$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa File: 3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa (raw, json) Hash identifier: hg8QR1XH1dVjx2pEsCYwLJpfzZoHKIXEyZMX1t1+ypw= Subject key identifier: 67:17:3D:8C:06:6B:B9:6C:7C:EA:FE:C1:D1:17:AD:C7:C0:F9:38:3D Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Certificate serial: 7BFCD351C0C1EB562E17EC05F5AD636D93D04B04 Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa Signing time: Tue 22 Sep 2026 17:12:00 +0000 ROA not before: Tue 22 Sep 2026 17:07:00 +0000 ROA not after: Tue 21 Sep 2027 17:12:00 +0000 asID: 52721 IP address blocks: 138.185.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Oct 2026 10:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fc:d3:51:c0:c1:eb:56:2e:17:ec:05:f5:ad:63:6d:93:d0:4b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Validity Not Before: Sep 22 17:07:00 2026 GMT Not After : Sep 21 17:12:00 2027 GMT Subject: CN=67173D8C066BB96C7CEAFEC1D117ADC7C0F9383D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:52:60:b6:8f:36:fb:71:eb:8c:e0:37:0c: a3:2c:d1:7a:7b:a2:64:ef:40:07:3f:98:51:44:bf: f1:4e:67:99:27:8b:f8:95:89:eb:3f:eb:3c:8e:80: 66:dc:16:d4:09:55:1f:11:a8:95:a2:84:02:a6:14: 4d:59:a4:f4:aa:6e:3d:16:d8:19:5f:8e:37:60:b7: 54:a2:72:ea:f3:d9:6d:ad:45:fb:9a:8e:4b:76:2f: fb:d6:9d:4a:1a:f2:db:6a:e8:05:c9:d9:a6:fb:73: 92:3c:e4:80:85:7e:06:ab:1a:91:91:e7:4f:9c:df: 12:f0:28:bd:2c:26:9e:dc:68:c3:c4:76:d8:26:3e: b6:41:46:4c:5f:66:f3:c5:65:c4:77:26:b8:f0:dc: 71:cd:b8:6b:15:56:8d:50:77:f5:23:72:38:1e:fd: 30:aa:54:c2:a5:9e:5d:98:0b:0d:5f:45:d1:94:68: b9:df:19:23:f1:d3:6b:8e:c0:1d:28:ba:f4:36:55: 75:f5:ea:4e:a4:66:27:88:98:95:88:45:81:a3:40: 87:18:75:3f:0a:c6:98:3a:34:8d:d2:a8:b9:34:0c: 2f:f4:ec:0c:24:4a:3a:be:fb:d1:f4:3e:86:c5:10: a6:46:6b:4b:41:92:0c:bb:40:13:ae:b0:f9:36:8a: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:17:3D:8C:06:6B:B9:6C:7C:EA:FE:C1:D1:17:AD:C7:C0:F9:38:3D X509v3 Authority Key Identifier: keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130392e302f32342d3234203d3e203532373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.109.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:8b:e7:2e:36:e9:0a:64:83:ff:91:f5:b1:a9:2d:91:7c:36: a2:fa:da:54:43:cf:34:cf:a8:e9:d0:30:20:6d:68:da:b3:4d: 02:1f:26:5c:b4:8d:f2:cc:17:02:bb:cf:45:92:3b:ed:27:84: cd:56:12:ea:71:2d:b0:2a:50:fe:57:a3:ce:6a:42:50:5d:5d: 5c:0d:de:58:56:a1:ca:2b:75:2c:fc:09:36:94:93:36:a9:49: 76:52:0d:1d:74:00:41:1e:ff:db:60:f7:c0:6b:9e:34:7a:d8: e3:6f:45:c5:c8:13:53:5a:9a:c8:02:3b:6c:70:0e:51:85:e5: be:bf:48:81:50:a7:57:ec:de:f8:35:da:ba:97:a6:25:c1:bc: 2d:f5:6a:fa:4d:86:c1:91:74:32:a7:27:b6:b0:0b:17:eb:e0: 65:0c:48:27:d1:5e:86:8f:35:f2:cb:48:73:33:bb:b9:39:dd: 2f:81:07:16:d7:ea:bd:bc:0b:82:78:39:30:10:2b:a1:a3:45: 52:5e:41:e7:d1:5c:48:3d:1b:99:c7:6d:01:0b:29:a6:65:21: 7e:65:30:14:0a:84:b6:bf:1f:32:4f:4f:99:91:e6:47:2c:e3: 7c:d2:7d:a6:5c:6b:55:3b:d9:18:85:8b:32:15:cb:7b:98:10: a1:5c:81:df -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUe/zTUcDB61YuF+wF9a1jbZPQSwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3 RUJCMDk5ODAeFw0yNjA5MjIxNzA3MDBaFw0yNzA5MjExNzEyMDBaMDMxMTAvBgNV BAMTKDY3MTczRDhDMDY2QkI5NkM3Q0VBRkVDMUQxMTdBREM3QzBGOTM4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkVJgto82+3HrjOA3DKMs0Xp7 omTvQAc/mFFEv/FOZ5kni/iVies/6zyOgGbcFtQJVR8RqJWihAKmFE1ZpPSqbj0W 2Blfjjdgt1Sicurz2W2tRfuajkt2L/vWnUoa8ttq6AXJ2ab7c5I85ICFfgarGpGR 50+c3xLwKL0sJp7caMPEdtgmPrZBRkxfZvPFZcR3Jrjw3HHNuGsVVo1Qd/Ujcjge /TCqVMKlnl2YCw1fRdGUaLnfGSPx02uOwB0ouvQ2VXX16k6kZieImJWIRYGjQIcY dT8Kxpg6NI3SqLk0DC/07AwkSjq++9H0PobFEKZGa0tBkgy7QBOusPk2ikY1AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUZxc9jAZruWx86v7B0Retx8D5OD0wHwYDVR0j BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv MzEzMzM4MmUzMTM4MzUyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzIzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKuW0wDQYJKoZIhvcNAQELBQADggEBAG6L5y42 6Qpkg/+R9bGpLZF8NqL62lRDzzTPqOnQMCBtaNqzTQIfJly0jfLMFwK7z0WSO+0n hM1WEupxLbAqUP5Xo85qQlBdXVwN3lhWocordSz8CTaUkzapSXZSDR10AEEe/9tg 98BrnjR62ONvRcXIE1NamsgCO2xwDlGF5b6/SIFQp1fs3vg12rqXpiXBvC31avpN hsGRdDKnJ7awCxfr4GUMSCfRXoaPNfLLSHMzu7k53S+BBxbX6r28C4J4OTAQK6Gj RVJeQefRXEg9G5nHbQELKaZlIX5lMBQKhLa/HzJPT5mR5kcs43zSfaZca1U72RiF izIVy3uYEKFcgd8= -----END CERTIFICATE-----Generated at Fri Oct 16 13:31:17 2026 by rpki-client