60:b9:6c: a4:9c:f7:90:fa:84:c8:69:bf:01:0f:32:79:a8:35: 05:c9:5f:f9:0e:03:aa:7e:c8:10:c5:d5:46:52:49: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:A1:8E:E6:D0:11:C8:3D:52:6C:C2:21:A5:9D:7B:B0:EB:E2:BC X509v3 Authority Key Identifier: keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.140.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:b3:f4:7f:ab:c9:95:d4:a2:0f:ee:58:fa:aa:60:8e:70:95: de:62:b6:d5:08:f3:e8:d1:ea:28:13:a2:5c:d9:58:5b:fc:c6: e9:19:c0:6e:1c:0e:63:53:1c:48:4c:5e:cc:bb:6d:17:1a:06: e1:ba:2a:c5:0e:d0:3b:6d:b4:49:25:ba:cd:8c:a6:ed:ce:33: 88:b3:b8:26:9c:89:f7:7b:ee:79:3e:58:ca:7e:72:e8:24:3a: 91:d3:52:88:09:0a:6a:3b:2c:c6:a7:d9:d3:b8:c0:72:49:53: 9e:4f:39:f7:75:ed:6a:9a:e3:b6:fd:be:a3:e5:00:78:ae:53: 00:0a:80:fb:92:3e:0c:14:ca:40:78:65:31:1d:08:60:13:00: 90:31:01:88:b1:df:13:e4:1f:33:7e:8f:27:49:85:ad:94:7e: eb:cb:23:b7:42:95:fa:cb:1c:ae:6c:8a:c7:70:ed:6c:32:5c: a4:5f:dd:4f:31:fe:05:1b:4f:1f:b4:bc:db:70:f0:cd:7b:8a: fa:47:b3:9b:39:69:d6:98:20:33:56:7a:45:00:70:30:58:b7: 82:e8:33:d4:c0:ee:76:59:96:19:37:64:1a:c5:9d:07:d0:d7: 7b:af:61:8f:c6:ca:b1:84:60:ea:4e:f1:f1:24:85:e6:e4:62: 33:bc:9b:e5 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUQODm4miuKklbeGIADYF40nsiFjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4 QkM2RkNEQzAeFw0yNTA3MTIyMzExNDJaFw0yNjA3MTEyMzE2NDJaMDMxMTAvBgNV BAMTKDQwOEFBMThFRTZEMDExQzgzRDUyNkNDMjIxQTU5RDdCQjBFQkUyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKDQ48qllcxHiuubxS8vDguHEr NS1rUqwCxJaUGx+sXTZHsBZvvBUWd+x5Bq1xNQlh98aZUwEn5A1RX630erCbg+1Z FRnhiJdlDyLOpE67sGg7fgFnAucQP3T4gJksNJ9jxXmoeGkOnkqb5izBnn4rlO4V 61g1lYOBTdWrFXaByYRHyyHvF5GwHHFk2FGPRZR2eEFIt7c+Zn0jaf/30u3wpafz +fW8u2yiTjONnzU5KAY6jt/AE2ZO+ZxLrNB0SJnZFirjJC+lrHqL/1o32AtQyP3e HxDxV9cbzx+Dy2C5bKSc95D6hMhpvwEPMnmoNQXJX/kOA6p+yBDF1UZSSaMtAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUQIqhjubQEcg9UmzCIaWde7Dr4rwwHwYDVR0j BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5 NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv MzEzMzM4MmUzMTMyMzIyZTMxMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2 MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKeowwDQYJKoZIhvcNAQELBQADggEBAJuz9H+r yZXUog/uWPqqYI5wld5ittUI8+jR6igTolzZWFv8xukZwG4cDmNTHEhMXsy7bRca BuG6KsUO0DtttEklus2Mpu3OM4izuCacifd77nk+WMp+cugkOpHTUogJCmo7LMan 2dO4wHJJU55POfd17Wqa47b9vqPlAHiuUwAKgPuSPgwUykB4ZTEdCGATAJAxAYix 3xPkHzN+jydJha2UfuvLI7dClfrLHK5sisdw7WwyXKRf3U8x/gUbTx+0vNtw8M17 ivpHs5s5adaYIDNWekUAcDBYt4LoM9TA7nZZlhk3ZBrFnQfQ13uvYY/GyrGEYOpO 8fEkhebkYjO8m+U= -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:43 2025 by rpki-client