$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa File: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (raw, json) Hash identifier: j9i7ueyvXacjavPPn9Wc1Dq/7mV86dMVB4jymotr/kk= Subject key identifier: 2A:C7:74:C1:25:A0:06:E9:07:F5:9A:6B:BB:7C:44:9E:1F:60:58:2F Certificate issuer: /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849 Certificate serial: 3DA4AAC4DBD09E547BC5346FAD34E567700CA3BE Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa Signing time: Mon 02 Mar 2026 22:55:42 +0000 ROA not before: Mon 02 Mar 2026 22:50:42 +0000 ROA not after: Mon 01 Mar 2027 22:55:42 +0000 asID: 265173 IP address blocks: 167.249.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:aa:c4:db:d0:9e:54:7b:c5:34:6f:ad:34:e5:67:70:0c:a3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849 Validity Not Before: Mar 2 22:50:42 2026 GMT Not After : Mar 1 22:55:42 2027 GMT Subject: CN=2AC774C125A006E907F59A6BBB7C449E1F60582F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:59:b6:18:84:11:06:f0:88:f2:0d:b4:05: 1e:27:e4:c9:11:e7:23:96:34:01:1a:59:81:d5:00: 13:52:7d:a0:d9:9b:73:ac:94:35:59:11:70:56:b2: f8:2c:3e:e7:6b:95:3a:d7:f7:ba:39:fc:15:5c:c2: c1:81:bb:d6:b1:d2:65:5b:21:7c:00:2c:f1:63:4b: fd:20:8d:1a:5b:63:ce:98:aa:7b:55:df:8c:97:81: 95:c8:0c:b3:b5:41:84:d3:d5:e8:e3:40:5b:b7:00: c0:be:9d:61:57:57:07:57:74:ed:ab:e7:bf:66:7a: d0:dc:81:e1:95:0d:35:44:92:75:8e:ff:b9:b1:05: 6b:ff:68:78:18:40:71:e1:8b:aa:26:43:3c:2b:bd: 75:b8:fb:80:06:fa:e1:25:db:5d:9d:19:df:24:17: ce:a0:de:ee:4b:09:ae:9a:d0:c8:24:a6:59:5c:8e: 7d:70:e0:1e:b5:d6:e1:67:77:88:88:3a:27:c9:08: dc:69:25:e7:99:95:aa:fc:06:97:e0:b9:47:05:d3: 28:96:f5:0d:04:a3:df:e2:c0:e1:e5:54:15:9d:c0: 5c:2d:fb:8e:8f:b6:65:c1:80:28:be:7a:03:39:1a: 4e:76:11:d1:20:9e:4d:ed:62:1e:c9:98:91:97:1e: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C7:74:C1:25:A0:06:E9:07:F5:9A:6B:BB:7C:44:9E:1F:60:58:2F X509v3 Authority Key Identifier: keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.246.0/24 Signature Algorithm: sha256WithRSAEncryption b6:13:c7:10:e5:26:92:4e:f5:45:05:e9:8a:a1:43:fa:19:ba: 8b:68:c3:35:dc:46:40:91:67:c2:1f:77:d0:d7:14:46:e0:ba: 2d:6c:7c:f4:9c:4e:08:eb:ae:3c:df:b7:05:11:7b:d0:ba:9e: 7f:e9:af:0f:46:11:fc:cb:04:1a:76:8c:ad:5e:b0:ed:8d:25: d6:a0:f3:6c:cc:d7:c8:be:af:dc:ee:62:1e:e8:5b:3c:65:2b: 52:25:99:6a:03:5a:2e:46:e4:af:cd:32:69:78:21:6c:a8:19: 5d:09:ac:29:a1:c9:8e:f3:93:75:39:ee:5a:a0:88:2f:77:a2: 48:2a:14:ac:03:c5:50:61:f6:b2:7e:25:a0:9e:21:24:ed:ad: dc:39:52:95:1e:a7:6d:a7:03:45:7b:8b:44:a8:10:98:be:e1: 17:97:11:38:17:f3:ed:5c:3d:81:a2:cd:84:f6:e1:05:7d:8a: e9:87:f5:67:8c:26:1c:a4:b6:4d:de:66:69:ad:7f:c4:7a:ac: a6:57:5b:58:93:ce:46:bf:d2:0d:f7:f7:10:5c:54:54:48:3b: a6:e2:f6:78:6d:00:f0:c7:16:5d:55:57:aa:cd:5a:58:29:c5: 87:7c:f5:05:7d:30:80:05:5d:bc:3d:2f:24:76:bb:0c:f4:61: b0:89:2f:d8 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUPaSqxNvQnlR7xTRvrTTlZ3AMo74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFENERDMDJCM0U2MUJCNzM1OEM1RDBDREQ0NTNCRTNC NDBDQjg0OTAeFw0yNjAzMDIyMjUwNDJaFw0yNzAzMDEyMjU1NDJaMDMxMTAvBgNV BAMTKDJBQzc3NEMxMjVBMDA2RTkwN0Y1OUE2QkJCN0M0NDlFMUY2MDU4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2lm2GIQRBvCI8g20BR4n5MkR 5yOWNAEaWYHVABNSfaDZm3OslDVZEXBWsvgsPudrlTrX97o5/BVcwsGBu9ax0mVb IXwALPFjS/0gjRpbY86YqntV34yXgZXIDLO1QYTT1ejjQFu3AMC+nWFXVwdXdO2r 579metDcgeGVDTVEknWO/7mxBWv/aHgYQHHhi6omQzwrvXW4+4AG+uEl212dGd8k F86g3u5LCa6a0Mgkpllcjn1w4B611uFnd4iIOifJCNxpJeeZlar8BpfguUcF0yiW 9Q0Eo9/iwOHlVBWdwFwt+46PtmXBgCi+egM5Gk52EdEgnk3tYh7JmJGXHl73AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUKsd0wSWgBukH9Zpru3xEnh9gWC8wHwYDVR0j BBgwFoAUutTcArPmG7c1jF0M3UU747QMuEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1 cUUvMC9CQUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDREQzAyQjNFNjFCQjcz NThDNUQwQ0RENDUzQkUzQjQwQ0I4NDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hCaGZ2S2dIcE1laEVYN0RTbnFLV3paaDZUQldTYTV5c0RRS1NZVTNhdXFFLzAv MzEzNjM3MmUzMjM0MzkyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMxMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf59jANBgkqhkiG9w0BAQsFAAOCAQEAthPH EOUmkk71RQXpiqFD+hm6i2jDNdxGQJFnwh930NcURuC6LWx89JxOCOuuPN+3BRF7 0Lqef+mvD0YR/MsEGnaMrV6w7Y0l1qDzbMzXyL6v3O5iHuhbPGUrUiWZagNaLkbk r80yaXghbKgZXQmsKaHJjvOTdTnuWqCIL3eiSCoUrAPFUGH2sn4loJ4hJO2t3DlS lR6nbacDRXuLRKgQmL7hF5cROBfz7Vw9gaLNhPbhBX2K6Yf1Z4wmHKS2Td5maa1/ xHqspldbWJPORr/SDff3EFxUVEg7puL2eG0A8McWXVVXqs1aWCnFh3z1BX0wgAVd vD0vJHa7DPRhsIkv2A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:53:45 2026 by rpki-client