$ rpki-client -vvvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa File: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (raw, json) Hash identifier: 4G9BictEEvCSQPTJhYk2Wih/H8qHnQpJY4AWNBsply4= Subject key identifier: 91:1E:05:92:C5:E1:93:18:A8:41:D7:A7:DE:75:2F:94:7E:A2:F3:50 Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Certificate serial: 529DF976C735ED2F50410168EAE935E8591FDA94 Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa Signing time: Mon 17 Aug 2026 11:02:39 +0000 ROA not before: Mon 17 Aug 2026 10:57:39 +0000 ROA not after: Mon 16 Aug 2027 11:02:39 +0000 asID: 265078 IP address blocks: 170.233.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 09:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9d:f9:76:c7:35:ed:2f:50:41:01:68:ea:e9:35:e8:59:1f:da:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Validity Not Before: Aug 17 10:57:39 2026 GMT Not After : Aug 16 11:02:39 2027 GMT Subject: CN=911E0592C5E19318A841D7A7DE752F947EA2F350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:55:19:1a:90:3e:95:6f:9d:94:d8:6c:88: 9f:b0:58:70:32:79:4c:83:34:97:f2:8c:be:a0:5f: c6:d4:dd:1f:01:b1:c7:83:ea:f8:c5:15:a4:22:3e: ee:fe:d0:50:30:7e:d0:78:2c:8b:7e:87:70:ff:c8: 87:24:01:59:41:64:4d:6e:a2:d0:f3:01:f5:97:1c: 29:ce:82:85:0a:f4:3d:8e:98:d3:13:ba:e5:5f:ec: c8:d6:ca:45:ab:88:23:91:bb:7b:a1:07:3f:98:e6: e0:ec:d0:45:ec:4a:26:24:12:39:57:38:7f:76:f9: 0c:ce:3c:ba:b9:b6:4c:bd:20:a8:29:22:21:cc:6b: f0:b5:7f:84:52:ce:af:0d:04:57:4f:6a:de:87:60: a3:6f:27:ea:cd:b4:90:22:18:05:59:7b:58:2e:33: ff:78:13:bd:15:73:b3:a2:e5:9f:50:32:59:d2:1d: 85:b8:4c:20:1c:a5:70:2e:41:85:4c:f1:9c:35:c9: 91:85:38:75:c6:d2:2d:61:48:b6:18:05:e3:37:b6: fb:89:5e:1c:4d:4a:5e:14:d1:17:45:3e:b7:b8:48: 4d:07:09:71:29:b9:2d:83:50:e6:db:5f:f9:09:49: 34:af:d3:bb:ca:ad:c2:1e:7c:a0:f0:c1:c5:40:05: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:05:92:C5:E1:93:18:A8:41:D7:A7:DE:75:2F:94:7E:A2:F3:50 X509v3 Authority Key Identifier: keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.112.0/24 Signature Algorithm: sha256WithRSAEncryption 28:2f:06:e7:ef:72:63:98:b9:3b:4b:f9:37:74:a6:a1:66:53: ba:ff:72:86:5a:c8:a6:e4:e1:fb:c4:72:0b:b2:c1:99:04:58: ea:a3:b4:63:a2:3c:21:3b:76:a2:88:8d:23:65:bf:11:65:fb: c8:54:b9:56:da:c8:32:7b:97:90:ff:bc:60:a1:15:6c:f7:c2: 38:fd:e1:bb:01:f6:8e:22:c8:10:53:fd:f3:8b:9f:a3:d8:2b: b1:27:3d:ca:9d:a7:05:97:25:38:8e:ba:99:61:13:f6:91:ec: 60:b7:50:96:57:7a:c8:e0:32:1f:ff:5e:ed:07:38:c6:86:f1: 51:90:c3:fe:a5:77:b4:ae:41:b5:f6:cd:b8:83:2e:63:57:30: 71:88:eb:65:e6:c6:72:a2:53:08:da:72:f7:8b:bd:9e:e5:2a: 24:9c:80:6b:35:0e:a1:ba:4c:63:5a:dd:e5:ad:7f:13:e8:13: 15:a6:51:5c:fe:f0:43:02:86:37:1f:a0:61:2c:0c:df:6a:7c: e7:90:06:6e:48:64:c1:39:f4:f9:fd:9c:7b:f1:23:6a:0c:d5: c5:e0:db:39:53:92:51:e8:10:9f:64:36:0f:f6:65:6d:92:ad: ec:85:ab:c1:14:dd:cd:5f:5d:4d:61:c8:0d:93:ad:2a:c7:38: 32:ca:5d:2c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUUp35dsc17S9QQQFo6uk16Fkf2pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB MUEzMDJCMjAeFw0yNjA4MTcxMDU3MzlaFw0yNzA4MTYxMTAyMzlaMDMxMTAvBgNV BAMTKDkxMUUwNTkyQzVFMTkzMThBODQxRDdBN0RFNzUyRjk0N0VBMkYzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTlUZGpA+lW+dlNhsiJ+wWHAy eUyDNJfyjL6gX8bU3R8BsceD6vjFFaQiPu7+0FAwftB4LIt+h3D/yIckAVlBZE1u otDzAfWXHCnOgoUK9D2OmNMTuuVf7MjWykWriCORu3uhBz+Y5uDs0EXsSiYkEjlX OH92+QzOPLq5tky9IKgpIiHMa/C1f4RSzq8NBFdPat6HYKNvJ+rNtJAiGAVZe1gu M/94E70Vc7Oi5Z9QMlnSHYW4TCAcpXAuQYVM8Zw1yZGFOHXG0i1hSLYYBeM3tvuJ XhxNSl4U0RdFPre4SE0HCXEpuS2DUObbX/kJSTSv07vKrcIefKDwwcVABT2HAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUkR4FksXhkxioQden3nUvlH6i81AwHwYDVR0j BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzEv MzEzNzMwMmUzMjMzMzMyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpcDANBgkqhkiG9w0BAQsFAAOCAQEAKC8G 5+9yY5i5O0v5N3SmoWZTuv9yhlrIpuTh+8RyC7LBmQRY6qO0Y6I8ITt2ooiNI2W/ EWX7yFS5VtrIMnuXkP+8YKEVbPfCOP3huwH2jiLIEFP984ufo9grsSc9yp2nBZcl OI66mWET9pHsYLdQlld6yOAyH/9e7Qc4xobxUZDD/qV3tK5BtfbNuIMuY1cwcYjr ZebGcqJTCNpy94u9nuUqJJyAazUOobpMY1rd5a1/E+gTFaZRXP7wQwKGNx+gYSwM 32p855AGbkhkwTn0+f2ce/EjagzVxeDbOVOSUegQn2Q2D/ZlbZKt7IWrwRTdzV9d TWHIDZOtKsc4MspdLA== -----END CERTIFICATE-----Generated at Mon Aug 24 10:42:46 2026 by rpki-client