$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38392e302f32342d3234203d3e203532393031.roa File: 3139312e372e38392e302f32342d3234203d3e203532393031.roa (raw, json) Hash identifier: LljQgkp6D5K+E+MCroazwaQY8/51SMuYxO6YYVLCnK8= Subject key identifier: DF:FD:7A:C1:A5:AC:54:C0:66:A8:80:E0:A0:12:92:A4:10:C1:2B:16 Certificate issuer: /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0 Certificate serial: 6DA6A9B342D14416B829F2102E3A743FBD7123F6 Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38392e302f32342d3234203d3e203532393031.roa Signing time: Fri 13 Mar 2026 12:31:49 +0000 ROA not before: Fri 13 Mar 2026 12:26:49 +0000 ROA not after: Fri 12 Mar 2027 12:31:49 +0000 asID: 52901 IP address blocks: 191.7.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a6:a9:b3:42:d1:44:16:b8:29:f2:10:2e:3a:74:3f:bd:71:23:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0 Validity Not Before: Mar 13 12:26:49 2026 GMT Not After : Mar 12 12:31:49 2027 GMT Subject: CN=DFFD7AC1A5AC54C066A880E0A01292A410C12B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:3a:58:12:10:ee:78:d4:f9:bb:d6:c9:95: 43:76:a8:1a:51:6b:04:05:54:6b:2c:70:de:a7:2f: bb:ff:fa:b0:db:93:c8:f2:49:cd:fe:50:83:ba:59: 91:a6:7a:ea:2d:c2:fd:bb:5f:24:70:d9:02:cf:0a: b8:63:8b:7d:fe:ad:61:c4:94:71:b6:75:da:d5:a7: c3:b1:1c:4a:2e:ed:fa:38:a0:f8:9d:4d:a6:3f:37: 6a:84:84:5a:2a:61:46:00:1c:fb:0b:a5:67:59:1f: 48:1d:8d:6e:97:6c:02:cd:a5:6c:d4:2b:cb:fd:93: 46:b0:e9:ac:10:61:2e:ff:2e:e4:9c:db:87:37:26: 81:f1:a5:de:33:a2:23:9a:dd:a0:bf:8c:5c:6f:40: 55:d7:d5:25:ec:5e:af:32:f1:a9:a8:9a:ad:52:67: 18:77:49:74:2f:2d:77:76:cc:f5:4a:40:50:b4:60: b7:35:e4:aa:63:33:c3:34:1e:ca:56:57:e9:4e:a6: 55:e1:93:25:f5:fd:16:2e:84:d7:64:84:e1:c5:c2: 71:22:fe:38:d7:3a:05:a7:56:a8:88:f4:62:7a:5d: f9:ff:e6:6a:e5:0e:12:2e:56:ff:2f:95:01:f6:90: 8a:28:5a:b9:b2:f6:86:26:b6:fd:f0:8f:00:ad:34: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FD:7A:C1:A5:AC:54:C0:66:A8:80:E0:A0:12:92:A4:10:C1:2B:16 X509v3 Authority Key Identifier: keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38392e302f32342d3234203d3e203532393031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.7.89.0/24 Signature Algorithm: sha256WithRSAEncryption 77:3f:70:66:cf:03:70:f8:0a:51:84:80:55:21:69:57:c5:02: 87:43:8b:8c:91:a5:c7:1d:3b:bf:6f:aa:5a:88:30:ff:ff:50: 29:43:d6:a7:68:d5:c0:78:32:09:7a:01:a9:08:70:fd:06:a0: 29:74:56:ef:3d:29:c9:65:15:23:1a:7d:2d:96:45:08:50:77: bb:a0:fc:ab:56:0f:e7:67:b2:a3:12:5f:50:3c:97:2c:29:6c: a2:b0:7d:ad:20:b5:cf:68:7d:02:ef:dd:4e:d1:99:ad:e7:27: 2c:e8:cf:ab:b7:d4:e4:60:b6:89:15:22:56:65:ac:83:08:03: b9:37:0a:89:26:2d:8e:23:05:04:ca:9c:17:8a:80:58:e5:5b: 9c:d6:11:3d:27:26:01:91:03:41:a9:c2:08:1c:15:1c:d0:84: ab:ae:79:93:62:08:b0:43:77:97:ba:73:24:f4:41:9a:42:73: 4a:49:f6:0b:30:bc:0b:84:ae:85:9d:11:f1:25:ac:f4:87:69: 24:f0:62:59:75:05:00:4f:1a:fe:fc:f4:94:31:a9:76:70:c3: 0c:c3:f1:2a:52:90:10:28:f3:9c:90:7c:1d:45:6d:9a:4d:0f: 32:e4:99:46:83:16:31:a7:9c:0c:cf:8e:5b:d1:f2:9a:21:e6: f4:f3:e5:5f -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUbaaps0LRRBa4KfIQLjp0P71xI/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBNjgyNTMzOUYzQzU5NjlCQTRBRjg2QkE3MEJEQUZG RUY0RDNCMDAeFw0yNjAzMTMxMjI2NDlaFw0yNzAzMTIxMjMxNDlaMDMxMTAvBgNV BAMTKERGRkQ3QUMxQTVBQzU0QzA2NkE4ODBFMEEwMTI5MkE0MTBDMTJCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxjpYEhDueNT5u9bJlUN2qBpR awQFVGsscN6nL7v/+rDbk8jySc3+UIO6WZGmeuotwv27XyRw2QLPCrhji33+rWHE lHG2ddrVp8OxHEou7fo4oPidTaY/N2qEhFoqYUYAHPsLpWdZH0gdjW6XbALNpWzU K8v9k0aw6awQYS7/LuSc24c3JoHxpd4zoiOa3aC/jFxvQFXX1SXsXq8y8amomq1S Zxh3SXQvLXd2zPVKQFC0YLc15KpjM8M0HspWV+lOplXhkyX1/RYuhNdkhOHFwnEi /jjXOgWnVqiI9GJ6Xfn/5mrlDhIuVv8vlQH2kIooWrmy9oYmtv3wjwCtNLd3AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU3/16waWsVMBmqIDgoBKSpBDBKxYwHwYDVR0j BBgwFoAU4KaCUznzxZabpK+GunC9r/7007AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1U3dXBjVU1YNDlHM1ZTb1lxRFBheFhZbkpXcDE5Q25yMmFrd3FZZGs5 cngvMC9FMEE2ODI1MzM5RjNDNTk2OUJBNEFGODZCQTcwQkRBRkZFRjREM0IwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQTY4MjUzMzlGM0M1OTY5 QkE0QUY4NkJBNzBCREFGRkVGNEQzQjAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNVN3VwY1VNWDQ5RzNWU29ZcURQYXhYWW5KV3AxOUNucjJha3dxWWRrOXJ4LzAv MzEzOTMxMmUzNzJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzOTMw MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC/B1kwDQYJKoZIhvcNAQELBQADggEBAHc/cGbPA3D4ClGE gFUhaVfFAodDi4yRpccdO79vqlqIMP//UClD1qdo1cB4Mgl6AakIcP0GoCl0Vu89 KcllFSMafS2WRQhQd7ug/KtWD+dnsqMSX1A8lywpbKKwfa0gtc9ofQLv3U7Rma3n Jyzoz6u31ORgtokVIlZlrIMIA7k3CokmLY4jBQTKnBeKgFjlW5zWET0nJgGRA0Gp wggcFRzQhKuueZNiCLBDd5e6cyT0QZpCc0pJ9gswvAuEroWdEfElrPSHaSTwYll1 BQBPGv789JQxqXZwwwzD8SpSkBAo85yQfB1FbZpNDzLkmUaDFjGnnAzPjlvR8poh 5vTz5V8= -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:55 2026 by rpki-client