$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32342d3234203d3e203631373937.roa File: 3133382e33362e36382e302f32342d3234203d3e203631373937.roa (raw, json) Hash identifier: qBEkzn9F3w4WmRRFpsPm/7wj00RXUmRc011YECXtSh0= Subject key identifier: 29:65:8E:07:0C:67:D1:F0:DB:15:3A:79:EC:A0:EF:98:B9:51:49:C0 Certificate issuer: /CN=698DD058CC44A7087C5B128356D10FB024C7D778 Certificate serial: 517285A0B66E634722CD0CF0ECEF63253DC37025 Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer Subject info access: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32342d3234203d3e203631373937.roa Signing time: Mon 03 Nov 2025 15:07:18 +0000 ROA not before: Mon 03 Nov 2025 15:02:18 +0000 ROA not after: Mon 02 Nov 2026 15:07:18 +0000 asID: 61797 IP address blocks: 138.36.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:72:85:a0:b6:6e:63:47:22:cd:0c:f0:ec:ef:63:25:3d:c3:70:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778 Validity Not Before: Nov 3 15:02:18 2025 GMT Not After : Nov 2 15:07:18 2026 GMT Subject: CN=29658E070C67D1F0DB153A79ECA0EF98B95149C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ad:1c:43:4b:d3:e0:99:d4:d3:8a:46:53:c4: 56:d3:7a:5b:00:b5:b3:0e:9b:1a:56:d6:80:e6:f2: 44:fd:e6:39:e9:7a:7b:c3:ce:1f:21:fd:24:4f:95: e7:41:cf:0e:e5:7b:ea:c0:8e:21:88:cf:dc:fb:ad: 88:48:8f:f3:4e:ce:e8:66:90:b0:3d:07:7e:79:54: 09:08:4f:f1:ab:e9:33:d4:27:9c:3e:fe:2a:41:5c: 11:fd:c3:8c:47:36:24:3c:17:ef:76:52:b2:a9:c3: 64:57:e3:98:04:a7:b1:39:f4:40:b0:3b:72:ef:da: a4:1a:53:b3:31:fa:39:78:62:fb:ef:c4:bd:30:10: d6:98:bf:a0:65:24:c5:54:12:b3:60:14:dc:65:84: 3b:9a:ac:2c:61:d8:5b:af:95:3b:47:65:8a:bd:45: a1:b2:7a:42:11:7c:d6:0a:38:ec:8f:73:ab:e9:f0: 90:a2:cf:80:ef:b9:48:17:30:69:86:a8:9f:79:4f: 3d:99:ae:e4:fc:96:14:fe:71:64:e0:0f:de:cb:ca: 99:7c:d1:73:cc:01:b0:17:cb:fb:e2:ef:cc:fb:36: 3a:39:b8:3f:66:45:d2:99:87:9e:c2:bc:37:9e:65: ca:97:c6:0a:91:9d:02:0d:91:3b:2d:ad:fc:03:3b: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:8E:07:0C:67:D1:F0:DB:15:3A:79:EC:A0:EF:98:B9:51:49:C0 X509v3 Authority Key Identifier: keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32342d3234203d3e203631373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.68.0/24 Signature Algorithm: sha256WithRSAEncryption 69:41:36:bd:1e:0d:8b:2b:ae:a8:5a:d0:54:16:ab:ac:ac:5d: 34:53:25:94:b7:fc:bc:f7:83:34:db:80:5b:75:e5:98:e7:5d: f4:6a:92:8e:f3:c6:e0:66:12:6a:25:c0:5f:97:c6:f8:a7:31: 4c:65:89:2f:83:60:6f:b3:a5:c6:fd:91:b2:de:78:3e:5b:98: 20:db:d9:64:b2:e9:9e:78:8c:23:ad:a1:88:a9:1e:a3:f2:0b: 3e:1c:f0:ab:4b:32:4b:2c:bd:17:2f:f7:df:5a:15:f6:9f:f1: 5f:f8:32:f6:4d:e6:26:cc:97:f0:5a:a2:a2:4a:22:73:dd:90: c1:56:cf:94:aa:54:b8:66:de:27:71:f0:50:01:9a:16:55:88: 16:a9:2d:11:a4:8c:fc:27:db:1a:eb:d7:9d:32:7a:cd:a5:fa: 6c:29:c0:e2:7d:3e:82:97:18:6e:1a:06:04:80:6c:8d:f8:8a: 0a:f6:a2:c2:9f:1d:c0:fc:c3:6f:51:af:c7:ef:e4:77:07:45: 7b:28:2f:68:27:16:b6:e0:20:52:a3:75:af:a0:9f:b5:02:cb: 4d:f0:74:a0:17:7c:3a:70:13:82:06:a7:0c:d5:4e:96:3e:1d: 1f:c6:cc:12:7e:ce:68:6a:57:a0:90:a9:2f:5e:12:e5:fd:bf: b9:07:7c:91 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUUXKFoLZuY0cizQzw7O9jJT3DcCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk4REQwNThDQzQ0QTcwODdDNUIxMjgzNTZEMTBGQjAy NEM3RDc3ODAeFw0yNTExMDMxNTAyMThaFw0yNjExMDIxNTA3MThaMDMxMTAvBgNV BAMTKDI5NjU4RTA3MEM2N0QxRjBEQjE1M0E3OUVDQTBFRjk4Qjk1MTQ5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprRxDS9PgmdTTikZTxFbTelsA tbMOmxpW1oDm8kT95jnpenvDzh8h/SRPledBzw7le+rAjiGIz9z7rYhIj/NOzuhm kLA9B355VAkIT/Gr6TPUJ5w+/ipBXBH9w4xHNiQ8F+92UrKpw2RX45gEp7E59ECw O3Lv2qQaU7Mx+jl4YvvvxL0wENaYv6BlJMVUErNgFNxlhDuarCxh2FuvlTtHZYq9 RaGyekIRfNYKOOyPc6vp8JCiz4DvuUgXMGmGqJ95Tz2ZruT8lhT+cWTgD97Lypl8 0XPMAbAXy/vi78z7Njo5uD9mRdKZh57CvDeeZcqXxgqRnQINkTstrfwDO3UTAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUKWWOBwxn0fDbFTp57KDvmLlRScAwHwYDVR0j BBgwFoAUaY3QWMxEpwh8WxKDVtEPsCTH13gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG SjEvMC82OThERDA1OENDNDRBNzA4N0M1QjEyODM1NkQxMEZCMDI0QzdENzc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OEREMDU4Q0M0NEE3MDg3 QzVCMTI4MzU2RDEwRkIwMjRDN0Q3NzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv MzEzMzM4MmUzMzM2MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3 MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAIokRDANBgkqhkiG9w0BAQsFAAOCAQEAaUE2vR4Niyuu qFrQVBarrKxdNFMllLf8vPeDNNuAW3XlmOdd9GqSjvPG4GYSaiXAX5fG+KcxTGWJ L4Ngb7Olxv2Rst54PluYINvZZLLpnniMI62hiKkeo/ILPhzwq0sySyy9Fy/331oV 9p/xX/gy9k3mJsyX8Fqiokoic92QwVbPlKpUuGbeJ3HwUAGaFlWIFqktEaSM/Cfb GuvXnTJ6zaX6bCnA4n0+gpcYbhoGBIBsjfiKCvaiwp8dwPzDb1Gvx+/kdwdFeygv aCcWtuAgUqN1r6CftQLLTfB0oBd8OnATgganDNVOlj4dH8bMEn7OaGpXoJCpL14S 5f2/uQd8kQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:03:52 2025 by rpki-client