$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3332203d3e20323730363837.roa File: 3230302e3134322e3233322e302f32322d3332203d3e20323730363837.roa (raw, json) Hash identifier: x2acalBNbDYRAGzrW8+ONmoyI+aiy9uhDsd5ljKo59s= Subject key identifier: 31:4A:71:17:10:F6:CA:51:B5:1C:04:D8:E8:6B:E4:9A:D5:5B:FC:92 Certificate issuer: /CN=D104990D7FBEE06F5C7017C7163D8A152452DC99 Certificate serial: 39B64F033356A4348F09006E68099E1F31695ABE Authority key identifier: D1:04:99:0D:7F:BE:E0:6F:5C:70:17:C7:16:3D:8A:15:24:52:DC:99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D104990D7FBEE06F5C7017C7163D8A152452DC99.cer Subject info access: rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3332203d3e20323730363837.roa Signing time: Tue 28 Oct 2025 11:05:36 +0000 ROA not before: Tue 28 Oct 2025 11:00:36 +0000 ROA not after: Tue 27 Oct 2026 11:05:36 +0000 asID: 270687 IP address blocks: 200.142.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.crl rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D104990D7FBEE06F5C7017C7163D8A152452DC99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b6:4f:03:33:56:a4:34:8f:09:00:6e:68:09:9e:1f:31:69:5a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D104990D7FBEE06F5C7017C7163D8A152452DC99 Validity Not Before: Oct 28 11:00:36 2025 GMT Not After : Oct 27 11:05:36 2026 GMT Subject: CN=314A711710F6CA51B51C04D8E86BE49AD55BFC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:a4:32:17:ae:26:be:c8:c9:6c:dc:33:b0: bf:e4:a3:c3:b7:15:9d:f8:57:ec:5b:7e:7f:22:1e: f5:5a:bf:db:2e:8b:94:d5:83:2d:7a:4d:62:53:9e: 6e:cd:d4:ef:0a:83:91:28:9c:64:93:41:20:cc:a3: 06:38:20:81:af:9e:b1:0e:8f:7b:e1:11:71:55:07: e4:38:fd:c4:e3:ce:5f:c8:0a:45:bd:fe:11:f3:4f: 0e:8a:53:b5:ef:15:37:51:5d:50:bf:fa:6e:55:66: 25:1d:aa:70:ae:68:b5:c5:36:ae:61:ae:10:38:1b: aa:65:e2:c0:3e:db:cb:2a:60:b8:cd:88:5c:3a:74: e4:8f:f5:2f:34:8e:c9:d8:39:ee:38:fa:84:f9:2c: a4:4c:e0:89:cb:8a:68:51:1b:e8:71:43:38:cf:db: 1c:db:8c:78:4a:39:51:0e:4e:4b:df:21:b7:a9:cc: 8e:e2:8e:33:39:0b:3f:db:75:ed:eb:15:f0:8b:e7: 6a:0a:5b:7c:91:f1:4d:d2:27:28:50:18:a7:72:9b: 69:f2:e1:d5:f5:13:c4:0c:b3:d1:40:3f:2f:a7:8a: 4e:e5:8a:1d:7d:93:af:32:32:65:bf:e1:1d:e8:69: 89:1e:d9:40:1b:57:97:9e:59:35:f2:13:d4:1c:90: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:71:17:10:F6:CA:51:B5:1C:04:D8:E8:6B:E4:9A:D5:5B:FC:92 X509v3 Authority Key Identifier: keyid:D1:04:99:0D:7F:BE:E0:6F:5C:70:17:C7:16:3D:8A:15:24:52:DC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D104990D7FBEE06F5C7017C7163D8A152452DC99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/3230302e3134322e3233322e302f32322d3332203d3e20323730363837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.142.232.0/22 