$ rpki-client -vvvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232302e302f32322d3233203d3e203238323737.roa File: 3132382e3230312e3232302e302f32322d3233203d3e203238323737.roa (raw, json) Hash identifier: N3AgCy+esuwSU9C9WKmNHIiIp40PDYATBPmGEEjwxpQ= Subject key identifier: 72:C6:FE:13:57:CC:7A:81:B3:9A:33:CD:DD:1E:68:BB:4A:CC:9B:31 Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Certificate serial: 1A81A614E5B58AEBA161B4670607A8E91E40F271 Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232302e302f32322d3233203d3e203238323737.roa Signing time: Mon 05 Oct 2026 11:45:19 +0000 ROA not before: Mon 05 Oct 2026 11:40:19 +0000 ROA not after: Mon 04 Oct 2027 11:45:19 +0000 asID: 28277 IP address blocks: 128.201.220.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 12:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:a6:14:e5:b5:8a:eb:a1:61:b4:67:06:07:a8:e9:1e:40:f2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Validity Not Before: Oct 5 11:40:19 2026 GMT Not After : Oct 4 11:45:19 2027 GMT Subject: CN=72C6FE1357CC7A81B39A33CDDD1E68BB4ACC9B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:a9:cb:76:f7:68:81:b7:c0:b3:47:30:26: fa:a7:01:e6:f0:24:9a:75:7f:60:4c:78:ac:1d:23: 2c:0b:0b:0a:d3:de:fc:a2:f4:a1:df:27:cb:67:2e: 13:96:09:89:89:9a:22:7e:74:b1:67:fe:9b:f4:e9: 90:dc:a3:90:4b:f8:ae:33:39:68:bf:da:04:39:08: d6:f9:b0:dc:eb:f3:68:2b:b7:8c:2c:9e:23:29:43: 1c:72:64:96:3f:02:72:3b:a1:61:ff:0a:b1:5d:b1: c1:5f:fc:10:69:ad:be:70:a6:79:04:0a:27:9e:54: f4:b6:f6:91:78:4e:2a:84:fc:2c:50:95:80:4a:ef: 37:41:7e:7a:3f:96:f4:16:c3:31:b2:05:7c:67:37: bb:31:8f:69:ef:33:57:e2:2e:af:86:81:1c:7d:49: 42:83:c7:a7:fb:0e:93:48:ac:ec:f7:cf:2d:6f:48: c7:ea:88:2c:54:90:3e:6e:c0:13:24:cb:06:4c:89: 4f:c2:39:de:1a:ab:af:bf:0d:7e:73:d5:46:97:8a: bc:5a:ac:d1:37:8e:5b:0e:ad:74:da:15:77:2d:e0: 55:2a:ac:17:bf:7b:3e:84:f1:43:75:c3:f4:43:74: e2:e0:a2:fa:11:36:12:f9:10:fa:f7:ea:68:c3:d0: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:FE:13:57:CC:7A:81:B3:9A:33:CD:DD:1E:68:BB:4A:CC:9B:31 X509v3 Authority Key Identifier: keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232302e302f32322d3233203d3e203238323737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.220.0/22 Signature Algorithm: sha256WithRSAEncryption b1:1d:16:f6:7d:7b:f7:0c:60:6b:3d:5c:94:99:2d:38:7b:4b: d8:a5:3b:f4:47:07:a9:a3:34:ac:51:c5:c4:ca:61:80:1d:56: 24:b0:78:88:41:23:79:7a:c1:8f:98:90:75:82:19:de:4a:03: 56:f9:aa:a6:8e:61:99:71:89:52:94:e6:b4:fb:3c:56:ab:91: d5:bd:33:e3:35:3e:6e:b9:ca:2f:df:cc:9a:86:bf:58:b1:a0: 6a:bb:a9:14:b9:b5:ab:a1:6b:81:bd:1d:6d:f8:c6:1e:9d:7c: 64:15:50:c4:2b:18:e8:da:b2:6f:c5:45:70:3b:5c:16:35:f7: a1:8e:70:09:85:8c:35:32:5d:15:c4:a0:be:ff:17:8c:c5:52: a8:0b:e2:fd:ee:6c:e4:d8:ae:8d:e3:a1:32:00:e2:f4:e3:93: 58:e8:f0:d1:d0:e9:b0:5e:f3:d7:48:76:0a:25:81:fa:8a:5c: c7:57:37:1e:61:a6:f4:45:62:63:e3:73:8f:7f:3d:9e:52:7e: 28:2f:56:12:90:32:75:1a:7f:12:eb:4a:bb:69:46:36:a1:e0: a3:a2:4e:ab:68:72:30:c9:67:6c:4c:d5:d2:7c:f3:0f:1e:21: d5:42:d1:6d:3e:f8:ad:7d:23:68:26:f2:85:71:2f:af:08:b5: f3:52:d2:b2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUGoGmFOW1iuuhYbRnBgeo6R5A8nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB QjlENzNDODAeFw0yNjEwMDUxMTQwMTlaFw0yNzEwMDQxMTQ1MTlaMDMxMTAvBgNV BAMTKDcyQzZGRTEzNTdDQzdBODFCMzlBMzNDREREMUU2OEJCNEFDQzlCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa46nLdvdogbfAs0cwJvqnAebw JJp1f2BMeKwdIywLCwrT3vyi9KHfJ8tnLhOWCYmJmiJ+dLFn/pv06ZDco5BL+K4z OWi/2gQ5CNb5sNzr82grt4wsniMpQxxyZJY/AnI7oWH/CrFdscFf/BBprb5wpnkE CieeVPS29pF4TiqE/CxQlYBK7zdBfno/lvQWwzGyBXxnN7sxj2nvM1fiLq+GgRx9 SUKDx6f7DpNIrOz3zy1vSMfqiCxUkD5uwBMkywZMiU/COd4aq6+/DX5z1UaXirxa rNE3jlsOrXTaFXct4FUqrBe/ez6E8UN1w/RDdOLgovoRNhL5EPr36mjD0PnhAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUcsb+E1fMeoGzmjPN3R5ou0rMmzEwHwYDVR0j BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g3dHZwRkhGM0JrWlBjNUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzAv MzEzMjM4MmUzMjMwMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy MzgzMjM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKAydwwDQYJKoZIhvcNAQELBQADggEBALEdFvZ9 e/cMYGs9XJSZLTh7S9ilO/RHB6mjNKxRxcTKYYAdViSweIhBI3l6wY+YkHWCGd5K A1b5qqaOYZlxiVKU5rT7PFarkdW9M+M1Pm65yi/fzJqGv1ixoGq7qRS5tauha4G9 HW34xh6dfGQVUMQrGOjasm/FRXA7XBY196GOcAmFjDUyXRXEoL7/F4zFUqgL4v3u bOTYro3joTIA4vTjk1jo8NHQ6bBe89dIdgolgfqKXMdXNx5hpvRFYmPjc49/PZ5S figvVhKQMnUafxLrSrtpRjah4KOiTqtocjDJZ2xM1dJ88w8eIdVC0W0++K19I2gm 8oVxL68ItfNS0rI= -----END CERTIFICATE-----Generated at Thu Oct 15 06:31:22 2026 by rpki-client