$ rpki-client -vvvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa File: 3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa (raw, json) Hash identifier: lPMWQOahc5VXQy4aC3qSu9jbPLhoWI/+mdTuFz+QYV4= Subject key identifier: 11:40:02:52:86:03:C7:E9:0F:DC:1C:9E:01:FC:1D:96:99:C4:EE:32 Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Certificate serial: 448C469893A554AAD553CB9829D818FA8A127F4B Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa Signing time: Fri 04 Sep 2026 12:56:29 +0000 ROA not before: Fri 04 Sep 2026 12:51:29 +0000 ROA not after: Fri 03 Sep 2027 12:56:29 +0000 asID: 274550 IP address blocks: 128.201.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 00:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8c:46:98:93:a5:54:aa:d5:53:cb:98:29:d8:18:fa:8a:12:7f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Validity Not Before: Sep 4 12:51:29 2026 GMT Not After : Sep 3 12:56:29 2027 GMT Subject: CN=114002528603C7E90FDC1C9E01FC1D9699C4EE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8b:8d:79:90:62:ab:34:09:df:b3:b8:c0:78: 62:ee:ec:41:40:a4:ee:75:7b:ae:bb:20:ee:d7:a2: ab:64:21:60:48:42:b3:14:61:46:5e:fb:e1:56:e5: ef:e9:36:bd:eb:9c:31:07:c2:b9:a4:d2:7a:18:ee: 9a:c6:74:64:df:62:88:2c:3a:de:2b:5d:4e:d4:28: 30:ef:94:a2:92:f9:b5:13:a0:0b:9f:48:85:cf:59: 38:cd:e0:86:6a:3a:69:79:27:71:cc:67:c8:24:f2: ff:84:ff:de:32:c4:ac:32:f7:b4:cf:04:a4:51:55: f3:1b:0f:ef:8f:c4:7e:86:3c:af:87:18:df:bb:be: d3:5f:4b:b9:fe:5a:15:e7:1d:25:90:26:7c:f1:09: 7d:8b:6d:6a:28:0e:16:32:35:98:77:b4:17:d0:fc: 27:31:ee:a1:ec:22:15:0f:e3:25:32:a2:d4:11:83: 0b:42:11:9d:00:14:49:f5:4c:5b:91:20:d6:9d:2d: 47:6c:ac:a5:54:5b:2d:e7:fe:89:65:2e:0a:01:1a: 4a:22:14:8e:b4:7e:39:46:98:f0:f8:68:0d:cb:6c: 9f:d1:b9:1c:8b:76:76:7a:69:3b:dc:18:0e:21:c1: c4:83:ca:5c:c6:03:6a:38:8b:2a:c0:84:85:9e:bc: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:40:02:52:86:03:C7:E9:0F:DC:1C:9E:01:FC:1D:96:99:C4:EE:32 X509v3 Authority Key Identifier: keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.223.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fe:04:22:82:13:b0:01:1d:22:bd:09:58:33:85:07:8d:b6: e0:74:68:eb:9b:70:89:e5:43:f2:1e:86:b1:1d:f2:9d:52:79: c9:b0:65:b6:1a:3f:33:aa:05:73:79:99:a1:0e:09:0e:94:cb: d8:3e:42:a3:3a:4f:51:d9:4c:af:f1:20:14:03:2f:45:37:a5: 70:8b:5c:cf:fa:bf:8a:76:c9:61:ea:7c:83:e6:98:98:fe:28: 20:a1:0f:0b:34:08:4f:5e:45:f8:13:b7:da:7c:63:38:22:26: 6e:01:7f:2e:64:3e:93:89:9d:a8:f8:66:2c:b7:c4:a2:5d:f9: 17:a1:72:2a:76:3b:81:5d:19:ab:6d:70:2b:ed:34:57:da:c2: b3:ac:75:66:4a:79:68:cd:77:27:89:56:91:7e:96:f1:84:fc: 59:3f:ba:86:3a:39:cc:cf:17:24:ba:50:fe:a6:3b:5a:ea:e1: f6:98:ea:b6:8d:b2:25:17:41:d8:e4:03:84:ba:a9:d8:08:1e: dd:d7:82:4c:d8:94:51:23:90:62:5d:25:31:3d:0d:26:a4:c6: 72:aa:53:03:1d:a2:ec:a6:37:64:ea:a3:2e:47:1b:05:b3:64: a3:77:4b:36:c6:1f:9b:31:22:13:88:49:7e:e3:76:b0:90:8c: 6e:12:d7:71 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIURIxGmJOlVKrVU8uYKdgY+ooSf0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB QjlENzNDODAeFw0yNjA5MDQxMjUxMjlaFw0yNzA5MDMxMjU2MjlaMDMxMTAvBgNV BAMTKDExNDAwMjUyODYwM0M3RTkwRkRDMUM5RTAxRkMxRDk2OTlDNEVFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDri415kGKrNAnfs7jAeGLu7EFA pO51e667IO7XoqtkIWBIQrMUYUZe++FW5e/pNr3rnDEHwrmk0noY7prGdGTfYogs Ot4rXU7UKDDvlKKS+bUToAufSIXPWTjN4IZqOml5J3HMZ8gk8v+E/94yxKwy97TP BKRRVfMbD++PxH6GPK+HGN+7vtNfS7n+WhXnHSWQJnzxCX2LbWooDhYyNZh3tBfQ /Ccx7qHsIhUP4yUyotQRgwtCEZ0AFEn1TFuRINadLUdsrKVUWy3n/ollLgoBGkoi FI60fjlGmPD4aA3LbJ/RuRyLdnZ6aTvcGA4hwcSDylzGA2o4iyrAhIWevLiRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUEUACUoYDx+kP3ByeAfwdlpnE7jIwHwYDVR0j BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0g3dHZwRkhGM0JrWlBjNUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzAv MzEzMjM4MmUzMjMwMzEyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczNDM1MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJ3zANBgkqhkiG9w0BAQsFAAOCAQEAIP4E IoITsAEdIr0JWDOFB4224HRo65twieVD8h6GsR3ynVJ5ybBltho/M6oFc3mZoQ4J DpTL2D5CozpPUdlMr/EgFAMvRTelcItcz/q/inbJYep8g+aYmP4oIKEPCzQIT15F +BO32nxjOCImbgF/LmQ+k4mdqPhmLLfEol35F6FyKnY7gV0Zq21wK+00V9rCs6x1 Zkp5aM13J4lWkX6W8YT8WT+6hjo5zM8XJLpQ/qY7Wurh9pjqto2yJRdB2OQDhLqp 2Age3deCTNiUUSOQYl0lMT0NJqTGcqpTAx2i7KY3ZOqjLkcbBbNko3dLNsYfmzEi E4hJfuN2sJCMbhLXcQ== -----END CERTIFICATE-----Generated at Tue Nov 3 17:12:13 2026 by rpki-client