$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa File: 3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa (raw, json) Hash identifier: omav/3w6LRJV3VXGjA3lbXJycj5FFzCuKokIfiuuKFk= Subject key identifier: AF:DB:DA:54:DF:E6:BE:DA:8B:6E:4D:8F:0D:F4:F8:E8:6A:F5:5D:35 Certificate issuer: /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702 Certificate serial: 7D5363A77F0316D5C382293BCA5C9386F30DE5AD Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa Signing time: Wed 24 Dec 2025 18:59:20 +0000 ROA not before: Wed 24 Dec 2025 18:54:20 +0000 ROA not after: Wed 23 Dec 2026 18:59:20 +0000 asID: 262808 IP address blocks: 191.253.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Feb 2026 13:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:53:63:a7:7f:03:16:d5:c3:82:29:3b:ca:5c:93:86:f3:0d:e5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702 Validity Not Before: Dec 24 18:54:20 2025 GMT Not After : Dec 23 18:59:20 2026 GMT Subject: CN=AFDBDA54DFE6BEDA8B6E4D8F0DF4F8E86AF55D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:f0:c7:4c:03:da:ae:d3:fe:46:9b:04:3a: f3:e9:93:fc:3b:a0:f5:cc:0b:04:9b:9a:bb:63:48: 90:a0:d7:fb:a6:54:18:e8:41:df:e9:49:2d:8a:a2: 24:97:40:4d:60:e4:4a:75:43:a3:53:a2:7c:44:94: dc:07:61:88:08:d8:40:8c:39:e9:2b:63:70:2c:62: 93:32:7a:db:83:98:95:2f:80:c9:17:84:45:30:1d: 1c:9d:3f:ab:23:62:68:00:aa:df:fa:c7:b7:09:9f: 90:05:cf:38:9b:1d:c2:f8:76:e3:03:61:7c:61:a0: 21:2e:a4:4d:0b:11:a4:c3:52:ef:2f:26:4c:cb:d8: 8c:e6:01:92:4a:61:e5:0c:2f:7f:89:2e:d2:0a:e9: a2:04:95:b9:52:e0:a8:e4:77:52:a4:42:77:f4:72: 9d:6c:16:41:be:0d:8b:a6:03:a0:dd:b4:3a:ab:8c: 95:7b:72:6e:13:4f:47:51:ab:7b:2a:fb:2b:95:bb: 66:d2:7f:66:c1:78:80:58:37:56:99:f3:07:d6:f3: 93:ac:25:43:0d:0a:96:aa:83:9f:3c:ec:41:91:23: 5f:5b:ec:81:08:d7:13:a8:ba:37:51:d0:fa:d1:ea: 7b:29:49:4c:19:c8:c2:bb:a9:63:3d:3c:b9:80:6a: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:DA:54:DF:E6:BE:DA:8B:6E:4D:8F:0D:F4:F8:E8:6A:F5:5D:35 X509v3 Authority Key Identifier: keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32302d3234203d3e20323632383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.253.208.0/20 Signature Algorithm: sha256WithRSAEncryption 24:aa:48:7c:49:6c:b3:46:fb:7c:74:b8:d8:4d:0c:ff:9f:0e: 10:9f:de:1c:a4:a7:4c:7b:13:03:fb:bb:be:84:cc:cc:ef:3d: 54:9d:85:f7:2e:6d:28:f6:51:da:47:fb:cb:ff:20:12:ea:11: 9d:85:e5:43:4b:45:21:86:e9:b5:be:d4:ec:ef:44:a8:ad:f7: dc:66:df:6b:f0:f8:1c:60:b8:25:d1:a7:fe:79:b5:f3:5f:32: 9c:13:34:20:28:ac:94:d0:44:a2:d5:a2:b5:ca:02:0d:e8:6e: d4:2e:65:6b:3d:76:ce:37:0a:f2:1e:84:06:7d:8c:b9:8f:7f: 60:c5:94:9e:fe:9b:bf:cf:c8:e8:d2:56:c3:32:b1:77:dc:95: ac:53:3a:80:c6:d6:48:36:2c:57:b6:ca:79:39:ce:09:17:f3: 4f:02:a0:a9:1b:83:5a:1a:f7:c8:13:d6:bb:87:ba:f4:7f:ad: 94:b8:64:45:d2:03:04:9b:54:2c:3d:ac:10:73:e8:6d:60:f2: 26:5d:5a:fe:35:07:9a:4b:2d:b8:14:df:f5:86:22:61:a3:39: 31:ee:0a:93:e0:39:bb:f6:49:6c:91:b5:94:c9:a5:b2:81:be: d3:3a:fa:af:04:f2:10:11:8e:f2:ef:15:ec:91:4e:a2:d0:bc: 94:3b:fd:c7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUfVNjp38DFtXDgik7ylyThvMN5a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBNzYzRUFBMkY1Nzg3RTAxMEE3QkVGNUU2OUQ4NkQ3 REYxRDcwMjAeFw0yNTEyMjQxODU0MjBaFw0yNjEyMjMxODU5MjBaMDMxMTAvBgNV BAMTKEFGREJEQTU0REZFNkJFREE4QjZFNEQ4RjBERjRGOEU4NkFGNTVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQa/DHTAPartP+RpsEOvPpk/w7 oPXMCwSbmrtjSJCg1/umVBjoQd/pSS2KoiSXQE1g5Ep1Q6NTonxElNwHYYgI2ECM OekrY3AsYpMyetuDmJUvgMkXhEUwHRydP6sjYmgAqt/6x7cJn5AFzzibHcL4duMD YXxhoCEupE0LEaTDUu8vJkzL2IzmAZJKYeUML3+JLtIK6aIElblS4Kjkd1KkQnf0 cp1sFkG+DYumA6DdtDqrjJV7cm4TT0dRq3sq+yuVu2bSf2bBeIBYN1aZ8wfW85Os JUMNCpaqg5887EGRI19b7IEI1xOoujdR0PrR6nspSUwZyMK7qWM9PLmAavAdAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUr9vaVN/mvtqLbk2PDfT46Gr1XTUwHwYDVR0j BBgwFoAUOKdj6qL1eH4BCnvvXmnYbX3x1wIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW TWgvMC8zOEE3NjNFQUEyRjU3ODdFMDEwQTdCRUY1RTY5RDg2RDdERjFENzAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4QTc2M0VBQTJGNTc4N0Uw MTBBN0JFRjVFNjlEODZEN0RGMUQ3MDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv MzEzOTMxMmUzMjM1MzMyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy MzYzMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL/90DANBgkqhkiG9w0BAQsFAAOCAQEAJKpI fElss0b7fHS42E0M/58OEJ/eHKSnTHsTA/u7voTMzO89VJ2F9y5tKPZR2kf7y/8g EuoRnYXlQ0tFIYbptb7U7O9EqK333Gbfa/D4HGC4JdGn/nm1818ynBM0ICislNBE otWitcoCDehu1C5laz12zjcK8h6EBn2MuY9/YMWUnv6bv8/I6NJWwzKxd9yVrFM6 gMbWSDYsV7bKeTnOCRfzTwKgqRuDWhr3yBPWu4e69H+tlLhkRdIDBJtULD2sEHPo bWDyJl1a/jUHmkstuBTf9YYiYaM5Me4Kk+A5u/ZJbJG1lMmlsoG+0zr6rwTyEBGO 8u8V7JFOotC8lDv9xw== -----END CERTIFICATE-----Generated at Mon Feb 23 05:52:45 2026 by rpki-client