$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa File: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (raw, json) Hash identifier: 2m9bcY+02DzpdJmRSwhBgeCMzZ8m/0i5fSQ07jKiIuE= Subject key identifier: 49:54:98:FA:7F:0B:7E:FD:98:9E:DD:4E:6C:5B:B0:D0:18:5B:3D:97 Certificate issuer: /CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5 Certificate serial: 7122C06D9BD7306D73EBF0785E53664A41FED4FF Authority key identifier: 62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa Signing time: Sat 04 Apr 2026 15:08:46 +0000 ROA not before: Sat 04 Apr 2026 15:03:46 +0000 ROA not after: Sat 03 Apr 2027 15:08:46 +0000 asID: 264300 IP address blocks: 138.121.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 18:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:22:c0:6d:9b:d7:30:6d:73:eb:f0:78:5e:53:66:4a:41:fe:d4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5 Validity Not Before: Apr 4 15:03:46 2026 GMT Not After : Apr 3 15:08:46 2027 GMT Subject: CN=495498FA7F0B7EFD989EDD4E6C5BB0D0185B3D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:1c:a5:fc:f5:7a:ea:7f:ac:57:76:7b:c3: 53:76:cd:c7:b8:85:09:d0:0b:50:78:21:66:06:3f: 97:07:1c:73:d8:ef:c1:72:4a:ea:98:3b:26:72:c5: da:1c:f9:85:a0:6f:be:85:b2:4a:3b:1f:ea:5c:d7: d8:ed:bb:78:de:81:16:c3:40:7e:e5:8a:13:05:88: 41:bb:00:d4:48:c5:ec:d0:43:8a:9c:5a:56:b2:1c: 1c:de:91:0b:ed:c0:96:08:06:d8:19:91:a8:02:e1: 82:e7:ba:c8:7b:3a:04:0f:67:77:f7:33:c9:9e:19: 6d:5d:13:47:c1:91:6b:90:1c:60:a4:5c:d3:3f:af: 10:87:61:5e:24:a8:58:86:c6:be:48:80:14:ec:dd: 2b:fc:e5:0c:ce:a4:71:48:c4:cb:d0:1a:f9:bd:0c: bf:df:58:8d:87:0e:42:b3:07:40:39:9d:b0:45:00: 79:33:c8:6f:79:a6:96:97:a6:0b:af:18:a7:1a:5c: 81:7b:a9:72:56:11:a5:ca:57:ac:e7:b6:31:0c:b1: b8:20:af:2b:fa:62:3b:19:29:72:9b:65:88:04:3b: ae:96:5f:c8:e4:7d:64:ff:84:43:42:95:f8:24:29: 84:3b:ce:49:f3:7f:9f:72:85:88:dc:a2:81:dd:13: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:98:FA:7F:0B:7E:FD:98:9E:DD:4E:6C:5B:B0:D0:18:5B:3D:97 X509v3 Authority Key Identifier: keyid:62:36:5D:DB:5E:71:80:DE:CD:F6:ED:E9:FA:D3:D5:10:FF:09:84:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62365DDB5E7180DECDF6EDE9FAD3D510FF0984A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.132.0/22 Signature Algorithm: sha256WithRSAEncryption 66:5b:54:7c:39:4f:19:88:af:92:d4:a7:16:3d:75:04:ff:a4: cb:35:81:85:71:06:a2:ec:bb:fd:1b:06:59:d8:0a:44:66:53: