$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa File: 3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa (raw, json) Hash identifier: VtqeHPmy382BijH/JQTr1LcX7ZKBvaxr2RHCrkygze0= Subject key identifier: A8:96:CB:32:A7:30:AA:1D:EE:DB:68:12:2F:24:34:46:5C:80:A0:67 Certificate issuer: /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E Certificate serial: 5A2BB2DF5F06FBF61623EFACA30AB2CABB0826C5 Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa Signing time: Mon 06 Apr 2026 19:18:48 +0000 ROA not before: Mon 06 Apr 2026 19:13:48 +0000 ROA not after: Mon 05 Apr 2027 19:18:48 +0000 asID: 264293 IP address blocks: 138.121.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:b2:df:5f:06:fb:f6:16:23:ef:ac:a3:0a:b2:ca:bb:08:26:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E Validity Not Before: Apr 6 19:13:48 2026 GMT Not After : Apr 5 19:18:48 2027 GMT Subject: CN=A896CB32A730AA1DEEDB68122F2434465C80A067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:f7:15:9a:c1:a6:23:18:27:fd:41:8b:4c: 8b:18:81:7d:cd:74:1e:4a:50:bd:7b:18:70:5b:58: d9:b2:8d:4a:1c:5e:b0:43:ff:19:09:5e:93:c0:40: 23:7a:2f:a7:35:61:49:2d:3d:dd:01:12:65:29:b4: 5e:15:fe:97:f2:fa:cc:2d:90:22:1b:9d:6e:a3:1f: 04:e8:b1:dd:ad:c0:a8:25:4a:66:9d:d3:50:b5:ad: 4f:fa:60:f7:c6:1f:fc:af:0b:41:5d:e8:b4:1f:d0: cd:df:fe:d0:bb:d6:61:d6:1b:9a:14:05:47:95:a1: 2d:e0:a4:b8:b1:55:25:90:a4:38:79:6c:44:f5:99: cb:1e:6d:16:7e:26:61:68:56:a0:40:c1:ba:41:6b: 12:96:5d:69:af:fd:7c:3a:9e:32:d3:72:06:8e:e1: bd:43:41:8a:af:e9:38:b0:1c:01:af:dd:f5:75:f9: 36:f6:93:d2:ac:9a:e9:52:b9:79:51:1c:0b:69:f9: 50:2a:ce:4a:00:95:50:f5:c7:59:74:ce:4c:44:28: 5e:7e:42:31:f1:ef:d0:3f:3c:2f:27:93:2b:1c:6d: 27:a0:10:22:2b:c9:23:25:fb:67:74:30:cd:19:83: 19:f5:ab:89:72:85:cd:a1:18:1d:3a:93:03:26:8d: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:96:CB:32:A7:30:AA:1D:EE:DB:68:12:2F:24:34:46:5C:80:A0:67 X509v3 Authority Key Identifier: keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.120.0/22 Signature Algorithm: sha256WithRSAEncryption 66:37:a1:23:8e:88:30:41:9a:a3:9f:5b:60:55:6e:54:a2:2f: a8:ef:14:6b:b9:e1:44:2d:47:04:9f:dc:2d:43:bb:01:7c:60: fe:72:66:78:22:5c:dc:75:36:28:25:33:20:be:ce:a3:72:27: 63:c3:3b:21:b0:84:6d:d3:b6:b8:8e:7a:4b:ae:fb:1c:58:35: f1:09:61:65:fd:5e:b8:6f:9d:36:e8:cf:dc:9d:98:aa:59:42: e7:54:e0:5d:1d:9d:df:63:3c:f4:12:35:68:35:b9:a3:6d:f0: 60:36:48:9c:d7:bf:5f:1d:0d:25:a3:32:5f:ef:94:71:66:11: 4d:8e:2c:59:cb:d2:e6:6e:ae:a8:15:11:bb:a3:7b:c6:90:c5: ee:4a:dc:b3:da:13:54:21:1b:21:a2:ed:c4:16:22:c1:a0:6f: 1d:af:3b:85:a5:8b:c6:b3:1d:d2:62:30:b0:a3:e9:69:d4:28: 78:54:94:27:1b:54:68:21:e0:24:67:3f:c1:c2:fd:a8:96:50: 7d:5f:91:c9:d8:8a:c6:42:22:31:4b:7c:e2:70:08:8e:13:4d: 2c:fb:73:77:18:b7:f5:8c:26:28:c4:d9:fe:17:2e:97:de:05: 60:fc:32:df:bd:ce:7a:9a:ce:b1:37:82:1b:67:7a:3c:fb:16: 1f:83:df:0a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUWiuy318G+/YWI++sowqyyrsIJsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwMDI2QjU3Q0E0RDlGMjU5RkE0QUU1MjY5MkIxRUEz NEIwODk3RTAeFw0yNjA0MDYxOTEzNDhaFw0yNzA0MDUxOTE4NDhaMDMxMTAvBgNV BAMTKEE4OTZDQjMyQTczMEFBMURFRURCNjgxMjJGMjQzNDQ2NUM4MEEwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X/cVmsGmIxgn/UGLTIsYgX3N dB5KUL17GHBbWNmyjUocXrBD/xkJXpPAQCN6L6c1YUktPd0BEmUptF4V/pfy+swt kCIbnW6jHwTosd2twKglSmad01C1rU/6YPfGH/yvC0Fd6LQf0M3f/tC71mHWG5oU BUeVoS3gpLixVSWQpDh5bET1mcsebRZ+JmFoVqBAwbpBaxKWXWmv/Xw6njLTcgaO 4b1DQYqv6TiwHAGv3fV1+Tb2k9KsmulSuXlRHAtp+VAqzkoAlVD1x1l0zkxEKF5+ QjHx79A/PC8nkyscbSegECIrySMl+2d0MM0Zgxn1q4lyhc2hGB06kwMmjQmrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUqJbLMqcwqh3u22gSLyQ0RlyAoGcwHwYDVR0j BBgwFoAU8QAmtXyk2fJZ+krlJpKx6jSwiX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9GMTAwMjZCNTdDQTREOUYyNTlGQTRBRTUyNjkyQjFFQTM0QjA4OTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMDAyNkI1N0NBNEQ5RjI1 OUZBNEFFNTI2OTJCMUVBMzRCMDg5N0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dha3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzAv MzEzMzM4MmUzMTMyMzEyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNDMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5eDANBgkqhkiG9w0BAQsFAAOCAQEAZjeh I46IMEGao59bYFVuVKIvqO8Ua7nhRC1HBJ/cLUO7AXxg/nJmeCJc3HU2KCUzIL7O o3InY8M7IbCEbdO2uI56S677HFg18QlhZf1euG+dNujP3J2YqllC51TgXR2d32M8 9BI1aDW5o23wYDZInNe/Xx0NJaMyX++UcWYRTY4sWcvS5m6uqBURu6N7xpDF7krc s9oTVCEbIaLtxBYiwaBvHa87haWLxrMd0mIwsKPpadQoeFSUJxtUaCHgJGc/wcL9 qJZQfV+RydiKxkIiMUt84nAIjhNNLPtzdxi39YwmKMTZ/hcul94FYPwy373OeprO sTeCG2d6PPsWH4PfCg== -----END CERTIFICATE-----Generated at Wed Apr 8 09:31:16 2026 by rpki-client