$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa File: 3138372e37332e302e302f32302d3234203d3e203238323031.roa (raw, json) Hash identifier: VQnF+Kh3sWmg0ztSLSsgFjC3DQCyHtlvllN0B/AX3uc= Subject key identifier: B9:16:90:E2:BF:D1:3E:49:D9:31:47:93:E1:72:A7:37:80:33:13:D7 Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304 Certificate serial: 5FA1F40D96AAF7080DF56DD8FE16F33C5552961E Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa Signing time: Sat 02 Aug 2025 12:58:25 +0000 ROA not before: Sat 02 Aug 2025 12:53:25 +0000 ROA not after: Sat 01 Aug 2026 12:58:25 +0000 asID: 28201 IP address blocks: 187.73.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a1:f4:0d:96:aa:f7:08:0d:f5:6d:d8:fe:16:f3:3c:55:52:96:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304 Validity Not Before: Aug 2 12:53:25 2025 GMT Not After : Aug 1 12:58:25 2026 GMT Subject: CN=B91690E2BFD13E49D9314793E172A737803313D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:ee:e2:e5:e1:d9:ef:a9:06:f2:ee:87:73: 5c:30:97:77:81:97:19:22:62:8a:53:59:f5:0e:03: 14:20:b0:24:27:c9:12:37:c6:69:90:2d:68:87:89: fe:bb:23:10:b1:e8:d7:95:5b:33:88:90:f6:5c:c4: 9c:4d:29:8c:29:ff:ea:ef:54:a8:58:b0:e1:ed:88: 16:61:96:eb:12:11:4a:4c:d7:17:58:6a:67:11:c2: e8:e3:91:a3:d3:58:a6:7f:30:cd:95:ab:ee:e2:8d: ea:b2:26:ef:fc:35:7a:65:f1:a4:8c:f2:de:55:ea: b1:18:67:df:8a:d3:60:0b:f7:a7:4f:b9:22:1a:d8: d7:23:bb:21:71:f3:7d:f0:a0:57:2a:7b:56:c0:04: a2:43:d5:80:44:98:78:17:03:c1:46:3b:16:60:90: 22:cc:a8:ee:58:e5:fe:a1:04:b9:ba:36:00:15:7e: cd:6c:8d:9e:49:9d:1a:2c:3b:f4:04:df:eb:9b:1e: 42:eb:b3:1d:5f:4a:35:9e:b2:94:00:97:7a:d7:e7: 46:92:50:fa:57:4e:22:83:4d:4b:94:de:ae:25:b2: eb:0e:be:37:54:8b:5b:c3:23:b5:b9:52:a6:e0:89: c5:3a:e8:ec:24:d8:91:57:6e:b9:cb:69:aa:98:5e: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:16:90:E2:BF:D1:3E:49:D9:31:47:93:E1:72:A7:37:80:33:13:D7 X509v3 Authority Key Identifier: keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.73.0.0/20 Signature Algorithm: sha256WithRSAEncryption a1:49:b4:fd:16:04:9b:f5:15:86:a0:b7:18:21:e8:a1:92:fe: c2:0e:6f:eb:94:34:d3:e8:82:7d:5b:34:05:66:a4:d5:93:b7: 68:29:61:c0:fd:64:b6:75:38:7c:f3:c1:35:c8:7a:f1:e1:01: 52:ba:01:2f:44:8a:de:65:0b:5b:f8:3c:fc:b7:4e:32:bc:fc: f4:79:65:3d:95:1b:36:3a:78:ff:14:bd:c7:57:23:89:a7:b5: 19:eb:01:a9:08:e2:e1:d7:77:c0:71:3b:cf:bb:bc:cd:d1:1d: d2:97:53:2e:4e:97:07:38:d4:0b:28:90:a2:be:02:42:6b:f1: b8:b6:8d:2c:e2:4b:c6:b5:c5:95:15:25:f0:0d:cf:c7:18:8a: b6:55:83:5c:45:c5:3e:31:f7:ee:ea:56:99:f7:ad:b6:c8:45: 90:3c:f1:5b:c0:8c:7e:9d:a9:69:4d:21:51:41:da:ea:dc:b4: 1e:58:29:5e:ad:1c:7e:f7:e0:53:d1:79:02:5f:60:1c:aa:05: 5c:c1:2e:e2:14:30:24:ac:af:89:ad:ae:e3:08:f1:99:ca:14: b4:f3:d1:e8:ad:8e:1b:64:d4:8d:0d:00:85:1a:b1:ec:fc:c9: 91:1e:82:95:6b:3c:57:14:39:6c:60:07:95:cb:2a:4a:7d:4f: 11:61:ee:25 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUX6H0DZaq9wgN9W3Y/hbzPFVSlh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1 QzY2OTMwNDAeFw0yNTA4MDIxMjUzMjVaFw0yNjA4MDExMjU4MjVaMDMxMTAvBgNV BAMTKEI5MTY5MEUyQkZEMTNFNDlEOTMxNDc5M0UxNzJBNzM3ODAzMzEzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH+7i5eHZ76kG8u6Hc1wwl3eB lxkiYopTWfUOAxQgsCQnyRI3xmmQLWiHif67IxCx6NeVWzOIkPZcxJxNKYwp/+rv VKhYsOHtiBZhlusSEUpM1xdYamcRwujjkaPTWKZ/MM2Vq+7ijeqyJu/8NXpl8aSM 8t5V6rEYZ9+K02AL96dPuSIa2NcjuyFx833woFcqe1bABKJD1YBEmHgXA8FGOxZg kCLMqO5Y5f6hBLm6NgAVfs1sjZ5JnRosO/QE3+ubHkLrsx1fSjWespQAl3rX50aS UPpXTiKDTUuU3q4lsusOvjdUi1vDI7W5UqbgicU66Owk2JFXbrnLaaqYXnE1AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUuRaQ4r/RPknZMUeT4XKnN4AzE9cwHwYDVR0j BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv MzEzODM3MmUzNzMzMmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMjMw MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAS7SQAwDQYJKoZIhvcNAQELBQADggEBAKFJtP0WBJv1FYag txgh6KGS/sIOb+uUNNPogn1bNAVmpNWTt2gpYcD9ZLZ1OHzzwTXIevHhAVK6AS9E it5lC1v4PPy3TjK8/PR5ZT2VGzY6eP8UvcdXI4mntRnrAakI4uHXd8BxO8+7vM3R HdKXUy5Olwc41AsokKK+AkJr8bi2jSziS8a1xZUVJfANz8cYirZVg1xFxT4x9+7q Vpn3rbbIRZA88VvAjH6dqWlNIVFB2urctB5YKV6tHH734FPReQJfYByqBVzBLuIU MCSsr4mtruMI8ZnKFLTz0eitjhtk1I0NAIUasez8yZEegpVrPFcUOWxgB5XLKkp9 TxFh7iU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:07 2025 by rpki-client