$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa File: 3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa (raw, json) Hash identifier: zDf/XwTlFOp7b7Ji1Qxo+vyk7wgINbXqXzOwtZ9Uhys= Subject key identifier: A7:DF:2F:07:3A:7F:95:65:6D:8E:F5:F0:B0:A8:31:77:58:E7:C9:2D Certificate issuer: /CN=1FF4D84F5EA18738B398382BB8664840225008F9 Certificate serial: 45355B21B1D1A4FCB95FCECC051A8BFF26A4D134 Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa Signing time: Mon 27 Oct 2025 17:06:42 +0000 ROA not before: Mon 27 Oct 2025 17:01:42 +0000 ROA not after: Mon 26 Oct 2026 17:06:42 +0000 asID: 270814 IP address blocks: 177.223.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:5b:21:b1:d1:a4:fc:b9:5f:ce:cc:05:1a:8b:ff:26:a4:d1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9 Validity Not Before: Oct 27 17:01:42 2025 GMT Not After : Oct 26 17:06:42 2026 GMT Subject: CN=A7DF2F073A7F95656D8EF5F0B0A8317758E7C92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:69:a9:f2:3b:59:f5:45:7f:e8:eb:c9:37:4b: 23:f6:41:0f:3c:a5:9e:7e:bb:59:4f:c5:48:af:52: 7f:60:40:24:37:f2:1a:a5:73:d1:f9:a5:af:01:d5: 0c:8d:72:ce:1a:15:82:13:e4:0d:73:ef:9c:29:31: 17:a0:a6:e8:ae:b1:b7:3b:e6:58:96:0f:56:e4:d4: 5d:36:27:72:27:d9:c8:1e:d8:20:3f:42:b8:62:65: 29:93:73:3d:4e:e4:14:54:4d:db:92:09:05:77:19: 8a:81:ed:30:e1:15:c5:e3:3a:53:a6:6c:9b:b0:50: 66:45:3e:f0:d4:a7:96:b9:6b:b3:e5:48:07:75:22: fd:fe:e5:44:28:10:f9:47:6c:26:c9:6a:33:b2:a2: a9:b7:6c:1d:f5:16:6e:71:3e:c3:76:ac:c1:3f:ae: db:8b:69:6b:6a:68:63:ca:bc:1c:bb:0f:c3:c6:f5: 74:e7:f4:42:9f:62:31:c7:b2:29:56:ee:08:40:de: a8:68:d8:b4:b1:9b:52:ca:01:ce:fd:5b:8f:a8:00: 98:c9:d8:05:8a:d2:3f:42:4b:ab:ce:94:81:e3:39: c2:d8:be:16:a0:ad:d3:62:2f:f6:4c:64:07:83:e7: b2:70:7d:b5:3c:4d:63:a4:9b:78:bf:d1:66:1f:78: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:2F:07:3A:7F:95:65:6D:8E:F5:F0:B0:A8:31:77:58:E7:C9:2D X509v3 Authority Key Identifier: keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.223.96.0/20 Signature Algorithm: sha256WithRSAEncryption 32:c9:8e:5d:b1:1a:97:d6:d4:85:dd:47:9a:60:2b:e3:78:7e: 21:76:da:11:ac:a6:c1:23:e6:7d:75:6c:2e:a9:5c:a0:62:be: 54:76:2f:7b:9f:71:9a:05:89:be:03:7f:9a:af:8b:a0:b4:b9: 96:c9:1b:a7:0f:c5:a4:07:9d:97:34:4d:54:8c:77:5e:76:4a: 76:9f:81:36:72:55:30:c8:8c:4d:79:e2:1a:18:9d:37:f5:6f: a2:a5:c8:ea:c1:76:b5:d7:4b:a1:2c:a7:45:e6:ea:56:f4:52: 8d:bb:34:56:79:77:7f:22:7c:f2:1a:28:a5:a3:dc:a3:1d:2f: cb:53:a1:78:f1:c4:79:33:12:a5:78:b1:44:ef:39:77:04:83: 13:e8:53:3e:38:9e:92:ba:2d:5d:3a:ef:cd:c1:0f:1a:3f:74: d0:9e:f4:23:9c:40:54:7c:dc:fa:c9:03:45:82:d9:68:40:fc: 29:bb:ad:4b:b0:67:94:d6:0b:c2:93:d4:c2:14:38:6c:de:33: 97:c6:c6:dd:42:43:e8:d5:8c:ea:b5:bd:e4:05:56:65:7d:7a: 67:66:63:12:6b:88:74:0c:76:cc:8c:bf:0f:e8:5e:03:e8:62: dd:93:55:29:ce:f4:09:7c:7a:ee:36:e7:bc:5d:65:cb:9a:07: 4a:c1:36:04 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIURTVbIbHRpPy5X87MBRqL/yak0TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy MjUwMDhGOTAeFw0yNTEwMjcxNzAxNDJaFw0yNjEwMjYxNzA2NDJaMDMxMTAvBgNV BAMTKEE3REYyRjA3M0E3Rjk1NjU2RDhFRjVGMEIwQTgzMTc3NThFN0M5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGaanyO1n1RX/o68k3SyP2QQ88 pZ5+u1lPxUivUn9gQCQ38hqlc9H5pa8B1QyNcs4aFYIT5A1z75wpMRegpuiusbc7 5liWD1bk1F02J3In2cge2CA/QrhiZSmTcz1O5BRUTduSCQV3GYqB7TDhFcXjOlOm bJuwUGZFPvDUp5a5a7PlSAd1Iv3+5UQoEPlHbCbJajOyoqm3bB31Fm5xPsN2rME/ rtuLaWtqaGPKvBy7D8PG9XTn9EKfYjHHsilW7ghA3qho2LSxm1LKAc79W4+oAJjJ 2AWK0j9CS6vOlIHjOcLYvhagrdNiL/ZMZAeD57JwfbU8TWOkm3i/0WYfeExXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUp98vBzp/lWVtjvXwsKgxd1jnyS0wHwYDVR0j BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv MzEzNzM3MmUzMjMyMzMyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3 MzAzODMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASx32AwDQYJKoZIhvcNAQELBQADggEBADLJjl2x GpfW1IXdR5pgK+N4fiF22hGspsEj5n11bC6pXKBivlR2L3ufcZoFib4Df5qvi6C0 uZbJG6cPxaQHnZc0TVSMd152SnafgTZyVTDIjE154hoYnTf1b6KlyOrBdrXXS6Es p0Xm6lb0Uo27NFZ5d38ifPIaKKWj3KMdL8tToXjxxHkzEqV4sUTvOXcEgxPoUz44 npK6LV06783BDxo/dNCe9COcQFR83PrJA0WC2WhA/Cm7rUuwZ5TWC8KT1MIUOGze M5fGxt1CQ+jVjOq1veQFVmV9emdmYxJriHQMdsyMvw/oXgPoYt2TVSnO9Al8eu42 57xdZcuaB0rBNgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:50 2025 by rpki-client