$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32342d3234203d3e203532373231.roa File: 3133382e3138352e3131302e302f32342d3234203d3e203532373231.roa (raw, json) Hash identifier: YFjWqEsyZYAIutCe5ejdNA3YKQPugeVm8EBFpCoVQ/4= Subject key identifier: D7:AB:B9:93:64:75:D5:64:F8:85:1C:5E:8D:6D:82:17:68:BF:04:95 Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Certificate serial: 63E79CBD7E527A6AB1DB828EB1C9AE660E3BC7C5 Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32342d3234203d3e203532373231.roa Signing time: Tue 22 Sep 2026 17:11:56 +0000 ROA not before: Tue 22 Sep 2026 17:06:56 +0000 ROA not after: Tue 21 Sep 2027 17:11:56 +0000 asID: 52721 IP address blocks: 138.185.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 Oct 2026 18:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e7:9c:bd:7e:52:7a:6a:b1:db:82:8e:b1:c9:ae:66:0e:3b:c7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998 Validity Not Before: Sep 22 17:06:56 2026 GMT Not After : Sep 21 17:11:56 2027 GMT Subject: CN=D7ABB9936475D564F8851C5E8D6D821768BF0495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:78:23:0b:8e:22:f1:64:7d:4c:b6:d0:eb:19: 0a:87:ad:63:cb:e3:cf:ed:fe:4b:7f:25:36:9f:d0: e6:3c:c9:ea:09:40:5d:e1:16:cc:ef:10:aa:73:d9: 60:76:41:18:8f:d3:11:73:49:c8:02:f0:52:81:67: 44:88:b7:73:90:52:e3:c5:9e:b7:0b:88:dc:ed:75: 87:92:c0:74:a3:fb:9e:db:23:9d:14:c7:ff:ba:5e: 27:6e:1b:78:9c:58:6b:3c:c1:c6:cb:cc:0c:fd:08: 21:4f:fc:a4:98:03:7d:03:f9:64:16:4a:7c:8d:62: 61:62:32:b7:0f:90:85:d3:db:3e:8f:fa:71:78:27: cb:42:21:0e:c6:c8:64:a4:90:db:85:4e:f8:64:15: fe:73:6c:9e:9c:2d:c3:71:15:63:c3:5c:6b:36:bd: b6:eb:c5:81:60:4b:ad:8a:96:fb:32:16:8a:76:12: 99:71:aa:60:b3:35:b2:78:3a:8d:4e:6a:af:cf:8c: 2b:64:2e:ff:d1:7d:67:fd:71:74:31:eb:35:2f:b7: 95:65:d9:01:49:87:68:b2:b2:ec:c6:b2:b2:e2:73: a9:a2:e2:38:5b:9d:58:e8:b7:b2:5c:1e:8a:6b:de: 9d:58:a2:f9:0e:95:72:e8:82:b0:20:f0:e5:57:be: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:B9:93:64:75:D5:64:F8:85:1C:5E:8D:6D:82:17:68:BF:04:95 X509v3 Authority Key Identifier: keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131302e302f32342d3234203d3e203532373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.110.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:d5:a5:cc:73:51:7e:d0:74:7f:c5:27:d1:af:06:c0:e9:7a: ba:26:d3:a0:46:fd:03:64:9e:f8:95:91:cb:cd:e8:b7:1e:5f: 46:1b:a9:e1:76:30:3b:c6:81:a0:96:aa:d2:f2:3f:7c:7b:8c: b6:9a:1a:e8:e3:63:ed:1b:6f:8a:07:fb:52:63:fd:89:3d:01: 6d:82:07:76:62:43:01:65:79:4e:41:37:07:d7:45:8f:2a:6d: fa:bf:cf:ce:5d:1f:aa:33:15:0e:6e:c9:9f:58:85:f2:2b:cc: 71:8c:58:2c:3d:b8:ed:02:d7:1d:9c:56:73:8b:e4:3c:b8:66: 6f:8e:31:6a:cd:6b:cc:27:d4:ab:8f:48:c3:8b:64:b3:8b:d3: b7:13:80:6e:f6:90:43:8f:c6:4f:29:62:6b:82:b0:46:c2:f7: 16:cd:80:9c:ca:56:a2:08:23:1b:2c:2c:42:ac:d7:bc:f4:51: 17:3d:7f:48:80:f1:df:50:fa:ff:1f:4d:b3:07:25:fb:43:19: 34:79:1f:30:15:2a:c8:9a:a6:c3:4b:10:ef:00:87:ce:bc:5a: dc:ab:52:20:87:42:57:a4:eb:46:7e:f2:ff:ed:c8:39:73:b2: ab:26:4e:c4:61:0d:ed:6d:01:3e:95:e2:65:e5:84:5e:de:13: 1a:12:83:d5 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUY+ecvX5Semqx24KOscmuZg47x8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2Rjk5Rjk2ODI3MDZDODBEODU5Q0I3RkUxRTQwQjA3 RUJCMDk5ODAeFw0yNjA5MjIxNzA2NTZaFw0yNzA5MjExNzExNTZaMDMxMTAvBgNV BAMTKEQ3QUJCOTkzNjQ3NUQ1NjRGODg1MUM1RThENkQ4MjE3NjhCRjA0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDeCMLjiLxZH1MttDrGQqHrWPL 48/t/kt/JTaf0OY8yeoJQF3hFszvEKpz2WB2QRiP0xFzScgC8FKBZ0SIt3OQUuPF nrcLiNztdYeSwHSj+57bI50Ux/+6XiduG3icWGs8wcbLzAz9CCFP/KSYA30D+WQW SnyNYmFiMrcPkIXT2z6P+nF4J8tCIQ7GyGSkkNuFTvhkFf5zbJ6cLcNxFWPDXGs2 vbbrxYFgS62KlvsyFop2EplxqmCzNbJ4Oo1Oaq/PjCtkLv/RfWf9cXQx6zUvt5Vl 2QFJh2iysuzGsrLic6mi4jhbnVjot7JcHopr3p1YovkOlXLogrAg8OVXvvnJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU16u5k2R11WT4hRxejW2CF2i/BJUwHwYDVR0j BBgwFoAUzW+Z+WgnBsgNhZy3/h5AsH67CZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ cWUvMC9DRDZGOTlGOTY4MjcwNkM4MEQ4NTlDQjdGRTFFNDBCMDdFQkIwOTk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkY5OUY5NjgyNzA2Qzgw RDg1OUNCN0ZFMUU0MEIwN0VCQjA5OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv MzEzMzM4MmUzMTM4MzUyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzIzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKuW4wDQYJKoZIhvcNAQELBQADggEBAF3Vpcxz UX7QdH/FJ9GvBsDperom06BG/QNknviVkcvN6LceX0YbqeF2MDvGgaCWqtLyP3x7 jLaaGujjY+0bb4oH+1Jj/Yk9AW2CB3ZiQwFleU5BNwfXRY8qbfq/z85dH6ozFQ5u yZ9YhfIrzHGMWCw9uO0C1x2cVnOL5Dy4Zm+OMWrNa8wn1KuPSMOLZLOL07cTgG72 kEOPxk8pYmuCsEbC9xbNgJzKVqIIIxssLEKs17z0URc9f0iA8d9Q+v8fTbMHJftD GTR5HzAVKsiapsNLEO8Ah868WtyrUiCHQlek60Z+8v/tyDlzsqsmTsRhDe1tAT6V 4mXlhF7eExoSg9U= -----END CERTIFICATE-----Generated at Fri Oct 16 09:09:50 2026 by rpki-client