$ rpki-client -vvvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa File: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (raw, json) Hash identifier: 2te28SnDKsLeWTjvugrRFWI+vThcZxxaWYL4m82JMdc= Subject key identifier: 1F:BA:71:C1:75:BC:25:2F:2C:98:49:79:B8:06:18:17:33:50:1D:11 Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Certificate serial: 3A6D29A8041B4B889B51C4158CA9C7BA6354CDED Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa Signing time: Mon 26 Oct 2026 13:33:26 +0000 ROA not before: Mon 26 Oct 2026 13:28:26 +0000 ROA not after: Mon 25 Oct 2027 13:33:26 +0000 asID: 28306 IP address blocks: 189.38.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 07:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6d:29:a8:04:1b:4b:88:9b:51:c4:15:8c:a9:c7:ba:63:54:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Validity Not Before: Oct 26 13:28:26 2026 GMT Not After : Oct 25 13:33:26 2027 GMT Subject: CN=1FBA71C175BC252F2C984979B806181733501D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:02:d3:31:c4:aa:6b:f0:17:13:1d:5b:49: 21:7e:19:35:4e:66:9c:03:05:6e:70:66:e3:39:bd: 1b:8a:06:8a:4a:ab:78:22:58:da:44:b0:90:84:ef: 9a:0a:45:22:8d:bd:c7:bb:c6:be:c4:bd:2c:4f:8d: 1e:91:f1:16:de:4e:d6:51:ed:62:c6:db:f0:94:17: 05:38:c2:36:cf:82:67:a6:fd:21:b0:b2:34:50:0e: fd:a2:ec:45:d0:10:31:6b:e5:d3:5e:7b:79:8d:f9: bd:73:bc:ff:58:bb:1f:96:e0:b0:1b:a3:4e:87:cd: c3:4f:5d:70:e4:67:31:b7:9c:ea:c9:0e:fb:8e:2b: ae:72:86:81:e1:91:5f:fe:5f:55:9c:e5:e5:da:df: 29:a4:99:fd:e7:58:e5:8a:8e:b8:58:98:17:43:a0: f8:7a:6d:d6:7a:9c:34:f7:d5:34:e8:89:7b:69:71: 13:0a:5f:12:74:1d:f1:b9:5c:21:ae:3c:9c:72:b0: 67:55:92:1a:7e:78:b6:2c:35:09:75:7b:db:5c:c9: 41:f9:fd:71:08:18:1c:78:be:9c:8f:25:0e:d9:d1: 88:bb:46:c5:78:0c:a6:cb:cf:b9:c2:d8:5e:ad:90: e3:8d:83:93:98:7b:a1:aa:bb:7c:66:8e:78:d2:8d: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:71:C1:75:BC:25:2F:2C:98:49:79:B8:06:18:17:33:50:1D:11 X509v3 Authority Key Identifier: keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e302e302f32302d3234203d3e203238333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.38.0.0/20 Signature Algorithm: sha256WithRSAEncryption a7:9e:2b:48:41:71:5a:7a:49:41:3e:0d:91:a6:b8:7a:02:b7: cc:65:ed:03:91:23:7c:af:50:af:80:31:0c:f9:04:a4:35:06: bf:82:a2:e9:32:af:cf:2d:54:63:f2:35:82:93:5c:43:46:ae: 73:4d:2a:02:b0:70:6d:f0:17:57:4e:93:d0:7e:97:9e:36:d9: 84:95:14:62:e4:0e:55:82:ad:b0:ed:20:b7:6f:18:7f:40:82: d3:72:92:f5:c1:6f:ca:0c:4f:86:09:f6:d7:b8:3b:a0:ef:63: 99:a6:1c:14:4c:40:82:87:d7:94:24:0f:65:0b:de:f0:f7:95: 76:e8:5c:21:76:80:7b:1c:1e:50:88:79:ec:7d:50:9e:ae:87: b2:d9:18:9a:32:87:97:c5:6c:31:bc:73:fa:44:a6:83:7e:12: 74:c7:fb:e4:6c:2b:fc:c5:af:04:2e:89:4c:1d:3e:46:da:9c: 8b:8e:8d:a3:ae:ef:2e:3c:e2:c6:22:b0:69:d3:2c:8f:0a:ff: 89:59:39:86:cc:1c:f6:1c:70:b7:7d:9b:32:5f:2b:ba:7b:1a: e2:ca:f9:b7:ae:3f:3b:53:24:75:09:de:ee:d1:2a:d0:60:48: b2:4c:6a:29:67:dd:b4:30:e9:ad:88:b0:dc:67:00:bb:e0:3b: 84:f9:f0:e1 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUOm0pqAQbS4ibUcQVjKnHumNUze0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw QjIzQzUwMzAeFw0yNjEwMjYxMzI4MjZaFw0yNzEwMjUxMzMzMjZaMDMxMTAvBgNV BAMTKDFGQkE3MUMxNzVCQzI1MkYyQzk4NDk3OUI4MDYxODE3MzM1MDFEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xALTMcSqa/AXEx1bSSF+GTVO ZpwDBW5wZuM5vRuKBopKq3giWNpEsJCE75oKRSKNvce7xr7EvSxPjR6R8RbeTtZR 7WLG2/CUFwU4wjbPgmem/SGwsjRQDv2i7EXQEDFr5dNee3mN+b1zvP9Yux+W4LAb o06HzcNPXXDkZzG3nOrJDvuOK65yhoHhkV/+X1Wc5eXa3ymkmf3nWOWKjrhYmBdD oPh6bdZ6nDT31TToiXtpcRMKXxJ0HfG5XCGuPJxysGdVkhp+eLYsNQl1e9tcyUH5 /XEIGBx4vpyPJQ7Z0Yi7RsV4DKbLz7nC2F6tkOONg5OYe6Gqu3xmjnjSjbfPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUH7pxwXW8JS8smEl5uAYYFzNQHREwHwYDVR0j BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv MzEzODM5MmUzMzM4MmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzMzMw MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAS9JgAwDQYJKoZIhvcNAQELBQADggEBAKeeK0hBcVp6SUE+ DZGmuHoCt8xl7QORI3yvUK+AMQz5BKQ1Br+Coukyr88tVGPyNYKTXENGrnNNKgKw cG3wF1dOk9B+l5422YSVFGLkDlWCrbDtILdvGH9AgtNykvXBb8oMT4YJ9te4O6Dv Y5mmHBRMQIKH15QkD2UL3vD3lXboXCF2gHscHlCIeex9UJ6uh7LZGJoyh5fFbDG8 c/pEpoN+EnTH++RsK/zFrwQuiUwdPkbanIuOjaOu7y484sYisGnTLI8K/4lZOYbM HPYccLd9mzJfK7p7GuLK+beuPztTJHUJ3u7RKtBgSLJMailn3bQw6a2IsNxnALvg O4T58OE= -----END CERTIFICATE-----Generated at Tue Oct 27 17:09:03 2026 by rpki-client