$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa File: 3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa (raw, json) Hash identifier: Hvo/fvlIiv359CfrnJW44P/fMA1KUus9z6bvcTPWcPY= Subject key identifier: 11:01:66:73:C9:00:7E:49:13:B2:1D:EB:94:60:53:3A:43:4E:CA:76 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 534EAF02D4828659B530EA288EA3D76149DA327C Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa Signing time: Thu 29 Jan 2026 16:18:14 +0000 ROA not before: Thu 29 Jan 2026 16:13:14 +0000 ROA not after: Thu 28 Jan 2027 16:18:14 +0000 asID: 263508 IP address blocks: 191.243.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4e:af:02:d4:82:86:59:b5:30:ea:28:8e:a3:d7:61:49:da:32:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Jan 29 16:13:14 2026 GMT Not After : Jan 28 16:18:14 2027 GMT Subject: CN=11016673C9007E4913B21DEB9460533A434ECA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:6d:2c:f7:9d:2b:88:21:f6:00:d1:8a:92: c8:dc:70:10:27:87:08:33:0b:3d:d7:5d:ca:43:4f: c0:f5:90:e3:92:b6:d7:bf:43:70:b5:90:a0:01:6d: f3:4a:89:58:21:ac:1b:60:2c:8d:57:24:98:20:4f: d0:38:ac:b6:13:5f:89:c4:14:80:05:40:7d:93:be: 6f:bc:d5:19:d1:ea:c8:3e:b8:ff:57:09:b0:75:79: c2:f5:7d:f4:2c:6e:88:55:f0:86:8b:43:54:b3:d9: b3:39:af:66:50:da:fa:78:70:fd:0f:3f:69:57:98: 3b:87:41:3f:f2:d2:a5:d9:53:97:4f:30:81:a2:7c: ad:f1:19:38:e2:65:c3:6e:a9:cc:ba:21:00:d2:24: b0:3f:c2:fc:73:3f:d7:d3:35:65:3c:d5:78:36:8a: b3:2a:a9:51:e4:54:d1:d7:9e:06:89:9c:37:9f:fe: 2c:9f:b2:12:c6:cd:d0:2c:14:94:9e:f5:dd:ce:b3: f1:82:3c:62:27:8c:0a:d6:53:42:a7:c5:1e:10:f3: 2a:bf:53:a6:ac:07:0f:24:08:bc:df:a2:a1:7f:36: 42:e2:e6:b0:c3:56:a0:02:1a:c0:00:ff:67:72:7f: 28:49:19:db:e4:bf:1b:a8:84:30:5a:07:e3:02:ca: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:66:73:C9:00:7E:49:13:B2:1D:EB:94:60:53:3A:43:4E:CA:76 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.243.171.0/24 Signature Algorithm: sha256WithRSAEncryption 37:80:ff:c3:e0:82:6b:c5:a9:30:b8:3d:c5:9c:78:0e:5f:86: d2:7b:20:e1:4d:68:77:26:f9:49:79:c4:b0:2a:5f:35:c1:92: b7:ab:ba:9a:c6:e3:72:ba:ba:61:3e:f2:a1:88:0f:74:8d:b9: d8:77:33:23:93:83:38:47:d7:00:95:89:f0:f7:55:17:28:e1: c2:d2:da:a4:67:b7:3e:e7:50:87:03:87:ec:5a:6b:b8:1d:1f: 78:97:e8:83:ba:cf:b0:83:66:aa:fa:96:6e:f3:0b:a9:8f:8d: f7:e2:50:4f:08:b5:87:e2:43:ae:a9:c1:85:ea:25:81:60:77: 30:16:ba:55:14:2b:fa:d7:0a:74:60:23:e0:6a:91:51:5e:0c: 09:44:0b:9e:c3:6b:92:b7:7a:d4:68:67:c3:2e:a9:65:7f:c5: d5:1f:fe:58:dc:48:8f:65:36:f0:be:99:9b:2e:cd:b4:db:5e: 18:e1:67:26:7d:ea:92:2f:79:f9:8d:3f:0f:c9:50:ed:8e:5d: 88:a7:ff:c8:8f:fb:90:bf:0c:68:19:bf:07:f7:a9:73:96:3a: 8b:98:98:a6:d7:d5:dd:47:35:95:2c:2f:1f:88:d1:12:05:82: 8c:84:ea:ca:6e:2e:96:87:5e:8e:91:fc:9f:a2:b6:4a:11:cd: 10:ce:63:72 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUU06vAtSChlm1MOoojqPXYUnaMnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNjAxMjkxNjEzMTRaFw0yNzAxMjgxNjE4MTRaMDMxMTAvBgNV BAMTKDExMDE2NjczQzkwMDdFNDkxM0IyMURFQjk0NjA1MzNBNDM0RUNBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoom0s950riCH2ANGKksjccBAn hwgzCz3XXcpDT8D1kOOStte/Q3C1kKABbfNKiVghrBtgLI1XJJggT9A4rLYTX4nE FIAFQH2Tvm+81RnR6sg+uP9XCbB1ecL1ffQsbohV8IaLQ1Sz2bM5r2ZQ2vp4cP0P P2lXmDuHQT/y0qXZU5dPMIGifK3xGTjiZcNuqcy6IQDSJLA/wvxzP9fTNWU81Xg2 irMqqVHkVNHXngaJnDef/iyfshLGzdAsFJSe9d3Os/GCPGInjArWU0KnxR4Q8yq/ U6asBw8kCLzfoqF/NkLi5rDDVqACGsAA/2dyfyhJGdvkvxuohDBaB+MCyhNRAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUEQFmc8kAfkkTsh3rlGBTOkNOynYwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzEzOTMxMmUzMjM0MzMyZTMxMzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zqzANBgkqhkiG9w0BAQsFAAOCAQEAN4D/ w+CCa8WpMLg9xZx4Dl+G0nsg4U1odyb5SXnEsCpfNcGSt6u6msbjcrq6YT7yoYgP dI252HczI5ODOEfXAJWJ8PdVFyjhwtLapGe3PudQhwOH7FpruB0feJfog7rPsINm qvqWbvMLqY+N9+JQTwi1h+JDrqnBheolgWB3MBa6VRQr+tcKdGAj4GqRUV4MCUQL nsNrkrd61Ghnwy6pZX/F1R/+WNxIj2U28L6Zmy7NtNteGOFnJn3qki95+Y0/D8lQ 7Y5diKf/yI/7kL8MaBm/B/epc5Y6i5iYptfV3Uc1lSwvH4jREgWCjITqym4ulode jpH8n6K2ShHNEM5jcg== -----END CERTIFICATE-----Generated at Mon Feb 23 04:23:35 2026 by rpki-client