$ rpki-client -vvf rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa File: 3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa (raw, json) Hash identifier: Hu7vIQKJSi0S+zWq6pYyRxveRAM7GztWdbuxHQcPrqw= Subject key identifier: 7C:72:F9:58:A2:59:2E:F5:57:61:D5:A8:77:4F:66:16:AA:BE:97:E6 Certificate issuer: /CN=4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1 Certificate serial: 662C3F31005D322C349078A7C6C65EBF3417E9C4 Authority key identifier: 4B:CF:85:DB:B0:20:C6:E3:B8:8E:4F:9C:76:E6:5F:65:C0:73:C4:B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa Signing time: Mon 30 Mar 2026 16:27:41 +0000 ROA not before: Mon 30 Mar 2026 16:22:41 +0000 ROA not after: Mon 29 Mar 2027 16:27:41 +0000 asID: 265151 IP address blocks: 143.255.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.crl rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 04:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2c:3f:31:00:5d:32:2c:34:90:78:a7:c6:c6:5e:bf:34:17:e9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1 Validity Not Before: Mar 30 16:22:41 2026 GMT Not After : Mar 29 16:27:41 2027 GMT Subject: CN=7C72F958A2592EF55761D5A8774F6616AABE97E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:8c:41:b4:ce:aa:3b:ea:49:ca:6b:5c:72: 21:0d:cf:9d:0e:f8:3f:4f:3f:96:47:91:18:66:30: d8:84:2f:6a:75:60:33:8d:72:5f:4d:dc:bf:f4:57: a0:27:c0:75:2d:2f:3d:7d:df:82:27:9c:b5:25:99: d3:53:e4:e9:20:4a:30:92:ca:4d:43:1e:54:bc:1c: af:9b:fd:16:91:57:ac:e8:1b:ec:81:76:60:3f:fa: 52:cf:25:f9:c4:f9:23:98:31:28:e3:9f:0a:b4:4e: 6f:79:12:ff:51:ad:6f:76:7d:1d:d3:ff:9c:73:cf: 9c:36:f4:d0:f8:4e:a9:19:da:05:14:b8:f5:ac:ea: b1:b2:73:ec:66:4e:10:4f:73:7d:b4:72:0d:96:df: ce:82:42:58:56:d2:cd:b4:05:fd:8e:fe:db:e6:e5: f5:d5:4c:ab:8e:d3:84:e7:a9:b0:26:07:17:d5:af: e6:7d:ac:50:fd:0a:f2:5f:ac:73:8d:e4:8a:5d:ff: 85:65:92:8c:82:78:c4:ea:4a:92:a9:4f:c6:71:ca: 40:00:36:f9:03:52:27:06:06:5d:50:01:5b:3d:3a: 66:d6:93:45:86:10:bd:25:2a:09:5c:18:2a:36:4d: e7:68:24:08:ec:19:09:b6:e4:cd:99:32:23:aa:e0: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:72:F9:58:A2:59:2E:F5:57:61:D5:A8:77:4F:66:16:AA:BE:97:E6 X509v3 Authority Key Identifier: keyid:4B:CF:85:DB:B0:20:C6:E3:B8:8E:4F:9C:76:E6:5F:65:C0:73:C4:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BCF85DBB020C6E3B88E4F9C76E65F65C073C4B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChMDKi5JSnFfq5Rq4847qqDkUdb2E1SrpYgmuaFGyu64/0/3134332e3235352e3138382e302f32322d3234203d3e20323635313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.188.0/22 Signature Algorithm: sha256WithRSAEncryption 