$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa File: 3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (raw, json) Hash identifier: ohcoG37TUa+LuB+M9Sb1o7PeCMEzMN4G96jE3qG4kS4= Subject key identifier: 7A:4C:A1:B0:67:A9:DB:67:85:3D:10:6E:93:33:C5:4B:6D:41:FA:96 Certificate issuer: /CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Certificate serial: 32591736B809ADF50809EADDE724A6AF31060437 Authority key identifier: C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject info access: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa Signing time: Mon 03 Nov 2025 13:57:52 +0000 ROA not before: Mon 03 Nov 2025 13:52:52 +0000 ROA not after: Mon 02 Nov 2026 13:57:52 +0000 asID: 264297 IP address blocks: 168.197.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:59:17:36:b8:09:ad:f5:08:09:ea:dd:e7:24:a6:af:31:06:04:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8942A81B5B35D10F8895C47A2BAF7CD132FAF02 Validity Not Before: Nov 3 13:52:52 2025 GMT Not After : Nov 2 13:57:52 2026 GMT Subject: CN=7A4CA1B067A9DB67853D106E9333C54B6D41FA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:8d:7a:4f:0a:9c:f4:06:fb:3f:0c:d3:d1: dc:8d:7b:15:c6:86:18:f8:dc:1f:2a:f1:6e:02:83: 9c:43:76:a7:09:cc:87:40:6a:36:2d:2d:78:3e:bd: 0b:12:73:3f:89:8e:44:d2:df:c6:30:f4:ba:49:da: c1:18:52:ce:f7:63:63:a0:63:66:c8:b5:d2:57:42: eb:d3:1a:53:61:42:ee:58:9b:65:37:2e:47:b3:57: 4e:3d:35:05:b0:bc:f9:bd:e1:72:04:4c:ab:d1:df: 42:6e:c0:ab:c6:4a:f5:f8:70:70:9a:06:52:95:03: c0:f0:53:dc:31:d1:cf:61:dc:0a:29:b8:ab:1b:bd: 03:58:0e:59:33:ab:16:5c:3f:1b:5f:31:c2:da:e0: 40:6a:3a:e5:1b:5f:a3:9e:ae:74:04:b2:bb:ad:fe: 85:fa:c5:09:65:25:41:33:bd:c1:2c:7b:fc:5c:9a: 93:b3:8a:d1:25:4d:24:61:72:d6:4d:5f:56:3e:1e: 4d:f4:85:bf:7d:31:09:a7:b7:ab:41:0e:52:81:d3: b4:bf:6b:5c:2a:16:f9:51:51:21:67:12:8c:35:be: 10:12:13:64:a3:5e:65:aa:3e:aa:33:8e:37:c4:22: 13:85:fc:65:5e:f4:8e:b1:8b:52:e7:d0:87:2a:83: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4C:A1:B0:67:A9:DB:67:85:3D:10:6E:93:33:C5:4B:6D:41:FA:96 X509v3 Authority Key Identifier: keyid:C8:94:2A:81:B5:B3:5D:10:F8:89:5C:47:A2:BA:F7:CD:13:2F:AF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8942A81B5B35D10F8895C47A2BAF7CD132FAF02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.220.0/22 Signature Algorithm: sha256WithRSAEncryption b8:14:59:9a:9c:d6:5f:dd:29:69:85:2a:74:06:be:f8:ed:ad: 75:2a:3e:10:c4:e0:66:0a:69:8d:49:f4:34:b8:b9:fe:4b:ae: d8:55:69:53:c8:e8:05:c3:66:41:b6:f1:78:ee:e9:e4:a7:95: d6:a0:94:91:33:6f:f6:ee:86:1d:34:34:98:53:c2:a9:a3:b7: e7:35:5e:0c:12:24:09:31:3b:e3:98:f3:47:f3:f2:bd:0c:32: b3:c6:c2:6e:b0:fb:84:40:a4:8f:5b:4f:0f:96:7c:2b:ed:e3: 75:a9:02:73:78:8c:75:3e:ba:e6:18:17:3d:39:c7:21:bd:80: 9c:b7:28:bf:69:db:84:0f:9c:ce:d2:93:57:95:7a:fb:30:69: 5f:4b:ba:fc:f7:3e:e0:17:7e:1c:14:ba:69:35:cd:ed:cd:2b: 10:e0:dc:bc:cf:af:ad:6b:2c:fd:54:36:bf:54:d5:39:da:f5: 7d:c2:56:ec:8f:64:e6:e0:1e:79:ac:d1:1f:fc:f3:58:17:05: 1d:1c:ff:a6:e8:f4:fb:31:fd:9f:1e:df:dc:ae:75:3c:c5:8b: af:f2:66:96:47:88:9a:70:2e:f1:27:de:c9:56:fb:b7:98:fc: 31:a8:38:9f:e2:f1:28:bd:1e:88:ce:54:7c:f9:3d:d9:e9:31: bb:98:89:5a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUMlkXNrgJrfUICerd5ySmrzEGBDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5NDJBODFCNUIzNUQxMEY4ODk1QzQ3QTJCQUY3Q0Qx MzJGQUYwMjAeFw0yNTExMDMxMzUyNTJaFw0yNjExMDIxMzU3NTJaMDMxMTAvBgNV BAMTKDdBNENBMUIwNjdBOURCNjc4NTNEMTA2RTkzMzNDNTRCNkQ0MUZBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dY16Twqc9Ab7PwzT0dyNexXG hhj43B8q8W4Cg5xDdqcJzIdAajYtLXg+vQsScz+JjkTS38Yw9LpJ2sEYUs73Y2Og Y2bItdJXQuvTGlNhQu5Ym2U3LkezV049NQWwvPm94XIETKvR30JuwKvGSvX4cHCa BlKVA8DwU9wx0c9h3AopuKsbvQNYDlkzqxZcPxtfMcLa4EBqOuUbX6OernQEsrut /oX6xQllJUEzvcEse/xcmpOzitElTSRhctZNX1Y+Hk30hb99MQmnt6tBDlKB07S/ a1wqFvlRUSFnEow1vhASE2SjXmWqPqozjjfEIhOF/GVe9I6xi1Ln0Icqg15NAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUekyhsGep22eFPRBukzPFS21B+pYwHwYDVR0j BBgwFoAUyJQqgbWzXRD4iVxHorr3zRMvrwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn eHUvMC9DODk0MkE4MUI1QjM1RDEwRjg4OTVDNDdBMkJBRjdDRDEzMkZBRjAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OTQyQTgxQjVCMzVEMTBG ODg5NUM0N0EyQkFGN0NEMTMyRkFGMDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv MzEzNjM4MmUzMTM5MzcyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF3DANBgkqhkiG9w0BAQsFAAOCAQEAuBRZ mpzWX90paYUqdAa++O2tdSo+EMTgZgppjUn0NLi5/kuu2FVpU8joBcNmQbbxeO7p 5KeV1qCUkTNv9u6GHTQ0mFPCqaO35zVeDBIkCTE745jzR/PyvQwys8bCbrD7hECk j1tPD5Z8K+3jdakCc3iMdT665hgXPTnHIb2AnLcov2nbhA+cztKTV5V6+zBpX0u6 /Pc+4Bd+HBS6aTXN7c0rEODcvM+vrWss/VQ2v1TVOdr1fcJW7I9k5uAeeazRH/zz WBcFHRz/puj0+zH9nx7f3K51PMWLr/JmlkeImnAu8SfeyVb7t5j8Mag4n+LxKL0e iM5UfPk92ekxu5iJWg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:38 2025 by rpki-client