$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa File: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (raw, json) Hash identifier: Qg+XDFSXBOl5BQ6DUTEcD2O7Swp7HgiFgM8nhbI1hcU= Subject key identifier: B6:88:A9:B6:61:5B:AD:49:1D:90:E2:93:69:AC:B7:7B:7A:79:5F:31 Certificate issuer: /CN=00A0649BEB784D778983813CFFD9D01F42F24C95 Certificate serial: 3A7FCAF8A38545D619B155EB2E9EFA824B564C64 Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa Signing time: Wed 11 Mar 2026 10:18:16 +0000 ROA not before: Wed 11 Mar 2026 10:13:16 +0000 ROA not after: Wed 10 Mar 2027 10:18:16 +0000 asID: 264939 IP address blocks: 168.228.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Mar 2026 06:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7f:ca:f8:a3:85:45:d6:19:b1:55:eb:2e:9e:fa:82:4b:56:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95 Validity Not Before: Mar 11 10:13:16 2026 GMT Not After : Mar 10 10:18:16 2027 GMT Subject: CN=B688A9B6615BAD491D90E29369ACB77B7A795F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:2f:c8:aa:46:a6:d6:75:4d:02:42:b3:17: eb:96:15:8d:48:fb:88:8b:49:56:c4:4f:4a:76:2a: 14:8e:7c:8e:6a:ce:a2:3f:90:1b:24:c9:36:ce:9b: 57:0b:96:0a:07:68:65:56:86:ab:80:6c:7d:c8:f0: cb:b3:17:d9:4f:f5:7d:fa:2b:81:dc:ef:7f:5a:76: 00:e4:d7:f4:fb:ed:77:2b:48:c4:d5:98:80:dc:ca: 7b:37:d2:a1:97:88:32:9a:71:67:04:95:c7:35:04: 5b:dc:69:43:99:cf:a9:5e:9f:1e:9b:4b:9f:fb:98: e2:f3:10:04:2b:a1:f8:f7:5a:e6:31:1c:56:4e:38: 64:a5:9c:ff:f7:03:21:68:cd:92:88:cb:df:d8:18: cd:70:4c:b7:c4:7e:00:e2:43:1b:d2:aa:49:f2:ec: 3a:be:3c:ce:6d:ca:c0:5e:46:bc:28:09:0f:59:b5: 0a:c8:5c:05:5a:ab:4b:d2:b6:c6:ef:9f:91:c3:35: 7e:74:92:c1:44:f1:9a:2b:1f:13:bc:a4:9f:10:81: 87:6f:29:48:37:ec:d3:84:2f:3e:5e:4a:25:aa:eb: c4:43:9c:9a:3a:12:08:95:06:27:0c:e7:69:8c:24: 73:20:2c:26:8c:81:04:59:81:6a:8e:60:9e:8c:14: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:88:A9:B6:61:5B:AD:49:1D:90:E2:93:69:AC:B7:7B:7A:79:5F:31 X509v3 Authority Key Identifier: keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.152.0/24 Signature Algorithm: sha256WithRSAEncryption 86:0e:6b:54:ac:4a:d0:d6:65:f8:c1:cd:40:3d:23:de:7a:b1: f4:27:c8:38:3d:64:14:7c:d1:66:29:18:1d:a6:e9:ab:ec:e6: 53:12:59:cb:dc:bf:52:96:f1:8e:c0:f7:85:b4:7d:38:22:a5: ba:90:64:75:1d:bb:a8:09:7e:ea:c7:6c:85:16:d5:87:41:7f: 06:c9:83:80:b5:0e:60:86:6b:99:d8:4b:ba:df:ca:54:88:a9: 