$ rpki-client -vvvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa File: 3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (raw, json) Hash identifier: T6YMJEAjrU2aEETmLxHct6YHRTlT33uCliNCTcrC5i0= Subject key identifier: A5:47:28:A2:33:7E:CF:04:40:A2:9D:92:ED:3F:AB:15:8E:86:21:71 Certificate issuer: /CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9 Certificate serial: 424BF3A7B7644DCE35D597909371ABE11C470817 Authority key identifier: 60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa Signing time: Tue 20 Oct 2026 12:01:50 +0000 ROA not before: Tue 20 Oct 2026 11:56:50 +0000 ROA not after: Tue 19 Oct 2027 12:01:50 +0000 asID: 28610 IP address blocks: 186.209.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 21:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:f3:a7:b7:64:4d:ce:35:d5:97:90:93:71:ab:e1:1c:47:08:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EEB14366167B3674317BA9E6750B9EE81BFBE9 Validity Not Before: Oct 20 11:56:50 2026 GMT Not After : Oct 19 12:01:50 2027 GMT Subject: CN=A54728A2337ECF0440A29D92ED3FAB158E862171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:5f:e1:ae:59:d4:cd:59:c1:89:fe:c6:ab: 76:ca:4b:a4:6c:b4:e1:00:e2:33:8d:a7:7c:20:21: a8:d0:be:d6:11:b8:bd:55:d9:d1:ab:0b:89:b4:93: 95:91:85:14:d9:d3:07:b3:33:cb:c6:cc:ec:11:e3: 03:bd:d4:4b:5a:d6:95:04:fb:38:97:1d:be:e9:bc: 85:df:29:45:ab:8d:e1:04:31:e5:d1:96:6c:27:89: bd:ba:84:3d:01:9a:f2:9c:11:0d:36:5f:0b:44:9a: 66:d7:5b:af:a6:d6:96:a1:02:bd:67:91:f4:8e:66: d9:26:92:f2:a9:a2:3c:39:3f:de:48:41:dd:5c:f0: 37:64:3e:a6:5c:67:c9:11:7d:0a:d0:1a:31:da:2f: a1:72:63:6b:4d:7c:32:4b:53:67:82:c7:1f:53:58: e2:22:e4:37:9d:08:12:f9:e5:77:e7:14:6e:f5:bb: 5b:4c:56:a2:d2:9c:c9:9e:5a:8e:86:23:c2:34:1a: 9f:dd:20:8a:1d:77:7f:44:0f:a0:ee:90:91:db:d0: 25:78:e0:46:77:42:0b:36:d9:e5:ee:2c:b8:cb:4d: eb:fe:b8:ca:08:1a:70:0d:6e:d2:05:40:fa:15:fe: f6:d5:67:9b:fe:69:1e:89:58:18:b5:c2:67:3d:fb: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:28:A2:33:7E:CF:04:40:A2:9D:92:ED:3F:AB:15:8E:86:21:71 X509v3 Authority Key Identifier: keyid:60:EE:B1:43:66:16:7B:36:74:31:7B:A9:E6:75:0B:9E:E8:1B:FB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/60EEB14366167B3674317BA9E6750B9EE81BFBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60EEB14366167B3674317BA9E6750B9EE81BFBE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption a0:49:58:40:a3:47:93:67:f0:12:fb:99:8a:1a:c5:ad:7e:79: