$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa File: 3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (raw, json) Hash identifier: tNQiW151ebjZH5ZjyUR91sbTjWcTkvX7I/2NQIWJZhw= Subject key identifier: F8:9F:FB:DE:29:FF:50:C6:71:02:E6:CA:3F:1B:C7:80:41:BC:19:23 Certificate issuer: /CN=1FF4D84F5EA18738B398382BB8664840225008F9 Certificate serial: 7A6CF4BC91E8894085E97FB5DA36F2BA6A8FF7E2 Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa Signing time: Mon 27 Oct 2025 17:06:44 +0000 ROA not before: Mon 27 Oct 2025 17:01:44 +0000 ROA not after: Mon 26 Oct 2026 17:06:44 +0000 asID: 270814 IP address blocks: 170.247.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:f4:bc:91:e8:89:40:85:e9:7f:b5:da:36:f2:ba:6a:8f:f7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9 Validity Not Before: Oct 27 17:01:44 2025 GMT Not After : Oct 26 17:06:44 2026 GMT Subject: CN=F89FFBDE29FF50C67102E6CA3F1BC78041BC1923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:57:cd:f8:18:36:ea:1f:c9:20:4e:a1:ea: ed:ce:d6:78:3f:72:aa:3c:ee:52:3d:9f:cf:63:b8: c4:27:60:9d:4b:8a:fd:e5:90:15:17:84:c2:0a:24: 74:5f:0d:68:e7:08:88:2a:e9:97:bb:75:bd:7f:a8: e9:fd:e5:a4:06:9a:50:f3:50:3a:a5:15:a3:bd:4e: 25:cb:db:ca:14:a7:6e:72:df:51:db:c9:d2:a8:42: d1:89:e9:a0:4c:92:fe:4b:11:c0:a2:0b:08:5c:f0: d3:f1:e9:f7:d0:23:e6:fd:b0:c1:db:7e:b5:4f:f7: f2:16:e0:df:af:86:0e:bf:9a:dd:ac:5b:d7:02:d7: 01:1d:d2:51:55:ce:c2:d2:ba:7e:60:45:ba:7e:56: 05:27:21:a2:3c:52:51:0b:36:5b:63:69:4b:5d:f6: 7a:e1:8d:e9:47:7d:82:e2:af:47:ac:47:97:34:80: 94:bb:7e:1f:3f:93:9c:d7:4d:7d:a6:25:7f:7d:5a: 34:81:55:49:cb:b0:42:ad:96:dc:d6:92:65:f5:0d: 8e:8c:72:53:77:2d:16:e5:b9:5e:b1:3a:d3:78:63: d7:94:7d:d9:83:12:6c:e1:fe:24:4b:4f:b1:71:fd: 5a:7c:e2:2a:14:cf:40:af:a6:f6:d2:a3:ca:76:c8: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9F:FB:DE:29:FF:50:C6:71:02:E6:CA:3F:1B:C7:80:41:BC:19:23 X509v3 Authority Key Identifier: keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.124.0/22 Signature Algorithm: sha256WithRSAEncryption 07:75:2f:f7:fe:cc:ef:5e:26:9a:21:4b:a9:1f:ea:05:24:ba: 23:9b:5c:cd:b4:08:14:ef:b6:a1:0d:fa:4e:54:b0:7e:87:20: 47:55:8e:fc:2f:96:15:11:9f:dc:d3:28:21:85:9d:e1:1a:fe: 31:85:19:3a:32:13:83:70:b9:3d:07:c8:a1:b9:b4:22:64:49: 33:f6:ca:b9:3c:ec:2d:0c:42:ed:d0:59:ea:74:fe:81:e1:63: 41:04:e5:64:ed:c4:66:40:44:b2:47:14:e8:60:8f:7f:66:d3: da:2a:e0:c8:b1:7d:5a:d3:fc:8f:7e:64:5f:21:7f:a5:ca:4e: 1a:e3:b0:63:58:b3:f7:72:69:3d:64:26:f2:06:8e:52:6a:3d: a4:db:98:bb:41:cb:86:8e:89:e8:93:c4:31:81:f2:c2:16:fb: 01:a3:be:f4:10:63:ba:2f:d9:d3:4c:68:30:36:6b:33:ae:7e: 0a:4b:d5:a8:40:00:0a:cc:7e:d8:00:99:a2:c8:e6:6b:bb:b7: f9:75:2f:92:f6:d3:21:74:91:43:0d:a3:f5:0e:df:f0:7d:0b: 16:31:c6:98:fe:0d:87:83:3a:41:0e:b5:13:2a:2e:22:74:0c: d8:e7:65:24:b7:d0:4c:b1:2a:16:5d:60:83:d7:94:56:c1:45: 97:54:11:b5 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUemz0vJHoiUCF6X+12jbyumqP9+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy MjUwMDhGOTAeFw0yNTEwMjcxNzAxNDRaFw0yNjEwMjYxNzA2NDRaMDMxMTAvBgNV BAMTKEY4OUZGQkRFMjlGRjUwQzY3MTAyRTZDQTNGMUJDNzgwNDFCQzE5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfaVfN+Bg26h/JIE6h6u3O1ng/ cqo87lI9n89juMQnYJ1Liv3lkBUXhMIKJHRfDWjnCIgq6Ze7db1/qOn95aQGmlDz UDqlFaO9TiXL28oUp25y31HbydKoQtGJ6aBMkv5LEcCiCwhc8NPx6ffQI+b9sMHb frVP9/IW4N+vhg6/mt2sW9cC1wEd0lFVzsLSun5gRbp+VgUnIaI8UlELNltjaUtd 9nrhjelHfYLir0esR5c0gJS7fh8/k5zXTX2mJX99WjSBVUnLsEKtltzWkmX1DY6M clN3LRbluV6xOtN4Y9eUfdmDEmzh/iRLT7Fx/Vp84ioUz0CvpvbSo8p2yDATAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU+J/73in/UMZxAubKPxvHgEG8GSMwHwYDVR0j BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv MzEzNzMwMmUzMjM0MzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzczMDM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3fDANBgkqhkiG9w0BAQsFAAOCAQEAB3Uv 9/7M714mmiFLqR/qBSS6I5tczbQIFO+2oQ36TlSwfocgR1WO/C+WFRGf3NMoIYWd 4Rr+MYUZOjITg3C5PQfIobm0ImRJM/bKuTzsLQxC7dBZ6nT+geFjQQTlZO3EZkBE skcU6GCPf2bT2irgyLF9WtP8j35kXyF/pcpOGuOwY1iz93JpPWQm8gaOUmo9pNuY u0HLho6J6JPEMYHywhb7AaO+9BBjui/Z00xoMDZrM65+CkvVqEAACsx+2ACZosjm a7u3+XUvkvbTIXSRQw2j9Q7f8H0LFjHGmP4Nh4M6QQ61EyouInQM2OdlJLfQTLEq Fl1gg9eUVsFFl1QRtQ== -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:26 2025 by rpki-client