$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa File: 3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa (raw, json) Hash identifier: y5dlLqXkotTfwFcryyESpxpLzazqronyQve21+Y94mY= Subject key identifier: A9:B5:BA:A5:1D:0D:09:20:E0:F6:DC:F7:AD:75:3D:F5:83:05:0A:26 Certificate issuer: /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C Certificate serial: 76B5DCD1047FD5422C4D145A4383492EC551CA8A Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa Signing time: Wed 29 Apr 2026 14:34:56 +0000 ROA not before: Wed 29 Apr 2026 14:29:56 +0000 ROA not after: Wed 28 Apr 2027 14:34:56 +0000 asID: 53153 IP address blocks: 138.204.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 May 2026 14:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b5:dc:d1:04:7f:d5:42:2c:4d:14:5a:43:83:49:2e:c5:51:ca:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C Validity Not Before: Apr 29 14:29:56 2026 GMT Not After : Apr 28 14:34:56 2027 GMT Subject: CN=A9B5BAA51D0D0920E0F6DCF7AD753DF583050A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:c9:4b:d9:5b:7f:16:04:aa:a5:04:0e:c0: e3:47:91:47:88:52:b5:bd:33:89:76:17:a0:81:87: c0:0b:0b:2e:ee:d7:67:7e:ca:4e:af:6f:2e:45:72: 50:e5:a8:e7:01:58:ee:cf:d2:bf:76:eb:7b:83:72: e3:42:a7:16:86:65:fe:c3:44:65:78:dd:48:3e:e0: 00:f9:bc:81:5a:f0:92:40:e5:b5:dc:52:41:f1:a5: b9:02:71:9b:8f:39:a1:32:42:44:0e:69:6b:bc:84: cd:cc:4d:d0:99:f5:21:3a:64:39:4b:d3:e2:46:55: 16:6e:dc:87:cb:86:52:36:fe:bd:0d:eb:48:63:f4: e6:87:04:81:ab:d2:64:b5:4c:df:d0:96:de:d4:9f: e4:25:ba:f7:17:39:7c:e4:de:95:e2:09:a2:90:25: f0:b8:c4:a2:f5:e2:73:ec:9d:0b:d3:45:8b:f6:42: 14:1d:2e:26:53:06:39:a0:f8:14:18:b4:27:c9:d6: fb:f6:5f:d5:1b:11:13:93:06:42:09:ef:df:d0:bd: 71:90:bb:da:eb:73:4c:73:5c:66:48:31:4e:61:54: b5:b1:19:c4:b8:f3:46:0f:24:cb:4a:22:68:14:76: 9c:5a:36:7d:7b:b5:bf:47:7c:ec:23:9e:9c:36:4d: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B5:BA:A5:1D:0D:09:20:E0:F6:DC:F7:AD:75:3D:F5:83:05:0A:26 X509v3 Authority Key Identifier: keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.223.0/24 Signature Algorithm: sha256WithRSAEncryption ab:6f:aa:ad:5f:5e:3a:73:f5:41:0d:80:2a:a9:d3:d2:46:bc: 36:72:77:a8:f3:2b:b3:fa:50:e2:43:12:72:05:4c:8c:1c:6c: 0a:d2:6d:44:4f:49:e9:4d:ac:c4:df:49:40:fe:8b:05:84:da: eb:23:9d:12:fb:67:21:ad:ef:92:e0:88:de:89:5f:61:03:aa: bd:a8:5a:00:61:43:4e:70:58:99:00:c8:35:48:fa:07:fb:43: 79:6a:71:49:be:21:5f:c1:ab:c8:67:4f:e9:21:3a:c2:f6:69: 0f:71:93:0c:46:48:70:3b:c6:3f:e0:74:37:c5:ac:7f:55:41: 1b:99:1f:bf:6f:e0:20:ff:08:05:9c:83:3d:11:73:a3:19:4c: d3:59:94:f6:6a:c1:34:e9:d8:bf:54:cf:dd:32:6f:f7:bb:84: aa:2c:44:75:27:49:ce:0a:71:19:b7:48:b2:e2:a0:53:18:19: fc:b5:b3:d1:74:bf:76:86:d2:b1:c3:54:24:1f:66:30:28:3a: be:c6:99:aa:30:25:af:85:a7:c4:62:6e:c0:22:f5:22:46:30: dd:97:08:04:32:b5:32:c7:8a:35:87:7b:1b:c0:cd:24:e5:8e: a7:e5:5f:39:9d:28:cf:91:68:47:47:14:00:aa:29:65:4b:09: f3:8f:c0:b0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUdrXc0QR/1UIsTRRaQ4NJLsVRyoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFGOTY5OTg5MjJFQTIxRkExMDEzMzcwRUFCODQ4MEU1 RURCOUY1QzAeFw0yNjA0MjkxNDI5NTZaFw0yNzA0MjgxNDM0NTZaMDMxMTAvBgNV BAMTKEE5QjVCQUE1MUQwRDA5MjBFMEY2RENGN0FENzUzREY1ODMwNTBBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdclL2Vt/FgSqpQQOwONHkUeI UrW9M4l2F6CBh8ALCy7u12d+yk6vby5FclDlqOcBWO7P0r9263uDcuNCpxaGZf7D RGV43Ug+4AD5vIFa8JJA5bXcUkHxpbkCcZuPOaEyQkQOaWu8hM3MTdCZ9SE6ZDlL 0+JGVRZu3IfLhlI2/r0N60hj9OaHBIGr0mS1TN/Qlt7Un+QluvcXOXzk3pXiCaKQ JfC4xKL14nPsnQvTRYv2QhQdLiZTBjmg+BQYtCfJ1vv2X9UbEROTBkIJ79/QvXGQ u9rrc0xzXGZIMU5hVLWxGcS480YPJMtKImgUdpxaNn17tb9HfOwjnpw2TWZnAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUqbW6pR0NCSDg9tz3rXU99YMFCiYwHwYDVR0j BBgwFoAUgflpmJIuoh+hATNw6rhIDl7bn1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC SmgvMC84MUY5Njk5ODkyMkVBMjFGQTEwMTMzNzBFQUI4NDgwRTVFREI5RjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxRjk2OTk4OTIyRUEyMUZB MTAxMzM3MEVBQjg0ODBFNUVEQjlGNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv MzEzMzM4MmUzMjMwMzQyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1 MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACKzN8wDQYJKoZIhvcNAQELBQADggEBAKtvqq1f Xjpz9UENgCqp09JGvDZyd6jzK7P6UOJDEnIFTIwcbArSbURPSelNrMTfSUD+iwWE 2usjnRL7ZyGt75LgiN6JX2EDqr2oWgBhQ05wWJkAyDVI+gf7Q3lqcUm+IV/Bq8hn T+khOsL2aQ9xkwxGSHA7xj/gdDfFrH9VQRuZH79v4CD/CAWcgz0Rc6MZTNNZlPZq wTTp2L9Uz90yb/e7hKosRHUnSc4KcRm3SLLioFMYGfy1s9F0v3aG0rHDVCQfZjAo Or7GmaowJa+Fp8RibsAi9SJGMN2XCAQytTLHijWHexvAzSTljqflXzmdKM+RaEdH FACqKWVLCfOPwLA= -----END CERTIFICATE-----Generated at Thu May 7 00:51:56 2026 by rpki-client