$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32322d3332203d3e20323635343132.roa File: 3136382e3139342e3232302e302f32322d3332203d3e20323635343132.roa (raw, json) Hash identifier: Ajm4YIbnfn9VBfArbCE8S7NJ/lgWCO1IqiTaa4ETfGA= Subject key identifier: 68:63:70:40:30:AE:55:B9:3E:DD:21:23:08:88:E7:B5:2E:C0:59:2E Certificate issuer: /CN=734395CAD74F94DFE2CE3AE6F4290723DA45BB7E Certificate serial: 5A3D65A14130CA2182A65FD6A2F4B09932FCF9FE Authority key identifier: 73:43:95:CA:D7:4F:94:DF:E2:CE:3A:E6:F4:29:07:23:DA:45:BB:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32322d3332203d3e20323635343132.roa Signing time: Thu 19 Mar 2026 20:59:18 +0000 ROA not before: Thu 19 Mar 2026 20:54:18 +0000 ROA not after: Thu 18 Mar 2027 20:59:18 +0000 asID: 265412 IP address blocks: 168.194.220.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.crl rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:65:a1:41:30:ca:21:82:a6:5f:d6:a2:f4:b0:99:32:fc:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734395CAD74F94DFE2CE3AE6F4290723DA45BB7E Validity Not Before: Mar 19 20:54:18 2026 GMT Not After : Mar 18 20:59:18 2027 GMT Subject: CN=6863704030AE55B93EDD21230888E7B52EC0592E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:96:ce:9f:53:f7:8d:fa:14:41:1a:27:1f: f2:6b:87:e0:8f:02:ff:ae:24:2a:6b:5a:39:fb:2a: 56:7e:6d:d8:42:5d:81:bb:25:a2:ce:89:2c:1e:8f: 93:bc:50:29:59:17:f6:fd:ac:53:0e:65:52:df:18: 74:50:0a:c3:5a:57:07:17:bb:fd:ab:68:c1:c4:29: 93:48:7c:60:89:04:c9:6d:6c:21:02:ef:10:be:54: cf:8e:2f:f2:37:57:a6:0a:16:a4:6f:da:2a:45:7b: 22:10:3f:90:a5:f4:6a:05:0f:41:0e:b6:ee:18:ec: e0:07:c5:65:b3:4e:88:2c:89:84:f3:15:87:d5:7c: 26:c6:3c:d1:6b:96:61:75:20:8a:80:b3:29:63:73: cc:4c:b3:db:b9:f2:fd:42:2e:bb:a4:f9:98:4e:eb: 98:f6:c3:a6:82:e5:24:0c:bc:9c:14:88:c3:0c:61: 15:6d:16:fd:5d:36:c2:df:23:89:0a:21:ae:35:56: 60:66:70:67:c8:c5:6a:fa:18:86:54:d9:e3:a6:3c: 16:d8:86:48:61:47:79:ac:64:58:bf:96:6d:0b:67: 51:22:73:13:8b:e0:00:47:8c:00:ec:5a:b4:12:30: df:14:a8:b5:3b:05:79:39:81:9d:72:55:a7:da:74: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:63:70:40:30:AE:55:B9:3E:DD:21:23:08:88:E7:B5:2E:C0:59:2E X509v3 Authority Key Identifier: keyid:73:43:95:CA:D7:4F:94:DF:E2:CE:3A:E6:F4:29:07:23:DA:45:BB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/3136382e3139342e3232302e302f32322d3332203d3e20323635343132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.220.0/22 Signature Algorithm: sha256WithRSAEncryption aa:dc:d6:5f:56:73:41:71:59:e3:5a:bf:ac:a9:d1:06:94:b2: 30:1b:01:ce:7f:6e:46:f7:48:bd:22:48:85:14:ff:0a:e0:d2: