$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3332203d3e20323639353730.roa File: 34352e3138392e34302e302f32322d3332203d3e20323639353730.roa (raw, json) Hash identifier: yIrVQJujHYmenUN2XFlNhNZlhYPHomN1fWWai1aAeKE= Subject key identifier: 43:6E:E9:9C:36:30:AA:7D:33:5E:32:9F:77:48:00:F2:13:67:C9:3E Certificate issuer: /CN=88FCA91ED339793A8C9BC88FCBD2C063BB77060A Certificate serial: 20B97A7C510C410369641C71A6831DAC26DE2354 Authority key identifier: 88:FC:A9:1E:D3:39:79:3A:8C:9B:C8:8F:CB:D2:C0:63:BB:77:06:0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3332203d3e20323639353730.roa Signing time: Mon 23 Mar 2026 14:14:16 +0000 ROA not before: Mon 23 Mar 2026 14:09:16 +0000 ROA not after: Mon 22 Mar 2027 14:14:16 +0000 asID: 269570 IP address blocks: 45.189.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.crl rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 18:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b9:7a:7c:51:0c:41:03:69:64:1c:71:a6:83:1d:ac:26:de:23:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88FCA91ED339793A8C9BC88FCBD2C063BB77060A Validity Not Before: Mar 23 14:09:16 2026 GMT Not After : Mar 22 14:14:16 2027 GMT Subject: CN=436EE99C3630AA7D335E329F774800F21367C93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:c7:0d:0f:6f:4d:7a:54:56:9f:0e:f7:40: 60:58:46:14:7f:af:4f:e7:51:e8:06:62:c1:d3:77: b0:03:7a:05:b9:8b:5a:60:6c:fa:b6:0c:81:75:70: 77:01:c8:88:2e:ce:eb:1c:e9:43:4e:53:f7:a4:d2: 85:86:c8:df:b2:7e:fe:af:e3:9d:7f:2e:c3:81:06: f2:b4:0f:a5:7c:93:f7:85:b8:dc:4f:53:50:61:b4: 34:d5:4a:7e:98:0d:ec:0d:c2:f1:61:44:7a:47:d4: b7:07:d1:d5:db:9c:18:2d:6b:15:db:3a:92:17:32: 06:cc:a6:6e:a1:b0:51:35:05:31:9c:58:33:aa:8c: 0c:24:65:12:56:5a:67:c8:5d:e9:8e:fe:f8:96:b8: be:33:f4:b0:aa:9b:90:81:42:2c:ce:e5:c1:cb:a6: 3c:e0:72:44:ad:ab:65:47:45:d5:27:1e:93:c7:80: 5e:48:22:05:ad:df:a6:e4:f0:2e:16:31:4d:37:6f: 63:1b:00:d7:5b:be:8a:83:2c:02:94:75:a1:2c:5a: 39:bf:bd:6c:44:d6:eb:b6:c0:19:b1:1b:1e:5a:7b: 80:03:ef:58:27:b5:15:de:15:40:3d:a2:ae:c8:af: 8f:ea:ec:3e:3c:88:ef:12:02:9f:c4:6c:c7:10:d6: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6E:E9:9C:36:30:AA:7D:33:5E:32:9F:77:48:00:F2:13:67:C9:3E X509v3 Authority Key Identifier: keyid:88:FC:A9:1E:D3:39:79:3A:8C:9B:C8:8F:CB:D2:C0:63:BB:77:06:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FCA91ED339793A8C9BC88FCBD2C063BB77060A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/34352e3138392e34302e302f32322d3332203d3e20323639353730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.40.0/22 Signature Algorithm: