$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa File: 3230312e33332e31332e302f32342d3234203d3e203238323733.roa (raw, json) Hash identifier: AOtdu+pB6YbjVoDG6DbuK+9GwNHMJnWT3YBlSdPBP8w= Subject key identifier: 88:93:9B:F6:72:92:5F:4D:8B:3D:19:BB:BD:86:5A:E8:C8:22:1C:64 Certificate issuer: /CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Certificate serial: 42AC9F7B6F1A1527449539ACEB9B246693FF3ACA Authority key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa Signing time: Mon 20 Oct 2025 19:27:05 +0000 ROA not before: Mon 20 Oct 2025 19:22:05 +0000 ROA not after: Mon 19 Oct 2026 19:27:05 +0000 asID: 28273 IP address blocks: 201.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ac:9f:7b:6f:1a:15:27:44:95:39:ac:eb:9b:24:66:93:ff:3a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6 Validity Not Before: Oct 20 19:22:05 2025 GMT Not After : Oct 19 19:27:05 2026 GMT Subject: CN=88939BF672925F4D8B3D19BBBD865AE8C8221C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:64:7e:7e:bf:39:b5:ec:fe:06:37:27:c8: e1:4a:9f:83:8a:77:04:5b:1d:16:1a:d5:d9:e0:3c: ac:75:7c:c5:b1:07:ea:23:7f:85:e0:cd:09:e9:8e: d3:5a:7b:f8:b1:41:d5:8b:d0:2a:82:d6:f8:01:f3: a4:90:70:ed:e7:41:51:1d:06:30:d6:80:28:9c:64: 32:a2:9a:e1:6e:b6:a3:cc:09:61:f1:69:36:02:b8: 2b:84:fe:61:34:9a:92:c7:4b:3b:72:98:59:98:80: d8:be:ae:0c:b1:3b:5f:cc:46:f6:60:d7:5a:4f:0e: 40:6f:6d:10:53:f9:28:96:69:ed:9f:0f:e8:41:27: 2a:1e:eb:a6:27:6a:2f:ab:77:5d:b4:05:f4:1b:03: 49:05:b3:50:4c:2c:bf:81:ee:f4:e6:92:03:e7:15: ac:91:a7:1a:df:e1:5e:98:6d:fd:33:5d:e9:f3:a4: 8f:cd:9f:64:b7:b2:da:fd:b5:76:48:b0:10:e8:91: ad:46:5c:c8:c6:6f:05:69:a2:a8:ce:e3:1e:05:df: 23:2a:24:d2:bd:9c:5c:40:65:7d:fd:e8:e0:bb:0d: 03:b2:14:a6:7f:47:01:c0:42:93:e7:81:0b:9d:27: a6:a8:48:d3:13:25:4b:09:1c:b9:f1:12:10:d4:f2: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:9B:F6:72:92:5F:4D:8B:3D:19:BB:BD:86:5A:E8:C8:22:1C:64 X509v3 Authority Key Identifier: keyid:5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.33.13.0/24 Signature Algorithm: sha256WithRSAEncryption 40:b3:d4:bc:ab:0a:bd:ae:b1:fe:b8:52:c5:21:e0:70:5f:ad: 82:17:13:df:b2:17:81:67:f1:77:e6:6f:5a:2e:76:29:25:c9: 9d:3f:00:fb:3b:eb:08:93:d4:ac:3e:95:2b:0f:f7:ce:18:a1: 9d:99:70:dc:99:b1:42:19:07:de:2a:03:b2:1b:b3:2f:34:3e: 