$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa File: 3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa (raw, json) Hash identifier: hRk5XZDDvPhr8etEonMyiEQxaQ5i5/R2DSavrSZOgec= Subject key identifier: 38:03:C7:D8:84:C5:8F:BA:49:6B:C0:D2:DD:CF:C5:2F:FA:09:9D:AD Certificate issuer: /CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Certificate serial: 508B738ADBA956C4F2A3EAF18A5377DCBF686B7A Authority key identifier: C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject info access: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa Signing time: Mon 03 Nov 2025 13:57:22 +0000 ROA not before: Mon 03 Nov 2025 13:52:22 +0000 ROA not after: Mon 02 Nov 2026 13:57:22 +0000 asID: 264297 IP address blocks: 131.255.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8b:73:8a:db:a9:56:c4:f2:a3:ea:f1:8a:53:77:dc:bf:68:6b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Validity Not Before: Nov 3 13:52:22 2025 GMT Not After : Nov 2 13:57:22 2026 GMT Subject: CN=3803C7D884C58FBA496BC0D2DDCFC52FFA099DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:9b:fe:4d:b1:bc:30:3a:fd:d0:fb:6d:77: ed:41:21:86:54:0e:09:8c:f6:8e:54:d4:59:83:72: 3a:82:1c:11:a0:79:09:70:c9:fd:c9:fe:5b:68:b1: 02:62:f8:96:6b:bd:f9:53:da:05:1d:93:b5:cc:95: 75:99:dc:71:5c:bb:67:11:a3:e1:6f:ce:53:79:9e: bb:b2:0a:73:2a:8c:99:8c:42:97:30:d8:4c:3e:fb: 17:a7:95:3b:c1:da:cd:83:79:73:88:69:29:13:9d: c9:4d:a7:54:aa:92:8a:f4:72:9f:a7:11:25:47:ed: 37:ed:b3:25:c7:b4:d1:90:be:07:85:5e:6b:58:0b: 31:7d:6d:4b:c6:68:4a:b3:fc:ab:8c:dc:fb:53:e9: ea:79:c8:cf:36:bd:5a:52:c4:bc:df:cf:c0:34:48: 46:53:be:19:71:4c:92:55:1a:e4:8b:b5:b0:2c:dd: e9:c2:96:c9:27:03:73:82:17:b3:7f:d1:de:b3:c6: c0:5b:31:32:2c:46:2f:f2:dc:3a:01:9c:2f:e8:c9: b8:eb:60:8a:35:d3:a1:00:73:2f:e7:9d:ed:73:f8: a2:99:c5:91:2f:58:28:12:39:4b:94:cf:7c:81:84: 1e:da:bc:ea:61:3a:05:bc:b6:af:94:77:45:ca:bf: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:C7:D8:84:C5:8F:BA:49:6B:C0:D2:DD:CF:C5:2F:FA:09:9D:AD X509v3 Authority Key Identifier: keyid:C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.252.0/22 Signature Algorithm: sha256WithRSAEncryption 62:d0:bf:83:bd:31:0f:9c:1d:e3:fc:5c:72:f2:a3:ec:69:2e: cd:36:70:1b:4b:c8:ec:bf:f3:69:68:20:9b:d8:e8:7e:47:01: b6:07:be:5b:7e:cb:8a:7c:e1:8b:29:37:71:96:74:76:2c:23: 94:4e:45:c1:72:19:5e:45:29:a9:f7:22:9d:74:97:c1:55:62: f0:86:bd:a9:12:b4:84:cb:95:33:9c:8d:71:9d:55:37:d1:8c: e3:7d:bb:9e:f5:76:e4:76:5f:3b:dd:c7:a9:fb:d3:2a:88:8e: 2b:3d:0b:f9:6f:4d:ba:97:4e:02:3c:28:c1:4b:a0:f2:92:6f: 11:d7:e8:c0:7d:9f:f6:fa:82:b7:bf:53:3d:e2:d4:16:97:ff: da:cc:28:c5:87:69:37:f8:c3:63:ca:ff:ea:77:7f:ad:ff:23: e5:7a:5f:21:13:f5:5c:17:0b:43:5d:83:c1:c0:c5:15:02:bf: 68:5f:71:89:c6:cd:e3:96:6b:17:e4:47:d9:8e:cf:8e:2e:1c: 7e:f1:d3:91:5d:55:71:b6:a1:b1:76:a0:af:6d:04:fa:2b:ca: 47:35:3c:09:39:91:04:13:fe:55:d7:74:01:51:6d:bf:ca:71: 40:32:42:5b:69:0b:6b:42:db:2b:63:77:69:2c:0e:13:89:f3: d3:97:f9:95 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUUItzitupVsTyo+rxilN33L9oa3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5NDJBODFCNUIzNUQxMEY4ODk1QzQ3QTJCQUY3Q0Qx MzJGQUYwMjAeFw0yNTExMDMxMzUyMjJaFw0yNjExMDIxMzU3MjJaMDMxMTAvBgNV BAMTKDM4MDNDN0Q4ODRDNThGQkE0OTZCQzBEMkREQ0ZDNTJGRkEwOTlEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+pv+TbG8MDr90Pttd+1BIYZU DgmM9o5U1FmDcjqCHBGgeQlwyf3J/ltosQJi+JZrvflT2gUdk7XMlXWZ3HFcu2cR o+FvzlN5nruyCnMqjJmMQpcw2Ew++xenlTvB2s2DeXOIaSkTnclNp1Sqkor0cp+n ESVH7TftsyXHtNGQvgeFXmtYCzF9bUvGaEqz/KuM3PtT6ep5yM82vVpSxLzfz8A0 SEZTvhlxTJJVGuSLtbAs3enClsknA3OCF7N/0d6zxsBbMTIsRi/y3DoBnC/oybjr YIo106EAcy/nne1z+KKZxZEvWCgSOUuUz3yBhB7avOphOgW8tq+Ud0XKv28pAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUOAPH2ITFj7pJa8DS3c/FL/oJna0wHwYDVR0j BBgwFoAUyJQqgbWzXRD4iVxHorr3zRMvrwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn eHUvMC9DODk0MkE4MUI1QjM1RDEwRjg4OTVDNDdBMkJBRjdDRDEzMkZBRjAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OTQyQTgxQjVCMzVEMTBG ODg5NUM0N0EyQkFGN0NEMTMyRkFGMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv MzEzMzMxMmUzMjM1MzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP//DANBgkqhkiG9w0BAQsFAAOCAQEAYtC/ g70xD5wd4/xccvKj7GkuzTZwG0vI7L/zaWggm9jofkcBtge+W37Linzhiyk3cZZ0 diwjlE5FwXIZXkUpqfcinXSXwVVi8Ia9qRK0hMuVM5yNcZ1VN9GM4327nvV25HZf O93HqfvTKoiOKz0L+W9NupdOAjwowUug8pJvEdfowH2f9vqCt79TPeLUFpf/2swo xYdpN/jDY8r/6nd/rf8j5XpfIRP1XBcLQ12DwcDFFQK/aF9xicbN45ZrF+RH2Y7P ji4cfvHTkV1VcbahsXagr20E+ivKRzU8CTmRBBP+Vdd0AVFtv8pxQDJCW2kLa0Lb K2N3aSwOE4nz05f5lQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:32 2025 by rpki-client