$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa File: 3137372e35332e32382e302f32342d3234203d3e20323730383635.roa (raw, json) Hash identifier: u887YDCLyhkiyp8vrV8uFFm+ZgFLDnwa375hvUeWgVE= Subject key identifier: 9D:B8:30:0C:B2:BF:EB:51:93:2E:56:79:4A:43:C8:DA:C1:C3:68:70 Certificate issuer: /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Certificate serial: 2A2A9373D48D4DD81CBB9A9178C13F2887A28403 Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa Signing time: Fri 31 Oct 2025 23:24:52 +0000 ROA not before: Fri 31 Oct 2025 23:19:52 +0000 ROA not after: Fri 30 Oct 2026 23:24:52 +0000 asID: 270865 IP address blocks: 177.53.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2a:93:73:d4:8d:4d:d8:1c:bb:9a:91:78:c1:3f:28:87:a2:84:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0 Validity Not Before: Oct 31 23:19:52 2025 GMT Not After : Oct 30 23:24:52 2026 GMT Subject: CN=9DB8300CB2BFEB51932E56794A43C8DAC1C36870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:a2:dd:27:2d:c3:70:8a:1b:f0:d9:f9:06: 4b:65:ad:fd:1c:6e:27:27:57:37:8d:9f:a6:87:db: fd:eb:32:8f:16:f3:4a:53:3f:4d:12:15:b1:c3:37: a7:dc:95:c1:dd:65:fd:9b:c5:b1:41:f9:84:40:39: 02:ea:00:71:2e:d5:31:70:7a:78:b2:4c:ff:3d:69: 6d:07:4b:1b:7c:77:7d:35:ea:4d:02:c7:f0:71:ca: 17:6b:a8:a0:c8:cd:ba:c3:60:30:5d:c4:7a:0b:b6: 91:63:02:0e:44:1a:86:46:3a:34:2d:25:82:eb:d9: 5e:bf:ca:64:cf:51:66:6f:5e:99:30:c2:dc:fc:45: 9f:b0:cb:97:ad:76:14:72:76:bf:74:cc:15:7e:c9: 29:96:56:e5:ed:2b:ec:44:4b:f7:b8:41:5a:31:b3: 70:cf:86:30:aa:66:88:18:6e:a1:b9:2a:34:cf:fe: c6:e9:de:5e:08:16:f6:38:b7:ee:6b:bb:c1:51:fe: b3:d6:95:47:e1:7e:92:47:ff:9e:66:9b:06:fd:35: 9f:99:95:97:0f:25:7a:c1:db:19:2b:a9:37:28:c7: 20:d4:14:36:2c:61:03:f6:e1:cf:e2:0f:7c:08:8b: e4:70:e6:82:e2:27:35:29:29:88:59:c0:6f:5a:e7: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:30:0C:B2:BF:EB:51:93:2E:56:79:4A:43:C8:DA:C1:C3:68:70 X509v3 Authority Key Identifier: keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.53.28.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b5:96:1a:29:50:0f:5a:d9:32:e9:ec:7e:c7:e6:c9:61:1d: fd:55:79:38:0a:60:ad:2e:8d:73:d2:2a:9f:51:82:34:1b:a8: 24:0e:09:2c:50:d4:4a:f0:dd:b9:dc:b4:3f:93:73:f9:15:fb: 42:23:14:c1:9f:7e:e8:86:fa:57:7d:ac:1b:5a:06:f3:ec:b0: 17:51:4b:20:23:e3:c0:0c:6f:32:ae:62:5d:77:46:a5:4e:52: f2:68:c3:09:ca:af:f9:2c:70:85:10:7f:24:af:99:8c:cb:b9: 72:d4:44:6c:e2:94:c2:e3:7d:83:ee:31:75:88:f1:25:96:63: c2:76:ce:70:c2:d0:73:a1:ec:38:c4:28:e1:d9:7e:b4:d3:55: db:86:c9:dc:a0:67:db:b4:4d:fc:5b:64:d5:7f:ec:92:81:bc: 52:c7:b3:98:dd:5b:81:a9:73:71:ab:d4:33:4d:64:1a:2a:e7: 81:61:7f:39:ec:e3:6e:63:bc:1f:e3:e1:5e:7b:b4:70:e1:a3: 52:42:71:41:cc:7e:3c:47:7d:d2:6c:a8:71:7a:22:f1:9c:a1: d7:4c:27:4e:f3:31:12:d6:d2:f4:a0:c1:26:80:cd:81:1d:d0: ba:58:2c:69:e3:9f:64:8a:10:8a:b3:2e:46:55:0f:f8:55:76: b1:02:00:60 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUKiqTc9SNTdgcu5qReME/KIeihAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE RkM0NkRFMDAeFw0yNTEwMzEyMzE5NTJaFw0yNjEwMzAyMzI0NTJaMDMxMTAvBgNV BAMTKDlEQjgzMDBDQjJCRkVCNTE5MzJFNTY3OTRBNDNDOERBQzFDMzY4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelaLdJy3DcIob8Nn5Bktlrf0c bicnVzeNn6aH2/3rMo8W80pTP00SFbHDN6fclcHdZf2bxbFB+YRAOQLqAHEu1TFw eniyTP89aW0HSxt8d3016k0Cx/BxyhdrqKDIzbrDYDBdxHoLtpFjAg5EGoZGOjQt JYLr2V6/ymTPUWZvXpkwwtz8RZ+wy5etdhRydr90zBV+ySmWVuXtK+xES/e4QVox s3DPhjCqZogYbqG5KjTP/sbp3l4IFvY4t+5ru8FR/rPWlUfhfpJH/55mmwb9NZ+Z lZcPJXrB2xkrqTcoxyDUFDYsYQP24c/iD3wIi+Rw5oLiJzUpKYhZwG9a521fAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUnbgwDLK/61GTLlZ5SkPI2sHDaHAwHwYDVR0j BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1 QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRuTEJEOTRyUTZOSjVoWURTUTRmOU1UOXBrcWFkZnU5RkJzYXdTVlZtcU5zLzAv MzEzNzM3MmUzNTMzMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAsTUcMA0GCSqGSIb3DQEBCwUAA4IBAQBLtZYaKVAP Wtky6ex+x+bJYR39VXk4CmCtLo1z0iqfUYI0G6gkDgksUNRK8N253LQ/k3P5FftC IxTBn37ohvpXfawbWgbz7LAXUUsgI+PADG8yrmJdd0alTlLyaMMJyq/5LHCFEH8k r5mMy7ly1ERs4pTC432D7jF1iPEllmPCds5wwtBzoew4xCjh2X6001XbhsncoGfb tE38W2TVf+ySgbxSx7OY3VuBqXNxq9QzTWQaKueBYX857ONuY7wf4+Fee7Rw4aNS QnFBzH48R33SbKhxeiLxnKHXTCdO8zES1tL0oMEmgM2BHdC6WCxp459kihCKsy5G VQ/4VXaxAgBg -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:40 2025 by rpki-client