$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa File: 3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa (raw, json) Hash identifier: 0Y7WB6FokbgSBTcuvNd+vGHwd9k8scpRhYNM8jQzqMo= Subject key identifier: 19:85:F6:81:1D:E5:D9:DC:7E:CB:E1:B9:91:D1:38:46:AD:1F:F5:AB Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Certificate serial: 1A24661F7A4B9CCFF1620A4A34371CC252DB4820 Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa Signing time: Tue 22 Sep 2026 17:12:04 +0000 ROA not before: Tue 22 Sep 2026 17:07:04 +0000 ROA not after: Tue 21 Sep 2027 17:12:04 +0000 asID: 52721 IP address blocks: 138.185.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Oct 2026 18:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:24:66:1f:7a:4b:9c:cf:f1:62:0a:4a:34:37:1c:c2:52:db:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Validity Not Before: Sep 22 17:07:04 2026 GMT Not After : Sep 21 17:12:04 2027 GMT Subject: CN=1985F6811DE5D9DC7ECBE1B991D13846AD1FF5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:69:8d:6e:82:b5:9a:8b:16:50:c5:35:aa: 9f:c4:fd:cc:08:d5:66:bb:25:d2:12:ec:56:10:25: b7:cb:33:f0:00:85:25:9d:50:80:d2:88:d7:73:85: 6a:97:36:fa:76:6e:e4:c6:15:d1:65:39:29:31:2f: 6a:0f:aa:ff:2e:e4:d3:97:3d:02:e5:e2:c2:a9:d9: 56:15:29:22:20:85:57:13:0e:c8:82:81:f0:ed:ce: ae:0c:9b:eb:26:02:85:bd:1b:f2:27:9a:62:55:8b: 28:1e:33:d8:52:a1:7c:30:81:4e:12:7f:75:4c:73: c5:2d:9a:1c:80:ff:b0:22:46:66:f5:29:74:d3:61: 27:ae:d5:7c:0d:71:77:78:5d:f9:fc:56:87:9b:1a: db:fe:46:40:73:ef:0e:42:37:2d:c0:c3:fc:7b:e4: 80:3d:56:1a:e4:40:6d:a9:e3:ac:97:29:4c:a3:07: 23:7a:a7:9a:0a:97:2b:10:b9:12:bc:bd:08:b9:19: 01:c6:11:29:5a:54:a8:cb:84:f6:08:66:1a:9d:87: 73:a3:f2:a0:e6:a2:c3:e7:3b:b6:26:39:01:69:7b: d5:4b:5c:cd:c8:d7:63:94:8f:b1:0f:29:41:40:46: dc:39:cf:99:74:d7:52:c8:17:ef:8f:f9:dc:1b:64: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:85:F6:81:1D:E5:D9:DC:7E:CB:E1:B9:91:D1:38:46:AD:1F:F5:AB X509v3 Authority Key Identifier: keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32332d3233203d3e203532373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.110.0/23 Signature Algorithm: sha256WithRSAEncryption 33:9a:bb:40:bc:ea:41:49:e6:70:26:dc:0b:b1:45:1f:ef:d0: ce:d8:d4:05:ef:a6:ac:24:49:33:f6:0f:ff:22:dd:80:b9:bf: cb:ca:e7:31:6e:b1:4f:f5:c9:6d:65:82:0f:dd:cd:e4:1a:0f: 52:2f:c8:2b:a9:47:45:60:d6:0a:db:8c:94:ab:55:af:7a:c4: ff:16:94:58:17:4b:6b:dc:49:6c:05:f1:0d:5f:09:6c:7d:56: 3f:a3:e6:a7:80:a2:19:f3:cd:1b:45:e3:f3:6b:85:4b:a4:fe: 3e:d5:0a:ea:df:61:06:2c:9f:25:c1:53:95:1a:45:54:e0:d0: e2:32:6b:77:39:4d:8b:19:c3:9c:85:14:03:91:b3:0c:c2:60: bb:98:36:05:9d:7e:b5:e9:80:33:96:38:f8:98:8c:b2:0d:c2: c2:db:9f:58:f8:eb:e3:fe:ff:b4:cc:d4:60:9e:17:c1:93:20: 61:23:b4:cd:c8:5d:07:c9:b5:06:bb:01:69:e6:3f:43:b7:a7: 67:7f:68:68:39:4a:ce:e7:98:24:b0:3f:69:23:6a:11:33:97: da:41:87:72:3d:b1:07:52:b4:3c:4e:fb:4b:9e:df:ac:f6:2d: c3:ec:ed:e0:3b:92:b3:00:3c:bc:98:e5:f4:64:5f:15:15:e9: a5:e6:52:99 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUGiRmH3pLnM/xYgpKNDccwlLbSCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3 RUJCMDk5ODAeFw0yNjA5MjIxNzA3MDRaFw0yNzA5MjExNzEyMDRaMDMxMTAvBgNV BAMTKDE5ODVGNjgxMURFNUQ5REM3RUNCRTFCOTkxRDEzODQ2QUQxRkY1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0a2mNboK1mosWUMU1qp/E/cwI 1Wa7JdIS7FYQJbfLM/AAhSWdUIDSiNdzhWqXNvp2buTGFdFlOSkxL2oPqv8u5NOX PQLl4sKp2VYVKSIghVcTDsiCgfDtzq4Mm+smAoW9G/InmmJViygeM9hSoXwwgU4S f3VMc8UtmhyA/7AiRmb1KXTTYSeu1XwNcXd4Xfn8VoebGtv+RkBz7w5CNy3Aw/x7 5IA9VhrkQG2p46yXKUyjByN6p5oKlysQuRK8vQi5GQHGESlaVKjLhPYIZhqdh3Oj 8qDmosPnO7YmOQFpe9VLXM3I12OUj7EPKUFARtw5z5l011LIF++P+dwbZIBRAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGYX2gR3l2dx+y+G5kdE4Rq0f9aswHwYDVR0j BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv MzEzMzM4MmUzMTM4MzUyZTMxMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1 MzIzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGKuW4wDQYJKoZIhvcNAQELBQADggEBADOau0C8 6kFJ5nAm3AuxRR/v0M7Y1AXvpqwkSTP2D/8i3YC5v8vK5zFusU/1yW1lgg/dzeQa D1IvyCupR0Vg1grbjJSrVa96xP8WlFgXS2vcSWwF8Q1fCWx9Vj+j5qeAohnzzRtF 4/NrhUuk/j7VCurfYQYsnyXBU5UaRVTg0OIya3c5TYsZw5yFFAORswzCYLuYNgWd frXpgDOWOPiYjLINwsLbn1j46+P+/7TM1GCeF8GTIGEjtM3IXQfJtQa7AWnmP0O3 p2d/aGg5Ss7nmCSwP2kjahEzl9pBh3I9sQdStDxO+0ue36z2LcPs7eA7krMAPLyY 5fRkXxUV6aXmUpk= -----END CERTIFICATE-----Generated at Fri Oct 16 10:53:42 2026 by rpki-client