$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e302e302f32302d3234203d3e203238353731.roa File: 3230302e3133362e302e302f32302d3234203d3e203238353731.roa (raw, json) Hash identifier: ph6SXIUYBOZan7TA9kM5furPEnvZkxgU0QlSiUXNeek= Subject key identifier: 71:A9:A9:B8:4F:CF:73:3B:B8:BB:37:E9:6B:CE:8F:3B:F8:FB:57:40 Certificate issuer: /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Certificate serial: 0CFFADC308CF1B457854368B2EE2335E9F422CCD Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e302e302f32302d3234203d3e203238353731.roa Signing time: Mon 14 Sep 2026 13:53:24 +0000 ROA not before: Mon 14 Sep 2026 13:48:24 +0000 ROA not after: Mon 13 Sep 2027 13:53:24 +0000 asID: 28571 IP address blocks: 200.136.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 08:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ff:ad:c3:08:cf:1b:45:78:54:36:8b:2e:e2:33:5e:9f:42:2c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5 Validity Not Before: Sep 14 13:48:24 2026 GMT Not After : Sep 13 13:53:24 2027 GMT Subject: CN=71A9A9B84FCF733BB8BB37E96BCE8F3BF8FB5740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:7d:d1:5a:8b:d7:0f:2e:17:d3:c8:ed:ec: 17:27:01:52:c0:b5:aa:f7:4f:3b:5b:c1:ab:e8:9f: bc:7d:c4:3c:01:0e:5b:ac:95:77:da:db:62:27:d8: a1:c4:2d:4d:f1:37:16:8a:6f:ad:96:ab:49:95:38: cf:eb:27:b9:4b:e0:72:ea:37:52:9b:28:61:4b:a7: 1a:bf:73:f4:39:50:48:46:5a:fc:f6:a0:bf:d0:97: 43:9c:ff:05:ff:bf:2e:0b:b9:5f:89:e9:bd:e0:4b: 9b:d8:57:bd:67:7f:80:05:e1:56:ef:d6:eb:ff:df: f7:cd:37:dc:22:7c:0f:6b:0d:10:72:fa:24:a0:5c: 36:ab:1c:96:bd:6e:02:94:fa:7c:60:aa:64:c8:32: 9a:c9:55:a1:20:c6:68:04:16:9e:16:09:fe:e7:5a: 15:40:74:9e:70:e7:5a:ae:cd:e2:5f:b3:40:30:cc: 61:e3:67:f2:3e:1b:a0:7f:b3:14:ad:33:08:46:0b: b3:4c:b7:34:9a:aa:a9:7d:6f:1d:5f:b1:95:d8:dc: 51:5c:52:49:7f:e6:04:9a:4f:44:73:62:f5:8d:2b: e4:c1:c6:25:d5:25:89:dd:19:98:2a:ae:a1:9e:d6: 35:11:3a:a7:d7:d1:e2:58:b6:13:32:3c:c3:18:4e: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A9:A9:B8:4F:CF:73:3B:B8:BB:37:E9:6B:CE:8F:3B:F8:FB:57:40 X509v3 Authority Key Identifier: keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e302e302f32302d3234203d3e203238353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.136.0.0/20 Signature Algorithm: sha256WithRSAEncryption 73:a3:8f:25:03:26:17:be:bb:15:44:41:d5:67:66:03:2d:68: 44:c3:7d:41:81:b9:77:eb:6d:a1:9c:fe:eb:81:29:0e:b2:fb: 72:26:b5:a7:e0:dd:48:3c:76:7d:38:cd:ff:d5:9e:aa:a5:1b: b3:8f:0d:3c:c9:1c:67:d8:80:9c:72:58:b3:3f:9a:f4:20:ea: f5:38:24:9e:f4:25:55:24:4b:5f:87:66:17:28:22:ef:46:2c: 98:c8:fd:bf:17:41:d9:57:70:f8:f7:27:5a:00:9a:dc:c3:0b: 5f:fe:fe:d2:68:8a:1a:ef:15:fb:20:36:fa:f1:42:f1:86:51: e9:d4:a9:6f:f9:9b:56:c6:87:0f:8b:dc:54:00:16:15:ea:2e: f8:9c:35:b6:fc:95:6b:e0:d2:9f:57:04:d8:30:18:99:5e:8a: ed:c0:57:77:75:55:09:a9:de:b8:c5:96:ce:b9:55:6c:07:ca: 4d:f1:ac:32:06:b0:ea:96:fa:56:0a:f8:0b:9a:62:fb:1e:a1: d5:aa:1e:fe:b5:e6:89:73:42:1c:8d:5e:a4:b5:e1:30:00:31: f0:73:ff:4c:c3:e4:f5:c9:8e:bd:eb:d4:72:7b:df:14:ee:c5: ab:8a:42:13:78:1b:6c:30:ae:34:72:1d:6e:70:f0:71:14:87: 33:c7:e6:16 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUDP+twwjPG0V4VDaLLuIzXp9CLM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MjRaFw0yNzA5MTMxMzUzMjRaMDMxMTAvBgNV BAMTKDcxQTlBOUI4NEZDRjczM0JCOEJCMzdFOTZCQ0U4RjNCRjhGQjU3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTH3RWovXDy4X08jt7BcnAVLA tar3Tztbwavon7x9xDwBDluslXfa22In2KHELU3xNxaKb62Wq0mVOM/rJ7lL4HLq N1KbKGFLpxq/c/Q5UEhGWvz2oL/Ql0Oc/wX/vy4LuV+J6b3gS5vYV71nf4AF4Vbv 1uv/3/fNN9wifA9rDRBy+iSgXDarHJa9bgKU+nxgqmTIMprJVaEgxmgEFp4WCf7n WhVAdJ5w51quzeJfs0AwzGHjZ/I+G6B/sxStMwhGC7NMtzSaqql9bx1fsZXY3FFc Ukl/5gSaT0RzYvWNK+TBxiXVJYndGZgqrqGe1jUROqfX0eJYthMyPMMYTlwjAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUcampuE/Pczu4uzfpa86PO/j7V0AwHwYDVR0j BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0 M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv MzIzMDMwMmUzMTMzMzYyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1 MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEBMiIADANBgkqhkiG9w0BAQsFAAOCAQEAc6OPJQMmF767 FURB1WdmAy1oRMN9QYG5d+ttoZz+64EpDrL7cia1p+DdSDx2fTjN/9WeqqUbs48N PMkcZ9iAnHJYsz+a9CDq9TgknvQlVSRLX4dmFygi70YsmMj9vxdB2Vdw+PcnWgCa 3MMLX/7+0miKGu8V+yA2+vFC8YZR6dSpb/mbVsaHD4vcVAAWFeou+Jw1tvyVa+DS n1cE2DAYmV6K7cBXd3VVCaneuMWWzrlVbAfKTfGsMgaw6pb6Vgr4C5pi+x6h1aoe /rXmiXNCHI1epLXhMAAx8HP/TMPk9cmOvevUcnvfFO7Fq4pCE3gbbDCuNHIdbnDw cRSHM8fmFg== -----END CERTIFICATE-----Generated at Wed Oct 14 02:17:11 2026 by rpki-client