$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa File: 3138392e33392e3134342e302f32302d3234203d3e203238353733.roa (raw, json) Hash identifier: kJH8LaQWSfW0nlCyXQS9zSbXXIWmLwcRf5GJV2t185Q= Subject key identifier: AF:D2:2D:16:6E:9F:5F:82:04:E1:BC:41:1A:6E:E3:3A:17:BF:AC:23 Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A Certificate serial: 309F9783E0BDC8F0A0B3A9F8EA61188284AE7957 Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa Signing time: Wed 05 Mar 2025 19:00:10 +0000 ROA not before: Wed 05 Mar 2025 18:55:10 +0000 ROA not after: Wed 04 Mar 2026 19:00:10 +0000 asID: 28573 IP address blocks: 189.39.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9f:97:83:e0:bd:c8:f0:a0:b3:a9:f8:ea:61:18:82:84:ae:79:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A Validity Not Before: Mar 5 18:55:10 2025 GMT Not After : Mar 4 19:00:10 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:6d:db:9d:2f:37:04:5c:cd:d7:07:55:fd: fb:6b:86:c9:c4:ec:93:c2:6b:3a:d2:10:a2:12:03: 76:00:e6:b6:2f:0a:f0:c4:7d:41:5b:6f:20:1b:77: 96:6d:96:0c:36:30:41:9d:28:bc:b4:5b:99:2e:e9: 0c:7a:2a:b6:1b:ab:4c:90:d3:38:f2:3d:7c:09:f7: e4:c6:59:7d:bb:2e:6a:05:79:3c:0e:25:fa:40:20: fb:0e:74:1f:35:93:b0:bf:56:78:ad:20:17:15:49: cd:4c:84:f8:0f:cf:72:62:6e:c6:55:d8:3c:c3:e7: 81:db:b7:5e:98:d3:20:54:f7:77:73:a1:ed:e8:7b: 52:d4:c4:2b:59:e1:43:7b:66:d4:47:94:51:a9:c0: 23:fa:8b:c1:0d:43:42:3a:89:ea:11:8f:44:fe:4a: 7a:32:96:cc:1e:f2:93:0b:7b:bb:8e:68:fe:60:de: 82:6f:15:68:27:75:f2:1c:03:81:e8:f2:41:10:74: ed:08:7d:25:a8:2b:86:a4:26:a8:31:6c:75:04:03: b8:95:d5:5e:d2:d0:e7:68:fd:cf:2f:e9:3d:23:85: 9b:8e:fa:d1:9f:75:54:e8:c8:fa:48:57:82:72:fe: 5c:ac:ed:8e:7b:09:d8:88:8a:66:d2:1c:c8:71:52: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D2:2D:16:6E:9F:5F:82:04:E1:BC:41:1A:6E:E3:3A:17:BF:AC:23 X509v3 Authority Key Identifier: keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.39.144.0/20 Signature Algorithm: sha256WithRSAEncryption 00:5f:51:4d:78:c9:c4:73:78:48:00:91:35:f9:70:f8:14:0a: 30:9b:b5:4b:8d:c0:58:f9:bd:fd:31:b4:54:bd:3b:c8:ab:9b: c1:55:75:16:1b:fc:c1:5e:d3:6f:12:15:b8:2c:4c:7b:24:13: 7f:bd:65:8f:3b:66:eb:54:99:a1:c9:18:51:6c:75:c6:39:e5: 1f:00:c4:b5:0d:77:24:a2:cc:88:08:80:d4:5f:3b:c3:45:fa: 57:f5:72:e2:85:76:a4:aa:37:7c:a7:3f:e5:a8:ed:df:57:98: 6e:01:9d:ac:34:6a:d6:33:f4:46:52:33:e6:9b:be:77:27:c0: 88:e0:f3:db:c3:b1:93:c6:81:92:37:f1:0f:ff:5d:27:38:f3: 