$ rpki-client -vvvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa File: 3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa (raw, json) Hash identifier: Bj9nvlUl9O5amA6RFyPxCcGOVF1k3B9Tu31JsA4OCeI= Subject key identifier: 85:1C:17:B0:C9:12:23:FA:29:FA:99:72:5D:2C:87:5C:FD:F1:22:97 Certificate issuer: /CN=A99615214FE9A1B7971AAE5FA171B445CAFE2F67 Certificate serial: 4C9D3A5BEEA81744610A497352F691397728E47C Authority key identifier: A9:96:15:21:4F:E9:A1:B7:97:1A:AE:5F:A1:71:B4:45:CA:FE:2F:67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa Signing time: Tue 29 Sep 2026 13:37:57 +0000 ROA not before: Tue 29 Sep 2026 13:32:57 +0000 ROA not after: Tue 28 Sep 2027 13:37:57 +0000 asID: 52873 IP address blocks: 138.219.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.crl rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 09:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9d:3a:5b:ee:a8:17:44:61:0a:49:73:52:f6:91:39:77:28:e4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99615214FE9A1B7971AAE5FA171B445CAFE2F67 Validity Not Before: Sep 29 13:32:57 2026 GMT Not After : Sep 28 13:37:57 2027 GMT Subject: CN=851C17B0C91223FA29FA99725D2C875CFDF12297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:a7:79:42:62:28:e0:d3:28:36:dd:23:cd: 46:74:68:b1:45:ae:aa:7a:92:c2:3f:62:b3:e3:ef: bc:ef:b6:b8:f6:33:ad:d1:51:25:3b:4a:9d:b5:da: d0:b8:91:ca:f0:bc:2d:f4:ad:0b:58:e9:42:81:46: 4e:7d:6a:e2:9b:94:d7:64:49:03:7e:07:46:8e:04: 43:ea:15:12:26:6b:9f:75:f8:7f:7d:74:2e:49:1c: 65:d1:56:8d:76:51:48:b1:50:bb:b7:30:37:4a:c8: 5f:51:3e:ee:3a:da:ed:98:bd:62:5c:9f:34:8d:7b: 39:6c:9c:d5:b5:db:70:64:23:a2:e7:68:8e:77:a8: 17:ce:ad:db:9f:6f:09:27:8c:89:c4:22:31:da:6c: ef:5b:3b:f5:bd:32:6a:52:3d:e9:fa:52:f7:43:d2: 5a:97:f2:2c:77:bf:6e:3b:6d:b3:0b:14:39:45:c1: fd:3d:da:70:24:36:5b:64:25:80:a6:eb:8f:ee:b1: 1e:92:29:6c:55:23:db:d7:07:ff:64:74:43:f3:bd: 03:f2:4d:01:c4:99:b0:4d:17:9f:8d:09:c4:c0:ed: 5f:be:d8:23:09:d8:ec:40:e1:ba:92:19:e3:9a:0c: f4:54:01:f5:cf:37:5d:20:e1:f9:bb:53:5d:59:07: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1C:17:B0:C9:12:23:FA:29:FA:99:72:5D:2C:87:5C:FD:F1:22:97 X509v3 Authority Key Identifier: keyid:A9:96:15:21:4F:E9:A1:B7:97:1A:AE:5F:A1:71:B4:45:CA:FE:2F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.244.0/22 Signature Algorithm: sha256WithRSAEncryption 01:4f:a5:ed:c4:8d:b7:8b:5f:ef:fe:02:8e:06:a1:0a:11:db: 