$ rpki-client -vvvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa File: 3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa (raw, json) Hash identifier: bMA1rlZb72mmnaKd/heUvCIw9yB0/jBKOUJLBlsHOxc= Subject key identifier: 89:3C:C3:D1:53:21:03:DB:C4:4A:E6:05:62:8A:D6:0E:D9:9E:A8:F2 Certificate issuer: /CN=D81C632D11CBA93C6FA08E30C713D5A272098906 Certificate serial: 5C5F572E8AB3477270BDDD645BDE54639BD4440C Authority key identifier: D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa Signing time: Sun 18 Oct 2026 19:33:46 +0000 ROA not before: Sun 18 Oct 2026 19:28:46 +0000 ROA not after: Sun 17 Oct 2027 19:33:46 +0000 asID: 262503 IP address blocks: 167.249.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 10:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:57:2e:8a:b3:47:72:70:bd:dd:64:5b:de:54:63:9b:d4:44:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D81C632D11CBA93C6FA08E30C713D5A272098906 Validity Not Before: Oct 18 19:28:46 2026 GMT Not After : Oct 17 19:33:46 2027 GMT Subject: CN=893CC3D1532103DBC44AE605628AD60ED99EA8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:03:56:12:f9:2d:42:f1:7a:49:ec:18:83: 3f:04:0b:72:28:92:d1:91:8e:4d:9f:c0:42:62:77: dd:5d:ca:45:f1:e3:5c:df:da:08:2c:d1:9d:98:f4: 13:a3:74:57:b2:a9:6d:af:54:a6:2c:b3:86:e3:31: 47:96:bd:f6:6d:95:60:b9:60:36:bd:ba:b3:c7:5d: d3:54:d4:87:74:1d:99:81:61:f4:f5:8a:84:b0:59: 9a:8f:6a:6a:81:5c:9b:b6:6e:f2:e3:ed:e7:de:26: 6d:25:2e:50:b3:a9:eb:e2:20:cf:02:c1:45:31:64: 72:ca:bb:94:3e:72:aa:78:f3:ad:dc:17:62:09:88: 96:e4:f5:bc:b0:1e:79:b6:bb:5d:dd:03:58:12:0b: 02:b7:62:4f:80:7a:75:a5:c4:7a:5c:35:ad:d5:be: fb:4b:ef:fb:15:88:09:61:ed:d4:71:04:90:0e:40: 2a:e7:08:c9:d3:dc:0b:f8:73:75:08:3d:3a:09:63: f0:24:ed:55:c1:c0:04:2a:44:64:b2:86:04:5f:c5: 32:f0:31:b0:b1:8b:ae:4f:a8:0e:88:0c:12:cd:33: 4a:37:89:b9:50:7c:2b:bb:b6:b2:c2:ac:2f:ad:1e: 80:db:15:af:a4:f1:29:52:81:50:66:0d:ba:82:55: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3C:C3:D1:53:21:03:DB:C4:4A:E6:05:62:8A:D6:0E:D9:9E:A8:F2 X509v3 Authority Key Identifier: keyid:D8:1C:63:2D:11:CB:A9:3C:6F:A0:8E:30:C7:13:D5:A2:72:09:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/D81C632D11CBA93C6FA08E30C713D5A272098906.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D81C632D11CBA93C6FA08E30C713D5A272098906.