$ rpki-client -vvvf rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32322d3232203d3e20323635313331.roa File: 3134332e3230382e3232302e302f32322d3232203d3e20323635313331.roa (raw, json) Hash identifier: HDFX941qHwRJ0ECO5nbaEDQJc0NXKAz6qhzLFrHDqyg= Subject key identifier: EE:4D:17:30:EE:5B:25:87:09:F2:BB:BF:97:61:5B:6A:C0:C0:AB:96 Certificate issuer: /CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43 Certificate serial: 568CA0A8B1DE7F13CF80F7EA3D6B7DD9943DB8C6 Authority key identifier: 1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer Subject info access: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32322d3232203d3e20323635313331.roa Signing time: Fri 28 Aug 2026 15:58:43 +0000 ROA not before: Fri 28 Aug 2026 15:53:43 +0000 ROA not after: Fri 27 Aug 2027 15:58:43 +0000 asID: 265131 IP address blocks: 143.208.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 21:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8c:a0:a8:b1:de:7f:13:cf:80:f7:ea:3d:6b:7d:d9:94:3d:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43 Validity Not Before: Aug 28 15:53:43 2026 GMT Not After : Aug 27 15:58:43 2027 GMT Subject: CN=EE4D1730EE5B258709F2BBBF97615B6AC0C0AB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:05:9e:d1:02:0f:51:ac:c8:0c:86:df:b9: 32:51:eb:8a:9e:5f:3d:5f:cb:7f:e8:15:c4:39:29: e6:e1:98:51:36:34:fe:bd:65:95:2b:05:dd:9c:cc: aa:c9:8b:63:aa:84:cc:7a:6f:e4:c9:35:60:9f:11: 45:4b:51:ca:e1:52:68:96:6c:b1:4f:77:44:bf:bc: 31:67:c4:07:76:71:8c:b1:6c:4e:ce:c6:ea:96:2c: 4c:0c:90:35:41:75:03:b2:f0:32:49:8b:d2:26:07: 5b:97:cc:af:94:f3:04:f8:37:db:b0:62:2b:e5:28: d2:f3:c4:44:2d:46:b0:e6:55:22:93:f5:b4:4f:f6: 8d:38:64:11:ad:03:2d:6e:42:96:90:38:4f:7d:4c: b6:67:30:d4:f0:72:8c:81:98:a9:56:cf:94:8d:c3: 73:3c:3b:8a:d6:eb:a7:91:da:5b:d5:3f:0f:21:83: 2b:2f:21:df:35:87:32:71:37:33:94:30:43:78:95: fb:3a:b9:c4:12:c0:d4:23:ec:f5:6e:f7:94:56:9f: 47:58:19:04:1c:03:77:52:b3:de:9a:65:c9:30:a9: 5e:ac:82:3c:ec:3d:f9:a7:12:64:2b:7f:c1:f7:9d: 03:76:87:de:7a:84:ba:f7:0b:a9:9c:2d:84:fe:c6: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:17:30:EE:5B:25:87:09:F2:BB:BF:97:61:5B:6A:C0:C0:AB:96 X509v3 Authority Key Identifier: keyid:1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32322d3232203d3e20323635313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.220.0/22 Signature Algorithm: sha256WithRSAEncryption 43:b0:08:cb:a5:c8:5c:c8:10:ca:8d:d6:27:02:1c:30:39:3c: 54:08:25:48:70:db:39:e7:a2:4b:ec:96:fc:0f:d5:d9:7e:c9: f3:79:03:22:c9:be:fb:45:e2:78:c7:b6:94:18:cb:8b:e7:44: d4:fe:96:74:3f:11:7a:6a:cd:a5:aa:42:8d:b3:b3:d1:ee:61: 13:83:48:e5:ac:f2:30:97:aa:72:a4:9f:fe:b6:d9:26:9e:3c: 73:44:90:20:07:9c:7d:be:59:7c:9e:22:d6:78:a0:71:f6:87: 9c:ac:3c:b6:62:09:23:06:97:15:35:76:8e:e5:14:bb:7a:25: 34:ef:35:ba:55:51:7c:8b:5b:2f:aa:aa:ef:98:83:1b:06:9f: e8:91:28:c6:2e:db:c8:9f:0f:3d:7f:e7:88:db:18:ae:1f:12: 5b:21:59:08:43:55:f8:0b:89:b7:11:ee:90:13:db:26:a6:26: f9:fa:d7:cf:29:3e:5e:13:fa:aa:f9:cd:13:bc:cf:98:a0:4d: 3e:4a:78:0e:ee:45:68:c2:f1:57:13:5a:55:ee:d5:a2:a3:66: 4b:d9:3f:93:8a:6e:82:16:97:12:20:16:bd:4b:bf:d4:1c:eb: 11:d0:f6:82:77:c7:4f:18:6d:d8:93:68:2c:58:a1:61:86:31: 4c:f7:10:5f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVoygqLHefxPPgPfqPWt92ZQ9uMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBQzU5RkNEQTI4QzdGMDk0OTIzQzBCQjUwOTk2RTRD RTMyOUY0MzAeFw0yNjA4MjgxNTUzNDNaFw0yNzA4MjcxNTU4NDNaMDMxMTAvBgNV BAMTKEVFNEQxNzMwRUU1QjI1ODcwOUYyQkJCRjk3NjE1QjZBQzBDMEFCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGgWe0QIPUazIDIbfuTJR64qe Xz1fy3/oFcQ5KebhmFE2NP69ZZUrBd2czKrJi2OqhMx6b+TJNWCfEUVLUcrhUmiW bLFPd0S/vDFnxAd2cYyxbE7OxuqWLEwMkDVBdQOy8DJJi9ImB1uXzK+U8wT4N9uw YivlKNLzxEQtRrDmVSKT9bRP9o04ZBGtAy1uQpaQOE99TLZnMNTwcoyBmKlWz5SN w3M8O4rW66eR2lvVPw8hgysvId81hzJxNzOUMEN4lfs6ucQSwNQj7PVu95RWn0dY GQQcA3dSs96aZckwqV6sgjzsPfmnEmQrf8H3nQN2h956hLr3C6mcLYT+xj0HAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU7k0XMO5bJYcJ8ru/l2FbasDAq5YwHwYDVR0j BBgwFoAUG6xZ/Noox/CUkjwLtQmW5M4yn0MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0xkVHV2a1B6ck1wQ2ZBVUIzVXNkVG0yZjZtNmVXd0VpdjdDZ29DUDZK Z2UvMC8xQkFDNTlGQ0RBMjhDN0YwOTQ5MjNDMEJCNTA5OTZFNENFMzI5RjQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQUM1OUZDREEyOEM3RjA5 NDkyM0MwQkI1MDk5NkU0Q0UzMjlGNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NMZFR1dmtQenJNcENmQVVCM1VzZFRtMmY2bTZlV3dFaXY3Q2dvQ1A2SmdlLzAv MzEzNDMzMmUzMjMwMzgyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNTMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/Q3DANBgkqhkiG9w0BAQsFAAOCAQEAQ7AI y6XIXMgQyo3WJwIcMDk8VAglSHDbOeeiS+yW/A/V2X7J83kDIsm++0XieMe2lBjL i+dE1P6WdD8RemrNpapCjbOz0e5hE4NI5azyMJeqcqSf/rbZJp48c0SQIAecfb5Z fJ4i1nigcfaHnKw8tmIJIwaXFTV2juUUu3olNO81ulVRfItbL6qq75iDGwaf6JEo xi7byJ8PPX/niNsYrh8SWyFZCENV+AuJtxHukBPbJqYm+frXzyk+XhP6qvnNE7zP mKBNPkp4Du5FaMLxVxNaVe7VoqNmS9k/k4pughaXEiAWvUu/1BzrEdD2gnfHTxht 2JNoLFihYYYxTPcQXw== -----END CERTIFICATE-----Generated at Sun Oct 11 08:28:24 2026 by rpki-client