$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32312d3234203d3e20323633333131.roa File: 3139312e372e34382e302f32312d3234203d3e20323633333131.roa (raw, json) Hash identifier: Q7oeH6rh+66PRGXdVfGM/wnbjAPCUYon88+hqIHTsP4= Subject key identifier: DE:46:A6:8D:C5:8D:30:7F:F9:2D:31:45:7F:13:D7:0F:CA:C7:4F:5E Certificate issuer: /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B Certificate serial: 1AC8869A132A231094BF467D7585393F30525B5A Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32312d3234203d3e20323633333131.roa Signing time: Tue 23 Jun 2026 02:14:33 +0000 ROA not before: Tue 23 Jun 2026 02:09:33 +0000 ROA not after: Tue 22 Jun 2027 02:14:33 +0000 asID: 263311 IP address blocks: 191.7.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Jun 2026 23:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c8:86:9a:13:2a:23:10:94:bf:46:7d:75:85:39:3f:30:52:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B Validity Not Before: Jun 23 02:09:33 2026 GMT Not After : Jun 22 02:14:33 2027 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:05:af:c4:a3:88:28:5f:74:38:e0:c8:75: 20:f9:68:4d:ab:7f:a5:e9:1a:fc:84:cb:78:6e:05: 3f:8f:f5:1d:ce:e7:d7:48:43:9a:b4:18:c0:f8:3a: 04:24:8a:08:3c:0d:4f:86:e4:14:7f:4f:e7:27:e3: 40:e3:5a:52:19:ee:59:ab:d2:5c:46:c5:e4:9c:a4: 5a:d3:42:a8:16:72:79:28:70:3d:6c:4a:f3:e6:57: 8b:96:52:61:a4:29:19:c4:fc:28:8e:dd:e9:a2:69: 92:43:cb:28:0d:4a:e3:ea:17:88:42:35:f8:5f:33: a0:93:85:58:a9:a4:0b:a6:c5:30:e4:b4:f3:4f:79: 03:a5:f2:bd:40:84:38:ea:e6:ec:a2:4f:1e:ec:91: 8f:da:fb:34:70:8c:8e:c1:b0:a1:e9:42:c2:69:ed: cd:91:b6:58:8e:fb:ce:b2:b8:25:43:99:2b:cf:5a: 4a:30:ae:ed:4a:53:36:7b:f8:e8:1f:71:85:0a:a7: 3d:b4:8e:20:0a:6b:6b:20:db:33:56:6f:9f:79:e0: 6d:d0:a5:0e:51:c8:5c:fd:44:0b:79:15:26:68:67: ae:b5:57:fe:15:32:f9:83:4f:e3:6a:ba:09:50:bc: d6:bd:e2:bb:ca:99:aa:e5:96:61:e9:4a:2f:b0:2d: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:46:A6:8D:C5:8D:30:7F:F9:2D:31:45:7F:13:D7:0F:CA:C7:4F:5E X509v3 Authority Key Identifier: keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32312d3234203d3e20323633333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.7.48.0/21 Signature Algorithm: sha256WithRSAEncryption b2:a0:c3:54:46:fb:ee:58:56:a2:7b:c3:d5:a9:43:22:12:96: de:3a:fd:eb:4f:ee:e9:27:71:fe:6d:7a:f5:12:1a:05:70:80: 97:72:ae:e0:c9:d9:e8:31:03:30:13:92:36:93:5e:50:f3:26: a4:6f:46:a1:64:2e:3c:22:d3:6f:99:94:f0:f0:37:04:fa:73: 44:5c:7c:87:1c:fe:90:8f:d3:29:94:51:cc:03:fc:34:cd:13: 4c:cb:5c:03:dd:3d:1c:af:d1:84:65:4b:c2:d2:27:da:2a:3f: 8f:cf:75:37:e0:3f:36:3b:76:74:61:b0:68:30:e7:7d:9f:a9: 3d:fd:52:88:43:fd:56:c9:f0:98:ce:73:8b:06:c0:fe:d1:82: 73:36:00:c0:45:d0:a7:c3:a1:4e:19:5e:79:ca:2a:ae:8a:e9: b3:45:2a:3b:08:cd:c1:77:c3:5a:c3:5d:d2:ab:e6:fd:ee:f1: d2:e7:8c:85:09:9c:74:4b:9c:5d:4b:a9:e0:9d:af:92:21:71: 