$ rpki-client -vvvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa File: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (raw, json) Hash identifier: IhLvLye0yVGg2EZ37vRlHnw+R0Ere7YVcED3YDxd1Io= Subject key identifier: 4E:A8:7A:9D:53:92:1D:F3:F5:CF:76:41:DA:CD:84:4B:EB:C5:D0:64 Certificate issuer: /CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Certificate serial: 1C032FDE6B4808A866CABB284E323BFB84766075 Authority key identifier: CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa Signing time: Sat 26 Sep 2026 14:34:19 +0000 ROA not before: Sat 26 Sep 2026 14:29:19 +0000 ROA not after: Sat 25 Sep 2027 14:34:19 +0000 asID: 263995 IP address blocks: 138.255.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 20:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:03:2f:de:6b:48:08:a8:66:ca:bb:28:4e:32:3b:fb:84:76:60:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Validity Not Before: Sep 26 14:29:19 2026 GMT Not After : Sep 25 14:34:19 2027 GMT Subject: CN=4EA87A9D53921DF3F5CF7641DACD844BEBC5D064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:fa:c1:1d:95:d0:e3:78:02:43:ea:ed:ca: 03:4a:70:cf:27:c9:5c:dc:bf:ff:0c:24:8a:55:e4: 96:c3:ed:9f:8d:ae:dd:4b:23:64:c2:11:06:9b:33: fc:2c:2f:dc:3a:2c:7d:46:aa:1b:9b:4e:69:d0:56: 3d:1f:03:73:cf:93:52:55:98:e3:51:46:a3:49:4d: 89:76:92:e0:16:85:a6:58:4e:fd:59:ac:83:7d:ea: 81:41:7e:bd:86:ba:e8:cd:d0:96:c9:3a:f4:7c:9f: 90:52:2a:cb:58:85:77:1e:71:90:f8:0d:18:0b:d6: 82:d7:45:90:70:ac:98:50:b6:7f:5c:9f:33:a7:cc: eb:16:f1:df:2a:0c:e1:9b:6e:03:64:04:10:91:78: d8:62:c3:ab:0d:19:a6:97:de:be:1d:b9:8e:23:ec: 12:52:18:92:38:4f:50:e6:09:6a:88:2f:bb:f2:2e: 59:f8:3b:94:fa:b4:7b:87:df:3b:82:89:f0:31:9c: 0e:06:7d:30:7e:e8:12:26:ce:3c:ee:c0:29:c4:82: 7d:d5:e9:ee:d1:c0:f4:6a:63:5a:19:b3:86:9a:6d: d0:1f:0d:07:47:aa:cc:99:f2:ce:b4:f4:a7:ce:d1: 42:0e:1d:72:ee:21:bb:f7:0f:89:b0:76:2c:ac:22: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:7A:9D:53:92:1D:F3:F5:CF:76:41:DA:CD:84:4B:EB:C5:D0:64 X509v3 Authority Key Identifier: keyid:CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.231.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:5c:33:ab:8c:7a:80:78:af:c0:01:ab:f9:84:b8:05:47:fa: 94:7f:d2:5a:1a:34:15:20:cd:e0:b3:54:f7:e9:f1:85:57:f9: ff:f6:07:63:50:f7:82:98:22:b9:39:b3:80:22:52:a1:3a:48: 5a:c1:93:36:0e:df:1b:ce:99:17:5f:67:25:c2:2f:44:ba:76: 1c:a3:eb:14:a6:67:c0:7d:b3:d0:ca:c1:d2:fa:98:59:d2:20: 23:d7:9f:57:30:7c:aa:6a:4b:c6:bc:24:ea:24:26:7c:35:57: d1:e7:2c:6d:ae:5d:48:57:3d:87:f2:75:b0:0a:47:98:47:59: e8:f8:09:f7:58:66:cf:85:76:d3:5a:25:cd:f7:12:85:6f:2f: 24:cb:c4:59:b1:fc:8e:49:1e:58:30:a1:91:03:0a:12:c2:50: ad:a4:4f:2c:23:c6:3d:11:ca:c1:5d:ae:21:4d:b5:8b:07:63: d2:49:1c:8a:74:c9:4a:fe:49:60:0c:cb:7f:46:a3:f2:a1:1d: 0a:97:dd:36:60:dd:2a:57:d9:2d:b0:c1:61:3f:72:45:13:d9: cf:29:1c:4d:81:f2:5d:22:6c:6a:b4:a0:56:1f:91:91:91:55: a9:b3:28:11:d2:e7:d5:03:2e:01:28:60:ac:dc:2b:d1:a0:ec: 83:9a:ca:a5 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUHAMv3mtICKhmyrsoTjI7+4R2YHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMEZCNkNBOUU2NkNDNzNDRDdDM0FDRjlGMDFFNDA1 NUZDMzY3RTAeFw0yNjA5MjYxNDI5MTlaFw0yNzA5MjUxNDM0MTlaMDMxMTAvBgNV BAMTKDRFQTg3QTlENTM5MjFERjNGNUNGNzY0MURBQ0Q4NDRCRUJDNUQwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXvrBHZXQ43gCQ+rtygNKcM8n yVzcv/8MJIpV5JbD7Z+Nrt1LI2TCEQabM/wsL9w6LH1GqhubTmnQVj0fA3PPk1JV mONRRqNJTYl2kuAWhaZYTv1ZrIN96oFBfr2GuujN0JbJOvR8n5BSKstYhXcecZD4 DRgL1oLXRZBwrJhQtn9cnzOnzOsW8d8qDOGbbgNkBBCReNhiw6sNGaaX3r4duY4j 7BJSGJI4T1DmCWqIL7vyLln4O5T6tHuH3zuCifAxnA4GfTB+6BImzjzuwCnEgn3V 6e7RwPRqY1oZs4aabdAfDQdHqsyZ8s609KfO0UIOHXLuIbv3D4mwdiysIuN5AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUTqh6nVOSHfP1z3ZB2s2ES+vF0GQwHwYDVR0j BBgwFoAUzTD7bKnmbMc818Os+fAeQFX8Nn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV SFMvMC9DRDMwRkI2Q0E5RTY2Q0M3M0NEN0MzQUNGOUYwMUU0MDU1RkMzNjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMzBGQjZDQTlFNjZDQzcz Q0Q3QzNBQ0Y5RjAxRTQwNTVGQzM2N0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv MzEzMzM4MmUzMjM1MzUyZTMyMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/5zANBgkqhkiG9w0BAQsFAAOCAQEAK1wz q4x6gHivwAGr+YS4BUf6lH/SWho0FSDN4LNU9+nxhVf5//YHY1D3gpgiuTmzgCJS oTpIWsGTNg7fG86ZF19nJcIvRLp2HKPrFKZnwH2z0MrB0vqYWdIgI9efVzB8qmpL xrwk6iQmfDVX0ecsba5dSFc9h/J1sApHmEdZ6PgJ91hmz4V201olzfcShW8vJMvE WbH8jkkeWDChkQMKEsJQraRPLCPGPRHKwV2uIU21iwdj0kkcinTJSv5JYAzLf0aj 8qEdCpfdNmDdKlfZLbDBYT9yRRPZzykcTYHyXSJsarSgVh+RkZFVqbMoEdLn1QMu AShgrNwr0aDsg5rKpQ== -----END CERTIFICATE-----Generated at Mon Oct 19 04:25:20 2026 by rpki-client