$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa File: 3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa (raw, json) Hash identifier: kUwBv4X36apbdYb+QEV2Mt3gwsGNvu5IRpHK4AOjelY= Subject key identifier: 5D:5C:36:E5:CA:C1:47:4F:F8:71:6B:1A:2C:02:88:B4:8F:3A:3B:2E Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 0D4679A57B330BBDD2CC78FC1EA951483BE5A00F Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa Signing time: Mon 31 Aug 2026 23:11:31 +0000 ROA not before: Mon 31 Aug 2026 23:06:31 +0000 ROA not after: Mon 30 Aug 2027 23:11:31 +0000 asID: 274486 IP address blocks: 186.195.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 13:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:79:a5:7b:33:0b:bd:d2:cc:78:fc:1e:a9:51:48:3b:e5:a0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Aug 31 23:06:31 2026 GMT Not After : Aug 30 23:11:31 2027 GMT Subject: CN=5D5C36E5CAC1474FF8716B1A2C0288B48F3A3B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:53:5a:a5:97:33:56:0a:7b:93:0d:f2:f7: 66:47:53:31:82:87:7f:72:d8:ba:11:ce:49:22:e3: a4:88:49:e6:af:c3:ff:34:57:bb:3f:64:34:ab:ce: 0c:b1:7b:97:00:0a:85:78:ca:dc:97:c1:1f:02:55: 45:05:d9:19:d7:af:16:41:92:26:b2:79:79:48:f0: 7b:b7:11:0f:0f:8d:a0:78:8f:a6:33:3f:9f:fb:99: ea:1a:b7:41:4a:d5:60:c3:28:64:60:8f:69:4a:e8: 14:39:2a:b7:c4:54:bc:12:9a:28:42:7d:c6:f9:b8: c9:2b:1f:6d:e6:98:a8:01:2f:6b:c1:aa:79:5e:76: 25:a7:3b:25:62:47:52:fc:1f:05:00:85:68:55:eb: 42:84:23:3f:55:da:05:a0:e2:55:e6:62:b5:f9:1a: 97:0c:14:1b:e5:e1:87:76:ed:94:4f:e7:dd:aa:13: 75:a0:a6:e1:2f:7d:98:44:cf:ae:6b:dd:1e:d9:33: a3:48:7c:53:16:3f:ba:86:f7:72:90:c0:ac:6c:b1: fc:12:a4:6d:a5:2c:0e:bc:5f:f4:c9:c9:23:4b:55: 35:db:b6:b9:90:0f:52:65:af:d4:0c:4c:05:91:a9: 0e:eb:ad:4b:cb:98:07:15:f6:07:92:71:ec:49:7d: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:36:E5:CA:C1:47:4F:F8:71:6B:1A:2C:02:88:B4:8F:3A:3B:2E X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.170.0/24 Signature Algorithm: sha256WithRSAEncryption 61:2e:a6:ab:ab:3b:7b:bd:b1:ab:89:e5:9d:73:0e:50:39:c8: 23:63:0c:5d:93:f3:9c:4a:da:04:e8:fb:97:33:21:84:5a:92: 04:94:4b:ab:02:1a:1d:46:2f:45:9e:f6:e3:bf:f5:d6:11:6c: e1:09:a3:0a:3c:59:db:96:df:61:04:d4:00:24:a8:32:e6:1e: 70:b8:30:e6:29:39:fa:09:49:d5:1b:b1:70:9f:89:81:21:ef: cb:a9:4e:33:b5:ae:7a:e2:7f:26:dd:93:93:0c:67:59:08:8e: ab:7f:27:66:cb:e0:56:58:9d:e7:98:d4:0e:be:31:94:6e:9d: 58:6c:db:f3:7b:b4:76:58:ad:6c:54:33:2d:03:cd:1c:f3:30: 63:61:69:08:21:72:5d:a3:01:66:2f:e4:e2:c0:38:73:5e:24: 48:56:a8:05:3c:c5:c4:a0:fd:f1:ec:cb:49:43:6c:44:47:5d: fc:72:5e:4e:82:53:15:96:1a:a9:60:d8:a6:35:d5:8b:45:1d: 69:32:d7:fc:0e:c3:a9:9a:94:0f:a7:55:de:24:12:de:40:89: 69:dd:bb:34:6d:1f:53:4b:23:83:ac:4a:f0:5a:e4:b1:e7:c1: 84:44:b4:90:94:a8:ed:7a:3d:9b:07:3d:c5:ce:a3:8c:61:f7: ae:f1:48:97 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUDUZ5pXszC73SzHj8HqlRSDvloA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNjA4MzEyMzA2MzFaFw0yNzA4MzAyMzExMzFaMDMxMTAvBgNV BAMTKDVENUMzNkU1Q0FDMTQ3NEZGODcxNkIxQTJDMDI4OEI0OEYzQTNCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zVNapZczVgp7kw3y92ZHUzGC h39y2LoRzkki46SISeavw/80V7s/ZDSrzgyxe5cACoV4ytyXwR8CVUUF2RnXrxZB kiayeXlI8Hu3EQ8PjaB4j6YzP5/7meoat0FK1WDDKGRgj2lK6BQ5KrfEVLwSmihC fcb5uMkrH23mmKgBL2vBqnlediWnOyViR1L8HwUAhWhV60KEIz9V2gWg4lXmYrX5 GpcMFBvl4Yd27ZRP592qE3WgpuEvfZhEz65r3R7ZM6NIfFMWP7qG93KQwKxssfwS pG2lLA68X/TJySNLVTXbtrmQD1Jlr9QMTAWRqQ7rrUvLmAcV9geScexJfTS/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUXVw25crBR0/4cWsaLAKItI86Oy4wHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzEzODM2MmUzMTM5MzUyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrDqjANBgkqhkiG9w0BAQsFAAOCAQEAYS6m q6s7e72xq4nlnXMOUDnII2MMXZPznEraBOj7lzMhhFqSBJRLqwIaHUYvRZ7247/1 1hFs4QmjCjxZ25bfYQTUACSoMuYecLgw5ik5+glJ1RuxcJ+JgSHvy6lOM7WueuJ/ Jt2TkwxnWQiOq38nZsvgVlid55jUDr4xlG6dWGzb83u0dlitbFQzLQPNHPMwY2Fp CCFyXaMBZi/k4sA4c14kSFaoBTzFxKD98ezLSUNsREdd/HJeToJTFZYaqWDYpjXV i0UdaTLX/A7DqZqUD6dV3iQS3kCJad27NG0fU0sjg6xK8FrksefBhES0kJSo7Xo9 mwc9xc6jjGH3rvFIlw== -----END CERTIFICATE-----Generated at Mon Nov 2 22:10:29 2026 by rpki-client