sha256WithRSAEncryption 58:2e:40:3d:93:f8:60:c6:42:21:fe:8c:22:65:54:55:bc:fa: d5:42:32:b9:ef:62:8c:9c:78:73:4f:31:4e:c9:e5:af:6f:32: 9e:86:13:b1:56:bc:2f:64:e1:72:23:e7:fb:59:a2:15:32:14: ba:eb:c3:ae:82:86:c9:79:93:cb:96:9d:09:cb:a0:79:33:c2: 0e:b9:10:a7:8b:6e:ea:c9:89:3d:ab:8f:e8:b5:ed:dc:ad:30: f6:74:69:b2:11:f6:90:71:92:11:50:d1:e7:9f:57:86:de:b2: 9c:c0:ba:85:b9:86:09:72:73:57:c6:07:e8:aa:81:2a:88:12: 24:5a:22:b4:99:16:15:8f:62:dc:a4:ee:0b:e0:7e:1a:2f:e2: 6b:14:bf:d7:c4:77:b5:ba:24:de:9b:48:ef:9e:a1:5f:73:35: dc:66:cc:db:12:c6:7e:5d:66:91:17:aa:aa:a2:82:71:19:4c: 19:f3:81:d2:e2:b7:8c:0d:6c:96:cc:6b:2a:2c:fe:dd:52:9f: 04:47:0a:11:b8:cd:cc:d1:a6:e6:61:22:bf:d1:47:53:c5:6e: 1e:ce:c0:73:d6:02:de:a0:70:8e:8c:27:0c:9b:ca:44:c9:6e: 53:8c:1a:49:5a:22:d0:e0:ec:02:3d:dd:11:86:d7:6d:5e:d2: 08:2f:9d:39 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUILl6fFEMQQNpZBxxpoMdrCbeI1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhGQ0E5MUVEMzM5NzkzQThDOUJDODhGQ0JEMkMwNjNC Qjc3MDYwQTAeFw0yNjAzMjMxNDA5MTZaFw0yNzAzMjIxNDE0MTZaMDMxMTAvBgNV BAMTKDQzNkVFOTlDMzYzMEFBN0QzMzVFMzI5Rjc3NDgwMEYyMTM2N0M5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYscND29NelRWnw73QGBYRhR/ r0/nUegGYsHTd7ADegW5i1pgbPq2DIF1cHcByIguzusc6UNOU/ek0oWGyN+yfv6v 451/LsOBBvK0D6V8k/eFuNxPU1BhtDTVSn6YDewNwvFhRHpH1LcH0dXbnBgtaxXb OpIXMgbMpm6hsFE1BTGcWDOqjAwkZRJWWmfIXemO/viWuL4z9LCqm5CBQizO5cHL pjzgckStq2VHRdUnHpPHgF5IIgWt36bk8C4WMU03b2MbANdbvoqDLAKUdaEsWjm/ vWxE1uu2wBmxGx5ae4AD71gntRXeFUA9oq7Ir4/q7D48iO8SAp/EbMcQ1vzJAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUQ27pnDYwqn0zXjKfd0gA8hNnyT4wHwYDVR0j BBgwFoAUiPypHtM5eTqMm8iPy9LAY7t3BgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn TmovMC84OEZDQTkxRUQzMzk3OTNBOEM5QkM4OEZDQkQyQzA2M0JCNzcwNjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RkNBOTFFRDMzOTc5M0E4 QzlCQzg4RkNCRDJDMDYzQkI3NzA2MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLRGpDajFrTm14b0J0Q3EzNkRVZ25TYVFkQ2tzOXFkUGdmN1gxYmZ1Z05qLzAv MzQzNTJlMzEzODM5MmUzNDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5 MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCLb0oMA0GCSqGSIb3DQEBCwUAA4IBAQBYLkA9k/hg xkIh/owiZVRVvPrVQjK572KMnHhzTzFOyeWvbzKehhOxVrwvZOFyI+f7WaIVMhS6 68OugobJeZPLlp0Jy6B5M8IOuRCni27qyYk9q4/ote3crTD2dGmyEfaQcZIRUNHn n1eG3rKcwLqFuYYJcnNXxgfoqoEqiBIkWiK0mRYVj2LcpO4L4H4aL+JrFL/XxHe1 uiTem0jvnqFfczXcZszbEsZ+XWaRF6qqooJxGUwZ84HS4reMDWyWzGsqLP7dUp8E RwoRuM3M0abmYSK/0UdTxW4ezsBz1gLeoHCOjCcMm8pEyW5TjBpJWiLQ4OwCPd0R htdtXtIIL505 -----END CERTIFICATE-----Generated at Thu Mar 26 21:16:54 2026 by rpki-client