$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39352e302f32342d3234203d3e203238313635.roa File: 3133382e3230342e39352e302f32342d3234203d3e203238313635.roa (raw, json) Hash identifier: 2X05m6QdIIB0tBJTrXqr8HI7b7brwguRjAWyipXjCtQ= Subject key identifier: 82:AA:F6:0E:F4:DD:C8:96:AC:D0:C7:77:4A:B9:81:2C:1A:18:F4:60 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 297D218E175F990D650857D98CE2B30AA1F8E33D Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39352e302f32342d3234203d3e203238313635.roa Signing time: Mon 28 Jul 2025 12:31:26 +0000 ROA not before: Mon 28 Jul 2025 12:26:26 +0000 ROA not after: Mon 27 Jul 2026 12:31:26 +0000 asID: 28165 IP address blocks: 138.204.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7d:21:8e:17:5f:99:0d:65:08:57:d9:8c:e2:b3:0a:a1:f8:e3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Jul 28 12:26:26 2025 GMT Not After : Jul 27 12:31:26 2026 GMT Subject: CN=82AAF60EF4DDC896ACD0C7774AB9812C1A18F460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:11:ef:de:9c:c1:34:8a:2c:25:39:d8:39: 7e:7c:89:e1:63:4b:b5:4e:aa:31:bc:0f:34:eb:45: 8e:b6:c6:2a:32:b3:c9:bb:4e:35:7d:8e:b7:ba:30: f5:67:ee:e1:30:13:7b:35:58:19:17:86:91:46:be: 67:d5:d7:8d:95:21:22:ed:46:30:37:30:50:17:2d: 18:50:e9:ba:18:31:1b:3a:20:b4:65:bc:c7:c2:8c: 25:3c:d1:fb:e7:e1:7f:5a:90:e7:0e:93:63:d4:7d: 54:be:78:0e:e7:12:4d:6a:d9:6f:8f:6c:7b:aa:94: 3c:86:d6:68:bc:54:5e:14:be:3f:b2:55:cb:83:ae: 2d:35:bf:a1:5c:02:79:50:f7:47:3c:2b:09:a3:3e: d7:40:ab:c1:6b:b3:06:ea:57:22:06:04:71:f8:69: 32:cc:8d:73:cf:3d:a0:a1:fd:88:99:8d:fb:dd:24: 95:e9:50:1c:c5:d4:42:8d:07:7d:61:38:73:6c:ea: c4:a0:5d:fb:f5:dc:f0:f0:09:7f:c3:df:7a:82:da: 2f:dc:56:95:b7:4e:98:ca:74:76:8f:f3:a1:ab:65: 02:f5:cc:bf:03:20:3b:ea:c0:b7:82:f3:23:09:fe: 00:ad:72:30:de:b1:ac:e1:e8:18:a2:c7:9c:fd:55: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AA:F6:0E:F4:DD:C8:96:AC:D0:C7:77:4A:B9:81:2C:1A:18:F4:60 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39352e302f32342d3234203d3e203238313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.95.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:90:b4:a6:9f:71:c7:56:ac:38:6f:63:14:b6:b7:bf:37:dc: 87:6d:4f:24:a7:0c:e6:85:a2:67:37:fd:b2:09:9e:a1:f8:15: c4:84:bd:db:d7:0a:c7:3e:6f:4b:cd:59:7d:8a:eb:f5:3e:e9: 87:37:3b:e8:19:2d:e1:9a:28:65:43:60:96:dc:96:74:32:c4: 2e:ec:5e:45:65:52:aa:0a:26:5a:5e:a9:7c:e7:35:a8:a7:f3: 37:df:58:4c:a3:ce:e8:52:8e:10:5f:15:ab:98:76:ce:59:87: 2a:40:dc:fa:12:ac:c9:3b:3c:ea:0d:69:c2:9d:d8:6e:a5:ce: b1:70:3d:23:ec:f3:06:ae:fe:e9:38:55:c8:2b:e1:98:ad:c6: 64:f9:da:1a:7c:3a:b6:35:e6:4f:1a:98:d8:59:c6:17:f0:9e: db:76:6c:23:34:e5:34:1a:f8:21:43:16:73:74:20:2e:9b:d4: ff:2a:e2:00:16:6f:dd:eb:8d:e4:49:ae:92:dc:d6:04:dc:2e: 8c:9d:db:69:bf:c0:dd:17:c6:fa:17:be:04:53:95:6b:b9:50: f3:52:53:11:eb:31:b4:ae:2a:83:44:90:ef:7b:af:92:e8:9c: 73:e7:48:e1:e9:0a:33:ca:f1:e5:a6:19:3e:5b:c1:e6:84:36: 0c:07:dc:cd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUKX0hjhdfmQ1lCFfZjOKzCqH44z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjZaFw0yNjA3MjcxMjMxMjZaMDMxMTAvBgNV BAMTKDgyQUFGNjBFRjREREM4OTZBQ0QwQzc3NzRBQjk4MTJDMUExOEY0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7BHv3pzBNIosJTnYOX58ieFj S7VOqjG8DzTrRY62xioys8m7TjV9jre6MPVn7uEwE3s1WBkXhpFGvmfV142VISLt RjA3MFAXLRhQ6boYMRs6ILRlvMfCjCU80fvn4X9akOcOk2PUfVS+eA7nEk1q2W+P bHuqlDyG1mi8VF4Uvj+yVcuDri01v6FcAnlQ90c8KwmjPtdAq8FrswbqVyIGBHH4 aTLMjXPPPaCh/YiZjfvdJJXpUBzF1EKNB31hOHNs6sSgXfv13PDwCX/D33qC2i/c VpW3TpjKdHaP86GrZQL1zL8DIDvqwLeC8yMJ/gCtcjDesazh6Biix5z9VQjzAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUgqr2DvTdyJas0Md3SrmBLBoY9GAwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzMzM4MmUzMjMwMzQyZTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4 MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAisxfMA0GCSqGSIb3DQEBCwUAA4IBAQA/kLSmn3HH Vqw4b2MUtre/N9yHbU8kpwzmhaJnN/2yCZ6h+BXEhL3b1wrHPm9LzVl9iuv1PumH NzvoGS3hmihlQ2CW3JZ0MsQu7F5FZVKqCiZaXql85zWop/M331hMo87oUo4QXxWr mHbOWYcqQNz6EqzJOzzqDWnCndhupc6xcD0j7PMGrv7pOFXIK+GYrcZk+doafDq2 NeZPGpjYWcYX8J7bdmwjNOU0GvghQxZzdCAum9T/KuIAFm/d643kSa6S3NYE3C6M ndtpv8DdF8b6F74EU5VruVDzUlMR6zG0riqDRJDve6+S6Jxz50jh6QozyvHlphk+ W8HmhDYMB9zN -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:10 2025 by rpki-client