$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3139302e38392e31322e302f32322d3235203d3e20323632393636.roa File: 3139302e38392e31322e302f32322d3235203d3e20323632393636.roa (raw, json) Hash identifier: apUqmLhKjt/ZMVXGU/WW7IoRFCFaCRzIgFMNB1JhAL0= Subject key identifier: 43:BC:CD:1D:FD:74:73:DC:1D:F1:49:48:62:6B:A2:A2:80:92:BA:1E Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 0ABCE299BCD668A56472D7CC0465D5845F4048E5 Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3139302e38392e31322e302f32322d3235203d3e20323632393636.roa Signing time: Thu 12 Mar 2026 17:47:08 +0000 ROA not before: Thu 12 Mar 2026 17:42:08 +0000 ROA not after: Thu 11 Mar 2027 17:47:08 +0000 asID: 262966 IP address blocks: 190.89.12.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bc:e2:99:bc:d6:68:a5:64:72:d7:cc:04:65:d5:84:5f:40:48:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Mar 12 17:42:08 2026 GMT Not After : Mar 11 17:47:08 2027 GMT Subject: CN=43BCCD1DFD7473DC1DF14948626BA2A28092BA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:9b:da:cb:9e:3e:da:bc:a8:38:cd:5a:a6: 1a:7d:b3:3e:6e:e9:61:bf:60:e1:1e:33:88:a6:5f: a0:e8:cd:4b:6c:c4:80:41:ba:3b:a5:a4:f4:aa:29: 9b:f6:83:e2:3d:18:e6:58:4b:a3:75:07:ad:97:58: 32:ce:01:ea:57:39:d1:c6:d0:49:fc:82:30:de:e6: af:97:1e:a5:63:55:a1:cc:0b:77:d7:ea:c2:ae:f3: 69:b6:08:02:cc:bf:78:e6:44:a8:aa:f9:16:99:16: b5:4f:c5:88:b8:fa:60:2f:5d:93:6d:80:32:47:49: 94:fe:61:8a:65:1b:af:be:89:a8:75:95:02:48:42: 17:0c:f6:e7:5e:3a:98:68:de:7a:7b:0b:aa:c7:d1: 83:ca:a8:fa:bc:61:cd:f5:c2:f6:64:c3:c7:54:a6: 1e:64:1c:2f:8d:19:7b:84:62:5e:9f:a3:6f:a6:55: fc:2a:70:8c:65:5a:83:cb:e2:b0:5a:64:a4:ba:08: 3e:8d:83:10:ad:6d:29:36:b0:c9:46:b2:74:3f:24: c5:85:d6:8c:c5:ba:f8:d8:28:5d:93:b7:9e:64:4f: 1b:d6:9e:ca:47:f5:e0:a0:61:3f:52:ee:13:a1:9c: db:4e:46:f4:a7:0f:b3:b5:ca:42:8f:f5:e5:40:6b: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:CD:1D:FD:74:73:DC:1D:F1:49:48:62:6B:A2:A2:80:92:BA:1E X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3139302e38392e31322e302f32322d3235203d3e20323632393636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:bb:8a:fa:a0:a8:3f:cc:8f:df:a0:8d:de:59:fa:20:1d:64: 48:15:ac:dd:8e:fe:3b:50:03:ce:a1:db:71:4e:f0:80:f8:b9: e6:bf:b4:40:d5:51:c2:a7:c9:26:fe:6e:07:56:eb:92:03:27: 0b:a3:18:9e:b2:e5:1a:b1:0e:6f:dc:b2:e4:55:c4:b0:39:ba: 73:02:6b:5b:3d:ff:16:29:67:13:ed:8e:56:5e:64:2c:18:43: 76:21:1c:77:cd:db:d0:91:9f:5a:9f:49:e7:e2:ea:79:3c:fe: 00:92:92:a4:24:58:c5:2e:d1:f9:f9:96:59:20:2a:fb:c6:bd: f7:eb:d2:c9:83:e3:c3:e8:63:06:da:fa:b7:a8:60:80:ef:5e: da:04:c3:ad:65:fc:fb:29:fb:d5:9b:f2:89:ca:23:07:da:9a: 0b:f9:38:6c:ea:fd:63:12:a7:bc:4d:48:72:0d:ab:af:e1:55: b4:81:fa:f8:d8:fb:28:15:d2:52:fa:8b:17:03:a4:0f:1d:19: f0:97:e0:c7:3a:e5:ce:11:44:b5:75:3a:aa:ec:b7:64:ad:27: ac:01:9f:b9:79:32:9e:b7:cb:5a:91:80:22:a6:b6:f8:f3:52: 92:e5:ea:d8:ae:c7:71:1b:b8:42:e5:3a:01:bc:72:52:71:13: 45:95:88:e0 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUCrzimbzWaKVkctfMBGXVhF9ASOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNjAzMTIxNzQyMDhaFw0yNzAzMTExNzQ3MDhaMDMxMTAvBgNV BAMTKDQzQkNDRDFERkQ3NDczREMxREYxNDk0ODYyNkJBMkEyODA5MkJBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASJvay54+2ryoOM1aphp9sz5u 6WG/YOEeM4imX6DozUtsxIBBujulpPSqKZv2g+I9GOZYS6N1B62XWDLOAepXOdHG 0En8gjDe5q+XHqVjVaHMC3fX6sKu82m2CALMv3jmRKiq+RaZFrVPxYi4+mAvXZNt gDJHSZT+YYplG6++iah1lQJIQhcM9udeOpho3np7C6rH0YPKqPq8Yc31wvZkw8dU ph5kHC+NGXuEYl6fo2+mVfwqcIxlWoPL4rBaZKS6CD6NgxCtbSk2sMlGsnQ/JMWF 1ozFuvjYKF2Tt55kTxvWnspH9eCgYT9S7hOhnNtORvSnD7O1ykKP9eVAazqhAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUQ7zNHf10c9wd8UlIYmuiooCSuh4wHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0drM2RZNlR2SlFkRXlWUWpKVEpWWldIYndvTnhwMWtYYmlmdGp3eDNNc0NqLzEv MzEzOTMwMmUzODM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzNTIwM2QzZTIwMzIzNjMy MzkzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCvlkMMA0GCSqGSIb3DQEBCwUAA4IBAQCOu4r6oKg/ zI/foI3eWfogHWRIFazdjv47UAPOodtxTvCA+Lnmv7RA1VHCp8km/m4HVuuSAycL oxiesuUasQ5v3LLkVcSwObpzAmtbPf8WKWcT7Y5WXmQsGEN2IRx3zdvQkZ9an0nn 4up5PP4AkpKkJFjFLtH5+ZZZICr7xr3369LJg+PD6GMG2vq3qGCA717aBMOtZfz7 KfvVm/KJyiMH2poL+Ths6v1jEqe8TUhyDauv4VW0gfr42PsoFdJS+osXA6QPHRnw l+DHOuXOEUS1dTqq7LdkrSesAZ+5eTKet8takYAiprb481KS5erYrsdxG7hC5ToB vHJScRNFlYjg -----END CERTIFICATE-----Generated at Thu Mar 26 21:08:10 2026 by rpki-client