$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa File: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (raw, json) Hash identifier: KfB+8zmb1c42Rf/ytxkz/+Wh+5/uzPRh3tVGa8uXOqE= Subject key identifier: 1E:32:B4:A5:4A:75:40:AD:27:9A:A2:D7:92:2E:78:2B:53:06:5D:70 Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Certificate serial: 0DE59A4E1374F548117E8008D8FAC24EBC2C0557 Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa Signing time: Thu 23 Apr 2026 17:31:32 +0000 ROA not before: Thu 23 Apr 2026 17:26:32 +0000 ROA not after: Thu 22 Apr 2027 17:31:32 +0000 asID: 266650 IP address blocks: 128.201.216.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 06:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e5:9a:4e:13:74:f5:48:11:7e:80:08:d8:fa:c2:4e:bc:2c:05:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Validity Not Before: Apr 23 17:26:32 2026 GMT Not After : Apr 22 17:31:32 2027 GMT Subject: CN=1E32B4A54A7540AD279AA2D7922E782B53065D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:6e:60:fc:6f:4c:c5:1c:81:26:61:f8:38: 93:c8:e5:34:0b:7e:e3:68:15:18:f2:c0:6f:71:87: dd:95:39:ff:77:22:74:83:28:b7:e3:53:ba:ea:ce: e7:11:95:83:25:75:d4:1b:9d:f9:a3:c8:87:c8:c0: 89:ed:de:10:c3:65:cc:98:18:f3:64:08:c8:30:c3: 73:e7:6a:f6:cd:89:d7:bc:eb:22:a9:cb:f6:a3:4f: 37:54:c5:aa:4b:9b:d3:77:d9:2c:82:ed:2b:12:fd: cb:93:e1:88:da:c8:a7:96:20:cd:99:14:09:04:8d: 95:5b:fe:05:f4:e9:7c:55:e4:1b:b7:cf:73:9d:26: 6b:8c:4c:4d:2f:7f:94:0a:af:96:72:25:89:59:9f: a7:61:a2:79:7a:93:67:23:3f:c8:4c:b2:f5:48:f6: c3:c5:95:22:54:63:d4:a0:a9:fd:95:eb:3c:34:ed: 78:85:e9:4e:cb:ce:e6:3a:95:2e:a2:8f:56:a4:85: e2:56:7f:e9:70:54:c7:9c:63:9c:e4:5f:31:86:cf: 9c:97:90:64:69:fb:d2:7a:00:b4:91:1a:94:5c:02: 61:5e:37:f7:64:78:ad:ee:85:6d:ed:cf:2f:56:54: 2c:51:10:c2:3f:9a:7c:f1:9f:f5:75:b6:b5:67:f1: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:32:B4:A5:4A:75:40:AD:27:9A:A2:D7:92:2E:78:2B:53:06:5D:70 X509v3 Authority Key Identifier: keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.216.0/22 Signature Algorithm: sha256WithRSAEncryption 62:3c:d3:67:cf:72:b9:17:ea:ba:c9:1a:6f:75:b4:e3:72:65: 52:30:2d:87:a8:14:68:81:47:e6:1b:56:10:f7:15:3f:29:39: f9:b5:14:f5:87:e7:73:45:bd:85:96:99:1e:f0:af:5b:a6:6e: 30:b0:c5:b2:32:bf:7b:e3:4f:b2:74:70:34:ce:95:84:84:71: 6f:5d:58:b7:76:34:cc:a7:05:c5:0f:f4:76:85:82:cd:59:70: cc:5a:94:cc:81:70:b8:be:8b:05:5c:7b:fa:68:0b:26:c8:f5: 37:7c:69:eb:31:30:11:73:63:c8:d1:86:34:da:c7:2b:66:01: d8:74:a2:61:a2:ba:73:be:ba:df:9a:10:c9:a4:92:ef:e8:d4: a1:68:b6:7b:8d:17:85:95:1c:01:5f:1c:d0:60:75:30:69:1e: 8e:a2:be:67:3a:a1:1e:28:35:15:1c:c4:bf:bb:4d:e7:02:ce: d4:0c:89:9d:49:eb:f6:88:cc:2a:f4:f4:1e:14:5a:ff:ef:16: b3:3b:62:1f:80:5b:3f:dc:22:93:a5:41:92:78:0f:b6:bd:29: cd:23:6a:4c:43:c6:77:67:e4:19:48:7f:52:eb:04:89:9f:5e: 38:fb:05:ee:4a:ee:76:4f:24:53:16:63:e2:dd:23:ce:83:0e: 3a:00:f9:92 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUDeWaThN09UgRfoAI2PrCTrwsBVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4 RTgyNzdEQTAeFw0yNjA0MjMxNzI2MzJaFw0yNzA0MjIxNzMxMzJaMDMxMTAvBgNV BAMTKDFFMzJCNEE1NEE3NTQwQUQyNzlBQTJENzkyMkU3ODJCNTMwNjVENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTm5g/G9MxRyBJmH4OJPI5TQL fuNoFRjywG9xh92VOf93InSDKLfjU7rqzucRlYMlddQbnfmjyIfIwInt3hDDZcyY GPNkCMgww3PnavbNide86yKpy/ajTzdUxapLm9N32SyC7SsS/cuT4YjayKeWIM2Z FAkEjZVb/gX06XxV5Bu3z3OdJmuMTE0vf5QKr5ZyJYlZn6dhonl6k2cjP8hMsvVI 9sPFlSJUY9Sgqf2V6zw07XiF6U7LzuY6lS6ij1akheJWf+lwVMecY5zkXzGGz5yX kGRp+9J6ALSRGpRcAmFeN/dkeK3uhW3tzy9WVCxREMI/mnzxn/V1trVn8SdtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUHjK0pUp1QK0nmqLXki54K1MGXXAwHwYDVR0j BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5 MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EyWGJaeVZiQVBEWU5HazZrTTg1VkUzcjI0RWpHYVg2d1lDbVFGTHVaOTJRLzAv MzEzMjM4MmUzMjMwMzEyZTMyMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNjM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJ2DANBgkqhkiG9w0BAQsFAAOCAQEAYjzT Z89yuRfquskab3W043JlUjAth6gUaIFH5htWEPcVPyk5+bUU9Yfnc0W9hZaZHvCv W6ZuMLDFsjK/e+NPsnRwNM6VhIRxb11Yt3Y0zKcFxQ/0doWCzVlwzFqUzIFwuL6L BVx7+mgLJsj1N3xp6zEwEXNjyNGGNNrHK2YB2HSiYaK6c76635oQyaSS7+jUoWi2 e40XhZUcAV8c0GB1MGkejqK+ZzqhHig1FRzEv7tN5wLO1AyJnUnr9ojMKvT0HhRa /+8WsztiH4BbP9wik6VBkngPtr0pzSNqTEPGd2fkGUh/UusEiZ9eOPsF7krudk8k UxZj4t0jzoMOOgD5kg== -----END CERTIFICATE-----Generated at Wed May 13 21:06:57 2026 by rpki-client