Signature Algorithm: sha256WithRSAEncryption 20:99:fe:bb:0e:40:84:7f:da:bc:17:a7:52:e7:34:7f:b8:0c: c1:81:5b:3f:cd:a2:16:d4:7e:2e:d4:71:b7:d9:82:f4:a1:b1: 3e:b5:b4:e6:24:43:c3:51:b1:d3:d5:6d:86:80:ef:3d:c6:3d: 00:d4:c3:b1:3c:28:f5:9c:f2:a2:c0:bc:6d:3a:c6:54:89:35: 33:51:73:67:d1:5a:1b:18:41:aa:8d:e3:54:b9:59:9d:4d:31: 26:38:fd:86:76:bb:3b:66:ea:e9:c2:40:22:f9:b0:15:63:8f: d7:01:3d:e6:3f:03:51:9d:7b:89:d6:97:21:7d:4d:a8:8a:5d: 12:2b:92:ed:3e:bd:f5:ad:60:7f:8b:06:30:48:98:b1:9b:ca: eb:2e:7e:28:f0:a0:9c:69:c8:c3:dc:b3:62:64:64:b7:7a:ac: 5c:96:9a:27:a8:fa:5b:aa:fa:de:51:b8:90:45:47:7a:19:b9: 78:3b:3b:e4:2d:e7:32:a3:b6:26:77:01:ca:05:69:e5:65:42: 1a:7e:37:0f:5b:87:8e:80:51:22:83:f3:02:e8:8e:cc:36:4b: 36:74:48:89:2f:5a:65:57:8a:a6:a6:e5:1e:83:f2:9a:36:36: 44:bc:67:82:1e:2e:72:c4:b2:d9:35:70:0c:d2:b3:fa:be:9f: dc:49:b0:37 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUObZPAzNWpDSPCQBuaAmeHzFpWr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEwNDk5MEQ3RkJFRTA2RjVDNzAxN0M3MTYzRDhBMTUy NDUyREM5OTAeFw0yNTEwMjgxMTAwMzZaFw0yNjEwMjcxMTA1MzZaMDMxMTAvBgNV BAMTKDMxNEE3MTE3MTBGNkNBNTFCNTFDMDREOEU4NkJFNDlBRDU1QkZDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgqQyF64mvsjJbNwzsL/ko8O3 FZ34V+xbfn8iHvVav9sui5TVgy16TWJTnm7N1O8Kg5EonGSTQSDMowY4IIGvnrEO j3vhEXFVB+Q4/cTjzl/ICkW9/hHzTw6KU7XvFTdRXVC/+m5VZiUdqnCuaLXFNq5h rhA4G6pl4sA+28sqYLjNiFw6dOSP9S80jsnYOe44+oT5LKRM4InLimhRG+hxQzjP 2xzbjHhKOVEOTkvfIbepzI7ijjM5Cz/bde3rFfCL52oKW3yR8U3SJyhQGKdym2ny 4dX1E8QMs9FAPy+nik7lih19k68yMmW/4R3oaYke2UAbV5eeWTXyE9QckA+hAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUMUpxFxD2ylG1HATY6GvkmtVb/JIwHwYDVR0j BBgwFoAU0QSZDX++4G9ccBfHFj2KFSRS3JkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWoyc3hjcWJvaW9DMW5WZGQxNGQ2UTg4N2JQeWNuaVc5YnZlMVJEd284 VUcvMC9EMTA0OTkwRDdGQkVFMDZGNUM3MDE3QzcxNjNEOEExNTI0NTJEQzk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMDQ5OTBEN0ZCRUUwNkY1 QzcwMTdDNzE2M0Q4QTE1MjQ1MkRDOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVqMnN4Y3Fib2lvQzFuVmRkMTRkNlE4ODdiUHljbmlXOWJ2ZTFSRHdvOFVHLzAv MzIzMDMwMmUzMTM0MzIyZTMyMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzczMDM2MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsiO6DANBgkqhkiG9w0BAQsFAAOCAQEAIJn+ uw5AhH/avBenUuc0f7gMwYFbP82iFtR+LtRxt9mC9KGxPrW05iRDw1Gx09VthoDv PcY9ANTDsTwo9ZzyosC8bTrGVIk1M1FzZ9FaGxhBqo3jVLlZnU0xJjj9hna7O2bq 6cJAIvmwFWOP1wE95j8DUZ17idaXIX1NqIpdEiuS7T699a1gf4sGMEiYsZvK6y5+ KPCgnGnIw9yzYmRkt3qsXJaaJ6j6W6r63lG4kEVHehm5eDs75C3nMqO2JncBygVp 5WVCGn43D1uHjoBRIoPzAuiOzDZLNnRIiS9aZVeKpqblHoPymjY2RLxngh4ucsSy 2TVwDNKz+r6f3EmwNw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:59 2025 by rpki-client