56:03:ca:16:a5:a2:2f:ad:a8:75:d6:46:e6:b8:f1:82:57:d2: b2:7a:9a:dc:f6:1b:b6:ad:47:2d:cc:50:61:a7:a4:83:b2:d5: 82:f3:f6:88:5d:44:a8:32:c1:e1:fb:9d:ef:73:64:37:79:90: 14:22:53:7e -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUGsiGmhMqIxCUv0Z9dYU5PzBSW1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQUJGRkExQjI4QUJBMUQwNTFFQ0NCQkU1N0RFOTE1 NzZEM0YzQjAeFw0yNjA2MjMwMjA5MzNaFw0yNzA2MjIwMjE0MzNaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBDRTA1QUZDNEEzODgyODVG NzQzOEUwQzg3NTIwRjk2ODREQUI3RkE1RTkxQUZDODRDQjc4NkUwNTNGOEZGNTFE Q0VFN0Q3NDg0MzlBQjQxOEMwRjgzQTA0MjQ4QTA4M0MwRDRGODZFNDE0N0Y0RkU3 MjdFMzQwRTM1QTUyMTlFRTU5QUJEMjVDNDZDNUU0OUNBNDVBRDM0MkE4MTY3Mjc5 Mjg3MDNENkM0QUYzRTY1NzhCOTY1MjYxQTQyOTE5QzRGQzI4OEVEREU5QTI2OTky NDNDQjI4MEQ0QUUzRUExNzg4NDIzNUY4NUYzM0EwOTM4NTU4QTlBNDBCQTZDNTMw RTRCNEYzNEY3OTAzQTVGMkJENDA4NDM4RUFFNkVDQTI0RjFFRUM5MThGREFGQjM0 NzA4QzhFQzFCMEExRTk0MkMyNjlFRENEOTFCNjU4OEVGQkNFQjJCODI1NDM5OTJC Q0Y1QTRBMzBBRUVENEE1MzM2N0JGOEU4MUY3MTg1MEFBNzNEQjQ4RTIwMEE2QjZC MjBEQjMzNTY2RjlGNzlFMDZERDBBNTBFNTFDODVDRkQ0NDBCNzkxNTI2Njg2N0FF QjU1N0ZFMTUzMkY5ODM0RkUzNkFCQTA5NTBCQ0Q2QkRFMkJCQ0E5OUFBRTU5NjYx RTk0QTJGQjAyRDA1NTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA4M4Fr8SjiChfdDjgyHUg+WhNq3+l6Rr8hMt4bgU/j/UdzufXSEOa tBjA+DoEJIoIPA1PhuQUf0/nJ+NA41pSGe5Zq9JcRsXknKRa00KoFnJ5KHA9bErz 5leLllJhpCkZxPwojt3pommSQ8soDUrj6heIQjX4XzOgk4VYqaQLpsUw5LTzT3kD pfK9QIQ46ubsok8e7JGP2vs0cIyOwbCh6ULCae3NkbZYjvvOsrglQ5krz1pKMK7t SlM2e/joH3GFCqc9tI4gCmtrINszVm+feeBt0KUOUchc/UQLeRUmaGeutVf+FTL5 g0/jaroJULzWveK7ypmq5ZZh6UovsC0FVQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE FN5Gpo3FjTB/+S0xRX8T1w/Kx09eMB8GA1UdIwQYMBaAFJ/6v/obKKuh0FHsy75X 3pFXbT87MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZqdTFiMno2a0VaVkxr U3FTZUJMeG5TRFQ0RTMxempOTnZjSFMxMmdtb0RlLzEvOUZGQUJGRkExQjI4QUJB MUQwNTFFQ0NCQkU1N0RFOTE1NzZEM0YzQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS85RkZBQkZGQTFCMjhBQkExRDA1MUVDQ0JCRTU3REU5MTU3NkQz RjNCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6 Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82anUxYjJ6NmtFWlZMa1NxU2VC THhuU0RUNEUzMXpqTk52Y0hTMTJnbW9EZS8xLzMxMzkzMTJlMzcyZTM0MzgyZTMw MmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzMzMzMxMzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO/BzAw DQYJKoZIhvcNAQELBQADggEBALKgw1RG++5YVqJ7w9WpQyISlt46/etP7ukncf5t evUSGgVwgJdyruDJ2egxAzATkjaTXlDzJqRvRqFkLjwi02+ZlPDwNwT6c0RcfIcc /pCP0ymUUcwD/DTNE0zLXAPdPRyv0YRlS8LSJ9oqP4/PdTfgPzY7dnRhsGgw532f qT39UohD/VbJ8JjOc4sGwP7RgnM2AMBF0KfDoU4ZXnnKKq6K6bNFKjsIzcF3w1rD XdKr5v3u8dLnjIUJnHRLnF1LqeCdr5IhcVYDyhaloi+tqHXWRua48YJX0rJ6mtz2 G7atRy3MUGGnpIOy1YLz9ohdRKgyweH7ne9zZDd5kBQiU34= -----END CERTIFICATE-----Generated at Sat Jun 27 13:09:45 2026 by rpki-client