$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa File: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (raw, json) Hash identifier: 0rNS8jTqWBXnfzUZI9V2sIZi2eJ+Zm+cYEE8AIlMsJg= Subject key identifier: 94:68:D9:33:86:E7:6D:36:34:6A:95:17:C2:2F:FB:CA:FD:F0:16:6C Certificate issuer: /CN=2B0321C6A5143815C9761040AF0A13D38375F6E5 Certificate serial: 6AA84331C3E343CB0B78B5FDAD0F391D45FF1292 Authority key identifier: 2B:03:21:C6:A5:14:38:15:C9:76:10:40:AF:0A:13:D3:83:75:F6:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0321C6A5143815C9761040AF0A13D38375F6E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa Signing time: Tue 20 Jan 2026 12:10:30 +0000 ROA not before: Tue 20 Jan 2026 12:05:30 +0000 ROA not after: Tue 19 Jan 2027 12:10:30 +0000 asID: 268016 IP address blocks: 45.167.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.crl rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0321C6A5143815C9761040AF0A13D38375F6E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Feb 2026 21:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a8:43:31:c3:e3:43:cb:0b:78:b5:fd:ad:0f:39:1d:45:ff:12:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0321C6A5143815C9761040AF0A13D38375F6E5 Validity Not Before: Jan 20 12:05:30 2026 GMT Not After : Jan 19 12:10:30 2027 GMT Subject: CN=9468D93386E76D36346A9517C22FFBCAFDF0166C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:9e:11:35:e1:72:ec:59:70:4e:f0:ca:92: bf:d1:19:20:8f:bf:84:ba:33:5a:6f:c1:bf:20:16: f8:73:ef:0d:87:38:9f:3b:81:9b:91:f6:a7:19:54: 12:47:3f:43:be:a8:41:11:41:73:45:16:27:b3:01: c9:d5:a8:b5:11:8c:4f:b2:f1:1f:b6:7f:30:80:09: 31:b8:60:6a:a1:af:d9:01:bc:26:c9:b5:cf:21:66: 81:a4:35:9b:af:e3:c3:94:0e:3d:0a:69:ec:7e:6f: af:29:77:ab:f7:55:83:ea:4b:14:f5:bd:85:ba:02: 52:c4:b6:12:6f:16:d2:cd:40:81:9e:b2:fc:8b:6f: 47:69:11:a0:49:9b:f8:ec:d1:5e:cd:e8:3d:e0:ec: 4c:86:d3:ca:17:64:98:dc:74:5e:51:1f:8c:66:22: c0:ec:1d:0c:a5:fd:18:32:0b:65:cd:ab:25:a5:ad: 2d:67:62:9f:74:3b:4a:46:06:49:da:17:d5:91:56: 44:c7:b9:47:4d:81:08:62:84:de:33:e5:33:26:4c: 84:24:75:80:91:a0:79:08:37:5d:ef:96:dd:bf:53: 6d:a2:6d:3a:44:ae:e4:0f:65:8b:ce:55:67:5b:94: 46:03:17:dc:12:a6:5a:65:80:90:82:c1:1c:0e:0c: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:68:D9:33:86:E7:6D:36:34:6A:95:17:C2:2F:FB:CA:FD:F0:16:6C X509v3 Authority Key Identifier: keyid:2B:03:21:C6:A5:14:38:15:C9:76:10:40:AF:0A:13:D3:83:75:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/2B0321C6A5143815C9761040AF0A13D38375F6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0321C6A5143815C9761040AF0A13D38375F6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.148.