$ rpki-client -vvvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa File: 3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa (raw, json) Hash identifier: A+rnBye7vsXOmbmNF+GbjrQpGssNaZJu4hH9BedBOUg= Subject key identifier: 95:11:1F:AF:6D:C8:37:B8:71:8C:3B:3F:28:B2:E4:71:DD:C0:58:E5 Certificate issuer: /CN=4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC Certificate serial: 4FFD223A0A901CD21F5D5C1E4DC8000AF9238477 Authority key identifier: 4E:1F:F8:99:B5:92:3F:05:6A:95:CD:D9:CC:1F:14:B9:AE:C1:85:EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa Signing time: Mon 17 Aug 2026 17:47:36 +0000 ROA not before: Mon 17 Aug 2026 17:42:36 +0000 ROA not after: Mon 16 Aug 2027 17:47:36 +0000 asID: 270417 IP address blocks: 190.111.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.crl rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 12:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fd:22:3a:0a:90:1c:d2:1f:5d:5c:1e:4d:c8:00:0a:f9:23:84:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC Validity Not Before: Aug 17 17:42:36 2026 GMT Not After : Aug 16 17:47:36 2027 GMT Subject: CN=95111FAF6DC837B8718C3B3F28B2E471DDC058E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d6:e0:ad:85:1b:32:14:c2:db:13:04:b1:da: 3a:0d:59:87:5b:10:11:f5:47:38:2c:3f:5d:38:7a: 85:9d:5b:93:05:fa:c8:f5:de:d3:2a:db:1b:08:e0: 2a:89:b3:60:57:07:d1:ec:dd:f5:62:5e:10:1b:f6: 81:97:6a:ce:fa:55:c8:67:e8:25:5f:f9:aa:68:87: b2:77:2d:2f:fb:9b:3c:e4:a4:4b:fa:78:8a:c2:78: 9a:1f:17:7f:f8:ac:20:cf:ac:10:2e:73:f4:09:4b: d9:14:91:f6:c4:97:22:31:3b:38:64:40:c4:72:89: c8:d3:c5:67:7f:06:81:a9:64:6a:f2:44:e3:be:ab: 14:ba:78:85:b2:d2:d1:52:35:b3:f9:3a:bf:fc:2c: a2:da:0e:ec:05:40:a0:8a:0e:e1:d2:76:68:da:20: 73:1c:55:6f:11:80:9d:05:0b:4b:93:2d:93:1b:3f: 46:9e:a4:0d:3b:cf:b0:86:c0:b9:29:91:83:90:c9: 99:fe:96:46:0c:2c:fb:24:47:04:ae:94:06:22:77: db:a5:bc:3d:78:a8:06:12:fb:20:51:ef:83:12:74: c4:18:23:b3:49:ad:a5:a8:81:a6:50:f6:b9:74:5a: 1b:8e:73:09:ec:e8:d5:a9:2c:30:8a:b9:77:81:16: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:11:1F:AF:6D:C8:37:B8:71:8C:3B:3F:28:B2:E4:71:DD:C0:58:E5 X509v3 Authority Key Identifier: keyid:4E:1F:F8:99:B5:92:3F:05:6A:95:CD:D9:CC:1F:14:B9:AE:C1:85:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E1FF899B5923F056A95CDD9CC1F14B9AEC185EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/3139302e3131312e3130382e302f32322d3232203d3e20323730343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.108.0/22 Signature Algorithm: sha256WithRSAEncryption 