61:45:99:c8:ea:26:0d:63:c9:62:52:35:48:57:a5:d5:0e:90: a8:9a:4b:42:dc:ed:28:98:5e:b2:6d:fa:cb:52:a0:c4:e2:70: 98:34:8e:80:48:b8:6f:a6:7d:b6:72:ac:f5:29:2a:7f:58:49: bc:69:c0:f5:13:4d:93:26:7c:be:38:6c:e3:00:c5:a4:2f:d9: de:83:f6:11:13:f4:be:37:36:ae:dd:96:f0:27:76:56:1e:13: eb:25:20:da:15:67:c7:39:44:aa:64:f1:5f:3a:a5:cc:9a:ce: 62:05:0c:d2:48:e2:17:a5:1c:24:6b:5a:cc:8c:4b:d9:36:04: 30:2b:83:b9:8e:ba:47:63:7d:74:3b:f8:aa:73:07:e5:81:a3: 20:a6:4e:aa:ee:ae:af:c1:fb:bc:0f:ea:b9:ad:40:6e:ba:e9: 4b:d4:12:29:6c:06:a0:9a:81:df:63:ee:6b:cf:8f:31:e8:02: ea:b5:1a:6c -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQqyfe28aFSdElTms65skZpP/OsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2NDc2REVDMDY3N0Q0QzM2ODVBREM5QUFCQkU4RkMy QTA3OUNBNjAeFw0yNTEwMjAxOTIyMDVaFw0yNjEwMTkxOTI3MDVaMDMxMTAvBgNV BAMTKDg4OTM5QkY2NzI5MjVGNEQ4QjNEMTlCQkJEODY1QUU4QzgyMjFDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRmR+fr85tez+BjcnyOFKn4OK dwRbHRYa1dngPKx1fMWxB+ojf4XgzQnpjtNae/ixQdWL0CqC1vgB86SQcO3nQVEd BjDWgCicZDKimuFutqPMCWHxaTYCuCuE/mE0mpLHSztymFmYgNi+rgyxO1/MRvZg 11pPDkBvbRBT+SiWae2fD+hBJyoe66Ynai+rd120BfQbA0kFs1BMLL+B7vTmkgPn FayRpxrf4V6Ybf0zXenzpI/Nn2S3str9tXZIsBDoka1GXMjGbwVpoqjO4x4F3yMq JNK9nFxAZX396OC7DQOyFKZ/RwHAQpPngQudJ6aoSNMTJUsJHLnxEhDU8rqnAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUiJOb9nKSX02LPRm7vYZa6MgiHGQwHwYDVR0j BBgwFoAUWmR23sBnfUw2ha3Jqrvo/CoHnKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dhNzc1TUZ0bjhlNEZMWXFSRHByS0RiYmpic0ZEOER2UjU5ZGdDQkVR b20vMC81QTY0NzZERUMwNjc3RDRDMzY4NUFEQzlBQUJCRThGQzJBMDc5Q0E2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjQ3NkRFQzA2NzdENEMz Njg1QURDOUFBQkJFOEZDMkEwNzlDQTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N3YTc3NU1GdG44ZTRGTFlxUkRwcktEYmJqYnNGRDhEdlI1OWRnQ0JFUW9tLzAv MzIzMDMxMmUzMzMzMmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAMkhDTANBgkqhkiG9w0BAQsFAAOCAQEAQLPUvKsKva6x /rhSxSHgcF+tghcT37IXgWfxd+ZvWi52KSXJnT8A+zvrCJPUrD6VKw/3zhihnZlw 3JmxQhkH3ioDshuzLzQ+YUWZyOomDWPJYlI1SFel1Q6QqJpLQtztKJhesm36y1Kg xOJwmDSOgEi4b6Z9tnKs9Skqf1hJvGnA9RNNkyZ8vjhs4wDFpC/Z3oP2ERP0vjc2 rt2W8Cd2Vh4T6yUg2hVnxzlEqmTxXzqlzJrOYgUM0kjiF6UcJGtazIxL2TYEMCuD uY66R2N9dDv4qnMH5YGjIKZOqu6ur8H7vA/qua1AbrrpS9QSKWwGoJqB32Pua8+P MegC6rUabA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:28:09 2025 by rpki-client