$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa File: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (raw, json) Hash identifier: rTjYayeyuMTgmvyXTSthMVbnAtKwGqrwy6zYd+iMfAc= Subject key identifier: 2B:19:28:CD:42:B5:E0:8D:34:E3:C4:72:E7:D7:28:E8:62:5D:2A:A4 Certificate issuer: /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Certificate serial: 397668E4A449056C01CDFC42B89526B5F5BE7F09 Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa Signing time: Mon 14 Jul 2025 18:32:33 +0000 ROA not before: Mon 14 Jul 2025 18:27:33 +0000 ROA not after: Mon 13 Jul 2026 18:32:33 +0000 asID: 264293 IP address blocks: 138.121.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 12 Aug 2025 01:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:76:68:e4:a4:49:05:6c:01:cd:fc:42:b8:95:26:b5:f5:be:7f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Validity Not Before: Jul 14 18:27:33 2025 GMT Not After : Jul 13 18:32:33 2026 GMT Subject: CN=2B1928CD42B5E08D34E3C472E7D728E8625D2AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:63:27:5c:04:cb:39:38:83:90:15:76:bd: d0:73:d0:68:63:26:cb:13:fa:9a:f3:e9:22:6b:5a: 10:a4:6f:4d:4f:4f:f7:24:5d:bb:49:6b:5f:8b:15: d9:9f:d3:19:16:a9:65:2b:03:54:a7:a5:a5:bc:e2: b0:20:6b:8d:39:0f:ec:de:90:ce:80:c3:71:90:63: 10:a8:cf:fd:a5:b0:7b:c9:2a:ca:2a:32:f9:1d:e3: de:62:44:bc:1b:8f:c6:3b:21:b0:93:f8:17:10:d4: 81:32:6a:c9:9c:0f:94:aa:bb:37:db:66:6b:d1:51: b9:5c:af:3b:22:96:4b:59:32:2b:67:2a:1d:24:74: 2d:13:f4:78:1d:b6:d1:99:c3:c4:16:23:9b:42:ef: 28:0f:25:4a:87:25:53:3b:ec:6f:e3:0a:d3:b5:c0: 08:a8:92:a0:38:f7:ad:26:a3:69:89:19:e0:60:84: 10:50:55:32:f7:6a:d3:3f:db:ee:02:d7:c5:13:73: 1c:81:bd:7e:75:9e:ac:29:31:4c:29:f3:56:4d:12: f7:fd:84:6a:1a:0c:7f:bf:14:ce:e9:2b:83:f0:f0: 24:24:59:e2:67:c4:58:bc:fe:21:3e:a4:3f:09:a7: 33:07:b3:fd:9b:19:a6:fa:27:d0:82:4b:c8:1b:8e: 74:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:19:28:CD:42:B5:E0:8D:34:E3:C4:72:E7:D7:28:E8:62:5D:2A:A4 X509v3 Authority Key Identifier: keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.120.0/22 Signature Algorithm: sha256WithRSAEncryption bb:ed:18:1b:fc:7a:b8:ef:57:d0:9a:28:39:78:8e:a7:02:eb: b2:ab:72:6e:a5:59:93:6f:50:bb:cc:b6:58:f9:38:60:40:8f: 5b:7a:17:37:a8:6f:14:26:4b:51:4b:1e:a0:76:0f:7f:50:5c: 07:8a:62:bd:ce:76:59:4c:5b:23:4e:19:1f:12:2c:d3:e1:9f: b2:bc:68:70:ef:e0:ae:ee:ec:64:f4:b0:3b:6d:0b:ba:e5:f3: 5b:d8:63:88:a9:4a:05:fa:16:da:ae:fc:ea:c1:1a:1c:a6:84: 0a:1a:c4:14:10:a7:ec:4f:5d:52:77:d7:76:68:be:fa:35:d5: 18:5e:1d:14:35:2e:d5:e6:c5:e1:01:d1:74:53:fd:3e:6b:de: b3:0e:04:d4:90:b0:fb:9d:b5:91:67:8a:62:35:f7:db:b6:1f: f2:63:81:56:94:16:36:26:ca:0c:59:df:48:81:e7:78:07:06: 5b:9f:88:85:54:69:50:af:82:d9:86:33:52:0e:87:b2:60:49: 43:72:5e:b1:45:14:4a:9b:b2:7c:c3:4c:06:2f:07:ed:e3:d3: dc:e9:58:68:9c:f4:67:7d:20:71:85:77:9e:e4:3f:0e:6c:b8: fd:37:d1:0b:e0:a9:92:42:9f:1c:f1:5f:61:3a:1c:fa:3a:51: 42:f1:be:41 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOXZo5KRJBWwBzfxCuJUmtfW+fwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5 NTNFQTI5RjAeFw0yNTA3MTQxODI3MzNaFw0yNjA3MTMxODMyMzNaMDMxMTAvBgNV BAMTKDJCMTkyOENENDJCNUUwOEQzNEUzQzQ3MkU3RDcyOEU4NjI1RDJBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpiWMnXATLOTiDkBV2vdBz0Ghj JssT+prz6SJrWhCkb01PT/ckXbtJa1+LFdmf0xkWqWUrA1SnpaW84rAga405D+ze kM6Aw3GQYxCoz/2lsHvJKsoqMvkd495iRLwbj8Y7IbCT+BcQ1IEyasmcD5Squzfb ZmvRUblcrzsilktZMitnKh0kdC0T9HgdttGZw8QWI5tC7ygPJUqHJVM77G/jCtO1 wAiokqA4960mo2mJGeBghBBQVTL3atM/2+4C18UTcxyBvX51nqwpMUwp81ZNEvf9 hGoaDH+/FM7pK4Pw8CQkWeJnxFi8/iE+pD8JpzMHs/2bGab6J9CCS8gbjnQxAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUKxkozUK14I0048Ry59co6GJdKqQwHwYDVR0j BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dha3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzAv MzEzMzM4MmUzMTMyMzEyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNDMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5eDANBgkqhkiG9w0BAQsFAAOCAQEAu+0Y G/x6uO9X0JooOXiOpwLrsqtybqVZk29Qu8y2WPk4YECPW3oXN6hvFCZLUUseoHYP f1BcB4pivc52WUxbI04ZHxIs0+GfsrxocO/gru7sZPSwO20LuuXzW9hjiKlKBfoW 2q786sEaHKaEChrEFBCn7E9dUnfXdmi++jXVGF4dFDUu1ebF4QHRdFP9Pmvesw4E 1JCw+521kWeKYjX327Yf8mOBVpQWNibKDFnfSIHneAcGW5+IhVRpUK+C2YYzUg6H smBJQ3JesUUUSpuyfMNMBi8H7ePT3OlYaJz0Z30gcYV3nuQ/Dmy4/TfRC+CpkkKf HPFfYToc+jpRQvG+QQ== -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:58 2025 by rpki-client