$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa File: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (raw, json) Hash identifier: jJ7fDKdTUjf6ULIYlTuCQZNNpz+0h5bEVFWszk21/Kk= Subject key identifier: 64:72:68:57:65:F9:64:EC:CD:93:12:10:79:06:0C:A7:CE:92:7A:82 Certificate issuer: /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Certificate serial: 50165E0841BCE15395A40E08B82CA1CB26FD7DB6 Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa Signing time: Tue 04 Nov 2025 12:19:14 +0000 ROA not before: Tue 04 Nov 2025 12:14:14 +0000 ROA not after: Tue 03 Nov 2026 12:19:14 +0000 asID: 263970 IP address blocks: 138.255.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:5e:08:41:bc:e1:53:95:a4:0e:08:b8:2c:a1:cb:26:fd:7d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Validity Not Before: Nov 4 12:14:14 2025 GMT Not After : Nov 3 12:19:14 2026 GMT Subject: CN=6472685765F964ECCD93121079060CA7CE927A82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:fb:a5:fe:09:f1:78:47:48:f9:bc:2e:20: dc:ff:04:1e:5a:e9:4a:53:1d:16:13:c2:7f:11:41: 57:37:33:39:6f:a0:a7:3e:77:db:19:83:c1:4b:c2: 83:13:d2:bd:22:72:b0:8e:3e:8d:12:2e:9f:6b:b5: ff:83:54:56:e4:bc:36:dd:36:05:e7:84:f3:e1:5f: 6a:e8:ca:2c:ad:df:dd:94:d9:2b:a9:83:02:41:ef: ed:39:9d:09:5d:f3:56:e9:5e:a1:1c:c2:35:f8:d9: a7:94:1e:fb:7a:e1:d6:38:a0:65:2b:36:96:ab:53: 22:a0:ef:84:5b:5a:66:fa:ad:b5:a8:72:09:e3:43: ee:65:76:6a:69:ea:4a:2d:65:9b:6c:62:7a:e7:22: f2:ad:9f:5b:30:06:89:cb:ed:b1:94:fd:bb:ad:a9: f0:11:a1:0d:00:2e:0d:39:a1:fb:b7:6a:5c:82:21: a5:aa:7b:4d:61:4a:a8:c8:7d:50:68:9b:f0:59:b0: d9:c8:be:74:e0:6c:08:ce:22:ba:07:d7:7a:49:73: 74:11:5b:05:0c:40:ab:94:e4:8e:74:7b:02:03:2b: c1:03:23:9c:60:7e:c9:9d:5e:01:23:3c:3c:54:16: d1:37:03:f8:68:9d:49:22:15:ab:88:19:9f:60:d8: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:72:68:57:65:F9:64:EC:CD:93:12:10:79:06:0C:A7:CE:92:7A:82 X509v3 Authority Key Identifier: keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.67.0/24 Signature Algorithm: sha256WithRSAEncryption 51:9f:31:1b:01:6e:c1:fb:b4:65:25:1c:ff:9b:ef:c4:82:87: 0b:0e:e9:72:ca:11:56:e5:d8:ed:4b:96:d9:53:cd:a3:4d:50: 91:03:77:9c:38:38:00:df:97:75:26:70:35:65:63:48:81:eb: 41:b5:cb:0c:db:80:c7:9c:c7:d0:82:31:db:f9:04:0e:ea:7a: de:e1:20:57:60:8a:aa:f2:37:4e:98:da:41:e2:55:00:85:70: b9:5d:71:78:b7:20:64:c5:44:2b:3b:91:f2:d2:43:f1:bc:9e: eb:2e:7f:e8:ed:cb:9f:94:05:66:07:52:49:cd:74:69:e5:a7: a0:89:c0:38:c4:ab:b3:ef:98:f6:70:12:57:b4:43:d2:53:40: f6:b9:a6:4d:62:c0:19:e3:73:8a:63:54:6d:8c:54:8e:e8:5d: d3:a8:2d:4a:99:aa:3f:99:0e:9c:0e:9e:6d:ba:39:6a:09:ce: dd:3b:22:c7:02:35:14:cd:15:75:89:1d:56:27:88:51:51:85: 7b:e7:49:f3:72:d6:7b:16:a9:17:d7:d0:90:d6:63:33:a4:b5: eb:08:18:73:61:37:42:66:3f:3b:80:97:2e:11:bb:27:ea:b7: 8d:8d:98:b0:e5:f4:f0:9e:54:ff:64:b3:bd:71:d8:82:1f:aa: e9:c7:7d:66 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUBZeCEG84VOVpA4IuCyhyyb9fbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBMEJCM0IwQjQxQzE5OUVDRTBDMDUyNUVDNTQ1QzI5 QTdFNzI1RDAeFw0yNTExMDQxMjE0MTRaFw0yNjExMDMxMjE5MTRaMDMxMTAvBgNV BAMTKDY0NzI2ODU3NjVGOTY0RUNDRDkzMTIxMDc5MDYwQ0E3Q0U5MjdBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Mful/gnxeEdI+bwuINz/BB5a 6UpTHRYTwn8RQVc3MzlvoKc+d9sZg8FLwoMT0r0icrCOPo0SLp9rtf+DVFbkvDbd NgXnhPPhX2royiyt392U2SupgwJB7+05nQld81bpXqEcwjX42aeUHvt64dY4oGUr NparUyKg74RbWmb6rbWocgnjQ+5ldmpp6kotZZtsYnrnIvKtn1swBonL7bGU/but qfARoQ0ALg05ofu3alyCIaWqe01hSqjIfVBom/BZsNnIvnTgbAjOIroH13pJc3QR WwUMQKuU5I50ewIDK8EDI5xgfsmdXgEjPDxUFtE3A/honUkiFauIGZ9g2IdLAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUZHJoV2X5ZOzNkxIQeQYMp86SeoIwHwYDVR0j BBgwFoAUS6C7OwtBwZns4MBSXsVFwpp+cl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn bWUvMC80QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQTBCQjNCMEI0MUMxOTlF Q0UwQzA1MjVFQzU0NUMyOUE3RTcyNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzAv MzEzMzM4MmUzMjM1MzUyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACK/0MwDQYJKoZIhvcNAQELBQADggEBAFGfMRsB bsH7tGUlHP+b78SChwsO6XLKEVbl2O1LltlTzaNNUJEDd5w4OADfl3UmcDVlY0iB 60G1ywzbgMecx9CCMdv5BA7qet7hIFdgiqryN06Y2kHiVQCFcLldcXi3IGTFRCs7 kfLSQ/G8nusuf+jty5+UBWYHUknNdGnlp6CJwDjEq7PvmPZwEle0Q9JTQPa5pk1i wBnjc4pjVG2MVI7oXdOoLUqZqj+ZDpwOnm26OWoJzt07IscCNRTNFXWJHVYniFFR hXvnSfNy1nsWqRfX0JDWYzOktesIGHNhN0JmPzuAly4Ruyfqt42NmLDl9PCeVP9k s71x2IIfqunHfWY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:34:53 2025 by rpki-client