$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa File: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (raw, json) Hash identifier: L4k/pyvGtkShH35m45+k+V4CRe5sfzs/ASlP2SjqDes= Subject key identifier: E2:09:AD:84:6A:F2:3D:4E:34:EB:7F:34:62:56:D7:68:7E:05:68:E3 Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Certificate serial: 4620F8CCB6F9571BD9EA531747D0903D717CC916 Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa Signing time: Wed 01 Apr 2026 14:14:56 +0000 ROA not before: Wed 01 Apr 2026 14:09:56 +0000 ROA not after: Wed 31 Mar 2027 14:14:56 +0000 asID: 270959 IP address blocks: 201.49.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 13:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:20:f8:cc:b6:f9:57:1b:d9:ea:53:17:47:d0:90:3d:71:7c:c9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Validity Not Before: Apr 1 14:09:56 2026 GMT Not After : Mar 31 14:14:56 2027 GMT Subject: CN=E209AD846AF23D4E34EB7F346256D7687E0568E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:ca:33:7e:46:56:1d:21:23:c1:28:1c:be: 40:13:ff:ef:a0:b2:7e:ac:b6:5b:d9:f8:21:6f:70: 56:19:28:84:cb:c8:9f:71:74:9c:03:27:42:36:15: 43:5d:20:5e:43:47:b6:52:70:71:0d:b8:6b:d4:cc: 42:7f:e0:ae:40:7b:0e:62:06:b8:81:46:aa:df:c3: a5:7e:9e:3e:18:60:57:13:e1:38:9f:b7:1a:d5:0e: 1b:33:04:22:9c:8d:59:4d:54:6c:78:a5:4f:f9:36: a3:67:e5:4d:3d:d4:22:de:c1:7f:64:b5:cd:14:1d: 1c:91:0b:98:df:6f:ba:43:c4:15:9d:33:75:ef:e8: 7e:fc:9f:aa:c8:40:29:ca:4e:ff:f5:22:3a:54:81: 99:b2:a5:10:02:05:d8:cb:fb:c8:a8:10:08:89:bb: 9d:ad:4b:e4:43:ee:af:af:3c:8c:55:17:6b:8d:a0: 71:d6:7a:cc:e4:de:22:17:55:3f:2f:f1:fc:ff:ff: 65:c3:a1:cc:25:12:4f:6b:b8:c8:72:ea:61:06:6c: d1:3c:d0:df:1d:97:55:eb:91:a1:df:34:b6:0f:d1: f7:83:54:88:c5:11:eb:46:98:d0:57:02:e2:cc:2d: cd:5f:3f:e8:07:e9:cc:da:f7:df:fe:73:c5:58:3c: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:09:AD:84:6A:F2:3D:4E:34:EB:7F:34:62:56:D7:68:7E:05:68:E3 X509v3 Authority Key Identifier: keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.49.225.0/24 Signature Algorithm: sha256WithRSAEncryption b0:7f:7a:76:20:4c:0d:9a:5d:3f:40:7f:3a:80:e5:d9:6f:c3: f9:d7:27:aa:d3:63:4d:bb:68:b3:54:da:c7:37:83:de:20:6c: b5:50:de:57:58:2a:c7:4e:64:a3:b0:b8:26:50:72:9e:9d:64: 8f:74:38:b5:cd:87:a9:1d:43:ea:fb:0f:ed:17:43:f9:06:ce: e1:d0:2b:6a:e9:49:11:96:8d:36:04:26:ea:67:7c:e3:f4:95: b8:71:bc:9f:e0:7b:55:dc:66:25:18:42:b0:e0:74:36:a7:c8: e6:18:b9:84:13:b3:e4:20:00:68:b3:7f:d8:cd:46:aa:9a:27: 66:4f:ca:1f:7c:3c:c9:0c:33:90:84:9e:01:f3:44:f7:ed:82: 4c:34:23:c3:9f:b5:70:e9:b7:7d:52:7d:ea:6e:42:96:96:5f: ac:20:fa:b2:4e:1b:2e:33:cd:e2:ae:09:ac:d2:02:ac:24:3f: 6f:ce:1d:44:a7:06:f7:59:5b:3a:ce:a1:ec:ea:83:35:92:af: 3b:c7:68:21:de:79:6d:9f:47:bb:74:c5:95:db:2e:70:62:b8: 54:dc:26:22:d7:d9:ee:df:e5:af:0f:24:10:25:ab:b3:5d:d9: f0:3f:b9:7f:66:c8:1c:c8:cc:c1:d7:5e:55:cc:1f:43:66:8b: df:59:f8:65 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIURiD4zLb5VxvZ6lMXR9CQPXF8yRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB ODlDMkQxQTAeFw0yNjA0MDExNDA5NTZaFw0yNzAzMzExNDE0NTZaMDMxMTAvBgNV BAMTKEUyMDlBRDg0NkFGMjNENEUzNEVCN0YzNDYyNTZENzY4N0UwNTY4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KMozfkZWHSEjwSgcvkAT/++g sn6stlvZ+CFvcFYZKITLyJ9xdJwDJ0I2FUNdIF5DR7ZScHENuGvUzEJ/4K5Aew5i BriBRqrfw6V+nj4YYFcT4TiftxrVDhszBCKcjVlNVGx4pU/5NqNn5U091CLewX9k tc0UHRyRC5jfb7pDxBWdM3Xv6H78n6rIQCnKTv/1IjpUgZmypRACBdjL+8ioEAiJ u52tS+RD7q+vPIxVF2uNoHHWeszk3iIXVT8v8fz//2XDocwlEk9ruMhy6mEGbNE8 0N8dl1XrkaHfNLYP0feDVIjFEetGmNBXAuLMLc1fP+gH6cza99/+c8VYPM+lAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU4gmthGryPU406380YlbXaH4FaOMwHwYDVR0j BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5 QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz MDMxMmUzNDM5MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz OTM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBADJMeEwDQYJKoZIhvcNAQELBQADggEBALB/enYgTA2a XT9AfzqA5dlvw/nXJ6rTY027aLNU2sc3g94gbLVQ3ldYKsdOZKOwuCZQcp6dZI90 OLXNh6kdQ+r7D+0XQ/kGzuHQK2rpSRGWjTYEJupnfOP0lbhxvJ/ge1XcZiUYQrDg dDanyOYYuYQTs+QgAGizf9jNRqqaJ2ZPyh98PMkMM5CEngHzRPftgkw0I8OftXDp t31SfepuQpaWX6wg+rJOGy4zzeKuCazSAqwkP2/OHUSnBvdZWzrOoezqgzWSrzvH aCHeeW2fR7t0xZXbLnBiuFTcJiLX2e7f5a8PJBAlq7Nd2fA/uX9myBzIzMHXXlXM H0Nmi99Z+GU= -----END CERTIFICATE-----Generated at Wed Apr 8 20:23:41 2026 by rpki-client