$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa File: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (raw, json) Hash identifier: APQeuGOYT6pmdzs0b1zaFGujlKWI5aTsqYse+R+K6Yc= Subject key identifier: 33:07:14:22:20:BF:7D:EB:0F:EB:E1:56:88:99:B1:62:18:EE:E5:80 Certificate issuer: /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849 Certificate serial: 71CF578A8DFBBCC08780A80E05BB15B55D8994E2 Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa Signing time: Mon 02 Mar 2026 22:55:45 +0000 ROA not before: Mon 02 Mar 2026 22:50:45 +0000 ROA not after: Mon 01 Mar 2027 22:55:45 +0000 asID: 265173 IP address blocks: 167.249.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cf:57:8a:8d:fb:bc:c0:87:80:a8:0e:05:bb:15:b5:5d:89:94:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849 Validity Not Before: Mar 2 22:50:45 2026 GMT Not After : Mar 1 22:55:45 2027 GMT Subject: CN=3307142220BF7DEB0FEBE1568899B16218EEE580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:37:bf:88:40:a5:94:53:60:56:0a:8c:cb: 6b:d2:8b:41:35:47:ea:cf:86:7a:69:b6:9b:3b:2e: 16:d3:5c:07:99:a5:ff:2d:8c:ad:9e:3d:92:57:ca: 68:38:7d:4a:1e:63:c0:1b:91:b3:e2:5b:17:4a:9d: 6c:8d:87:05:81:06:b8:97:c3:62:d5:67:fb:da:29: 96:e9:07:8d:5d:48:80:98:01:80:99:24:d6:5a:95: 52:f3:a0:c0:26:7f:fd:4e:18:23:a4:f0:ff:25:36: 41:89:f8:07:85:8c:dc:92:a6:f8:2d:70:a0:8f:55: 3f:77:14:4d:80:22:b8:7c:a3:93:5e:cf:5c:70:a2: d3:3c:c6:df:02:ee:60:fb:46:36:ff:ff:d9:5c:5a: 59:6a:13:71:28:94:b9:ba:d7:08:7e:f5:32:60:a1: fc:2a:5b:44:f4:55:c0:18:65:3c:3e:59:34:38:ca: d3:ad:de:1c:44:99:bd:3a:c7:f1:7c:36:86:ad:ca: a8:10:a4:f3:bd:e9:e8:31:c4:e1:76:b5:36:bf:7c: 53:b2:34:22:06:33:ac:b3:5d:19:64:99:cb:47:ae: ce:f2:bb:c6:c5:10:6d:d7:c7:0d:9d:65:38:3d:f5: 21:44:ec:a4:f8:98:1d:00:49:28:19:24:41:08:5e: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:14:22:20:BF:7D:EB:0F:EB:E1:56:88:99:B1:62:18:EE:E5:80 X509v3 Authority Key Identifier: keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.247.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8b:f8:64:f9:c0:26:3d:1a:3c:e4:77:16:c9:ea:a7:93:6d: 20:65:72:54:2b:5a:2b:89:da:bd:b7:2d:cc:77:3d:9b:6a:0f: c9:c9:22:29:ed:3c:b9:93:a1:d3:0f:c8:78:47:37:82:68:55: e1:55:49:fa:e6:70:97:d0:4d:88:2f:b5:29:0a:d7:e8:89:1e: c1:4e:ab:ad:56:7c:57:bf:5e:42:19:a0:e4:60:c9:dd:9d:f7: 62:20:df:22:70:c8:ea:37:e9:67:bb:97:6d:e8:77:74:a3:15: cb:08:8b:3b:0f:fa:ed:01:7c:06:d7:17:05:44:73:f0:0a:a5: a8:ce:75:1f:9f:f3:e0:77:8b:b1:8a:cc:7b:90:09:8f:69:54: 8f:97:61:28:65:7e:93:5d:e9:3c:40:7e:59:2b:b4:3a:4b:b9: 59:b8:4c:bc:1e:4d:1f:7b:79:d4:12:cb:73:0f:4a:a6:c1:c9: 40:20:a9:a5:c4:63:7a:4c:63:6f:d1:c8:65:07:49:aa:4e:a0: 8d:99:2a:48:85:e7:55:48:1e:a5:78:b1:5e:60:73:9a:5a:82: 2a:c5:c2:d2:35:e0:b8:56:5a:3a:23:3a:82:be:73:d6:96:47: 6d:cb:f4:05:c8:ae:6f:3a:39:be:b7:6c:5d:20:23:1c:59:23: c8:37:0c:77 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcc9Xio37vMCHgKgOBbsVtV2JlOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFENERDMDJCM0U2MUJCNzM1OEM1RDBDREQ0NTNCRTNC NDBDQjg0OTAeFw0yNjAzMDIyMjUwNDVaFw0yNzAzMDEyMjU1NDVaMDMxMTAvBgNV BAMTKDMzMDcxNDIyMjBCRjdERUIwRkVCRTE1Njg4OTlCMTYyMThFRUU1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuje/iECllFNgVgqMy2vSi0E1 R+rPhnpptps7LhbTXAeZpf8tjK2ePZJXymg4fUoeY8AbkbPiWxdKnWyNhwWBBriX w2LVZ/vaKZbpB41dSICYAYCZJNZalVLzoMAmf/1OGCOk8P8lNkGJ+AeFjNySpvgt cKCPVT93FE2AIrh8o5Nez1xwotM8xt8C7mD7Rjb//9lcWllqE3EolLm61wh+9TJg ofwqW0T0VcAYZTw+WTQ4ytOt3hxEmb06x/F8NoatyqgQpPO96egxxOF2tTa/fFOy NCIGM6yzXRlkmctHrs7yu8bFEG3Xxw2dZTg99SFE7KT4mB0ASSgZJEEIXi23AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUMwcUIiC/fesP6+FWiJmxYhju5YAwHwYDVR0j BBgwFoAUutTcArPmG7c1jF0M3UU747QMuEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1 cUUvMC9CQUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDREQzAyQjNFNjFCQjcz NThDNUQwQ0RENDUzQkUzQjQwQ0I4NDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hCaGZ2S2dIcE1laEVYN0RTbnFLV3paaDZUQldTYTV5c0RRS1NZVTNhdXFFLzAv MzEzNjM3MmUzMjM0MzkyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMxMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf59zANBgkqhkiG9w0BAQsFAAOCAQEAcIv4 ZPnAJj0aPOR3Fsnqp5NtIGVyVCtaK4navbctzHc9m2oPyckiKe08uZOh0w/IeEc3 gmhV4VVJ+uZwl9BNiC+1KQrX6IkewU6rrVZ8V79eQhmg5GDJ3Z33YiDfInDI6jfp Z7uXbeh3dKMVywiLOw/67QF8BtcXBURz8AqlqM51H5/z4HeLsYrMe5AJj2lUj5dh KGV+k13pPEB+WSu0Oku5WbhMvB5NH3t51BLLcw9KpsHJQCCppcRjekxjb9HIZQdJ qk6gjZkqSIXnVUgepXixXmBzmlqCKsXC0jXguFZaOiM6gr5z1pZHbcv0Bciubzo5 vrdsXSAjHFkjyDcMdw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:54:19 2026 by rpki-client