$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32322d3232203d3e20323634343936.roa File: 3137302e3233382e37322e302f32322d3232203d3e20323634343936.roa (raw, json) Hash identifier: xAoGMtWaC1TnQhziGxCE2i99uBff92xSa2QeZ3Tsi24= Subject key identifier: 5B:F4:94:AD:3D:F6:C3:8E:55:D1:98:E7:EC:51:E3:DE:EF:37:FE:93 Certificate issuer: /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C Certificate serial: 1E23C5729CA66B34956B07AAABB57D5CC7704803 Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32322d3232203d3e20323634343936.roa Signing time: Wed 28 Jan 2026 15:12:32 +0000 ROA not before: Wed 28 Jan 2026 15:07:32 +0000 ROA not after: Wed 27 Jan 2027 15:12:32 +0000 asID: 264496 IP address blocks: 170.238.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 00:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:23:c5:72:9c:a6:6b:34:95:6b:07:aa:ab:b5:7d:5c:c7:70:48:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C Validity Not Before: Jan 28 15:07:32 2026 GMT Not After : Jan 27 15:12:32 2027 GMT Subject: CN=5BF494AD3DF6C38E55D198E7EC51E3DEEF37FE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:7a:4a:96:3b:b6:63:16:ef:d5:8d:61:b8: f1:25:d5:4b:ed:68:b5:85:87:22:d9:1d:33:a6:52: 54:40:47:23:e2:55:d9:7a:56:40:f6:fb:a5:ef:6c: 1c:94:dd:2d:2f:11:4b:8e:e1:6f:c3:80:9e:af:7a: 55:19:b4:91:83:51:7b:e0:91:5a:10:7d:d0:62:89: fc:68:6b:44:8d:5c:f8:94:e4:f5:b0:54:77:1d:ba: 55:71:dd:36:dc:1f:a8:a3:50:a3:06:a4:76:15:d2: af:4e:51:fd:48:4c:7e:b3:1c:83:18:4d:48:83:a4: 7c:83:4e:f8:2d:6f:15:f8:de:03:fd:ab:47:3c:c6: a7:d3:90:88:fe:12:92:a6:7d:32:8d:6b:f1:65:36: ec:a0:35:7c:b8:fb:8e:03:af:70:68:fd:d4:be:2c: 24:1e:a7:87:24:d0:af:65:98:ae:da:fe:3f:c0:76: fc:b2:d9:21:b6:c1:b5:30:e4:01:70:21:60:28:96: 28:8a:88:a7:1a:42:d9:49:55:7f:59:e1:f7:2b:e4: c8:8d:55:b7:75:84:5e:1a:e5:da:cf:ec:3c:aa:b4: 5a:06:7a:35:be:09:10:f3:0f:e4:bb:88:42:42:3b: 86:36:9d:a7:c1:54:a8:3d:10:91:ca:0a:a2:66:46: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F4:94:AD:3D:F6:C3:8E:55:D1:98:E7:EC:51:E3:DE:EF:37:FE:93 X509v3 Authority Key Identifier: keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37322e302f32322d3232203d3e20323634343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.72.0/22 Signature Algorithm: sha256WithRSAEncryption 13:22:23:92:f3:00:95:68:cb:48:68:60:36:68:e5:41:c9:6f: a4:9d:2a:85:54:e1:cd:56:50:d5:f1:2d:8f:2c:bf:16:71:d3: 16:e1:0f:e1:07:ba:f3:73:a7:88:c9:85:69:b1:08:31:8f:14: b8:2f:ef:46:62:0f:9b:11:58:31:b5:97:4f:96:73:5f:20:21: 47:6f:11:29:62:f8:da:3d:da:c1:c0:5e:96:8b:e5:e1:43:9c: 7e:a3:c2:fd:d5:0c:e2:f6:96:f9:83:d3:b1:d8:c9:11:3f:92: 06:ad:a0:51:03:01:23:55:3e:30:bc:71:8d:93:1e:06:9f:c2: de:46:9c:2c:47:2c:09:84:1b:76:18:27:22:c7:c7:cb:9f:31: 8c:09:63:3e:0d:08:1d:c8:10:16:58:7f:55:ae:f4:b1:73:4b: 8d:49:1d:32:c6:e9:83:00:52:bc:36:45:cc:52:99:d1:a6:34: 78:62:1a:34:61:8f:6d:cd:4a:04:e9:5e:c8:d2:ff:af:c3:fd: 3b:d9:2a:1b:b6:9f:25:e8:c4:68:70:48:95:40:2f:28:36:64: 12:fc:39:c7:aa:2a:7b:fa:8b:f4:22:71:ff:2d:ec:6e:43:87: 9a:68:99:75:ae:91:35:cd:9f:f7:f8:06:cb:cb:93:c0:d5:45: 67:34:0c:8a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHiPFcpymazSVaweqq7V9XMdwSAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw RUU1QUU3QzAeFw0yNjAxMjgxNTA3MzJaFw0yNzAxMjcxNTEyMzJaMDMxMTAvBgNV BAMTKDVCRjQ5NEFEM0RGNkMzOEU1NUQxOThFN0VDNTFFM0RFRUYzN0ZFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYzXpKlju2Yxbv1Y1huPEl1Uvt aLWFhyLZHTOmUlRARyPiVdl6VkD2+6XvbByU3S0vEUuO4W/DgJ6velUZtJGDUXvg kVoQfdBiifxoa0SNXPiU5PWwVHcdulVx3TbcH6ijUKMGpHYV0q9OUf1ITH6zHIMY TUiDpHyDTvgtbxX43gP9q0c8xqfTkIj+EpKmfTKNa/FlNuygNXy4+44Dr3Bo/dS+ LCQep4ck0K9lmK7a/j/Advyy2SG2wbUw5AFwIWAoliiKiKcaQtlJVX9Z4fcr5MiN Vbd1hF4a5drP7DyqtFoGejW+CRDzD+S7iEJCO4Y2nafBVKg9EJHKCqJmRkqnAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUW/SUrT32w45V0Zjn7FHj3u83/pMwHwYDVR0j BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0 NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv MzEzNzMwMmUzMjMzMzgyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2 MzQzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKq7kgwDQYJKoZIhvcNAQELBQADggEBABMiI5Lz AJVoy0hoYDZo5UHJb6SdKoVU4c1WUNXxLY8svxZx0xbhD+EHuvNzp4jJhWmxCDGP FLgv70ZiD5sRWDG1l0+Wc18gIUdvESli+No92sHAXpaL5eFDnH6jwv3VDOL2lvmD 07HYyRE/kgatoFEDASNVPjC8cY2THgafwt5GnCxHLAmEG3YYJyLHx8ufMYwJYz4N CB3IEBZYf1Wu9LFzS41JHTLG6YMAUrw2RcxSmdGmNHhiGjRhj23NSgTpXsjS/6/D /TvZKhu2nyXoxGhwSJVALyg2ZBL8OceqKnv6i/Qicf8t7G5Dh5pomXWukTXNn/f4 BsvLk8DVRWc0DIo= -----END CERTIFICATE-----Generated at Mon Feb 23 05:52:45 2026 by rpki-client