$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa File: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (raw, json) Hash identifier: iRuqVBfrE0kASFZUOEN5l5bTyV621nXJg3Yvq4G98kg= Subject key identifier: 45:FA:C7:2E:85:1A:AB:61:C8:14:3E:C7:6A:62:3E:94:DA:A7:6E:BF Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Certificate serial: 0C5720047EEE2B8969EDA8A37858667FB1E96878 Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa Signing time: Thu 22 Jan 2026 12:01:03 +0000 ROA not before: Thu 22 Jan 2026 11:56:03 +0000 ROA not after: Thu 21 Jan 2027 12:01:03 +0000 asID: 263891 IP address blocks: 138.204.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 04:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:57:20:04:7e:ee:2b:89:69:ed:a8:a3:78:58:66:7f:b1:e9:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390 Validity Not Before: Jan 22 11:56:03 2026 GMT Not After : Jan 21 12:01:03 2027 GMT Subject: CN=45FAC72E851AAB61C8143EC76A623E94DAA76EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:04:c0:7d:bf:4b:d6:56:79:78:e7:f3:78: dc:06:0b:f7:89:ff:96:f2:68:a4:16:66:78:aa:71: 60:a0:12:38:c7:4f:f5:f5:3d:52:c5:b1:d6:99:cb: 46:ff:75:16:5b:3d:2b:65:b4:ed:0f:d1:41:70:4c: cf:0b:03:5e:42:eb:15:77:27:34:2e:2e:d5:56:12: 25:18:aa:b6:0e:e3:2d:81:d8:c9:dd:e4:cf:4d:c2: 7b:6b:c7:50:db:ff:e3:1f:30:65:e5:87:71:4d:a1: 7c:6a:66:9e:66:40:4a:8a:ee:67:23:db:5a:76:16: 46:ce:f7:52:ce:33:7c:e7:a9:87:d2:16:34:63:b3: e0:58:f3:85:69:77:7c:f9:19:18:83:a3:c2:f5:7d: 3a:bc:0e:69:e7:8f:9d:c6:fd:51:61:6b:81:7c:20: ad:d9:62:21:e8:de:0d:c3:95:e3:ae:bb:60:d7:ad: 14:71:cb:2a:f4:1c:f8:85:5d:90:ec:83:f6:03:2d: aa:c0:63:0b:5e:51:39:29:dd:38:e3:55:08:ba:7e: 56:4c:c5:66:25:f4:70:9e:0b:92:d6:70:ad:22:c4: a8:3b:05:0c:1f:b6:8a:d3:9e:41:ad:eb:b5:92:7f: 6a:06:57:cc:75:0d:b8:19:92:b7:26:4f:69:7e:db: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:C7:2E:85:1A:AB:61:C8:14:3E:C7:6A:62:3E:94:DA:A7:6E:BF X509v3 Authority Key Identifier: keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.48.0/24 Signature Algorithm: sha256WithRSAEncryption 97:3d:94:fd:1b:62:77:67:01:15:90:b0:5b:e3:c9:31:5f:40: ad:60:fd:10:7a:91:f2:75:7e:38:33:e4:8d:0f:bc:75:81:97: 6a:e5:03:9a:1f:1a:30:eb:e0:49:5b:20:70:a2:8d:e8:28:bc: 16:27:0a:c4:9b:0c:b8:63:13:a3:fc:4d:0e:6c:27:77:8e:d1: d0:32:a7:bc:69:06:73:66:99:60:67:5b:68:cf:19:6b:8e:36: 39:f7:cf:dc:85:9e:af:ab:26:10:fe:52:52:b3:99:0d:e6:cb: 2d:be:b6:2c:bd:ef:32:2f:05:12:e0:41:a3:f0:dc:03:0e:ca: 79:4f:e5:85:41:9b:f4:45:ee:9d:db:1d:b8:6c:9a:14:93:65: 2f:70:9e:75:6c:47:0c:0d:2c:1e:e0:f5:a7:24:6c:18:22:fc: b5:da:0b:21:5e:11:1d:52:05:c1:dd:db:78:39:54:63:11:d8: 81:32:25:a6:26:6f:7e:2b:fd:fd:3a:7c:4f:f7:07:fb:29:8e: 78:c1:29:67:cd:fd:9b:a8:5d:39:54:8f:7f:95:38:c0:fe:da: ce:32:3f:98:70:c4:2e:11:58:60:fd:33:62:1f:83:06:09:39: be:59:65:b5:f3:0b:45:2b:bf:ef:12:1c:00:f4:6c:17:70:17: f3:20:c0:02 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUDFcgBH7uK4lp7aijeFhmf7HpaHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx QjAyRjM5MDAeFw0yNjAxMjIxMTU2MDNaFw0yNzAxMjExMjAxMDNaMDMxMTAvBgNV BAMTKDQ1RkFDNzJFODUxQUFCNjFDODE0M0VDNzZBNjIzRTk0REFBNzZFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6QTAfb9L1lZ5eOfzeNwGC/eJ /5byaKQWZniqcWCgEjjHT/X1PVLFsdaZy0b/dRZbPStltO0P0UFwTM8LA15C6xV3 JzQuLtVWEiUYqrYO4y2B2Mnd5M9Nwntrx1Db/+MfMGXlh3FNoXxqZp5mQEqK7mcj 21p2FkbO91LOM3znqYfSFjRjs+BY84Vpd3z5GRiDo8L1fTq8Dmnnj53G/VFha4F8 IK3ZYiHo3g3DleOuu2DXrRRxyyr0HPiFXZDsg/YDLarAYwteUTkp3TjjVQi6flZM xWYl9HCeC5LWcK0ixKg7BQwftorTnkGt67WSf2oGV8x1DbgZkrcmT2l+2327AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQURfrHLoUaq2HIFD7HamI+lNqnbr8wHwYDVR0j BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv MzEzMzM4MmUzMjMwMzQyZTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzMzODM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzDAwDQYJKoZIhvcNAQELBQADggEBAJc9lP0b YndnARWQsFvjyTFfQK1g/RB6kfJ1fjgz5I0PvHWBl2rlA5ofGjDr4ElbIHCijego vBYnCsSbDLhjE6P8TQ5sJ3eO0dAyp7xpBnNmmWBnW2jPGWuONjn3z9yFnq+rJhD+ UlKzmQ3myy2+tiy97zIvBRLgQaPw3AMOynlP5YVBm/RF7p3bHbhsmhSTZS9wnnVs RwwNLB7g9ackbBgi/LXaCyFeER1SBcHd23g5VGMR2IEyJaYmb34r/f06fE/3B/sp jnjBKWfN/ZuoXTlUj3+VOMD+2s4yP5hwxC4RWGD9M2IfgwYJOb5ZZbXzC0Urv+8S HAD0bBdwF/MgwAI= -----END CERTIFICATE-----Generated at Thu Feb 19 12:56:52 2026 by rpki-client