$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa File: 3133382e3235352e36382e302f32322d3332203d3e203238363439.roa (raw, json) Hash identifier: 2v7yxJAzvjytv43fAjvuWyBWsqY0YVIbPjPDVLnrsrk= Subject key identifier: D0:D2:61:09:79:13:D6:11:B7:99:74:3D:8E:06:B9:00:69:C0:A6:43 Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Certificate serial: 11A3AF1D2297F0744412056C977D32B3FC8E8707 Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa Signing time: Fri 15 Aug 2025 20:31:16 +0000 ROA not before: Fri 15 Aug 2025 20:26:16 +0000 ROA not after: Fri 14 Aug 2026 20:31:16 +0000 asID: 28649 IP address blocks: 138.255.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a3:af:1d:22:97:f0:74:44:12:05:6c:97:7d:32:b3:fc:8e:87:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Validity Not Before: Aug 15 20:26:16 2025 GMT Not After : Aug 14 20:31:16 2026 GMT Subject: CN=D0D261097913D611B799743D8E06B90069C0A643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:3c:5a:ed:6b:36:a2:4a:87:db:30:ee:c4: 14:7d:e8:a0:c1:3e:62:59:fc:1f:e4:4a:b9:44:48: 13:21:b3:56:a1:8b:25:52:eb:7a:64:fb:61:2c:c2: be:9f:1f:2f:36:61:4b:fc:bc:80:e7:0a:62:20:f1: 2e:8e:1b:4f:cd:55:66:07:3d:cd:42:22:68:db:67: ee:d9:b4:11:8f:a3:43:25:14:27:eb:5c:b8:a1:a7: 7f:57:40:37:97:68:2d:b8:f9:ec:00:ed:3b:40:d8: b0:c3:21:2f:71:1f:69:9f:e7:88:79:02:ab:e4:31: d5:66:9c:c2:49:68:75:9f:5c:c1:7b:02:90:61:10: 7d:2e:2e:ab:71:47:3f:de:0b:08:f4:a0:dd:ab:ca: 93:f3:01:63:3a:1e:92:66:fb:31:08:80:9a:1b:00: 93:13:61:c0:ee:11:d7:6f:12:a0:e5:34:bd:04:ed: 3c:48:96:b3:8f:4d:d7:57:ec:ea:2d:61:76:be:ce: e2:ea:13:e4:76:aa:04:80:f7:a7:a2:a8:bc:90:91: a9:c3:34:eb:1d:fa:54:fe:67:13:cd:cc:56:96:10: ef:e4:a2:94:00:5a:06:8c:b1:98:e4:5a:8e:41:9a: b3:50:fe:ea:13:3d:9c:eb:8a:f9:62:4c:95:45:3b: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:61:09:79:13:D6:11:B7:99:74:3D:8E:06:B9:00:69:C0:A6:43 X509v3 Authority Key Identifier: keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3235352e36382e302f32322d3332203d3e203238363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.68.0/22 Signature Algorithm: sha256WithRSAEncryption 60:7d:f5:d0:26:68:12:1e:53:f4:7c:81:b2:bf:c5:30:05:15: d8:bc:cf:f6:d2:91:07:76:a5:64:fa:22:5a:7b:a2:0d:80:59: d4:92:96:e0:a4:5c:4f:4f:5f:c6:32:55:27:7d:49:2e:0c:67: 0f:08:b3:41:b3:e1:ff:bb:c4:10:a0:37:28:5b:38:04:81:64: 81:3b:ff:5e:c9:34:a4:a1:86:87:b4:b2:80:a4:04:a6:ed:0c: f3:2c:6f:0f:ff:60:13:00:2b:3c:6b:ea:e5:5d:f0:24:9f:90: 6d:17:d6:ca:8a:07:35:22:08:8b:0e:de:66:52:d2:00:fb:a3: 45:22:f2:29:83:54:90:b9:a0:f1:d0:84:4a:4e:24:5e:e0:54: 8d:77:b3:fb:ba:68:e8:d6:41:32:86:0e:97:84:41:56:96:0f: 84:12:1d:7c:df:8b:32:95:2e:a1:ff:d4:70:4f:a8:87:51:35: 00:dd:14:59:a2:d8:f3:a4:90:e6:e0:41:00:e4:92:13:c2:39: e1:a7:31:06:ba:87:1e:2c:8d:64:6e:38:dc:ec:f8:62:82:9c: 74:52:65:67:00:c5:aa:c3:09:41:b7:23:63:ad:3c:1c:24:95: cd:7e:a9:5e:3f:94:41:db:65:f4:80:91:d2:b3:86:96:4d:08: 17:21:74:5a -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUEaOvHSKX8HREEgVsl30ys/yOhwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG RjBDNTY1MjAeFw0yNTA4MTUyMDI2MTZaFw0yNjA4MTQyMDMxMTZaMDMxMTAvBgNV BAMTKEQwRDI2MTA5NzkxM0Q2MTFCNzk5NzQzRDhFMDZCOTAwNjlDMEE2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROTxa7Ws2okqH2zDuxBR96KDB PmJZ/B/kSrlESBMhs1ahiyVS63pk+2Eswr6fHy82YUv8vIDnCmIg8S6OG0/NVWYH Pc1CImjbZ+7ZtBGPo0MlFCfrXLihp39XQDeXaC24+ewA7TtA2LDDIS9xH2mf54h5 AqvkMdVmnMJJaHWfXMF7ApBhEH0uLqtxRz/eCwj0oN2rypPzAWM6HpJm+zEIgJob AJMTYcDuEddvEqDlNL0E7TxIlrOPTddX7OotYXa+zuLqE+R2qgSA96eiqLyQkanD NOsd+lT+ZxPNzFaWEO/kopQAWgaMsZjkWo5BmrNQ/uoTPZzrivliTJVFO5ThAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQU0NJhCXkT1hG3mXQ9jga5AGnApkMwHwYDVR0j BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv MzEzMzM4MmUzMjM1MzUyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4 MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCiv9EMA0GCSqGSIb3DQEBCwUAA4IBAQBgffXQJmgS HlP0fIGyv8UwBRXYvM/20pEHdqVk+iJae6INgFnUkpbgpFxPT1/GMlUnfUkuDGcP CLNBs+H/u8QQoDcoWzgEgWSBO/9eyTSkoYaHtLKApASm7QzzLG8P/2ATACs8a+rl XfAkn5BtF9bKigc1IgiLDt5mUtIA+6NFIvIpg1SQuaDx0IRKTiRe4FSNd7P7umjo 1kEyhg6XhEFWlg+EEh1834sylS6h/9RwT6iHUTUA3RRZotjzpJDm4EEA5JITwjnh pzEGuoceLI1kbjjc7Phigpx0UmVnAMWqwwlBtyNjrTwcJJXNfqleP5RB22X0gJHS s4aWTQgXIXRa -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:07 2025 by rpki-client