$ rpki-client -vvvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa File: 3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa (raw, json) Hash identifier: xZ48WaIL355bSf5w7fwar9TMnNFiQTfy0T3RJJfxsdU= Subject key identifier: B8:FE:41:6A:18:08:1F:02:A8:71:B0:F1:F7:E5:2B:E5:D7:1F:5D:83 Certificate issuer: /CN=A99615214FE9A1B7971AAE5FA171B445CAFE2F67 Certificate serial: 037C0F04E5DF79736769467BD48F4378650066F4 Authority key identifier: A9:96:15:21:4F:E9:A1:B7:97:1A:AE:5F:A1:71:B4:45:CA:FE:2F:67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer Subject info access: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa Signing time: Tue 29 Sep 2026 13:37:46 +0000 ROA not before: Tue 29 Sep 2026 13:32:46 +0000 ROA not after: Tue 28 Sep 2027 13:37:46 +0000 asID: 52873 IP address blocks: 200.229.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.crl rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 14:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7c:0f:04:e5:df:79:73:67:69:46:7b:d4:8f:43:78:65:00:66:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99615214FE9A1B7971AAE5FA171B445CAFE2F67 Validity Not Before: Sep 29 13:32:46 2026 GMT Not After : Sep 28 13:37:46 2027 GMT Subject: CN=B8FE416A18081F02A871B0F1F7E52BE5D71F5D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:7a:af:96:1b:01:8a:0c:32:77:8f:d4:23: 9c:46:e1:56:ef:cd:ea:f8:3b:df:83:e9:5a:c6:e5: e8:60:7c:2a:42:a3:5e:68:3a:41:4b:21:c5:1e:db: 22:7e:e4:c8:d3:4a:7c:c7:1c:82:c7:30:3f:20:fc: e2:0c:29:64:85:01:3a:7e:34:74:6b:e8:f4:54:2d: cd:24:33:05:aa:3b:16:a1:2b:5b:f2:6b:0f:88:04: 88:a2:4f:af:59:90:38:ff:02:8b:83:46:6b:37:da: 8a:83:5e:b6:8c:92:29:6a:9d:51:cb:70:2f:f8:7a: 1e:56:b4:b2:47:11:14:4d:b3:d5:16:6d:e9:38:6f: 6e:8c:84:27:0a:a1:b4:74:f9:ae:c1:a7:7d:68:94: a1:96:8e:ad:45:45:62:f2:57:7c:9b:97:38:ee:5c: 64:36:0e:86:5a:a6:cf:70:b7:98:f7:7c:46:cf:d6: b4:28:c6:f1:01:b4:e0:04:b9:28:2b:85:c9:f5:3c: 3d:6c:50:cf:8f:f4:0f:eb:0e:d3:bb:7d:01:0c:12: 24:1e:69:bb:5f:1b:a3:75:4b:66:fc:e3:97:0e:b4: 61:98:b0:f4:9d:2b:39:01:cf:43:02:9e:dd:3f:94: b6:7a:46:50:44:eb:c2:41:9a:91:fc:5f:3b:78:ea: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FE:41:6A:18:08:1F:02:A8:71:B0:F1:F7:E5:2B:E5:D7:1F:5D:83 X509v3 Authority Key Identifier: keyid:A9:96:15:21:4F:E9:A1:B7:97:1A:AE:5F:A1:71:B4:45:CA:FE:2F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99615214FE9A1B7971AAE5FA171B445CAFE2F67.