$ rpki-client -vvf rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa File: 3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa (raw, json) Hash identifier: uc/TKdHjBD8uaYKHELADPQPyp8L3XQb1PwZcAYwwKjk= Subject key identifier: 86:8E:C8:F2:13:0F:2A:D4:71:5E:55:95:99:5E:5E:E1:C8:E1:44:7D Certificate issuer: /CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802 Certificate serial: 646F64A9955CDE692B66F0078658F0B40E761424 Authority key identifier: 26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer Subject info access: rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa Signing time: Tue 23 Sep 2025 14:57:49 +0000 ROA not before: Tue 23 Sep 2025 14:52:49 +0000 ROA not after: Tue 22 Sep 2026 14:57:49 +0000 asID: 266633 IP address blocks: 128.201.152.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 00:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6f:64:a9:95:5c:de:69:2b:66:f0:07:86:58:f0:b4:0e:76:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802 Validity Not Before: Sep 23 14:52:49 2025 GMT Not After : Sep 22 14:57:49 2026 GMT Subject: CN=868EC8F2130F2AD4715E5595995E5EE1C8E1447D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:c6:20:70:1d:24:e1:e2:d2:27:33:63:5e: 01:29:bd:44:1c:c9:d3:ae:fc:cb:8a:88:34:46:fc: 13:4b:b1:f8:b8:e0:28:2d:a8:c4:70:60:53:f7:7e: 61:42:ef:57:c0:6f:13:0a:93:b5:de:e4:88:4c:8b: 4f:4c:55:4d:bc:53:93:8d:62:a5:7b:2f:1d:fe:36: 90:37:78:26:39:5b:d1:95:e0:87:9f:d8:f1:ef:dc: 47:2e:ce:9c:6c:a6:a4:7d:92:cb:81:54:8b:b7:ba: 19:7c:e9:3f:dc:69:7b:5c:40:f3:00:44:e0:6c:ad: c5:c1:7e:99:e3:2e:97:23:df:28:d0:4c:bb:3e:24: f4:77:43:f3:2c:79:45:32:b6:9b:a5:b4:7b:f3:48: 6e:f1:64:62:9c:a9:32:9f:83:2c:48:10:bd:51:0f: 92:4d:5c:ac:58:47:02:0d:c2:6b:d9:78:0c:31:26: c6:29:7f:5b:93:d4:4b:77:74:96:27:73:c4:83:09: b5:bb:a1:46:56:cd:7c:fc:55:b9:d0:48:8c:f5:5d: b3:87:d6:36:d9:9c:34:ec:80:9f:78:26:38:cf:d2: 0e:59:ce:c5:13:43:08:19:17:82:a6:9c:d6:3a:aa: 8c:d9:c5:a3:f3:10:db:64:67:31:b7:c2:bf:d6:2d: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8E:C8:F2:13:0F:2A:D4:71:5E:55:95:99:5E:5E:E1:C8:E1:44:7D X509v3 Authority Key Identifier: keyid:26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.152.0/22 Signature Algorithm: sha256WithRSAEncryption 50:f2:30:a1:5f:c0:8c:9e:b3:a6:fb:63:af:76:e9:b3:ce:27: 7d:e7:79:77:cf:bf:7b:3b:c9:a7:14:82:7e:56:c9:79:60:5c: d4:c5:1b:06:60:85:4d:b2:5a:19:3d:86:13:6b:2c:2c:fb:e3: d9:9e:04:b9:fc:9d:7c:06:ff:73:35:73:c3:8a:cd:d8:23:9c: 10:a1:80:ea:5a:14:2a:7f:c6:6a:50:d0:45:b3:a6:cf:fb:c3: de:1e:bb:04:c4:f1:72:fc:54:5f:03:90:5e:ae:fd:eb:ae:5f: 01:08:5c:94:4a:74:02:bb:ff:70:16:2f:9e:77:66:26:9c:28: ae:42:1d:40:9e:86:a1:2d:62:57:02:c3:5d:0a:02:f3:90:57: ef:d9:43:d9:88:85:c0:54:0a:bb:43:ed:e7:44:5a:51:d2:e8: 1f:fc:31:d2:7a:b9:f8:15:de:d6:dd:19:40:09:82:f4:45:61: be:59:0e:1b:9e:07:b2:8c:e1:36:3d:ff:71:3f:ad:43:46:95: 1d:0c:14:88:85:76:1e:79:2b:a8:08:3e:16:a6:ff:57:b9:6a: ef:8b:4a:a3:2e:08:35:22:ae:00:58:0f:0e:07:2e:eb:09:ac: 4e:a8:2e:ac:8b:29:2e:e4:93:5e:36:b0:4a:cb:f5:db:7b:ad: ba:16:9c:db -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUZG9kqZVc3mkrZvAHhljwtA52FCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCQjBBOURFRUIxREUyN0Q2QjM3MTA3OUY4MUNBQkRC Q0Q2QjgwMjAeFw0yNTA5MjMxNDUyNDlaFw0yNjA5MjIxNDU3NDlaMDMxMTAvBgNV BAMTKDg2OEVDOEYyMTMwRjJBRDQ3MTVFNTU5NTk5NUU1RUUxQzhFMTQ0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkccYgcB0k4eLSJzNjXgEpvUQc ydOu/MuKiDRG/BNLsfi44CgtqMRwYFP3fmFC71fAbxMKk7Xe5IhMi09MVU28U5ON YqV7Lx3+NpA3eCY5W9GV4Ief2PHv3EcuzpxspqR9ksuBVIu3uhl86T/caXtcQPMA ROBsrcXBfpnjLpcj3yjQTLs+JPR3Q/MseUUytpultHvzSG7xZGKcqTKfgyxIEL1R D5JNXKxYRwINwmvZeAwxJsYpf1uT1Et3dJYnc8SDCbW7oUZWzXz8VbnQSIz1XbOH 1jbZnDTsgJ94JjjP0g5ZzsUTQwgZF4KmnNY6qozZxaPzENtkZzG3wr/WLbZZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUho7I8hMPKtRxXlWVmV5e4cjhRH0wHwYDVR0j BBgwFoAUJrsKne6x3ifWs3EHn4HKvbzWuAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkQySEo2R0N2cFNIMnh5VWlMb0NQd2VONVZzQW0xMUxZSEFQazUxVkhk aEgvMC8yNkJCMEE5REVFQjFERTI3RDZCMzcxMDc5RjgxQ0FCREJDRDZCODAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QkIwQTlERUVCMURFMjdE NkIzNzEwNzlGODFDQUJEQkNENkI4MDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJEMkhKNkdDdnBTSDJ4eVVpTG9DUHdlTjVWc0FtMTFMWUhBUGs1MVZIZGhILzAv MzEzMjM4MmUzMjMwMzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNjM2MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJmDANBgkqhkiG9w0BAQsFAAOCAQEAUPIw oV/AjJ6zpvtjr3bps84nfed5d8+/ezvJpxSCflbJeWBc1MUbBmCFTbJaGT2GE2ss LPvj2Z4EufydfAb/czVzw4rN2COcEKGA6loUKn/GalDQRbOmz/vD3h67BMTxcvxU XwOQXq79665fAQhclEp0Arv/cBYvnndmJpworkIdQJ6GoS1iVwLDXQoC85BX79lD 2YiFwFQKu0Pt50RaUdLoH/wx0nq5+BXe1t0ZQAmC9EVhvlkOG54HsozhNj3/cT+t Q0aVHQwUiIV2HnkrqAg+Fqb/V7lq74tKoy4INSKuAFgPDgcu6wmsTqgurIspLuST XjawSsv123utuhac2w== -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:48 2025 by rpki-client