$ rpki-client -vvvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3234203d3e20323635303632.roa File: 3137302e3233312e3135362e302f32322d3234203d3e20323635303632.roa (raw, json) Hash identifier: 50KOqU2Wnr+Jc6YalrH5aS/gSpk6G3d+5Ai+ye08HxE= Subject key identifier: 82:7D:AE:E7:A5:77:9A:A7:B7:7B:78:1C:C7:F8:72:1A:18:CA:AA:53 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 422DA9B8375D41E38DED13152FA7E7D2ABB8A7D1 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3234203d3e20323635303632.roa Signing time: Sat 19 Sep 2026 04:40:12 +0000 ROA not before: Sat 19 Sep 2026 04:35:12 +0000 ROA not after: Sat 18 Sep 2027 04:40:12 +0000 asID: 265062 IP address blocks: 170.231.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 19:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:a9:b8:37:5d:41:e3:8d:ed:13:15:2f:a7:e7:d2:ab:b8:a7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Sep 19 04:35:12 2026 GMT Not After : Sep 18 04:40:12 2027 GMT Subject: CN=827DAEE7A5779AA7B77B781CC7F8721A18CAAA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:1a:6f:e6:4e:71:9f:fc:6a:4b:4d:99:6d: 78:cf:ac:f0:7c:26:5c:e7:ee:94:e5:be:00:cb:68: 9f:aa:58:b1:95:e0:85:ca:5f:79:83:8b:ab:c3:f9: e9:1f:bd:10:a7:38:49:48:03:d5:76:84:8a:14:35: 16:0a:db:a7:c2:8b:79:ca:3a:77:c9:c7:d0:d8:d4: c6:f8:42:9f:8d:7c:02:fb:17:6e:b5:a8:2f:37:a2: 9f:c0:76:af:4b:b1:e4:ca:fd:9a:72:6d:f9:ab:4a: 8a:55:61:43:e2:77:f4:76:1e:c9:9a:36:56:14:8a: f1:16:34:48:a5:1a:9f:8a:93:61:e3:71:8f:84:6b: ca:15:cf:49:cc:66:03:e2:58:c7:41:46:21:b2:29: 4c:06:82:55:89:2c:4f:7b:cd:f1:b6:1e:a5:7c:bd: 6d:86:c9:7f:73:e9:6b:a5:49:8c:70:f7:51:9b:c1: e1:3d:6f:25:bd:d4:28:c8:2f:dc:68:64:8b:85:c6: 92:79:26:d4:e7:cf:e2:28:82:50:ed:ce:8c:99:59: f9:72:21:45:ce:00:6e:0d:1d:bb:7e:b0:f1:37:95: 51:1a:89:42:4f:be:14:35:d4:91:d4:26:2b:88:70: 00:1a:09:69:1d:86:0b:4e:a4:b4:22:8b:93:e4:21: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:AE:E7:A5:77:9A:A7:B7:7B:78:1C:C7:F8:72:1A:18:CA:AA:53 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32322d3234203d3e20323635303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.156.0/22 Signature Algorithm: sha256WithRSAEncryption 31:64:2e:41:cf:cd:a4:78:e5:b7:eb:21:da:bf:f4:32:5d:f0: 4c:3a:e6:f8:ea:ef:42:d4:35:07:8a:b3:c3:fd:9a:46:55:52: 95:e1:60:23:fe:e7:94:a0:53:c3:a0:6b:25:09:5f:0b:a3:6a: 10:ee:1e:b2:e8:39:42:63:b2:19:e6:53:21:fc:b0:8d:79:c9: f6:03:b8:57:18:c7:a8:09:e4:5f:8e:55:08:c0:6d:a2:82:bf: 7d:45:c3:26:43:01:4f:8f:38:2d:28:3a:d2:4b:d6:48:c5:82: ff:cf:09:8f:73:af:34:f5:70:8f:1c:1c:5c:45:3e:5f:c8:22: 8d:05:30:d1:7d:94:fd:c5:8f:25:f1:6c:14:a1:a4:2c:68:91: 04:31:0e:08:07:8d:d2:fe:a3:48:d0:b2:4c:7a:70:48:33:37: f1:d1:ea:16:60:fa:72:88:94:26:24:a5:f7:9f:0a:dc:d5:a8: d8:c9:4a:f7:3f:35:63:f7:ab:64:d4:90:c6:a0:be:d2:f4:73: da:ad:35:a3:9f:3a:91:b5:52:f9:02:51:f4:76:d1:09:c1:0f: f5:3e:bd:7a:3e:08:c7:fc:e2:83:d7:a5:6a:6a:fe:db:c2:c7: 92:ff:39:c4:5f:7b:7c:84:de:b7:cb:09:e8:7c:9c:85:f3:b5: e2:9a:37:4e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUQi2puDddQeON7RMVL6fn0qu4p9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNjA5MTkwNDM1MTJaFw0yNzA5MTgwNDQwMTJaMDMxMTAvBgNV BAMTKDgyN0RBRUU3QTU3NzlBQTdCNzdCNzgxQ0M3Rjg3MjFBMThDQUFBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77Bpv5k5xn/xqS02ZbXjPrPB8 Jlzn7pTlvgDLaJ+qWLGV4IXKX3mDi6vD+ekfvRCnOElIA9V2hIoUNRYK26fCi3nK OnfJx9DY1Mb4Qp+NfAL7F261qC83op/Adq9LseTK/ZpybfmrSopVYUPid/R2Hsma NlYUivEWNEilGp+Kk2HjcY+Ea8oVz0nMZgPiWMdBRiGyKUwGglWJLE97zfG2HqV8 vW2GyX9z6WulSYxw91GbweE9byW91CjIL9xoZIuFxpJ5JtTnz+IoglDtzoyZWfly IUXOAG4NHbt+sPE3lVEaiUJPvhQ11JHUJiuIcAAaCWkdhgtOpLQii5PkIfpfAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUgn2u56V3mqe3e3gcx/hyGhjKqlMwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv MzEzNzMwMmUzMjMzMzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNTMwMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrnnDANBgkqhkiG9w0BAQsFAAOCAQEAMWQu Qc/NpHjlt+sh2r/0Ml3wTDrm+OrvQtQ1B4qzw/2aRlVSleFgI/7nlKBTw6BrJQlf C6NqEO4esug5QmOyGeZTIfywjXnJ9gO4VxjHqAnkX45VCMBtooK/fUXDJkMBT484 LSg60kvWSMWC/88Jj3OvNPVwjxwcXEU+X8gijQUw0X2U/cWPJfFsFKGkLGiRBDEO CAeN0v6jSNCyTHpwSDM38dHqFmD6coiUJiSl958K3NWo2MlK9z81Y/erZNSQxqC+ 0vRz2q01o586kbVS+QJR9HbRCcEP9T69ej4Ix/zig9elamr+28LHkv85xF97fITe t8sJ6HychfO14po3Tg== -----END CERTIFICATE-----Generated at Mon Oct 19 07:43:08 2026 by rpki-client