43:14:62:ce:e1:01:c0:64:fc:93:ee:0e:90:27:06:2b:32:b3: c1:96:a8:0d:c8:64:e3:7d:5b:4a:91:b9:08:ea:1d:8e:8d:03: bf:29:db:c0:44:7f:f8:04:7b:ef:ec:83:13:41:a9:c9:ab:62: 67:e2:ce:d9:e2:c8:e5:f8:4e:3f:61:89:64:a5:ea:3b:9b:d4: 41:c4:84:25:09:76:0f:4c:05:d7:ba:bd:31:30:cc:39:b9:75: de:19:8f:c0:db:84:2e:48:26:50:0c:8b:c9:66:75:e2:d4:cb: 60:91:48:b8:1d:ea:3c:bd:bd:f7:fe:45:6d:b0:e9:83:74:84: c4:79:47:68:09:90:cd:1b:7f:31:9b:6d:77:8a:17:bb:11:86: 71:ef:01:98:bd:89:8e:68:ee:4e:6f:c5:71:52:62:1e:53:9c: ec:12:84:50:f7:bb:7d:89:69:e6:09:30:9b:bf:78:ba:c6:4a: 3d:05:57:22:59:14:04:c9:41:2b:43:2f:48:7c:46:52:de:62: 87:3f:74:a4:53:50:19:52:a3:8a:29:ad:0b:de:0b:e1:e4:59: a9:9d:eb:1b:05:f7:14:12:de:35:eb:8d:fa:11:50:ec:78:16: 98:19:a4:97 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUTJ06W+6oF0RhCklzUvaROXco5HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5NjE1MjE0RkU5QTFCNzk3MUFBRTVGQTE3MUI0NDVD QUZFMkY2NzAeFw0yNjA5MjkxMzMyNTdaFw0yNzA5MjgxMzM3NTdaMDMxMTAvBgNV BAMTKDg1MUMxN0IwQzkxMjIzRkEyOUZBOTk3MjVEMkM4NzVDRkRGMTIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcKd5QmIo4NMoNt0jzUZ0aLFF rqp6ksI/YrPj77zvtrj2M63RUSU7Sp212tC4kcrwvC30rQtY6UKBRk59auKblNdk SQN+B0aOBEPqFRIma591+H99dC5JHGXRVo12UUixULu3MDdKyF9RPu462u2YvWJc nzSNezlsnNW123BkI6LnaI53qBfOrdufbwknjInEIjHabO9bO/W9MmpSPen6UvdD 0lqX8ix3v247bbMLFDlFwf092nAkNltkJYCm64/usR6SKWxVI9vXB/9kdEPzvQPy TQHEmbBNF5+NCcTA7V++2CMJ2OxA4bqSGeOaDPRUAfXPN10g4fm7U11ZB7XDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhRwXsMkSI/op+plyXSyHXP3xIpcwHwYDVR0j BBgwFoAUqZYVIU/pobeXGq5foXG0Rcr+L2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H eUUvMC9BOTk2MTUyMTRGRTlBMUI3OTcxQUFFNUZBMTcxQjQ0NUNBRkUyRjY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OTYxNTIxNEZFOUExQjc5 NzFBQUU1RkExNzFCNDQ1Q0FGRTJGNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv MzEzMzM4MmUzMjMxMzkyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKK2/QwDQYJKoZIhvcNAQELBQADggEBAAFPpe3E jbeLX+/+Ao4GoQoR20MUYs7hAcBk/JPuDpAnBisys8GWqA3IZON9W0qRuQjqHY6N A78p28BEf/gEe+/sgxNBqcmrYmfiztniyOX4Tj9hiWSl6jub1EHEhCUJdg9MBde6 vTEwzDm5dd4Zj8DbhC5IJlAMi8lmdeLUy2CRSLgd6jy9vff+RW2w6YN0hMR5R2gJ kM0bfzGbbXeKF7sRhnHvAZi9iY5o7k5vxXFSYh5TnOwShFD3u32JaeYJMJu/eLrG Sj0FVyJZFATJQStDL0h8RlLeYoc/dKRTUBlSo4oprQveC+HkWamd6xsF9xQS3jXr jfoRUOx4FpgZpJc= -----END CERTIFICATE-----Generated at Wed Oct 28 19:45:29 2026 by rpki-client