f8:6f:a0:64:60:04:31:4b:6a:32:06:98:36:9c:1b:44:56:ff: 22:71:63:2e:a5:65:5e:e4:77:ef:74:cb:b1:67:02:39:d1:f4: b4:70:2e:41:ec:5e:cf:d8:93:d9:19:f8:b5:fb:a7:cb:be:04: f8:cf:ff:b3:65:b5:90:87:d1:d4:78:4d:01:c1:c0:e3:ff:67: 57:04:7c:ad:e1:92:d6:96:71:67:15:8e:80:0c:1c:93:92:8d: 4f:b3:a4:22:fa:d8:48:6a:88:43:b2:65:8c:38:bd:53:9c:70: b7:69:e3:69:58:40:df:93:f5:cd:fc:22:7e:e9:54:74:a3:c2: e1:df:e3:7c:c7:95:c1:21:45:23:64:b9:62:00:fd:59:1a:76: 36:bf:2b:eb:53:c2:9f:4b:66:dd:ce:ed:55:c1:02:a8:53:15: 31:01:b3:b1:82:00:df:0d:e8:01:9d:1c:bb:78:8f:9b:85:5e: ed:f9:7e:f1:9d:69:f2:68:8c:2a:fb:cd:45:4f:81:41:36:33: b1:c2:84:5b:ca:de:99:33:f2:d1:83:ac:c4:69:48:c6:c2:f4: 89:26:db:77:59:a0:c1:a0:27:85:9d:1f:42:e5:38:bf:67:9c: 4c:b1:f9:b2 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUQkvzp7dkTc411ZeQk3Gr4RxHCBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUIxNDM2NjE2N0IzNjc0MzE3QkE5RTY3NTBCOUVF ODFCRkJFOTAeFw0yNjEwMjAxMTU2NTBaFw0yNzEwMTkxMjAxNTBaMDMxMTAvBgNV BAMTKEE1NDcyOEEyMzM3RUNGMDQ0MEEyOUQ5MkVEM0ZBQjE1OEU4NjIxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjF/hrlnUzVnBif7Gq3bKS6Rs tOEA4jONp3wgIajQvtYRuL1V2dGrC4m0k5WRhRTZ0wezM8vGzOwR4wO91Eta1pUE +ziXHb7pvIXfKUWrjeEEMeXRlmwnib26hD0BmvKcEQ02XwtEmmbXW6+m1pahAr1n kfSOZtkmkvKpojw5P95IQd1c8DdkPqZcZ8kRfQrQGjHaL6FyY2tNfDJLU2eCxx9T WOIi5DedCBL55XfnFG71u1tMVqLSnMmeWo6GI8I0Gp/dIIodd39ED6DukJHb0CV4 4EZ3Qgs22eXuLLjLTev+uMoIGnANbtIFQPoV/vbVZ5v+aR6JWBi1wmc9+3dNAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUpUcoojN+zwRAop2S7T+rFY6GIXEwHwYDVR0j BBgwFoAUYO6xQ2YWezZ0MXup5nULnugb++kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda a0gvMC82MEVFQjE0MzY2MTY3QjM2NzQzMTdCQTlFNjc1MEI5RUU4MUJGQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRUVCMTQzNjYxNjdCMzY3 NDMxN0JBOUU2NzUwQjlFRTgxQkZCRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv MzEzODM2MmUzMjMwMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4 MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQCutFYMA0GCSqGSIb3DQEBCwUAA4IBAQCgSVhAo0eT Z/AS+5mKGsWtfnn4b6BkYAQxS2oyBpg2nBtEVv8icWMupWVe5HfvdMuxZwI50fS0 cC5B7F7P2JPZGfi1+6fLvgT4z/+zZbWQh9HUeE0BwcDj/2dXBHyt4ZLWlnFnFY6A DByTko1Ps6Qi+thIaohDsmWMOL1TnHC3aeNpWEDfk/XN/CJ+6VR0o8Lh3+N8x5XB IUUjZLliAP1ZGnY2vyvrU8KfS2bdzu1VwQKoUxUxAbOxggDfDegBnRy7eI+bhV7t +X7xnWnyaIwq+81FT4FBNjOxwoRbyt6ZM/LRg6zEaUjGwvSJJtt3WaDBoCeFnR9C 5Ti/Z5xMsfmy -----END CERTIFICATE-----Generated at Wed Oct 28 11:17:43 2026 by rpki-client