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.168.0/22 Signature Algorithm: sha256WithRSAEncryption 00:b3:f0:87:83:5a:9e:47:8b:da:e2:0c:34:29:db:6a:8e:e5: 9f:b6:11:05:64:69:e5:b0:6e:cd:0b:14:73:f2:23:d8:c0:f6: 6e:a2:6f:ac:ac:8f:70:94:a1:58:86:58:e5:9b:25:04:b7:ea: 7d:5b:3a:4e:9c:40:84:71:3c:01:48:c7:54:69:0a:c6:b9:f9: da:58:6d:a5:ac:76:a0:b6:8b:d0:c8:b1:91:f1:fd:e3:b1:9c: 26:e9:71:a9:4c:00:67:8b:9d:fe:67:fd:7b:60:ec:9a:bb:70: 1b:06:3c:8a:8e:12:11:c3:c1:4f:a4:68:e0:98:b3:f9:8b:9b: c1:48:8f:35:7c:b0:8e:1f:85:e2:e2:17:a5:41:73:16:3f:8a: b0:63:d1:87:5b:cb:71:5e:9d:aa:b6:1c:49:0b:6e:5b:6c:8f: a5:38:f6:f4:b9:9e:b1:f1:cc:61:31:3d:6f:57:b5:9c:6d:e9: 19:14:ed:12:08:87:55:0e:c7:95:2d:4f:99:bb:8d:27:4e:d1: a0:b1:51:ea:15:bd:28:6c:e6:e3:09:b3:a4:ff:ce:d6:5d:8f: 08:f4:5f:80:e3:9f:1f:ec:2a:a7:98:71:96:6d:ef:49:c9:58: ef:82:36:85:35:39:e2:dc:11:d7:19:c4:54:b2:5d:bd:d2:b3: 61:ac:9f:ea -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUXF9XLoqzR3Jwvd1kW95UY5vURAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgxQzYzMkQxMUNCQTkzQzZGQTA4RTMwQzcxM0Q1QTI3 MjA5ODkwNjAeFw0yNjEwMTgxOTI4NDZaFw0yNzEwMTcxOTMzNDZaMDMxMTAvBgNV BAMTKDg5M0NDM0QxNTMyMTAzREJDNDRBRTYwNTYyOEFENjBFRDk5RUE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2wNWEvktQvF6SewYgz8EC3Io ktGRjk2fwEJid91dykXx41zf2ggs0Z2Y9BOjdFeyqW2vVKYss4bjMUeWvfZtlWC5 YDa9urPHXdNU1Id0HZmBYfT1ioSwWZqPamqBXJu2bvLj7efeJm0lLlCzqeviIM8C wUUxZHLKu5Q+cqp4863cF2IJiJbk9bywHnm2u13dA1gSCwK3Yk+AenWlxHpcNa3V vvtL7/sViAlh7dRxBJAOQCrnCMnT3Av4c3UIPToJY/Ak7VXBwAQqRGSyhgRfxTLw MbCxi65PqA6IDBLNM0o3iblQfCu7trLCrC+tHoDbFa+k8SlSgVBmDbqCVfPZAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUiTzD0VMhA9vESuYFYorWDtmeqPIwHwYDVR0j BBgwFoAU2BxjLRHLqTxvoI4wxxPVonIJiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G a0YvMC9EODFDNjMyRDExQ0JBOTNDNkZBMDhFMzBDNzEzRDVBMjcyMDk4OTA2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MUM2MzJEMTFDQkE5M0M2 RkEwOEUzMEM3MTNENUEyNzIwOTg5MDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv MzEzNjM3MmUzMjM0MzkyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf5qDANBgkqhkiG9w0BAQsFAAOCAQEAALPw h4NankeL2uIMNCnbao7ln7YRBWRp5bBuzQsUc/Ij2MD2bqJvrKyPcJShWIZY5Zsl BLfqfVs6TpxAhHE8AUjHVGkKxrn52lhtpax2oLaL0MixkfH947GcJulxqUwAZ4ud /mf9e2DsmrtwGwY8io4SEcPBT6Ro4Jiz+YubwUiPNXywjh+F4uIXpUFzFj+KsGPR h1vLcV6dqrYcSQtuW2yPpTj29LmesfHMYTE9b1e1nG3pGRTtEgiHVQ7HlS1PmbuN J07RoLFR6hW9KGzm4wmzpP/O1l2PCPRfgOOfH+wqp5hxlm3vSclY74I2hTU54twR 1xnEVLJdvdKzYayf6g== -----END CERTIFICATE-----Generated at Mon Nov 2 16:37:33 2026 by rpki-client