$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa File: 3230302e3138392e382e302f32312d3234203d3e203532363839.roa (raw, json) Hash identifier: TGa9bzbL5azUHfrojfM+b3lrJZ7G37Fe7+hT6qC40TQ= Subject key identifier: D9:70:8B:60:10:F7:B6:C5:B6:5F:81:73:4C:CB:70:B0:0C:29:80:BE Certificate issuer: /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Certificate serial: 69C32411387BC6E35C3AE7C0BFC63ED24050E391 Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa Signing time: Fri 30 Jan 2026 15:48:16 +0000 ROA not before: Fri 30 Jan 2026 15:43:16 +0000 ROA not after: Fri 29 Jan 2027 15:48:16 +0000 asID: 52689 IP address blocks: 200.189.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 20:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c3:24:11:38:7b:c6:e3:5c:3a:e7:c0:bf:c6:3e:d2:40:50:e3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Validity Not Before: Jan 30 15:43:16 2026 GMT Not After : Jan 29 15:48:16 2027 GMT Subject: CN=D9708B6010F7B6C5B65F81734CCB70B00C2980BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:8a:2c:a7:e0:ff:77:70:7b:5c:fc:40:3f: 80:4d:d6:95:04:ed:6c:e8:ea:52:56:ec:5b:2a:ab: 03:15:25:d4:4a:12:44:5f:19:d1:ce:27:60:59:ec: b7:cd:2a:fd:98:47:4e:bf:11:38:31:d2:aa:89:21: 3f:f2:63:96:29:cd:a3:a6:4b:72:0e:4d:c7:fb:30: 66:be:e9:c2:4a:84:83:5b:df:9e:a5:27:94:59:7c: c4:f3:a8:6b:36:dd:30:d9:dc:f7:e1:a0:0f:0d:b7: 14:94:e6:58:b6:5c:1f:65:51:17:f9:d3:89:79:73: ec:78:ec:18:56:69:ec:d0:2e:e9:0a:08:fb:99:a5: c3:54:9e:eb:66:b0:d6:66:c4:ef:5c:19:ab:08:6f: ad:5e:89:a1:fe:5c:65:fb:68:5d:8c:6e:ed:ad:e5: ee:3d:1c:13:1f:6f:e0:0b:24:6a:24:dc:bf:46:1e: 59:fa:f0:d3:55:4a:7e:86:b3:be:e4:7a:6a:45:c1: 3b:88:5c:a0:c4:32:96:af:a5:88:ea:22:fc:52:54: 33:b9:eb:af:96:f4:e5:35:5c:83:51:61:a2:92:be: 42:ea:80:65:76:1b:07:36:b6:cf:75:08:00:8a:03: 41:bf:e3:bc:ae:b5:60:0e:d2:b5:00:17:92:33:22: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:8B:60:10:F7:B6:C5:B6:5F:81:73:4C:CB:70:B0:0C:29:80:BE X509v3 Authority Key Identifier: keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.189.8.0/21 Signature Algorithm: sha256WithRSAEncryption 42:83:29:58:56:0e:e6:e4:1b:83:f9:ca:78:da:9d:11:00:78: fb:9f:92:26:cc:b6:43:2a:c6:c4:ca:fd:28:7c:20:64:09:47: 8a:5a:b4:62:c8:36:f1:1f:05:61:5b:60:99:f4:83:9b:b3:83: 13:9b:fa:9c:7f:79:28:da:73:c6:b8:7b:b4:59:c9:bc:69:88: 49:46:21:50:f7:37:30:07:dc:57:bd:47:39:05:d8:79:07:14: 86:f0:0e:17:8c:18:18:ac:b6:ce:24:54:af:a9:f0:9b:cf:a0: dc:a1:4e:ba:9f:20:b0:85:4f:8a:c2:fb:d3:95:71:30:4d:ac: 53:a1:e8:75:cb:01:29:12:51:f5:37:24:a9:85:60:9b:be:94: 99:da:71:02:4b:5d:92:b5:41:ce:96:50:c9:fb:1e:da:25:fb: 3d:71:9c:34:3b:89:64:e4:1c:02:71:4b:ae:33:b3:e4:e3:97: c6:7d:a6:c1:91:88:fd:58:7a:81:5a:13:d4:b7:df:b2:fb:a3: 4c:63:52:f0:cb:c1:6f:f8:24:74:26:79:22:f6:97:11:09:35: 61:66:60:8a:c2:5a:b3:14:fe:66:ed:a8:52:65:c5:e7:7c:50: 51:0f:2c:73:1b:6f:e2:3e:c2:07:4d:03:10:cd:3f:4e:37:76: 12:d3:75:bc -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUacMkETh7xuNcOufAv8Y+0kBQ45EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVF QUY5NkRERTAeFw0yNjAxMzAxNTQzMTZaFw0yNzAxMjkxNTQ4MTZaMDMxMTAvBgNV BAMTKEQ5NzA4QjYwMTBGN0I2QzVCNjVGODE3MzRDQ0I3MEIwMEMyOTgwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gIosp+D/d3B7XPxAP4BN1pUE 7Wzo6lJW7FsqqwMVJdRKEkRfGdHOJ2BZ7LfNKv2YR06/ETgx0qqJIT/yY5YpzaOm S3IOTcf7MGa+6cJKhINb356lJ5RZfMTzqGs23TDZ3PfhoA8NtxSU5li2XB9lURf5 04l5c+x47BhWaezQLukKCPuZpcNUnutmsNZmxO9cGasIb61eiaH+XGX7aF2Mbu2t 5e49HBMfb+ALJGok3L9GHln68NNVSn6Gs77kempFwTuIXKDEMpavpYjqIvxSVDO5 66+W9OU1XINRYaKSvkLqgGV2Gwc2ts91CACKA0G/47yutWAO0rUAF5IzIg0PAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU2XCLYBD3tsW2X4FzTMtwsAwpgL4wHwYDVR0j BBgwFoAUjllvMfbP5XB4sTA+aP697ur5bd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQz dGkvMC84RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTk2RjMxRjZDRkU1NzA3 OEIxMzAzRTY4RkVCREVFRUFGOTZEREUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzk0OGlEMmg4WHZ3a2lCTkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAv MzIzMDMwMmUzMTM4MzkyZTM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM2 MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEA8i9CDANBgkqhkiG9w0BAQsFAAOCAQEAQoMpWFYO5uQb g/nKeNqdEQB4+5+SJsy2QyrGxMr9KHwgZAlHilq0Ysg28R8FYVtgmfSDm7ODE5v6 nH95KNpzxrh7tFnJvGmISUYhUPc3MAfcV71HOQXYeQcUhvAOF4wYGKy2ziRUr6nw m8+g3KFOup8gsIVPisL705VxME2sU6HodcsBKRJR9TckqYVgm76UmdpxAktdkrVB zpZQyfse2iX7PXGcNDuJZOQcAnFLrjOz5OOXxn2mwZGI/Vh6gVoT1LffsvujTGNS 8MvBb/gkdCZ5IvaXEQk1YWZgisJasxT+Zu2oUmXF53xQUQ8scxtv4j7CB00DEM0/ Tjd2EtN1vA== -----END CERTIFICATE-----Generated at Mon Feb 23 02:59:01 2026 by rpki-client