a0:51:a2:e3:14:2f:52:49:97:b2:8d:bb:62:0c:c8:d1:e2:f8: 33:6c:5c:43:c8:19:0a:bf:bf:b4:cb:a3:09:37:44:01:5a:f4: 2e:ed:7f:55:a9:3c:6f:42:4d:7a:e4:79:48:09:96:47:39:0a: 37:0e:08:35:92:04:8b:5f:6d:12:08:ad:7a:b6:eb:0c:e7:e5: 13:12:a7:72:c2:50:c9:74:1b:69:e7:59:16:26:db:4d:9c:72: 10:ea:32:0e:71:e5:e8:33:b5:ba:bf:22:ce:74:82:5c:fc:d5: 06:5c:0a:c6:b1:79:49:32:7c:88:ff:c1:79:38:cd:46:6f:e6: 6a:69:75:ea:6d:2a:cb:15:07:61:9f:87:80:48:b1:a1:ae:d0: 53:57:94:26:4f:6a:40:fd:0f:18:80:d0:04:1f:59:41:92:0d: 97:77:ba:ca:c6:31:1d:d7:18:b6:32:dd:95:9f:26:7a:60:d1: 2f:77:f8:78:56:2e:0e:b9:78:43:16:43:50:ea:10:30:85:73: 0a:d7:de:63:1f:ae:41:73:a3:23:e3:6c:d3:89:e8:6c:d3:bc: be:4f:40:87 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcSLAbZvXMG1z6/B4XlNmSkH+1P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIzNjVEREI1RTcxODBERUNERjZFREU5RkFEM0Q1MTBG RjA5ODRBNTAeFw0yNjA0MDQxNTAzNDZaFw0yNzA0MDMxNTA4NDZaMDMxMTAvBgNV BAMTKDQ5NTQ5OEZBN0YwQjdFRkQ5ODlFREQ0RTZDNUJCMEQwMTg1QjNEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixByl/PV66n+sV3Z7w1N2zce4 hQnQC1B4IWYGP5cHHHPY78FySuqYOyZyxdoc+YWgb76Fsko7H+pc19jtu3jegRbD QH7lihMFiEG7ANRIxezQQ4qcWlayHBzekQvtwJYIBtgZkagC4YLnush7OgQPZ3f3 M8meGW1dE0fBkWuQHGCkXNM/rxCHYV4kqFiGxr5IgBTs3Sv85QzOpHFIxMvQGvm9 DL/fWI2HDkKzB0A5nbBFAHkzyG95ppaXpguvGKcaXIF7qXJWEaXKV6zntjEMsbgg ryv6YjsZKXKbZYgEO66WX8jkfWT/hENClfgkKYQ7zknzf59yhYjcooHdEw8jAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUSVSY+n8Lfv2Ynt1ObFuw0BhbPZcwHwYDVR0j BBgwFoAUYjZd215xgN7N9u3p+tPVEP8JhKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt eVQvMC82MjM2NUREQjVFNzE4MERFQ0RGNkVERTlGQUQzRDUxMEZGMDk4NEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyMzY1RERCNUU3MTgwREVD REY2RURFOUZBRDNENTEwRkYwOTg0QTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JiMjM1dnlYVTdmRGlSUWlYeGJXUE1KTFJhaXM1ZlhCazhGSnpkVGdEbXlULzAv MzEzMzM4MmUzMTMyMzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNDMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5hDANBgkqhkiG9w0BAQsFAAOCAQEAZltU fDlPGYivktSnFj11BP+kyzWBhXEGouy7/RsGWdgKRGZToFGi4xQvUkmXso27YgzI 0eL4M2xcQ8gZCr+/tMujCTdEAVr0Lu1/Vak8b0JNeuR5SAmWRzkKNw4INZIEi19t EgiterbrDOflExKncsJQyXQbaedZFibbTZxyEOoyDnHl6DO1ur8iznSCXPzVBlwK xrF5STJ8iP/BeTjNRm/maml16m0qyxUHYZ+HgEixoa7QU1eUJk9qQP0PGIDQBB9Z QZINl3e6ysYxHdcYtjLdlZ8memDRL3f4eFYuDrl4QxZDUOoQMIVzCtfeYx+uQXOj I+Ns04nobNO8vk9Ahw== -----END CERTIFICATE-----Generated at Wed Apr 8 07:51:10 2026 by rpki-client