$ rpki-client -vvvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa File: 3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (raw, json) Hash identifier: Qux1lOU2lfRHz8KGax8Bc/he6BKSLJl40oKqfq5ZOIA= Subject key identifier: 1E:19:EA:77:B8:DD:60:6E:2C:D7:BC:1A:EA:00:4F:9F:A4:96:2E:D9 Certificate issuer: /CN=99C2A53A53B7161516985068CD39F465FE646938 Certificate serial: 7AFBB4BAE295099BBBB3E22B626DBB1E193581A6 Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa Signing time: Mon 26 Oct 2026 17:25:24 +0000 ROA not before: Mon 26 Oct 2026 17:20:24 +0000 ROA not after: Mon 25 Oct 2027 17:25:24 +0000 asID: 28232 IP address blocks: 189.127.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 08:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fb:b4:ba:e2:95:09:9b:bb:b3:e2:2b:62:6d:bb:1e:19:35:81:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938 Validity Not Before: Oct 26 17:20:24 2026 GMT Not After : Oct 25 17:25:24 2027 GMT Subject: CN=1E19EA77B8DD606E2CD7BC1AEA004F9FA4962ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:e4:b8:3d:8f:02:ec:c4:62:7f:cc:aa:c7: 0e:83:e5:42:83:ef:0f:fd:c1:7b:2a:c4:10:90:12: 1d:64:8a:8f:e4:70:f8:6f:6b:86:1b:4d:63:ed:5a: 23:30:89:35:ea:0e:19:4f:48:53:cf:f9:93:72:61: e5:cc:87:f2:da:c1:b7:05:5e:23:3c:03:92:41:06: d8:6d:1a:ed:18:c8:3d:27:0a:3e:72:e1:1e:34:8a: fd:9e:8a:7c:85:d8:e2:62:38:14:a3:c5:90:77:ca: 49:55:a5:e3:99:7f:f8:2a:78:c9:b3:fd:f4:a5:e5: 74:25:ae:56:06:df:90:5a:b3:89:93:cd:89:b8:22: 40:bb:5a:4a:a0:a7:26:97:0c:23:31:38:5d:ba:04: 28:34:1f:a0:48:ea:b7:cf:6f:22:e2:de:b3:8b:32: 4f:b2:a8:cf:60:99:f9:e0:c3:d2:c3:8f:9c:b0:a9: d4:b2:ab:09:09:38:c7:65:e0:5b:f5:67:13:4f:29: 2b:ab:f5:d0:d3:4c:f0:88:c0:76:1f:a2:b2:0c:5b: f4:3e:0b:24:c3:70:a5:4a:6c:d8:17:0d:01:a8:e3: c7:25:82:47:74:23:a9:40:9c:0f:88:e2:6c:3e:55: 0a:16:70:cf:df:d9:c2:3f:8d:a0:1d:6b:e6:c1:2b: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:EA:77:B8:DD:60:6E:2C:D7:BC:1A:EA:00:4F:9F:A4:96:2E:D9 X509v3 Authority Key Identifier: keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.32.0/20 Signature Algorithm: sha256WithRSAEncryption 16:00:a8:c3:33:ee:e6:52:04:f1:76:17:0b:f5:e7:41:71:08: 46:a9:af:dd:e7:c4:04:7b:94:6c:24:58:47:af:34:b9:1b:c1: 36:93:01:d5:7b:78:b6:fd:e1:9b:19:90:c3:a1:e5:0d:15:71: 83:fb:0e:68:a3:d1:c0:64:83:91:13:e5:57:73:f6:b6:bf:85: 1f:bc:90:bf:f5:29:72:89:36:ff:73:13:ac:26:73:3e:7c:ec: 77:b2:60:68:f2:18:ef:f1:26:87:eb:3c:6a:e7:72:9c:e3:e6: 6e:f9:23:d2:13:99:aa:d0:03:7d:28:ee:76:14:73:17:60:3f: 62:c7:5b:61:6a:5c:a2:7c:36:3e:40:21:03:00:8d:cf:7c:1f: 62:0c:7a:f8:6e:6f:96:c9:65:e5:4c:be:56:a9:e8:95:8e:39: 84:bd:c8:99:bf:9b:b1:2f:f6:98:ae:f7:19:df:27:38:f5:e8: 58:76:0b:d0:d7:c1:25:a3:7b:07:94:65:ad:d3:a4:b6:50:05: b1:36:62:8f:3e:f6:99:7d:c1:03:1d:c0:c1:4f:ef:bd:59:35: f0:fb:1a:f3:da:bd:3c:42:41:bf:e0:4f:d1:07:1d:96:69:c8: 23:37:6b:80:e9:18:53:28:e0:18:15:bd:5a:ca:3f:f1:0c:43: 31:c1:b7:41 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUevu0uuKVCZu7s+IrYm27Hhk1gaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG RTY0NjkzODAeFw0yNjEwMjYxNzIwMjRaFw0yNzEwMjUxNzI1MjRaMDMxMTAvBgNV BAMTKDFFMTlFQTc3QjhERDYwNkUyQ0Q3QkMxQUVBMDA0RjlGQTQ5NjJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqeS4PY8C7MRif8yqxw6D5UKD 7w/9wXsqxBCQEh1kio/kcPhva4YbTWPtWiMwiTXqDhlPSFPP+ZNyYeXMh/LawbcF XiM8A5JBBthtGu0YyD0nCj5y4R40iv2einyF2OJiOBSjxZB3yklVpeOZf/gqeMmz /fSl5XQlrlYG35Bas4mTzYm4IkC7WkqgpyaXDCMxOF26BCg0H6BI6rfPbyLi3rOL Mk+yqM9gmfngw9LDj5ywqdSyqwkJOMdl4Fv1ZxNPKSur9dDTTPCIwHYforIMW/Q+ CyTDcKVKbNgXDQGo48clgkd0I6lAnA+I4mw+VQoWcM/f2cI/jaAda+bBK7GZAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUHhnqd7jdYG4s17wa6gBPn6SWLtkwHwYDVR0j BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdaZXhkc3hnRjQ5TEQ5Q200WGJjUlFndU5QNTdyUkVHMTVuSEIzTEh1Z3paLzAv MzEzODM5MmUzMTMyMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4 MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQEvX8gMA0GCSqGSIb3DQEBCwUAA4IBAQAWAKjDM+7m UgTxdhcL9edBcQhGqa/d58QEe5RsJFhHrzS5G8E2kwHVe3i2/eGbGZDDoeUNFXGD +w5oo9HAZIORE+VXc/a2v4UfvJC/9SlyiTb/cxOsJnM+fOx3smBo8hjv8SaH6zxq 53Kc4+Zu+SPSE5mq0AN9KO52FHMXYD9ix1thalyifDY+QCEDAI3PfB9iDHr4bm+W yWXlTL5WqeiVjjmEvciZv5uxL/aYrvcZ3yc49ehYdgvQ18Elo3sHlGWt06S2UAWx NmKPPvaZfcEDHcDBT++9WTXw+xrz2r08QkG/4E/RBx2WacgjN2uA6RhTKOAYFb1a yj/xDEMxwbdB -----END CERTIFICATE-----Generated at Wed Oct 28 12:49:45 2026 by rpki-client