1f:12:71:36:2c:9d:b5:d2:13:63:06:47:09:64:c0:3a:1d:f6: e4:bc:ca:1a:da:93:61:bd:8d:b1:30:98:f9:96:c7:8a:94:b9: 26:7e:f5:8c:52:96:5f:cb:36:b6:88:e3:40:b8:19:cd:44:4b: 0b:67:0f:e7:7a:65:93:af:17:da:52:15:28:96:4f:e5:6a:1a: 5c:37:ad:69:1d:8d:57:3d:7d:cb:de:7f:31:ba:cb:12:a4:be: 27:13:e1:e5:dc:e4:24:3d:65:bc:fe:f3:b8:c4:51:d8:bc:e5: ee:85:cc:82:0b:1d:b3:0c:d1:75:06:5c:c0:08:0b:be:bd:5a: 14:d4:d9:79:bf:c6:ef:95:77:d6:e3:03:c4:72:1c:31:90:72: 4e:ff:af:b0:4c:72:d5:22:1c:22:98:cb:23:81:31:22:fb:4e: 26:3f:37:f7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOn/K+KOFRdYZsVXrLp76gktWTGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBMDY0OUJFQjc4NEQ3Nzg5ODM4MTNDRkZEOUQwMUY0 MkYyNEM5NTAeFw0yNjAzMTExMDEzMTZaFw0yNzAzMTAxMDE4MTZaMDMxMTAvBgNV BAMTKEI2ODhBOUI2NjE1QkFENDkxRDkwRTI5MzY5QUNCNzdCN0E3OTVGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/S/Iqkam1nVNAkKzF+uWFY1I +4iLSVbET0p2KhSOfI5qzqI/kBskyTbOm1cLlgoHaGVWhquAbH3I8MuzF9lP9X36 K4Hc739adgDk1/T77XcrSMTVmIDcyns30qGXiDKacWcElcc1BFvcaUOZz6lenx6b S5/7mOLzEAQrofj3WuYxHFZOOGSlnP/3AyFozZKIy9/YGM1wTLfEfgDiQxvSqkny 7Dq+PM5tysBeRrwoCQ9ZtQrIXAVaq0vStsbvn5HDNX50ksFE8ZorHxO8pJ8QgYdv KUg37NOELz5eSiWq68RDnJo6EgiVBicM52mMJHMgLCaMgQRZgWqOYJ6MFOtpAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUtoiptmFbrUkdkOKTaay3e3p5XzEwHwYDVR0j BBgwFoAUAKBkm+t4TXeJg4E8/9nQH0LyTJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM056WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVyU0JhSzFKOEV2 eVcvMC8wMEEwNjQ5QkVCNzg0RDc3ODk4MzgxM0NGRkQ5RDAxRjQyRjI0Qzk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQTA2NDlCRUI3ODRENzc4 OTgzODEzQ0ZGRDlEMDFGNDJGMjRDOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOelprYktwR1VBeG9QWWI2VVZXQXBmMmhRa0t4UlJ1clNCYUsxSjhFdnlXLzAv MzEzNjM4MmUzMjMyMzgyZTMxMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNDM5MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkmDANBgkqhkiG9w0BAQsFAAOCAQEAhg5r VKxK0NZl+MHNQD0j3nqx9CfIOD1kFHzRZikYHabpq+zmUxJZy9y/UpbxjsD3hbR9 OCKlupBkdR27qAl+6sdshRbVh0F/BsmDgLUOYIZrmdhLut/KVIipHxJxNiydtdIT YwZHCWTAOh325LzKGtqTYb2NsTCY+ZbHipS5Jn71jFKWX8s2tojjQLgZzURLC2cP 53plk68X2lIVKJZP5WoaXDetaR2NVz19y95/MbrLEqS+JxPh5dzkJD1lvP7zuMRR 2Lzl7oXMggsdswzRdQZcwAgLvr1aFNTZeb/G75V31uMDxHIcMZByTv+vsExy1SIc IpjLI4ExIvtOJj839w== -----END CERTIFICATE-----Generated at Fri Mar 27 07:13:29 2026 by rpki-client