$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa File: 3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (raw, json) Hash identifier: rx5Zu0sL+XVwDW8gwYzOP+H4x5J1EEfuLondo22zp8Y= Subject key identifier: 5F:06:00:E7:39:DA:4A:12:13:24:8D:BE:D0:20:CA:89:5D:6B:4A:DC Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Certificate serial: 7C469457E9EFF06ADA99AB0E86AE5424DAEF6694 Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa Signing time: Wed 12 Feb 2025 16:41:36 +0000 ROA not before: Wed 12 Feb 2025 16:36:36 +0000 ROA not after: Wed 11 Feb 2026 16:41:36 +0000 asID: 264332 IP address blocks: 138.185.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:46:94:57:e9:ef:f0:6a:da:99:ab:0e:86:ae:54:24:da:ef:66:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB Validity Not Before: Feb 12 16:36:36 2025 GMT Not After : Feb 11 16:41:36 2026 GMT Subject: CN=5F0600E739DA4A1213248DBED020CA895D6B4ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:5f:ca:86:d2:30:bf:bd:21:8d:8e:fc:59: 61:e0:f4:1d:3e:02:aa:ee:e3:04:f3:97:f3:68:1b: 20:74:90:a8:ab:0d:8e:0a:96:94:66:f9:ed:92:b9: ec:92:e1:4b:6e:7f:ac:42:f0:9d:e3:0e:8b:d0:43: a6:6d:d3:f0:40:f9:a1:5c:15:8a:2f:27:8b:5d:09: 9a:d8:a9:6a:90:ad:f5:f1:81:f9:e3:77:df:7d:53: 25:d4:ba:fb:a2:82:62:31:fb:03:99:18:38:5d:68: 73:12:91:5a:dc:4b:02:e2:15:26:f3:b5:bf:15:62: 8c:9e:ca:a3:10:64:04:0a:ee:b7:4c:2f:00:cd:b5: fa:11:99:48:fd:3a:cb:1c:b5:5e:98:d8:14:e7:3b: f2:62:7b:af:8b:ed:ea:91:5e:93:2e:fc:62:4a:3d: 9a:fa:ff:a4:59:04:84:03:c6:d8:89:f1:3c:6c:22: 00:69:44:bb:a6:5b:1c:83:22:e9:6b:7d:65:ec:d1: d9:3a:36:10:c2:8d:f1:58:60:05:12:dc:44:df:77: 81:72:ab:6d:32:72:ae:04:ad:7b:91:72:6e:05:f0: a2:45:7f:f6:a2:1c:9b:bd:a3:99:d1:33:c2:ab:20: 69:bf:ba:c8:01:0c:5a:76:8c:3b:28:1d:22:9e:ef: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:00:E7:39:DA:4A:12:13:24:8D:BE:D0:20:CA:89:5D:6B:4A:DC X509v3 Authority Key Identifier: keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.20.0/22 Signature Algorithm: sha256WithRSAEncryption c1:8f:04:a4:7a:a0:c8:02:1a:3c:8f:99:5c:b9:44:05:82:df: fd:d8:a3:70:7f:5b:aa:b7:6e:fe:8e:b5:56:7b:41:da:e1:49: 77:c0:2f:ef:96:25:a6:b4:ba:ff:03:c9:c9:29:ff:52:f4:84: b0:6d:15:7c:0e:7d:a1:f5:7d:c9:2e:b7:ab:a5:b1:3d:fa:0d: 9b:52:a3:97:94:c7:b8:8c:36:2d:37:74:cf:a4:4f:4e:b6:e9: 32:b2:e0:a5:de:09:ff:fe:73:51:7d:9c:26:95:46:02:e5:64: 06:57:11:fa:0b:77:80:e0:65:f0:cb:c3:ac:cf:8d:0a:35:bf: 51:92:49:a7:45:4e:fc:58:e6:9c:b1:35:3c:06:3c:eb:9c:f9: 7e:b5:97:dd:88:d5:d1:11:a1:3a:a2:69:00:96:f4:2a:2d:1f: 65:f7:b0:05:28:38:1b:2b:e4:a6:47:6e:d6:d1:a7:1e:6a:30: 81:3f:d3:0e:d7:78:04:45:43:04:f7:b4:5e:cf:26:b0:ea:17: 39:76:20:7a:fb:e4:ff:31:c9:9a:12:99:8f:fe:35:ea:8c:c6: c7:41:e9:8b:7a:d4:89:0a:8e:34:15:12:eb:17:c5:c4:2b:b1: c5:97:78:a3:d1:f2:16:39:f4:ee:a3:b5:c0:3e:e2:a7:30:14: 45:a5:84:00 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfEaUV+nv8GramasOhq5UJNrvZpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E1MDlCQTQ4RTc5OTA0RjY5NjkwNzIyRDY1QUFEQjlB RDNBNDdBQjAeFw0yNTAyMTIxNjM2MzZaFw0yNjAyMTExNjQxMzZaMDMxMTAvBgNV BAMTKDVGMDYwMEU3MzlEQTRBMTIxMzI0OERCRUQwMjBDQTg5NUQ2QjRBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFV/KhtIwv70hjY78WWHg9B0+ Aqru4wTzl/NoGyB0kKirDY4KlpRm+e2SueyS4Utuf6xC8J3jDovQQ6Zt0/BA+aFc FYovJ4tdCZrYqWqQrfXxgfnjd999UyXUuvuigmIx+wOZGDhdaHMSkVrcSwLiFSbz tb8VYoyeyqMQZAQK7rdMLwDNtfoRmUj9OssctV6Y2BTnO/Jie6+L7eqRXpMu/GJK PZr6/6RZBIQDxtiJ8TxsIgBpRLumWxyDIulrfWXs0dk6NhDCjfFYYAUS3ETfd4Fy q20ycq4ErXuRcm4F8KJFf/aiHJu9o5nRM8KrIGm/usgBDFp2jDsoHSKe7z7/AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUXwYA5znaShITJI2+0CDKiV1rStwwHwYDVR0j BBgwFoAUelCbpI55kE9paQci1lqtua06R6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO Rk0vMS83QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBNTA5QkE0OEU3OTkwNEY2 OTY5MDcyMkQ2NUFBREI5QUQzQTQ3QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0c5TlBmWmVicWdIb1A1eU5DelV4YTNKTVNQaktUTmVEZnhRUXZrcFBKTkZNLzEv MzEzMzM4MmUzMTM4MzUyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzQzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKuRQwDQYJKoZIhvcNAQELBQADggEBAMGPBKR6 oMgCGjyPmVy5RAWC3/3Yo3B/W6q3bv6OtVZ7QdrhSXfAL++WJaa0uv8Dyckp/1L0 hLBtFXwOfaH1fckut6ulsT36DZtSo5eUx7iMNi03dM+kT0626TKy4KXeCf/+c1F9 nCaVRgLlZAZXEfoLd4DgZfDLw6zPjQo1v1GSSadFTvxY5pyxNTwGPOuc+X61l92I 1dERoTqiaQCW9CotH2X3sAUoOBsr5KZHbtbRpx5qMIE/0w7XeARFQwT3tF7PJrDq Fzl2IHr75P8xyZoSmY/+NeqMxsdB6Yt61IkKjjQVEusXxcQrscWXeKPR8hY59O6j tcA+4qcwFEWlhAA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:46:59 2025 by rpki-client