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:7c:34:a0:7a:2d:43:7d:5f:47:1f:c8:5d:67:16:d7:8c:2b: fa:17:bf:5d:34:69:9e:a7:07:59:4d:7e:24:88:d6:4e:f5:bb: 2f:e4:bb:89:15:34:a8:06:b8:14:d4:44:c9:45:a0:25:79:35: 07:13:db:46:01:f2:8f:02:d8:54:c6:ce:33:c1:27:f2:7d:6b: 67:61:8a:45:cc:cf:f1:2a:2c:93:b6:2a:ba:9c:e6:20:e5:64: 9b:f8:06:73:ff:30:cc:d3:b7:42:f5:4f:b3:a8:f7:61:e9:66: 4f:8a:82:21:07:b2:f2:73:bf:f8:29:b7:fa:4b:15:10:c7:2f: f0:65:4f:c8:22:e2:f6:c2:05:0d:d9:e2:63:3b:0e:f7:3c:23: c9:1b:a5:8d:59:34:ea:46:05:0c:fc:f4:d5:f1:59:bd:23:06: 63:5a:52:ff:c1:48:8d:1a:89:6f:94:63:5f:bb:7d:c6:ae:a4: ac:b8:c2:5f:6a:a0:11:e0:74:43:09:7a:b8:18:05:0f:a6:57: d2:a8:6a:af:c4:8e:4e:9a:01:f1:53:c0:77:21:e1:4c:f1:06: a8:41:06:a1:2f:83:91:2f:a5:60:4f:8c:30:32:c9:92:5c:b6: 05:a8:3a:ed:7c:eb:e5:67:c5:9b:77:63:a7:d1:1a:76:3b:53: db:3b:90:9b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUaqhDMcPjQ8sLeLX9rQ85HUX/EpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwMzIxQzZBNTE0MzgxNUM5NzYxMDQwQUYwQTEzRDM4 Mzc1RjZFNTAeFw0yNjAxMjAxMjA1MzBaFw0yNzAxMTkxMjEwMzBaMDMxMTAvBgNV BAMTKDk0NjhEOTMzODZFNzZEMzYzNDZBOTUxN0MyMkZGQkNBRkRGMDE2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQp4RNeFy7FlwTvDKkr/RGSCP v4S6M1pvwb8gFvhz7w2HOJ87gZuR9qcZVBJHP0O+qEERQXNFFiezAcnVqLURjE+y 8R+2fzCACTG4YGqhr9kBvCbJtc8hZoGkNZuv48OUDj0Kaex+b68pd6v3VYPqSxT1 vYW6AlLEthJvFtLNQIGesvyLb0dpEaBJm/js0V7N6D3g7EyG08oXZJjcdF5RH4xm IsDsHQyl/RgyC2XNqyWlrS1nYp90O0pGBknaF9WRVkTHuUdNgQhihN4z5TMmTIQk dYCRoHkIN13vlt2/U22ibTpEruQPZYvOVWdblEYDF9wSplplgJCCwRwODM2tAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUlGjZM4bnbTY0apUXwi/7yv3wFmwwHwYDVR0j BBgwFoAUKwMhxqUUOBXJdhBArwoT04N19uUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBXQ3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hk b3gvMC8yQjAzMjFDNkE1MTQzODE1Qzk3NjEwNDBBRjBBMTNEMzgzNzVGNkU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMDMyMUM2QTUxNDM4MTVD OTc2MTA0MEFGMEExM0QzODM3NUY2RTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJQV0N5TE1CMUo3b2RIU3VaYzQya3NCb3hIOUVSUkFqb3N4eU55dUdoZG94LzAv MzQzNTJlMzEzNjM3MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2 MzgzMDMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAItp5QwDQYJKoZIhvcNAQELBQADggEBAF98NKB6 LUN9X0cfyF1nFteMK/oXv100aZ6nB1lNfiSI1k71uy/ku4kVNKgGuBTURMlFoCV5 NQcT20YB8o8C2FTGzjPBJ/J9a2dhikXMz/EqLJO2Krqc5iDlZJv4BnP/MMzTt0L1 T7Oo92HpZk+KgiEHsvJzv/gpt/pLFRDHL/BlT8gi4vbCBQ3Z4mM7Dvc8I8kbpY1Z NOpGBQz89NXxWb0jBmNaUv/BSI0aiW+UY1+7fcaupKy4wl9qoBHgdEMJergYBQ+m V9Koaq/Ejk6aAfFTwHch4UzxBqhBBqEvg5EvpWBPjDAyyZJctgWoOu186+VnxZt3 Y6fRGnY7U9s7kJs= -----END CERTIFICATE-----Generated at Thu Feb 19 03:06:03 2026 by rpki-client