35:54:39:fb:fa:1c:93:8b:4a:97:74:99:7b:81:f8:db:e0:93: 18:87:02:38:d3:2b:8a:bb:77:cd:ab:f9:9d:3c:1b:61:eb:f5: 12:b2:24:d9:55:9a:36:84:94:4e:9a:27:bc:78:43:09:61:88: 3b:1a:3b:a3:60:a7:ec:b5:a9:57:8b:ac:1d:6e:3c:18:08:99: 1b:2e:94:0b:81:b7:ae:03:b7:f7:c4:4e:1f:8b:76:d0:26:16: 7d:d2:c6:02:16:b2:ab:3e:94:f9:4f:13:43:37:f6:cb:76:c5: 43:8a:3b:bd:3f:48:c9:44:ab:b8:f4:d1:90:88:37:e9:18:07: 41:f2:c3:a1:a2:d9:75:8e:82:82:60:76:4f:4d:2c:77:16:2b: 29:53:b3:18:4c:f3:41:56:ce:ff:c3:72:a5:26:1a:5b:53:8e: 2d:85:88:03:d5:86:8b:b6:e3:54:4b:20:99:82:35:60:07:f4: 6e:c3:af:44:20:23:87:5b:a2:a1:3f:d1:f2:b5:dd:a9:92:de: e5:e7:db:14:07:f3:63:94:fe:29:f0:c4:88:80:30:3f:13:25: ed:60:95:34:55:3d:83:b3:7b:de:3c:5a:22:08:f2:96:45:50: b5:8b:65:b6:d5:8c:65:38:e0:dc:75:c9:5c:a9:ec:a7:f7:e4: 58:00:66:1e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUZiw/MQBdMiw0kHinxsZevzQX6cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDRjg1REJCMDIwQzZFM0I4OEU0RjlDNzZFNjVGNjVD MDczQzRCMTAeFw0yNjAzMzAxNjIyNDFaFw0yNzAzMjkxNjI3NDFaMDMxMTAvBgNV BAMTKDdDNzJGOTU4QTI1OTJFRjU1NzYxRDVBODc3NEY2NjE2QUFCRTk3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWF4xBtM6qO+pJymtcciENz50O +D9PP5ZHkRhmMNiEL2p1YDONcl9N3L/0V6AnwHUtLz1934InnLUlmdNT5OkgSjCS yk1DHlS8HK+b/RaRV6zoG+yBdmA/+lLPJfnE+SOYMSjjnwq0Tm95Ev9RrW92fR3T /5xzz5w29ND4TqkZ2gUUuPWs6rGyc+xmThBPc320cg2W386CQlhW0s20Bf2O/tvm 5fXVTKuO04TnqbAmBxfVr+Z9rFD9CvJfrHON5Ipd/4VlkoyCeMTqSpKpT8ZxykAA NvkDUicGBl1QAVs9OmbWk0WGEL0lKglcGCo2TedoJAjsGQm25M2ZMiOq4K1PAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUfHL5WKJZLvVXYdWod09mFqq+l+YwHwYDVR0j BBgwFoAUS8+F27AgxuO4jk+cduZfZcBzxLEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2hNREtpNUpTbkZmcTVScTQ4NDdxcURrVWRiMkUxU3JwWWdtdWFGR3l1 NjQvMC80QkNGODVEQkIwMjBDNkUzQjg4RTRGOUM3NkU2NUY2NUMwNzNDNEIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQ0Y4NURCQjAyMEM2RTNC ODhFNEY5Qzc2RTY1RjY1QzA3M0M0QjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NoTURLaTVKU25GZnE1UnE0ODQ3cXFEa1VkYjJFMVNycFlnbXVhRkd5dTY0LzAv MzEzNDMzMmUzMjM1MzUyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNTMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//vDANBgkqhkiG9w0BAQsFAAOCAQEANVQ5 +/ock4tKl3SZe4H42+CTGIcCONMrirt3zav5nTwbYev1ErIk2VWaNoSUTponvHhD CWGIOxo7o2Cn7LWpV4usHW48GAiZGy6UC4G3rgO398ROH4t20CYWfdLGAhayqz6U +U8TQzf2y3bFQ4o7vT9IyUSruPTRkIg36RgHQfLDoaLZdY6CgmB2T00sdxYrKVOz GEzzQVbO/8NypSYaW1OOLYWIA9WGi7bjVEsgmYI1YAf0bsOvRCAjh1uioT/R8rXd qZLe5efbFAfzY5T+KfDEiIAwPxMl7WCVNFU9g7N73jxaIgjylkVQtYtlttWMZTjg 3HXJXKnsp/fkWABmHg== -----END CERTIFICATE-----Generated at Thu Apr 9 17:56:16 2026 by rpki-client