$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa File: 3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (raw, json) Hash identifier: VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I= Subject key identifier: 7C:8F:C0:D4:A1:C0:D0:D9:1F:99:A4:67:68:BD:28:34:54:F4:1E:02 Certificate issuer: /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Certificate serial: 37834FEDFBC2B3559015AE0EF18EE16911602128 Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa Signing time: Wed 05 Mar 2025 19:00:25 +0000 ROA not before: Wed 05 Mar 2025 18:55:25 +0000 ROA not after: Wed 04 Mar 2026 19:00:25 +0000 asID: 270279 IP address blocks: 200.124.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 10:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:83:4f:ed:fb:c2:b3:55:90:15:ae:0e:f1:8e:e1:69:11:60:21:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Validity Not Before: Mar 5 18:55:25 2025 GMT Not After : Mar 4 19:00:25 2026 GMT Subject: CN=7C8FC0D4A1C0D0D91F99A46768BD283454F41E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:bc:40:ec:f9:b2:75:9c:28:57:fe:f7:d7: 17:02:06:24:ca:66:02:b0:e8:c6:2d:60:69:4e:7d: 04:b5:6f:b5:8f:95:8a:e1:db:01:26:19:0e:d8:8a: ea:68:80:a2:d4:19:94:bd:3b:16:34:06:5d:7a:0f: fa:44:6b:d6:44:f8:47:2f:f7:1b:3a:53:ea:3e:2a: 94:22:0c:a8:b0:5e:eb:87:69:9d:4d:3a:52:9d:b7: 32:c0:01:b3:0f:81:80:bc:c6:1e:20:76:34:c2:b8: f2:ef:1e:fe:b0:a2:d1:48:05:e3:0f:03:ad:34:74: 2f:d9:25:2b:e7:76:91:a6:bd:4a:49:a5:85:5e:3a: 28:f1:14:be:e2:ed:f2:fa:28:09:97:df:86:f3:53: 51:f6:0d:fa:2f:9c:6e:94:a5:d8:2c:4b:48:71:ac: 3e:0d:ea:cc:33:2d:b7:16:29:ac:1c:23:9f:7f:e4: af:06:69:96:00:dd:c8:b8:5e:9a:31:39:35:44:e1: 52:3d:ed:2e:f4:e4:27:a7:d8:3f:66:74:fc:71:3f: f4:13:fa:0c:e2:2b:27:76:8f:34:bf:a9:aa:b4:e8: bd:fc:61:91:d4:7e:e8:b6:69:12:24:5c:79:20:cc: f3:73:73:1b:c3:53:7b:89:7d:13:0f:9c:8b:42:57: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8F:C0:D4:A1:C0:D0:D9:1F:99:A4:67:68:BD:28:34:54:F4:1E:02 X509v3 Authority Key Identifier: keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.172.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a6:8f:90:ba:fc:86:92:c1:e5:29:47:72:34:d5:e8:a3:d8: 52:fc:e5:9b:7f:49:3c:fb:4d:73:f4:20:27:d6:50:46:e6:6b: c3:e2:18:33:95:aa:5e:ba:e7:76:ae:73:f4:82:a1:ab:f9:a4: c6:75:7f:8f:3a:52:ee:a4:2f:6e:ac:17:c6:d2:9b:bb:8b:4b: b5:ce:8d:db:f8:22:b4:6c:76:50:de:56:f3:69:c1:33:58:66: 66:b6:5e:90:06:f2:01:61:e9:2e:dc:e8:de:fd:17:4a:21:f6: bd:47:1a:b1:27:50:7e:1f:a5:cd:32:57:39:9f:01:6e:f3:ff: a6:d4:64:06:87:75:ae:ad:98:a3:d7:ce:1d:80:72:0b:37:2e: 72:59:c6:d0:5b:f7:32:24:09:be:e8:91:c5:2b:29:f6:aa:46: 2e:09:d9:ed:79:72:68:13:32:cf:61:6c:b2:6f:5d:6b:45:82: cf:12:b7:b2:24:fb:cc:5c:89:b7:49:7b:86:10:39:2d:4d:f4: e4:87:c3:87:d4:70:19:3c:ea:34:09:b5:51:ec:06:74:65:a6: a5:6b:49:11:17:06:7b:42:1a:ff:43:95:0c:70:c7:e0:f8:87: 1c:64:4d:79:ff:31:18:70:30:8b:38:05:f5:81:5d:3e:7e:21: 20:c1:c4:80 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUN4NP7fvCs1WQFa4O8Y7haRFgISgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MDg2QzUzQTBFMUExOUFFNUFBMDBBOTg3NEFCQkQ3 ODU2M0E5NjAeFw0yNTAzMDUxODU1MjVaFw0yNjAzMDQxOTAwMjVaMDMxMTAvBgNV BAMTKDdDOEZDMEQ0QTFDMEQwRDkxRjk5QTQ2NzY4QkQyODM0NTRGNDFFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsLxA7PmydZwoV/731xcCBiTK ZgKw6MYtYGlOfQS1b7WPlYrh2wEmGQ7YiupogKLUGZS9OxY0Bl16D/pEa9ZE+Ecv 9xs6U+o+KpQiDKiwXuuHaZ1NOlKdtzLAAbMPgYC8xh4gdjTCuPLvHv6wotFIBeMP A600dC/ZJSvndpGmvUpJpYVeOijxFL7i7fL6KAmX34bzU1H2DfovnG6UpdgsS0hx rD4N6swzLbcWKawcI59/5K8GaZYA3ci4XpoxOTVE4VI97S705Cen2D9mdPxxP/QT +gziKyd2jzS/qaq06L38YZHUfui2aRIkXHkgzPNzcxvDU3uJfRMPnItCV5iRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUfI/A1KHA0NkfmaRnaL0oNFT0HgIwHwYDVR0j BBgwFoAUzkCGxToOGhmuWqAKmHSrvXhWOpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZM Q1IvMS9DRTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDA4NkM1M0EwRTFBMTlB RTVBQTAwQTk4NzRBQkJENzg1NjNBOTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JLeGVVV2lZS292QkJWQVY1OUNjUUF1Q1lRWjRzemVxQURjZDNocFJmTENSLzEv MzIzMDMwMmUzMTMyMzQyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMDMyMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh8rDANBgkqhkiG9w0BAQsFAAOCAQEAAKaP kLr8hpLB5SlHcjTV6KPYUvzlm39JPPtNc/QgJ9ZQRuZrw+IYM5WqXrrndq5z9IKh q/mkxnV/jzpS7qQvbqwXxtKbu4tLtc6N2/gitGx2UN5W82nBM1hmZrZekAbyAWHp Ltzo3v0XSiH2vUcasSdQfh+lzTJXOZ8BbvP/ptRkBod1rq2Yo9fOHYByCzcuclnG 0Fv3MiQJvuiRxSsp9qpGLgnZ7XlyaBMyz2Fssm9da0WCzxK3siT7zFyJt0l7hhA5 LU305IfDh9RwGTzqNAm1UewGdGWmpWtJERcGe0Ia/0OVDHDH4PiHHGRNef8xGHAw izgF9YFdPn4hIMHEgA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:02 2025 by rpki-client