$ rpki-client -vvvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa File: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (raw, json) Hash identifier: /yaBbYaRIkUreWTnoS2LgUJgcAhyTnpkZjkilILg1dI= Subject key identifier: 3C:EC:D6:4B:13:0D:9B:5F:03:1E:36:40:14:B6:7C:E5:4A:F7:60:06 Certificate issuer: /CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696 Certificate serial: 7C5C8233972BD80BCB3A30BC27CCC69E3CB65F36 Authority key identifier: AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa Signing time: Thu 03 Sep 2026 16:12:37 +0000 ROA not before: Thu 03 Sep 2026 16:07:37 +0000 ROA not after: Thu 02 Sep 2027 16:12:37 +0000 asID: 53130 IP address blocks: 187.120.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Sep 2026 19:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5c:82:33:97:2b:d8:0b:cb:3a:30:bc:27:cc:c6:9e:3c:b6:5f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696 Validity Not Before: Sep 3 16:07:37 2026 GMT Not After : Sep 2 16:12:37 2027 GMT Subject: CN=3CECD64B130D9B5F031E364014B67CE54AF76006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:30:28:5f:71:a0:e4:c0:3b:78:11:23:88: b3:94:41:7f:f2:1e:2d:76:ed:f8:d6:21:d7:ce:ca: f9:b5:1e:7d:5a:42:2e:c7:64:30:01:16:55:0e:55: 77:6b:04:ea:45:85:0b:56:10:c4:40:66:a3:17:61: 10:75:ec:9d:95:f4:19:86:8a:a7:ca:a4:ac:b7:af: 4b:96:58:19:c5:bd:21:ae:7f:ef:50:7e:7d:39:36: 51:2a:72:1f:7b:2f:1c:2d:aa:d2:06:52:92:32:ee: 7f:2a:03:34:fb:55:96:1b:fb:3d:b7:0e:95:fb:d6: 4e:35:e5:b5:fa:54:93:ae:3a:e7:d2:a6:4d:b1:24: 07:5e:68:c6:7b:27:7e:16:76:25:c7:ce:99:0e:3a: 67:46:d2:d4:d9:0e:b5:f2:9a:7f:73:d3:00:7b:71: 71:c5:54:2b:0f:6d:29:fb:fd:21:2b:ad:22:08:be: a6:0b:c0:c2:d3:bb:24:39:6f:f3:43:b3:1f:2e:82: 1d:a1:95:3b:bc:04:af:17:9a:a2:e1:e1:5d:86:ad: c4:65:ad:ca:76:c4:aa:44:33:77:ef:a5:54:f0:a0: e3:2b:96:f9:7b:83:e7:8d:2a:6d:cc:0e:67:cc:90: 5e:70:bc:29:12:02:c3:75:bb:93:fd:5f:38:ee:88: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:D6:4B:13:0D:9B:5F:03:1E:36:40:14:B6:7C:E5:4A:F7:60:06 X509v3 Authority Key Identifier: keyid:AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.120.240.0/20 Signature Algorithm: sha256WithRSAEncryption 83:77:0e:8a:ed:68:fe:bf:3a:25:0d:e7:1f:c0:32:fc:58:d5: 6e:be:a0:c5:b6:0d:b9:b2:63:a7:3c:9a:eb:ad:90:8c:8d:e3: 70:f6:a4:66:30:73:dd:28:0d:b6:ba:77:0b:38:c2:94:cd:53: f9:f7:aa:c3:e6:73:3b:cc:81:e3:36:74:a0:39:4b:4e:73:f2: 22:b1:7e:02:5a:88:71:4f:ec:e9:96:f7:35:48:2c:5d:5e:f8: da:de:37:04:fa:82:64:ff:49:59:c6:26:4d:5f:0a:db:c2:8c: fd:f7:e9:1d:97:10:2f:b6:0a:be:ed:e7:f9:e8:7c:4a:ef:1e: a5:74:7b:62:91:5a:94:43:af:5e:8a:71:ad:9a:e6:de:97:23: de:58:42:38:3f:e7:93:3b:7c:37:6a:a6:d5:91:84:1c:91:da: 1f:e6:e3:8c:63:f4:5b:86:ca:76:c5:42:c1:24:ed:4f:7a:e9: 32:4c:31:1f:e9:a8:bf:0f:47:e0:a5:61:f2:c6:11:80:49:49: b0:0f:e6:73:3d:93:fc:35:09:37:fe:64:58:c4:8d:cd:9e:f0: 77:17:3c:66:90:68:f4:41:30:bd:71:0b:f3:34:be:c6:0d:34: f5:3a:c8:5d:cc:74:39:d3:b1:51:30:ea:71:66:30:48:19:41: 62:e7:36:b0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfFyCM5cr2AvLOjC8J8zGnjy2XzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJCMDM5NzBFQ0NBQzJFNTMyOEIzNTE1NkVFNUNGNzYy MkYxODY5NjAeFw0yNjA5MDMxNjA3MzdaFw0yNzA5MDIxNjEyMzdaMDMxMTAvBgNV BAMTKDNDRUNENjRCMTMwRDlCNUYwMzFFMzY0MDE0QjY3Q0U1NEFGNzYwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyjAoX3Gg5MA7eBEjiLOUQX/y Hi127fjWIdfOyvm1Hn1aQi7HZDABFlUOVXdrBOpFhQtWEMRAZqMXYRB17J2V9BmG iqfKpKy3r0uWWBnFvSGuf+9Qfn05NlEqch97LxwtqtIGUpIy7n8qAzT7VZYb+z23 DpX71k415bX6VJOuOufSpk2xJAdeaMZ7J34WdiXHzpkOOmdG0tTZDrXymn9z0wB7 cXHFVCsPbSn7/SErrSIIvqYLwMLTuyQ5b/NDsx8ugh2hlTu8BK8XmqLh4V2GrcRl rcp2xKpEM3fvpVTwoOMrlvl7g+eNKm3MDmfMkF5wvCkSAsN1u5P9XzjuiEI/AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUPOzWSxMNm18DHjZAFLZ85Ur3YAYwHwYDVR0j BBgwFoAUq7A5cOzKwuUyizUVbuXPdiLxhpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMC9BQkIwMzk3MEVDQ0FDMkU1MzI4QjM1MTU2RUU1Q0Y3NjIyRjE4Njk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjAzOTcwRUNDQUMyRTUz MjhCMzUxNTZFRTVDRjc2MjJGMTg2OTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RSOEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzAv MzEzODM3MmUzMTMyMzAyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1 MzMzMTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAS7ePAwDQYJKoZIhvcNAQELBQADggEBAIN3Dort aP6/OiUN5x/AMvxY1W6+oMW2DbmyY6c8muutkIyN43D2pGYwc90oDba6dws4wpTN U/n3qsPmczvMgeM2dKA5S05z8iKxfgJaiHFP7OmW9zVILF1e+NreNwT6gmT/SVnG Jk1fCtvCjP336R2XEC+2Cr7t5/nofErvHqV0e2KRWpRDr16Kca2a5t6XI95YQjg/ 55M7fDdqptWRhByR2h/m44xj9FuGynbFQsEk7U966TJMMR/pqL8PR+ClYfLGEYBJ SbAP5nM9k/w1CTf+ZFjEjc2e8HcXPGaQaPRBML1xC/M0vsYNNPU6yF3MdDnTsVEw 6nFmMEgZQWLnNrA= -----END CERTIFICATE-----Generated at Thu Sep 3 21:04:07 2026 by rpki-client