$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa File: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (raw, json) Hash identifier: JFgOAfaCkDvhO3DvTS0Qbkh4hqxcjc4Mkh93PAg9Yak= Subject key identifier: 71:F1:C9:03:2A:96:24:A9:3B:FA:DA:61:47:0A:55:4B:EA:81:80:D0 Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0 Certificate serial: 02007DEF3B7E64E48E31951F653279A2CC9F7839 Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa Signing time: Wed 18 Mar 2026 01:16:45 +0000 ROA not before: Wed 18 Mar 2026 01:11:45 +0000 ROA not after: Wed 17 Mar 2027 01:16:45 +0000 asID: 198949 IP address blocks: 138.99.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:7d:ef:3b:7e:64:e4:8e:31:95:1f:65:32:79:a2:cc:9f:78:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0 Validity Not Before: Mar 18 01:11:45 2026 GMT Not After : Mar 17 01:16:45 2027 GMT Subject: CN=71F1C9032A9624A93BFADA61470A554BEA8180D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:63:34:46:72:16:fc:44:7e:ff:ec:c5:58: d7:24:85:ee:d6:ca:22:5d:da:3b:56:dd:3e:43:61: 30:8f:e6:1c:f7:d6:25:e3:c2:16:1a:7e:48:cd:5c: e0:60:f7:8e:c6:38:75:01:6c:e7:2d:78:19:15:c1: e4:74:45:43:00:17:07:fa:5a:1b:42:13:17:90:97: 19:e8:7d:5a:45:73:c3:7c:c9:bd:22:e2:1b:12:47: ed:1f:37:7b:b9:5f:fe:5c:84:91:34:51:9a:12:ac: 87:91:73:55:59:26:0d:ad:9d:f4:dc:e7:13:f6:09: cc:01:bd:41:f7:52:c3:a0:9b:a4:94:73:0d:9a:d8: 7c:77:45:79:2f:73:80:fc:fb:4a:5a:17:c0:d7:af: 5f:a2:bd:88:79:05:48:8a:4e:7d:f3:81:15:68:4f: be:4a:cc:83:70:9b:44:df:ad:9b:0b:3f:03:b6:6f: 83:43:54:5d:5d:a2:12:f3:25:d9:bc:35:c0:85:64: 32:64:54:c7:2c:e3:4b:26:86:98:9b:d9:6e:8b:38: 62:6e:bd:bc:d4:58:5b:08:2c:57:53:39:9e:7d:73: 21:d7:8b:83:72:5c:32:18:1f:e3:e9:e5:41:3a:5f: 02:3b:46:f7:cb:e4:12:0e:75:81:0d:72:61:08:ca: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:C9:03:2A:96:24:A9:3B:FA:DA:61:47:0A:55:4B:EA:81:80:D0 X509v3 Authority Key Identifier: keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.248.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:a0:e5:5d:6d:f7:d7:1e:6a:5f:3c:e6:a8:c1:ff:07:1f:41: d2:14:9b:22:7c:38:99:47:71:07:47:d1:53:10:69:18:df:6d: f6:94:f1:21:0e:bb:3c:ea:b7:62:6e:fb:db:8d:0d:b5:a7:4e: fd:e7:81:e3:0e:d7:79:a7:89:a2:23:4d:2c:44:a6:50:6d:49: 38:63:6b:63:b2:45:96:ad:4d:5b:7d:2c:80:37:d5:9d:61:aa: 71:31:a4:ea:5e:18:96:e9:ef:56:b2:74:2d:bb:8c:f8:e0:73: fd:50:d4:0b:44:6c:ec:a8:a0:0f:fc:34:2b:e3:0e:7d:c0:be: 18:d5:e0:09:be:6d:68:18:99:1a:0f:4e:bf:a4:7f:44:e7:9f: c2:f0:88:8b:34:bb:57:16:74:f7:3e:4d:a1:0d:22:da:96:af: e3:02:b7:b5:f8:e5:be:f8:f3:82:79:89:61:35:14:ce:28:20: 7e:65:cf:e2:a6:4d:a3:ea:e7:37:82:37:18:d2:5e:1d:e5:54: 8c:19:f3:62:56:25:18:6b:0d:03:2c:ad:ee:de:2e:9c:85:ae: f7:9f:85:01:c8:ed:f8:6f:87:8c:ca:a0:78:98:0b:b3:c9:64: e4:59:a5:10:55:33:a5:a9:a9:66:0e:37:46:dc:e5:3f:8f:c0: 3a:0f:87:bc -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUAgB97zt+ZOSOMZUfZTJ5osyfeDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE M0RDMDlFMDAeFw0yNjAzMTgwMTExNDVaFw0yNzAzMTcwMTE2NDVaMDMxMTAvBgNV BAMTKDcxRjFDOTAzMkE5NjI0QTkzQkZBREE2MTQ3MEE1NTRCRUE4MTgwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRmM0RnIW/ER+/+zFWNckhe7W yiJd2jtW3T5DYTCP5hz31iXjwhYafkjNXOBg947GOHUBbOcteBkVweR0RUMAFwf6 WhtCExeQlxnofVpFc8N8yb0i4hsSR+0fN3u5X/5chJE0UZoSrIeRc1VZJg2tnfTc 5xP2CcwBvUH3UsOgm6SUcw2a2Hx3RXkvc4D8+0paF8DXr1+ivYh5BUiKTn3zgRVo T75KzINwm0TfrZsLPwO2b4NDVF1dohLzJdm8NcCFZDJkVMcs40smhpib2W6LOGJu vbzUWFsILFdTOZ59cyHXi4NyXDIYH+Pp5UE6XwI7RvfL5BIOdYENcmEIytU1AgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUcfHJAyqWJKk7+tphRwpVS+qBgNAwHwYDVR0j BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5 RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz MzM4MmUzOTM5MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM5Mzgz OTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBAKKY/gwDQYJKoZIhvcNAQELBQADggEBAJqg5V1t99ce al885qjB/wcfQdIUmyJ8OJlHcQdH0VMQaRjfbfaU8SEOuzzqt2Ju+9uNDbWnTv3n geMO13mniaIjTSxEplBtSThja2OyRZatTVt9LIA31Z1hqnExpOpeGJbp71aydC27 jPjgc/1Q1AtEbOyooA/8NCvjDn3AvhjV4Am+bWgYmRoPTr+kf0Tnn8LwiIs0u1cW dPc+TaENItqWr+MCt7X45b7484J5iWE1FM4oIH5lz+KmTaPq5zeCNxjSXh3lVIwZ 82JWJRhrDQMsre7eLpyFrvefhQHI7fhvh4zKoHiYC7PJZORZpRBVM6WpqWYON0bc 5T+PwDoPh7w= -----END CERTIFICATE-----Generated at Thu Mar 26 22:56:50 2026 by rpki-client