07:7d:13:07:63:95:2b:79:17:9e:b0:f5:7b:31:e6:3d:2d:91: 43:c5:a7:05:63:e0:30:ff:e7:a4:9c:02:ad:be:f9:97:ab:ac: 27:17:5a:98:34:60:45:b7:db:58:45:e1:3e:a1:99:7a:d8:e1: 36:81:4f:5e:e7:cb:34:d6:15:40:3b:af:df:b5:f9:50:37:a4: 6a:ec:16:15:ab:22:15:4b:b4:ca:82:7e:72:f6:ff:1d:63:18: c7:b1:90:98:c9:09:68:86:df:ef:42:18:51:70:1a:58:f7:f7: a7:8c:04:35 -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgIUMJ+Xg+C9yPCgs6n46mEYgoSueVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE NUE2QkQwQTAeFw0yNTAzMDUxODU1MTBaFw0yNjAzMDQxOTAwMTBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDAwOTZEREI5RDJGMzcwNDVD Q0RENzA3NTVGREZCNkI4NkM5QzRFQzkzQzI2QjNBRDIxMEEyMTIwMzc2MDBFNkI2 MkYwQUYwQzQ3RDQxNUI2RjIwMUI3Nzk2NkQ5NjBDMzYzMDQxOUQyOEJDQjQ1Qjk5 MkVFOTBDN0EyQUI2MUJBQjRDOTBEMzM4RjIzRDdDMDlGN0U0QzY1OTdEQkIyRTZB MDU3OTNDMEUyNUZBNDAyMEZCMEU3NDFGMzU5M0IwQkY1Njc4QUQyMDE3MTU0OUNE NEM4NEY4MEZDRjcyNjI2RUM2NTVEODNDQzNFNzgxREJCNzVFOThEMzIwNTRGNzc3 NzNBMUVERTg3QjUyRDRDNDJCNTlFMTQzN0I2NkQ0NDc5NDUxQTlDMDIzRkE4QkMx MEQ0MzQyM0E4OUVBMTE4RjQ0RkU0QTdBMzI5NkNDMUVGMjkzMEI3QkJCOEU2OEZF NjBERTgyNkYxNTY4Mjc3NUYyMUMwMzgxRThGMjQxMTA3NEVEMDg3RDI1QTgyQjg2 QTQyNkE4MzE2Qzc1MDQwM0I4OTVENTVFRDJEMEU3NjhGRENGMkZFOTNEMjM4NTlC OEVGQUQxOUY3NTU0RThDOEZBNDg1NzgyNzJGRTVDQUNFRDhFN0IwOUQ4ODg4QTY2 RDIxQ0M4NzE1MjFCMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0Alt250vNwRczdcHVf37a4bJxOyTwms60hCiEgN2AOa2LwrwxH1B W28gG3eWbZYMNjBBnSi8tFuZLukMeiq2G6tMkNM48j18Cffkxll9uy5qBXk8DiX6 QCD7DnQfNZOwv1Z4rSAXFUnNTIT4D89yYm7GVdg8w+eB27demNMgVPd3c6Ht6HtS 1MQrWeFDe2bUR5RRqcAj+ovBDUNCOonqEY9E/kp6MpbMHvKTC3u7jmj+YN6CbxVo J3XyHAOB6PJBEHTtCH0lqCuGpCaoMWx1BAO4ldVe0tDnaP3PL+k9I4WbjvrRn3VU 6Mj6SFeCcv5crO2OewnYiIpm0hzIcVIbHQIDAQABo4ICTzCCAkswHQYDVR0OBBYE FK/SLRZun1+CBOG8QRpu4zoXv6wjMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7 BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC RDBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzOTJlMzMzOTJlMzEzNDM0 MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL0n kDANBgkqhkiG9w0BAQsFAAOCAQEAAF9RTXjJxHN4SACRNflw+BQKMJu1S43AWPm9 /TG0VL07yKubwVV1Fhv8wV7TbxIVuCxMeyQTf71ljztm61SZockYUWx1xjnlHwDE tQ13JKLMiAiA1F87w0X6V/Vy4oV2pKo3fKc/5ajt31eYbgGdrDRq1jP0RlIz5pu+ dyfAiODz28Oxk8aBkjfxD/9dJzjzB30TB2OVK3kXnrD1ezHmPS2RQ8WnBWPgMP/n pJwCrb75l6usJxdamDRgRbfbWEXhPqGZetjhNoFPXufLNNYVQDuv37X5UDekauwW FasiFUu0yoJ+cvb/HWMYx7GQmMkJaIbf70IYUXAaWPf3p4wENQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:27 2025 by rpki-client