cc:56:c2:e4:80:f9:6b:14:a9:b1:2e:1d:80:96:02:9d:86:f3: c8:bf:70:a3:f0:4c:c0:85:0f:1d:11:a8:a5:87:25:92:f2:4a: 28:e2:e5:43:b9:dc:26:e8:5f:1c:00:0b:35:7b:00:06:9f:6e: a9:53:2c:27:79:b6:04:6c:8a:72:ae:73:c0:19:a5:92:7c:b1: 37:ae:bc:69:65:47:d6:b3:35:05:42:f1:98:b5:7a:15:d5:79: 53:4e:cc:c3:ec:34:2d:e1:2b:0c:5e:63:87:aa:a0:ce:90:1d: 10:f7:7a:76:b1:07:39:0e:ca:87:77:80:e7:80:f1:2c:e8:91: 7a:91:5f:9b:22:12:f4:99:6d:88:23:4e:84:1f:ce:ac:f7:6d: 80:98:49:a2:0c:23:b1:65:b0:b7:b5:9e:81:8d:d6:f8:28:fc: ef:44:cd:96:6f:77:13:30:14:39:78:6f:5a:f9:37:61:14:68: 6e:ce:11:98:b2:35:66:3a:d0:9b:8a:d1:4a:3a:bf:75:df:ce: 0c:d9:92:80:f8:50:68:90:be:73:48:90:56:e5:f2:43:7a:57: b8:1f:90:e9 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUWj1loUEwyiGCpl/WovSwmTL8+f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM0Mzk1Q0FENzRGOTRERkUyQ0UzQUU2RjQyOTA3MjNE QTQ1QkI3RTAeFw0yNjAzMTkyMDU0MThaFw0yNzAzMTgyMDU5MThaMDMxMTAvBgNV BAMTKDY4NjM3MDQwMzBBRTU1QjkzRUREMjEyMzA4ODhFN0I1MkVDMDU5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5ZbOn1P3jfoUQRonH/Jrh+CP Av+uJCprWjn7KlZ+bdhCXYG7JaLOiSwej5O8UClZF/b9rFMOZVLfGHRQCsNaVwcX u/2raMHEKZNIfGCJBMltbCEC7xC+VM+OL/I3V6YKFqRv2ipFeyIQP5Cl9GoFD0EO tu4Y7OAHxWWzTogsiYTzFYfVfCbGPNFrlmF1IIqAsyljc8xMs9u58v1CLruk+ZhO 65j2w6aC5SQMvJwUiMMMYRVtFv1dNsLfI4kKIa41VmBmcGfIxWr6GIZU2eOmPBbY hkhhR3msZFi/lm0LZ1EicxOL4ABHjADsWrQSMN8UqLU7BXk5gZ1yVafadExrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUaGNwQDCuVbk+3SEjCIjntS7AWS4wHwYDVR0j BBgwFoAUc0OVytdPlN/izjrm9CkHI9pFu34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm1UczdSYng2Tm01Sm9zZldKWnp1WXV1cUhvZzR0R0d6R2J2SmExWnV4 OFgvMC83MzQzOTVDQUQ3NEY5NERGRTJDRTNBRTZGNDI5MDcyM0RBNDVCQjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNDM5NUNBRDc0Rjk0REZF MkNFM0FFNkY0MjkwNzIzREE0NUJCN0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JtVHM3UmJ4Nk5tNUpvc2ZXSlp6dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzAv MzEzNjM4MmUzMTM5MzQyZTMyMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNTM0MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjC3DANBgkqhkiG9w0BAQsFAAOCAQEAqtzW X1ZzQXFZ41q/rKnRBpSyMBsBzn9uRvdIvSJIhRT/CuDSzFbC5ID5axSpsS4dgJYC nYbzyL9wo/BMwIUPHRGopYclkvJKKOLlQ7ncJuhfHAALNXsABp9uqVMsJ3m2BGyK cq5zwBmlknyxN668aWVH1rM1BULxmLV6FdV5U07Mw+w0LeErDF5jh6qgzpAdEPd6 drEHOQ7Kh3eA54DxLOiRepFfmyIS9JltiCNOhB/OrPdtgJhJogwjsWWwt7WegY3W +Cj870TNlm93EzAUOXhvWvk3YRRobs4RmLI1ZjrQm4rRSjq/dd/ODNmSgPhQaJC+ c0iQVuXyQ3pXuB+Q6Q== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:56 2026 by rpki-client