$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa File: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (raw, json) Hash identifier: JOHQGYPTgN2tvRxw1RJlqDbKg5rSZGGdVUX+lOdbweY= Subject key identifier: A5:FF:33:A4:A9:26:DD:EB:ED:A9:36:5E:4D:B1:83:0B:DA:94:C8:F9 Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Certificate serial: 0CE84708B8565718CB25738E89205D7B7AF60449 Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa Signing time: Tue 28 Apr 2026 15:50:04 +0000 ROA not before: Tue 28 Apr 2026 15:45:04 +0000 ROA not after: Tue 27 Apr 2027 15:50:04 +0000 asID: 53078 IP address blocks: 170.80.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e8:47:08:b8:56:57:18:cb:25:73:8e:89:20:5d:7b:7a:f6:04:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Validity Not Before: Apr 28 15:45:04 2026 GMT Not After : Apr 27 15:50:04 2027 GMT Subject: CN=A5FF33A4A926DDEBEDA9365E4DB1830BDA94C8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:cf:11:eb:60:32:3d:e2:19:c2:5b:9b:0f: 33:60:e9:fb:14:ab:02:bb:c6:86:17:e7:89:79:83: a7:50:08:d2:e7:89:4c:ad:b2:07:28:e5:64:cc:b3: 33:7f:78:9d:a1:db:b5:e9:f3:e9:02:4a:f3:fa:b0: 5d:ea:75:ea:87:af:49:6a:14:dd:e9:f6:28:cb:0a: 98:0b:76:41:7a:b5:73:b9:00:6e:4f:c6:d2:ca:33: 27:b9:54:6a:b5:99:50:c7:83:36:78:af:42:d2:9d: 54:b4:c3:76:2f:56:9a:61:32:06:7d:50:e9:fd:a6: 35:32:d3:f3:e5:4e:a5:44:29:28:30:fa:d9:5f:ef: 9d:76:19:76:98:56:f1:9c:32:51:93:f3:83:1a:ba: 88:3e:2a:6d:05:da:32:ff:bb:dc:49:c6:df:40:cc: 4f:6b:d1:5c:9d:24:0c:65:03:55:19:01:ab:7c:5b: b8:f8:2a:47:a8:da:3e:00:b1:5d:6b:eb:9d:4b:d8: 7c:cc:bc:60:71:6a:c1:7d:05:65:dd:87:ce:c1:f7: f4:fc:87:76:d0:36:6e:3d:e7:57:bc:ad:d3:38:0e: 41:97:19:59:2c:8c:c7:9a:6e:d3:9a:e9:1a:f2:7f: d4:d5:30:3a:c7:34:b9:b6:0f:05:d1:94:37:c5:8a: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:33:A4:A9:26:DD:EB:ED:A9:36:5E:4D:B1:83:0B:DA:94:C8:F9 X509v3 Authority Key Identifier: keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3137302e38302e3235322e302f32322d3234203d3e203533303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.252.0/22 Signature Algorithm: sha256WithRSAEncryption 91:e3:77:ba:c1:c2:86:8d:2d:33:27:c1:0d:9d:79:ff:df:ce: 70:ff:d7:83:60:ab:16:e0:ce:d6:64:83:d5:69:5b:d3:ff:35: d4:24:8a:1c:e4:a2:98:05:01:02:10:93:69:00:bb:3c:dd:52: 6a:4a:d6:2a:21:ad:c6:31:72:71:c8:07:12:34:cc:23:46:d5: bb:c6:c9:8d:df:ca:ce:1b:b3:e9:2e:fe:4e:bb:59:d6:0a:15: 2b:19:7e:c8:22:af:8f:d4:e9:0a:72:65:03:f0:f0:45:c7:4f: ab:be:a1:ef:70:e7:f8:76:f4:91:97:05:04:ec:aa:2e:60:29: be:66:07:f1:e4:7e:4d:02:b3:e4:bf:4a:0b:93:8f:a8:14:21: f2:58:e1:e4:97:ee:66:e0:10:a3:09:9d:ab:b0:af:9c:58:db: 4b:1b:4c:2d:20:0b:3d:4e:ce:0b:c6:7c:c2:0d:5e:0f:f1:70: 7f:3a:94:82:7b:af:bc:d3:c6:67:27:99:16:65:59:25:b5:ad: 95:df:1d:a8:ad:ab:b5:b4:57:d9:f5:76:29:39:fb:8c:97:e7: eb:81:aa:3c:3c:62:ef:f8:f4:6d:dd:5d:c3:7e:52:06:27:5f: 36:c1:e4:5b:ca:67:12:90:c6:2c:7b:0a:92:8e:00:c3:5d:0b: cb:04:51:71 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUDOhHCLhWVxjLJXOOiSBde3r2BEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5 OEFBMEMyMTAeFw0yNjA0MjgxNTQ1MDRaFw0yNzA0MjcxNTUwMDRaMDMxMTAvBgNV BAMTKEE1RkYzM0E0QTkyNkRERUJFREE5MzY1RTREQjE4MzBCREE5NEM4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fs8R62AyPeIZwlubDzNg6fsU qwK7xoYX54l5g6dQCNLniUytsgco5WTMszN/eJ2h27Xp8+kCSvP6sF3qdeqHr0lq FN3p9ijLCpgLdkF6tXO5AG5PxtLKMye5VGq1mVDHgzZ4r0LSnVS0w3YvVpphMgZ9 UOn9pjUy0/PlTqVEKSgw+tlf7512GXaYVvGcMlGT84Mauog+Km0F2jL/u9xJxt9A zE9r0VydJAxlA1UZAat8W7j4Kkeo2j4AsV1r651L2HzMvGBxasF9BWXdh87B9/T8 h3bQNm4951e8rdM4DkGXGVksjMeabtOa6Rryf9TVMDrHNLm2DwXRlDfFik1vAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUpf8zpKkm3evtqTZeTbGDC9qUyPkwHwYDVR0j BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5 NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLcWFiU3hKRG05S2RraDN5M0ZNM1ZGVVRLWUFRSFViNVhWc0ZxcG53aVNiLzAv MzEzNzMwMmUzODMwMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz MzAzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCqlD8MA0GCSqGSIb3DQEBCwUAA4IBAQCR43e6wcKG jS0zJ8ENnXn/385w/9eDYKsW4M7WZIPVaVvT/zXUJIoc5KKYBQECEJNpALs83VJq StYqIa3GMXJxyAcSNMwjRtW7xsmN38rOG7PpLv5Ou1nWChUrGX7IIq+P1OkKcmUD 8PBFx0+rvqHvcOf4dvSRlwUE7KouYCm+Zgfx5H5NArPkv0oLk4+oFCHyWOHkl+5m 4BCjCZ2rsK+cWNtLG0wtIAs9Ts4LxnzCDV4P8XB/OpSCe6+808ZnJ5kWZVklta2V 3x2orau1tFfZ9XYpOfuMl+frgao8PGLv+PRt3V3DflIGJ182weRbymcSkMYsewqS jgDDXQvLBFFx -----END CERTIFICATE-----Generated at Wed May 13 17:48:44 2026 by rpki-client