$ rpki-client -vvvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa File: 3136302e32302e39312e302f32342d3234203d3e20323636313837.roa (raw, json) Hash identifier: 9wdPYP7ciCNpiOBQAWXdUiXtk243EGPORGWL4duqp+o= Subject key identifier: 14:36:FE:7B:94:1D:36:A7:E9:8A:E5:91:F4:D0:42:15:D4:25:7C:F3 Certificate issuer: /CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E Certificate serial: 6CEAB50CCB29BA73E5CD3CB7BD7090824CE8C826 Authority key identifier: 2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa Signing time: Mon 14 Sep 2026 20:53:39 +0000 ROA not before: Mon 14 Sep 2026 20:48:39 +0000 ROA not after: Mon 13 Sep 2027 20:53:39 +0000 asID: 266187 IP address blocks: 160.20.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 14:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ea:b5:0c:cb:29:ba:73:e5:cd:3c:b7:bd:70:90:82:4c:e8:c8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E Validity Not Before: Sep 14 20:48:39 2026 GMT Not After : Sep 13 20:53:39 2027 GMT Subject: CN=1436FE7B941D36A7E98AE591F4D04215D4257CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:eb:ce:30:a3:d7:51:cd:77:c4:63:f1:bf:45: 6a:58:28:30:11:6b:85:0f:c6:24:3e:5e:52:aa:b2: 2a:99:da:95:e6:94:55:23:61:4a:ac:fb:78:50:cf: 7d:4d:c2:b1:cf:28:84:18:a4:d5:cb:cb:c3:39:ec: 39:20:29:d5:59:3e:cc:c5:c3:0e:cf:fa:ae:b9:5f: 3d:5b:52:86:f5:ed:61:83:77:f6:e1:53:c0:9b:25: 2d:a7:08:8f:94:6b:15:17:ef:4c:79:0e:37:3c:7d: ef:a1:8c:16:9f:9c:c7:b4:e0:d7:c1:62:fc:fc:f0: f2:3c:72:39:fc:d7:60:4c:f2:e5:b7:0c:a0:f6:5d: 93:a2:af:7c:b8:9d:2d:be:4e:49:8b:b4:d8:1f:c4: 42:24:c1:5a:73:41:ae:57:b7:ab:34:52:f5:79:d2: 75:06:0b:11:09:1a:19:75:bf:ab:57:32:62:34:25: 2a:2d:1c:c4:5c:b7:3b:19:79:e6:d0:36:d8:02:83: f7:58:ef:03:3c:ca:28:1b:bc:96:3a:77:8e:d2:2c: a4:11:c0:18:87:b0:d5:c6:29:10:f8:a1:8b:bc:dd: b6:d1:72:4a:d1:72:df:5f:07:40:1f:ac:cf:ac:c3: 62:cf:22:d8:6a:3a:c2:64:00:ba:36:0b:42:5e:a9: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:36:FE:7B:94:1D:36:A7:E9:8A:E5:91:F4:D0:42:15:D4:25:7C:F3 X509v3 Authority Key Identifier: keyid:2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.91.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:aa:8b:6c:f5:07:2f:d3:0a:f9:25:02:55:14:3e:2f:00:df: d0:7f:d6:ee:9b:ef:37:78:4d:b7:22:51:f9:96:eb:68:2b:27: 2c:0a:61:b6:a5:3d:20:b9:b6:8f:de:9d:c6:e4:05:f8:76:34: 31:a6:64:5d:b1:b6:bc:32:83:e6:ae:99:b3:d1:4b:97:d3:a6: 11:a2:01:6e:c2:78:32:9b:9c:32:5c:76:e9:b3:b0:2e:77:34: 99:17:18:48:16:d2:8a:df:59:9c:08:b9:4d:6a:5e:37:dc:4f: 13:42:54:2d:69:dc:5e:19:f4:37:90:53:10:b6:b1:74:ed:80: b6:99:00:20:f4:57:d6:2b:74:a0:fb:f8:d3:b3:d7:ec:81:10: 06:8d:cf:a5:a0:15:77:7f:45:43:16:f9:99:36:a0:35:17:73: ec:4f:ad:c9:e9:7f:1f:5a:c2:48:1b:3d:76:c9:e7:1d:a0:76: 15:92:df:d8:1d:03:51:05:ab:76:dc:49:af:d8:a3:d7:a9:a6: 12:49:ca:c2:90:f5:0c:5e:6a:e2:9c:68:3c:a4:ce:d7:ff:9e: d9:90:c0:27:f1:be:fc:a2:29:9d:4b:0f:54:25:95:7d:ff:98: 36:75:4c:35:0c:49:b1:3a:90:49:af:dd:7b:43:dc:40:83:31: f4:2f:f0:76 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbOq1DMspunPlzTy3vXCQgkzoyCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxQUMwMUM0QjdCQ0VFRDUwNTRFRjIxRjhGQUNDMzBD ODBGRTk4RTAeFw0yNjA5MTQyMDQ4MzlaFw0yNzA5MTMyMDUzMzlaMDMxMTAvBgNV BAMTKDE0MzZGRTdCOTQxRDM2QTdFOThBRTU5MUY0RDA0MjE1RDQyNTdDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx684wo9dRzXfEY/G/RWpYKDAR a4UPxiQ+XlKqsiqZ2pXmlFUjYUqs+3hQz31NwrHPKIQYpNXLy8M57DkgKdVZPszF ww7P+q65Xz1bUob17WGDd/bhU8CbJS2nCI+UaxUX70x5Djc8fe+hjBafnMe04NfB Yvz88PI8cjn812BM8uW3DKD2XZOir3y4nS2+TkmLtNgfxEIkwVpzQa5Xt6s0UvV5 0nUGCxEJGhl1v6tXMmI0JSotHMRctzsZeebQNtgCg/dY7wM8yigbvJY6d47SLKQR wBiHsNXGKRD4oYu83bbRckrRct9fB0AfrM+sw2LPIthqOsJkALo2C0JeqTMhAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUFDb+e5QdNqfpiuWR9NBCFdQlfPMwHwYDVR0j BBgwFoAULRrAHEt7zu1QVO8h+PrMMMgP6Y4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05M YkwvMC8yRDFBQzAxQzRCN0JDRUVENTA1NEVGMjFGOEZBQ0MzMEM4MEZFOThFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUFDMDFDNEI3QkNFRUQ1 MDU0RUYyMUY4RkFDQzMwQzgwRkU5OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVhcGc1TkdBWHlxVkdoRTEyWjkyQWoxQU1vbjJudXMxSGt1NjlhOUdOTGJMLzAv MzEzNjMwMmUzMjMwMmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2 MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAoBRbMA0GCSqGSIb3DQEBCwUAA4IBAQAsqots9Qcv 0wr5JQJVFD4vAN/Qf9bum+83eE23IlH5lutoKycsCmG2pT0gubaP3p3G5AX4djQx pmRdsba8MoPmrpmz0UuX06YRogFuwngym5wyXHbps7AudzSZFxhIFtKK31mcCLlN al433E8TQlQtadxeGfQ3kFMQtrF07YC2mQAg9FfWK3Sg+/jTs9fsgRAGjc+loBV3 f0VDFvmZNqA1F3PsT63J6X8fWsJIGz12yecdoHYVkt/YHQNRBat23Emv2KPXqaYS ScrCkPUMXmrinGg8pM7X/57ZkMAn8b78oimdSw9UJZV9/5g2dUw1DEmxOpBJr917 Q9xAgzH0L/B2 -----END CERTIFICATE-----Generated at Mon Oct 12 00:33:20 2026 by rpki-client