$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32342d3234203d3e20323634303039.roa File: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (raw, json) Hash identifier: 1w5KZVz2d3F7FZkRTr+zJTWr+XLdBuy5PzxxZ/0Ikw8= Subject key identifier: 85:45:0C:EB:CE:CF:A4:1F:9C:0C:90:B4:A8:CC:33:AC:4B:1F:47:0D Certificate issuer: /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Certificate serial: 0933C1EA4478E42700E872DE53EAA91E915B225C Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32342d3234203d3e20323634303039.roa Signing time: Fri 27 Mar 2026 20:14:56 +0000 ROA not before: Fri 27 Mar 2026 20:09:56 +0000 ROA not after: Fri 26 Mar 2027 20:14:56 +0000 asID: 264009 IP address blocks: 143.0.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:33:c1:ea:44:78:e4:27:00:e8:72:de:53:ea:a9:1e:91:5b:22:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Validity Not Before: Mar 27 20:09:56 2026 GMT Not After : Mar 26 20:14:56 2027 GMT Subject: CN=85450CEBCECFA41F9C0C90B4A8CC33AC4B1F470D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:95:0b:73:b8:fd:1f:04:7c:b8:b0:21:9c: f2:a7:11:34:44:05:6a:fe:e8:ff:5d:8d:2c:a5:6a: 6b:5c:ee:1a:ba:77:58:49:5b:fa:8f:f5:83:57:15: a9:46:2a:c9:f5:74:a9:b3:b0:76:d5:aa:c3:b1:85: 99:bd:ff:fd:64:44:6e:71:b4:52:f5:68:66:0a:7b: 3d:42:bb:a3:ca:90:dc:7e:00:2a:a1:af:17:1f:0f: 0a:a1:7b:80:8f:84:47:20:5b:df:8c:b9:cf:68:a1: b9:72:9b:83:ce:89:86:e6:a5:d6:17:21:0d:b6:a8: 07:1a:37:17:d5:b5:16:19:f2:71:86:1e:9a:8b:23: b4:5b:cb:86:ad:9c:02:6d:d1:92:1f:6d:f9:3c:25: 5b:3a:d8:25:ad:c1:06:6e:49:47:64:24:d5:b1:68: 2f:a2:17:b0:e4:3b:9c:2e:a0:0b:63:20:ca:c6:8c: 99:8a:11:ea:e5:00:6f:49:58:09:ea:25:7f:75:ce: 36:1f:18:e1:a9:13:3c:81:c7:72:85:5c:19:1f:e2: de:f5:99:41:71:99:a5:40:ef:57:2a:22:a5:bd:65: 96:6f:3a:0f:87:bc:71:5e:d2:a4:1c:3c:e0:f7:d0: 0e:c2:03:de:ff:eb:55:16:21:11:cb:f0:3f:06:eb: d7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:0C:EB:CE:CF:A4:1F:9C:0C:90:B4:A8:CC:33:AC:4B:1F:47:0D X509v3 Authority Key Identifier: keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32342d3234203d3e20323634303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.140.0/24 Signature Algorithm: sha256WithRSAEncryption 72:a4:dd:27:4d:02:30:57:ce:0f:75:1f:8d:64:22:10:92:54: 04:ce:b9:0c:4f:3a:44:4d:7a:54:c0:72:c5:7f:f1:63:af:7a: b6:aa:cc:22:8d:f1:50:37:ed:c2:2b:7d:a3:89:d0:52:e4:22: af:68:dc:ff:37:9b:86:23:d6:80:e4:45:4d:43:64:7e:5d:e4: aa:92:a1:5b:ea:b9:c4:9e:53:60:15:bf:75:59:a5:cc:f8:34: 05:0d:0e:3c:41:94:91:f7:2d:31:2f:68:a2:ce:82:fd:3a:63: eb:aa:b7:38:1f:c4:44:b1:ff:2c:0e:28:e1:a5:fd:29:b9:c5: a5:b5:5a:5f:ff:1b:21:75:e6:8c:5f:26:db:27:71:4e:c4:5c: a8:45:3f:19:64:19:b9:bf:30:4a:45:97:31:e4:7c:8c:b9:47: c1:9e:8c:cb:e2:47:b6:e5:c2:8f:f6:6d:18:19:99:bd:35:8a: c1:95:c8:8d:3a:fe:6f:33:a6:86:67:25:2b:1d:07:6e:8b:89: a6:e2:88:b4:cb:44:26:9a:0c:bd:b2:bd:e2:79:58:41:63:e7: 8d:38:02:bc:bd:05:10:f8:34:2f:26:d4:a9:81:c3:ab:53:7b: 00:3c:bb:9e:83:b4:7d:e3:68:49:5d:df:3c:d4:ae:ce:f5:64: 48:d4:45:29 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUCTPB6kR45CcA6HLeU+qpHpFbIlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGN0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIx MjZGRTc4OTAeFw0yNjAzMjcyMDA5NTZaFw0yNzAzMjYyMDE0NTZaMDMxMTAvBgNV BAMTKDg1NDUwQ0VCQ0VDRkE0MUY5QzBDOTBCNEE4Q0MzM0FDNEIxRjQ3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvJULc7j9HwR8uLAhnPKnETRE BWr+6P9djSylamtc7hq6d1hJW/qP9YNXFalGKsn1dKmzsHbVqsOxhZm9//1kRG5x tFL1aGYKez1Cu6PKkNx+ACqhrxcfDwqhe4CPhEcgW9+Muc9ooblym4POiYbmpdYX IQ22qAcaNxfVtRYZ8nGGHpqLI7Rby4atnAJt0ZIfbfk8JVs62CWtwQZuSUdkJNWx aC+iF7DkO5wuoAtjIMrGjJmKEerlAG9JWAnqJX91zjYfGOGpEzyBx3KFXBkf4t71 mUFxmaVA71cqIqW9ZZZvOg+HvHFe0qQcPOD30A7CA97/61UWIRHL8D8G69chAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUhUUM687PpB+cDJC0qMwzrEsfRw0wHwYDVR0j BBgwFoAUGve+j04p4c6hoQwLoEMFQhJv54kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3 dzMvMC8xQUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjdCRThGNEUyOUUxQ0VB MUExMEMwQkEwNDMwNTQyMTI2RkU3ODkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIzNGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAv MzEzNDMzMmUzMDJlMzEzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0 MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAjwCMMA0GCSqGSIb3DQEBCwUAA4IBAQBypN0nTQIw V84PdR+NZCIQklQEzrkMTzpETXpUwHLFf/Fjr3q2qswijfFQN+3CK32jidBS5CKv aNz/N5uGI9aA5EVNQ2R+XeSqkqFb6rnEnlNgFb91WaXM+DQFDQ48QZSR9y0xL2ii zoL9OmPrqrc4H8REsf8sDijhpf0pucWltVpf/xshdeaMXybbJ3FOxFyoRT8ZZBm5 vzBKRZcx5HyMuUfBnozL4ke25cKP9m0YGZm9NYrBlciNOv5vM6aGZyUrHQdui4mm 4oi0y0Qmmgy9sr3ieVhBY+eNOAK8vQUQ+DQvJtSpgcOrU3sAPLueg7R942hJXd88 1K7O9WRI1EUp -----END CERTIFICATE-----Generated at Wed Apr 8 11:06:47 2026 by rpki-client