64:64:b4:bc:d8:f5:1d:58:fe:9f:ff:e2:16:a3:4c:40:ac:79: fa:15:7e:e9:ce:00:b6:0e:7f:b8:81:31:73:7b:b9:fa:52:77: 97:42:92:2c:96:c8:4e:ab:c5:9a:de:7c:09:3a:42:f9:d8:3f: 5a:51:4b:d9:f4:63:32:53:42:61:fe:ef:d2:ec:98:4b:f8:12: 1a:c6:46:a7:92:ee:43:3f:ad:10:cb:c5:b7:f9:99:76:88:e8: 51:ae:bc:ef:8d:a0:ce:b4:d1:0c:fe:b1:88:e6:bb:ad:d0:bf: 7a:f4:c7:3c:d3:85:28:d2:0d:c3:ef:8b:eb:b9:17:a4:f5:d4: db:81:5a:45:d4:b1:49:fd:3c:ba:c0:f6:b2:6b:09:e2:fd:a0: 96:9c:cc:3d:62:7c:e0:b6:ba:ff:3d:84:6d:33:0c:a6:6f:db: fb:bb:fd:30:ab:a5:69:4e:bf:f7:93:f6:9d:9f:ae:ac:51:77: d7:ce:40:47:79:10:7c:f4:f8:f6:8b:d3:06:73:ab:f2:9a:04: 94:f5:f0:12:38:f9:ff:05:90:f3:5e:0d:76:8a:0a:80:0a:d4: 91:9c:a3:8f:63:fa:6c:17:17:02:b1:4b:9f:8c:4a:90:9c:4c: 8b:f1:5e:8b:e6:e9:d6:44:1b:05:b7:24:18:82:98:6f:ca:ad: 33:b3:54:4b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUT/0iOgqQHNIfXVweTcgACvkjhHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxRkY4OTlCNTkyM0YwNTZBOTVDREQ5Q0MxRjE0QjlB RUMxODVFQzAeFw0yNjA4MTcxNzQyMzZaFw0yNzA4MTYxNzQ3MzZaMDMxMTAvBgNV BAMTKDk1MTExRkFGNkRDODM3Qjg3MThDM0IzRjI4QjJFNDcxRERDMDU4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx1uCthRsyFMLbEwSx2joNWYdb EBH1RzgsP104eoWdW5MF+sj13tMq2xsI4CqJs2BXB9Hs3fViXhAb9oGXas76Vchn 6CVf+apoh7J3LS/7mzzkpEv6eIrCeJofF3/4rCDPrBAuc/QJS9kUkfbElyIxOzhk QMRyicjTxWd/BoGpZGryROO+qxS6eIWy0tFSNbP5Or/8LKLaDuwFQKCKDuHSdmja IHMcVW8RgJ0FC0uTLZMbP0aepA07z7CGwLkpkYOQyZn+lkYMLPskRwSulAYid9ul vD14qAYS+yBR74MSdMQYI7NJraWogaZQ9rl0WhuOcwns6NWpLDCKuXeBFk85AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUlREfr23IN7hxjDs/KLLkcd3AWOUwHwYDVR0j BBgwFoAUTh/4mbWSPwVqlc3ZzB8Uua7BhewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz VXMvMC80RTFGRjg5OUI1OTIzRjA1NkE5NUNERDlDQzFGMTRCOUFFQzE4NUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMUZGODk5QjU5MjNGMDU2 QTk1Q0REOUNDMUYxNEI5QUVDMTg1RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JhM2lkZkFmY0xnZ0RNQ3F3OUFHTEtKOGZ4RGphVG5tUG9xM3hpc1UzM1VzLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzczMDM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5vbDANBgkqhkiG9w0BAQsFAAOCAQEAZGS0 vNj1HVj+n//iFqNMQKx5+hV+6c4Atg5/uIExc3u5+lJ3l0KSLJbITqvFmt58CTpC +dg/WlFL2fRjMlNCYf7v0uyYS/gSGsZGp5LuQz+tEMvFt/mZdojoUa68742gzrTR DP6xiOa7rdC/evTHPNOFKNINw++L67kXpPXU24FaRdSxSf08usD2smsJ4v2glpzM PWJ84La6/z2EbTMMpm/b+7v9MKulaU6/95P2nZ+urFF3185AR3kQfPT49ovTBnOr 8poElPXwEjj5/wWQ814NdooKgArUkZyjj2P6bBcXArFLn4xKkJxMi/Fei+bp1kQb BbckGIKYb8qtM7NUSw== -----END CERTIFICATE-----Generated at Mon Aug 24 21:16:32 2026 by rpki-client