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3230302e3232392e3232302e302f32322d3234203d3e203532383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.220.0/22 Signature Algorithm: sha256WithRSAEncryption 59:6c:a1:4c:37:70:41:fa:1a:c6:08:65:59:80:1d:ca:6d:9a: 54:6a:dd:77:34:0f:fb:16:58:21:38:b8:2f:74:b3:2b:2c:8d: b1:9f:55:32:09:0e:46:1c:b9:5b:7e:d4:b7:c7:ea:e1:a4:85: 08:14:42:d7:fb:f2:45:37:ae:76:7a:66:9d:46:9a:cc:e9:6c: 6c:59:c1:53:a7:c5:b8:0b:8f:7c:e1:ec:75:a3:ee:5a:2a:5d: 00:f6:25:f8:86:13:c4:d6:cd:c5:dc:45:4f:da:19:4b:82:58: 6d:c2:e8:cf:b5:98:b9:1c:6d:8f:fe:9e:b6:30:24:98:16:7e: a2:fd:1d:9e:2e:bd:9f:f9:31:45:23:91:9e:07:d0:fa:62:7b: fb:3b:51:f3:34:36:8f:53:9d:17:b2:95:6a:9d:fa:03:f2:40: 67:b1:3a:6c:13:e4:b8:69:75:c0:93:a7:14:f7:22:4e:60:f2: ef:be:be:cb:09:6d:ca:c7:94:17:2c:ef:ca:bd:6b:9d:8e:f1: 9f:60:ab:b1:f6:1b:03:49:70:2a:7d:78:d3:4f:63:55:52:9e: d4:65:a3:03:60:be:e9:38:63:27:9f:6c:4b:b5:92:0a:ed:f5: cb:9e:ec:66:f8:d8:72:f0:25:6c:b8:f7:01:5f:92:d4:ff:8c: 76:77:3b:0f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUA3wPBOXfeXNnaUZ71I9DeGUAZvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5NjE1MjE0RkU5QTFCNzk3MUFBRTVGQTE3MUI0NDVD QUZFMkY2NzAeFw0yNjA5MjkxMzMyNDZaFw0yNzA5MjgxMzM3NDZaMDMxMTAvBgNV BAMTKEI4RkU0MTZBMTgwODFGMDJBODcxQjBGMUY3RTUyQkU1RDcxRjVEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1m3qvlhsBigwyd4/UI5xG4Vbv zer4O9+D6VrG5ehgfCpCo15oOkFLIcUe2yJ+5MjTSnzHHILHMD8g/OIMKWSFATp+ NHRr6PRULc0kMwWqOxahK1vyaw+IBIiiT69ZkDj/AouDRms32oqDXraMkilqnVHL cC/4eh5WtLJHERRNs9UWbek4b26MhCcKobR0+a7Bp31olKGWjq1FRWLyV3yblzju XGQ2DoZaps9wt5j3fEbP1rQoxvEBtOAEuSgrhcn1PD1sUM+P9A/rDtO7fQEMEiQe abtfG6N1S2b845cOtGGYsPSdKzkBz0MCnt0/lLZ6RlBE68JBmpH8Xzt46hAjAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUuP5BahgIHwKocbDx9+Ur5dcfXYMwHwYDVR0j BBgwFoAUqZYVIU/pobeXGq5foXG0Rcr+L2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H eUUvMC9BOTk2MTUyMTRGRTlBMUI3OTcxQUFFNUZBMTcxQjQ0NUNBRkUyRjY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OTYxNTIxNEZFOUExQjc5 NzFBQUU1RkExNzFCNDQ1Q0FGRTJGNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1 MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALI5dwwDQYJKoZIhvcNAQELBQADggEBAFlsoUw3 cEH6GsYIZVmAHcptmlRq3Xc0D/sWWCE4uC90syssjbGfVTIJDkYcuVt+1LfH6uGk hQgUQtf78kU3rnZ6Zp1GmszpbGxZwVOnxbgLj3zh7HWj7loqXQD2JfiGE8TWzcXc RU/aGUuCWG3C6M+1mLkcbY/+nrYwJJgWfqL9HZ4uvZ/5MUUjkZ4H0Ppie/s7UfM0 No9TnReylWqd+gPyQGexOmwT5LhpdcCTpxT3Ik5g8u++vssJbcrHlBcs78q9a52O 8Z9gq7H2GwNJcCp9eNNPY1VSntRlowNgvuk4YyefbEu1kgrt9cue7Gb42HLwJWy4 9wFfktT/jHZ3Ow8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:23:59 2026 by rpki-client