$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa File: 3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (raw, json) Hash identifier: QiKNxYtYmB3kRdiDi6/EalaaGbqsdXAP80U4Fasi3ls= Subject key identifier: 20:2C:E2:91:81:D2:90:C3:A9:10:33:B9:F5:75:92:10:E0:8C:F9:03 Certificate issuer: /CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Certificate serial: 13305D89F8F0DFE89129A2CBF0B37F4F95E7C83C Authority key identifier: C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject info access: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa Signing time: Mon 03 Nov 2025 13:57:28 +0000 ROA not before: Mon 03 Nov 2025 13:52:28 +0000 ROA not after: Mon 02 Nov 2026 13:57:28 +0000 asID: 264297 IP address blocks: 138.121.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:30:5d:89:f8:f0:df:e8:91:29:a2:cb:f0:b3:7f:4f:95:e7:c8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Validity Not Before: Nov 3 13:52:28 2025 GMT Not After : Nov 2 13:57:28 2026 GMT Subject: CN=202CE29181D290C3A91033B9F5759210E08CF903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:01:2d:ef:32:a9:fe:e0:6f:ea:39:9f:51: bb:91:c6:09:8c:0f:9c:97:6c:8f:c6:c0:75:d9:0b: ea:8a:a5:53:a8:b8:39:65:f6:25:d1:bc:e5:db:29: 6b:43:ab:c4:ba:94:eb:76:ab:35:1a:a1:6b:5b:89: 8d:50:30:a4:cd:5f:63:bb:4b:61:70:78:73:16:c6: 09:89:d6:18:9e:f1:a6:2a:d4:bc:01:c7:5e:93:54: e0:26:31:cf:f2:8f:b2:08:7c:e5:e6:20:90:9d:fc: 95:84:25:73:99:0b:b0:73:94:a8:ad:44:8c:b9:f0: f4:c9:8f:c2:05:fa:d1:a0:a1:9a:b6:0d:8d:90:04: b6:8f:e1:5c:02:d8:31:27:b1:91:26:62:21:5d:c7: f0:56:08:eb:7b:ee:79:bb:9f:52:b1:cf:be:2e:ea: e7:d7:15:9a:2e:eb:3c:71:bd:f6:66:07:c0:0a:6d: ab:bb:1a:08:11:49:0d:a8:ae:56:26:50:37:ea:77: d7:37:c9:9c:18:6b:5e:d0:5c:12:a3:40:e4:52:60: a6:20:d7:2f:91:90:87:d1:69:e6:78:8e:9b:c1:0c: fa:61:1d:1b:bb:cb:f8:68:be:9d:86:a4:dd:c6:31: 2d:02:01:88:7b:a8:0e:25:45:24:84:51:e7:3d:88: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:E2:91:81:D2:90:C3:A9:10:33:B9:F5:75:92:10:E0:8C:F9:03 X509v3 Authority Key Identifier: keyid:C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.136.0/22 Signature Algorithm: sha256WithRSAEncryption c2:ee:7a:d3:3c:1f:4a:6a:85:9c:0e:7b:3a:11:dc:17:88:24: 5c:85:3e:38:81:ed:5b:d2:16:fe:56:a5:80:6e:93:17:3d:51: 27:9e:58:f7:a6:3b:f5:50:dd:3a:38:3d:4b:5e:cf:9f:c7:5f: 67:c3:66:5a:94:80:cc:7f:5e:9d:31:6d:77:c4:20:2e:cc:86: 4b:5c:f8:71:2e:67:c6:47:f5:98:90:e1:5f:8c:a4:1f:8b:11: 7c:34:65:1f:0d:76:1b:d9:4d:48:05:d2:4e:44:b3:e6:21:d1: 9a:2f:21:d9:7e:fb:dd:f3:61:de:d6:44:c0:7b:e5:21:a7:15: f8:dc:83:45:99:17:6b:aa:be:d8:4f:c7:48:f6:d2:c9:5f:69: db:6b:21:ed:cc:42:93:70:5b:5d:ea:1f:07:67:7d:12:3b:15: a2:54:78:04:5f:81:73:7a:24:c3:88:8d:78:c7:4f:98:a8:07: d8:60:ca:01:51:66:8d:0c:b4:17:f1:c1:c5:15:16:df:cb:d8: 98:0e:c1:43:59:d9:7b:25:9d:a8:bb:94:a7:d0:93:81:14:86: 23:27:f1:53:4b:99:ba:c4:82:b8:1e:c4:cb:b0:c3:4f:bf:96: d1:1e:a3:81:63:42:61:0d:87:eb:12:5f:f1:d7:07:df:3a:ab: c2:2a:09:3c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUEzBdifjw3+iRKaLL8LN/T5XnyDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5NDJBODFCNUIzNUQxMEY4ODk1QzQ3QTJCQUY3Q0Qx MzJGQUYwMjAeFw0yNTExMDMxMzUyMjhaFw0yNjExMDIxMzU3MjhaMDMxMTAvBgNV BAMTKDIwMkNFMjkxODFEMjkwQzNBOTEwMzNCOUY1NzU5MjEwRTA4Q0Y5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyAEt7zKp/uBv6jmfUbuRxgmM D5yXbI/GwHXZC+qKpVOouDll9iXRvOXbKWtDq8S6lOt2qzUaoWtbiY1QMKTNX2O7 S2FweHMWxgmJ1hie8aYq1LwBx16TVOAmMc/yj7IIfOXmIJCd/JWEJXOZC7BzlKit RIy58PTJj8IF+tGgoZq2DY2QBLaP4VwC2DEnsZEmYiFdx/BWCOt77nm7n1Kxz74u 6ufXFZou6zxxvfZmB8AKbau7GggRSQ2orlYmUDfqd9c3yZwYa17QXBKjQORSYKYg 1y+RkIfRaeZ4jpvBDPphHRu7y/hovp2GpN3GMS0CAYh7qA4lRSSEUec9iJy5AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUICzikYHSkMOpEDO59XWSEOCM+QMwHwYDVR0j BBgwFoAUyJQqgbWzXRD4iVxHorr3zRMvrwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn eHUvMC9DODk0MkE4MUI1QjM1RDEwRjg4OTVDNDdBMkJBRjdDRDEzMkZBRjAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OTQyQTgxQjVCMzVEMTBG ODg5NUM0N0EyQkFGN0NEMTMyRkFGMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv MzEzMzM4MmUzMTMyMzEyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5iDANBgkqhkiG9w0BAQsFAAOCAQEAwu56 0zwfSmqFnA57OhHcF4gkXIU+OIHtW9IW/lalgG6TFz1RJ55Y96Y79VDdOjg9S17P n8dfZ8NmWpSAzH9enTFtd8QgLsyGS1z4cS5nxkf1mJDhX4ykH4sRfDRlHw12G9lN SAXSTkSz5iHRmi8h2X773fNh3tZEwHvlIacV+NyDRZkXa6q+2E/HSPbSyV9p22sh 7cxCk3BbXeofB2d9EjsVolR4BF+Bc3okw4iNeMdPmKgH2GDKAVFmjQy0F/HBxRUW 38vYmA7BQ1nZeyWdqLuUp9CTgRSGIyfxU0uZusSCuB7Ey7DDT7+W0R6jgWNCYQ2H 6xJf8dcH3zqrwioJPA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:48 2025 by rpki-client