$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa File: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (raw, json) Hash identifier: KGelzP3/GHdrTV9+XaGLTe0PsRYN4cWKkupWgAZHi7c= Subject key identifier: D0:F2:09:E5:48:9E:5F:83:A5:43:78:68:F8:AD:0A:AE:29:60:97:FA Certificate issuer: /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Certificate serial: 0A233DA53D54FC127D6C6D278740219F35693D7A Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa Signing time: Fri 27 Mar 2026 20:14:55 +0000 ROA not before: Fri 27 Mar 2026 20:09:55 +0000 ROA not after: Fri 26 Mar 2027 20:14:55 +0000 asID: 264009 IP address blocks: 168.227.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:23:3d:a5:3d:54:fc:12:7d:6c:6d:27:87:40:21:9f:35:69:3d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Validity Not Before: Mar 27 20:09:55 2026 GMT Not After : Mar 26 20:14:55 2027 GMT Subject: CN=D0F209E5489E5F83A5437868F8AD0AAE296097FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:4a:63:8f:83:55:79:ab:52:10:5c:93:a0: 60:4d:cd:2b:ad:1b:70:9e:95:2a:b5:02:85:06:5a: 10:4d:ee:58:68:7b:bf:6f:a5:49:24:c1:76:f9:e7: 80:1b:73:48:8f:f0:c0:ee:0d:1d:df:c2:fe:50:57: a1:0b:9a:26:b9:06:01:5b:41:d7:fe:96:7b:e1:3e: fe:60:fc:0e:04:1e:69:4b:8c:be:14:b6:e9:32:c7: 93:33:b3:bc:1c:d9:56:cf:a7:05:dd:1c:3a:c2:53: 6d:fe:19:ac:07:e4:52:2a:47:31:95:8a:88:f4:ad: 22:62:9e:d5:53:e8:bf:57:41:f7:c5:ae:d8:0e:fc: 57:6a:e9:84:82:8e:5e:8d:30:fd:a4:a8:dc:01:61: e3:34:0b:a0:73:74:84:86:d5:3a:fd:37:89:16:ee: 48:8a:91:20:fb:c9:37:83:24:62:fc:40:c9:9f:ad: 35:db:b7:b0:8f:c5:15:c0:54:c4:61:6b:30:0d:41: 8d:67:2b:83:88:77:5b:fa:c6:0b:7e:cd:32:c6:80: 39:74:56:95:e3:81:ae:1b:79:dc:c0:f7:1a:7c:eb: 54:3c:78:3f:e6:f4:97:4d:32:11:a8:f6:78:94:c1: bd:1b:ee:23:b4:77:fb:30:2a:cf:90:bf:7c:21:74: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F2:09:E5:48:9E:5F:83:A5:43:78:68:F8:AD:0A:AE:29:60:97:FA X509v3 Authority Key Identifier: keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.132.0/22 Signature Algorithm: sha256WithRSAEncryption 05:9c:64:7e:ed:aa:c8:8b:13:4d:f2:46:5f:7b:72:51:ed:37: d6:be:26:5c:05:db:d1:84:4f:b9:cf:ef:49:df:eb:9e:c7:09: 29:93:0c:49:d0:ca:ad:53:29:a0:2a:f4:c9:9b:29:8a:3f:f9: f8:bc:cf:86:0c:cc:a8:db:92:5a:90:ff:32:90:d8:b9:56:49: cd:35:3c:bb:e2:9f:a1:79:85:c8:f8:a6:2f:a4:a8:01:62:2f: 16:a5:81:09:86:45:0d:b0:39:18:d7:2f:75:e9:8c:a9:43:a0: fc:3d:16:31:7f:64:e0:66:b6:8f:4f:f7:09:a3:a0:89:0b:3e: 0c:e9:9d:74:f4:38:2b:15:6f:9b:8a:7f:5c:bd:55:23:e9:f0: 32:24:99:c1:51:32:fb:14:70:7c:f4:e6:7e:fd:f6:41:93:63: 88:ad:3d:62:49:f9:c4:26:44:d0:bb:06:3e:d8:4e:7b:80:8c: 85:b2:a9:65:73:e4:fe:35:96:a7:67:5f:ee:79:ed:f9:c6:4e: c7:a0:24:05:ad:eb:a4:e9:50:2e:35:98:fe:c9:8c:02:fd:6c: c6:52:ea:65:11:3f:d0:8c:d8:a4:42:3d:15:df:7d:00:f9:f7: 7d:53:c4:2c:85:b8:a1:7d:08:13:c4:85:54:c9:fe:b0:91:41: aa:0e:9f:e6 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCiM9pT1U/BJ9bG0nh0AhnzVpPXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGN0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIx MjZGRTc4OTAeFw0yNjAzMjcyMDA5NTVaFw0yNzAzMjYyMDE0NTVaMDMxMTAvBgNV BAMTKEQwRjIwOUU1NDg5RTVGODNBNTQzNzg2OEY4QUQwQUFFMjk2MDk3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/kpjj4NVeatSEFyToGBNzSut G3CelSq1AoUGWhBN7lhoe79vpUkkwXb554Abc0iP8MDuDR3fwv5QV6ELmia5BgFb Qdf+lnvhPv5g/A4EHmlLjL4Utukyx5Mzs7wc2VbPpwXdHDrCU23+GawH5FIqRzGV ioj0rSJintVT6L9XQffFrtgO/Fdq6YSCjl6NMP2kqNwBYeM0C6BzdISG1Tr9N4kW 7kiKkSD7yTeDJGL8QMmfrTXbt7CPxRXAVMRhazANQY1nK4OId1v6xgt+zTLGgDl0 VpXjga4bedzA9xp861Q8eD/m9JdNMhGo9niUwb0b7iO0d/swKs+Qv3whdGqbAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0PIJ5UieX4OlQ3ho+K0Krilgl/owHwYDVR0j BBgwFoAUGve+j04p4c6hoQwLoEMFQhJv54kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3 dzMvMC8xQUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjdCRThGNEUyOUUxQ0VB MUExMEMwQkEwNDMwNTQyMTI2RkU3ODkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIzNGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAv MzEzNjM4MmUzMjMyMzcyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNDMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjjhDANBgkqhkiG9w0BAQsFAAOCAQEABZxk fu2qyIsTTfJGX3tyUe031r4mXAXb0YRPuc/vSd/rnscJKZMMSdDKrVMpoCr0yZsp ij/5+LzPhgzMqNuSWpD/MpDYuVZJzTU8u+KfoXmFyPimL6SoAWIvFqWBCYZFDbA5 GNcvdemMqUOg/D0WMX9k4Ga2j0/3CaOgiQs+DOmddPQ4KxVvm4p/XL1VI+nwMiSZ wVEy+xRwfPTmfv32QZNjiK09Ykn5xCZE0LsGPthOe4CMhbKpZXPk/jWWp2df7nnt +cZOx6AkBa3rpOlQLjWY/smMAv1sxlLqZRE/0IzYpEI9Fd99APn3fVPELIW4oX0I E8SFVMn+sJFBqg6f5g== -----END CERTIFICATE-----Generated at Wed Apr 8 11:09:37 2026 by rpki-client