$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa File: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (raw, json) Hash identifier: gm7POxu0mBmdHIKR2tVrLpL49gwEJBSUkWyIuJ1KlFo= Subject key identifier: F2:E1:E8:F3:0F:6C:6E:BC:47:C4:BF:CD:B3:D9:D0:BC:C1:DF:5F:F1 Certificate issuer: /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Certificate serial: 5FBFAA73AE31B4BE78DAC42B390A4D3523E5D46D Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa Signing time: Fri 27 Mar 2026 20:14:55 +0000 ROA not before: Fri 27 Mar 2026 20:09:55 +0000 ROA not after: Fri 26 Mar 2027 20:14:55 +0000 asID: 264009 IP address blocks: 170.78.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 15:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bf:aa:73:ae:31:b4:be:78:da:c4:2b:39:0a:4d:35:23:e5:d4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789 Validity Not Before: Mar 27 20:09:55 2026 GMT Not After : Mar 26 20:14:55 2027 GMT Subject: CN=F2E1E8F30F6C6EBC47C4BFCDB3D9D0BCC1DF5FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:6d:b0:75:c4:ed:b5:06:29:c3:0d:7f:61: 7a:1f:9e:a8:e1:8b:45:95:96:fc:0e:0b:cc:2b:a2: 22:0f:ae:0d:a4:4a:4c:50:0e:79:9f:e8:4b:3b:1a: a6:2e:79:a9:30:bf:8c:02:7b:86:a8:46:c4:ac:1f: b7:a4:87:e8:5e:11:a0:13:c9:36:68:eb:a7:5d:0e: f4:ae:08:17:65:3b:f0:bc:4e:e8:0f:93:0d:fe:d5: 76:c1:cb:a5:c4:64:67:ec:96:53:d8:f0:dd:bd:b5: d9:ff:48:d4:e2:03:cd:65:ff:aa:33:f4:1f:ed:36: db:66:94:37:cd:15:6f:fb:89:bb:db:8d:a3:3d:05: 40:7f:dd:ee:84:5d:43:55:a8:b3:fc:1f:2f:1f:41: 25:30:ba:bf:bd:06:15:9c:a7:58:fc:41:81:b1:bd: df:94:7f:65:8e:76:7a:c6:31:f1:4c:ee:2f:f7:86: 88:f3:de:02:01:2b:e1:6e:fd:36:3a:45:09:9a:a2: e6:99:28:e9:46:38:9c:60:fe:65:4e:7a:af:f9:76: cf:7f:1e:00:03:20:ea:57:e2:20:97:b4:23:df:fd: a5:41:c2:15:92:b0:d1:28:fa:de:41:26:0f:e5:5c: 1a:a6:e6:06:00:86:31:90:3a:4f:ae:21:1b:97:cb: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:E8:F3:0F:6C:6E:BC:47:C4:BF:CD:B3:D9:D0:BC:C1:DF:5F:F1 X509v3 Authority Key Identifier: keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.120.0/22 Signature Algorithm: sha256WithRSAEncryption 78:90:84:00:b9:08:8c:29:e7:40:c4:e1:3d:00:8a:7a:8f:6b: 22:50:d6:97:60:5b:a7:28:ab:72:b5:e6:7f:1c:39:42:b8:d3: 48:32:be:a0:ce:ca:ef:ae:0c:dd:81:94:4b:b5:3b:64:94:a9: cf:6b:98:6b:3e:b4:7f:72:2a:a7:7a:09:ea:18:12:8b:50:1c: 45:6b:56:93:49:0f:98:d0:1d:6e:c4:dd:e7:e3:33:f3:19:f1: e6:09:5a:f5:56:32:fe:d5:b7:c8:d9:fc:21:3a:f5:ac:bb:8f: e3:18:ea:4a:3f:f4:6a:25:9e:c5:63:db:b5:8f:ca:71:ea:d7: 24:8e:05:47:b1:c8:98:85:17:7a:7d:a5:95:da:03:d9:84:19: 36:dc:0f:65:3f:90:31:05:36:62:89:40:eb:bd:e6:d4:51:5c: 6a:9e:45:c2:d1:72:b7:b7:11:05:bd:43:9d:21:96:46:e3:65: 88:56:8c:b4:8e:cd:e1:49:55:0a:c8:b0:e1:df:62:d3:e8:c1: 49:29:ce:28:11:d3:af:26:40:cf:44:bf:27:26:3b:39:56:5d: 3b:0a:cf:15:67:2e:7a:d2:25:42:6d:6b:fe:b7:fc:3a:22:02: eb:8f:5c:9e:61:6f:fb:dd:dd:f6:55:1b:fb:d2:d7:ef:0a:5d: b3:28:44:d8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUX7+qc64xtL542sQrOQpNNSPl1G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGN0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIx MjZGRTc4OTAeFw0yNjAzMjcyMDA5NTVaFw0yNzAzMjYyMDE0NTVaMDMxMTAvBgNV BAMTKEYyRTFFOEYzMEY2QzZFQkM0N0M0QkZDREIzRDlEMEJDQzFERjVGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7W2wdcTttQYpww1/YXofnqjh i0WVlvwOC8wroiIPrg2kSkxQDnmf6Es7GqYueakwv4wCe4aoRsSsH7ekh+heEaAT yTZo66ddDvSuCBdlO/C8TugPkw3+1XbBy6XEZGfsllPY8N29tdn/SNTiA81l/6oz 9B/tNttmlDfNFW/7ibvbjaM9BUB/3e6EXUNVqLP8Hy8fQSUwur+9BhWcp1j8QYGx vd+Uf2WOdnrGMfFM7i/3hojz3gIBK+Fu/TY6RQmaouaZKOlGOJxg/mVOeq/5ds9/ HgADIOpX4iCXtCPf/aVBwhWSsNEo+t5BJg/lXBqm5gYAhjGQOk+uIRuXy5tHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU8uHo8w9sbrxHxL/Ns9nQvMHfX/EwHwYDVR0j BBgwFoAUGve+j04p4c6hoQwLoEMFQhJv54kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3 dzMvMC8xQUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjdCRThGNEUyOUUxQ0VB MUExMEMwQkEwNDMwNTQyMTI2RkU3ODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIzNGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAv MzEzNzMwMmUzNzM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzQzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKqTngwDQYJKoZIhvcNAQELBQADggEBAHiQhAC5 CIwp50DE4T0AinqPayJQ1pdgW6coq3K15n8cOUK400gyvqDOyu+uDN2BlEu1O2SU qc9rmGs+tH9yKqd6CeoYEotQHEVrVpNJD5jQHW7E3efjM/MZ8eYJWvVWMv7Vt8jZ /CE69ay7j+MY6ko/9GolnsVj27WPynHq1ySOBUexyJiFF3p9pZXaA9mEGTbcD2U/ kDEFNmKJQOu95tRRXGqeRcLRcre3EQW9Q50hlkbjZYhWjLSOzeFJVQrIsOHfYtPo wUkpzigR068mQM9EvycmOzlWXTsKzxVnLnrSJUJta/63/DoiAuuPXJ5hb/vd3fZV G/vS1+8KXbMoRNg= -----END CERTIFICATE-----Generated at Wed Apr 8 07:51:16 2026 by rpki-client