$ rpki-client -vvvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa File: 3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa (raw, json) Hash identifier: 6HKnsqvbdu4lqyKzn6RVP0x96SU3AaT/JdDBGN7PBfU= Subject key identifier: B0:09:5B:B1:7A:A4:61:58:9C:0A:E0:DA:36:24:2D:AB:D9:FC:3A:7C Certificate issuer: /CN=73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4 Certificate serial: 5F33700A89898C3200715B35A9E4AF82EE1022C1 Authority key identifier: 73:B4:2E:9A:73:F7:9B:09:F2:6D:4E:C2:22:4A:4C:AF:77:9F:0B:C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa Signing time: Thu 08 Oct 2026 13:34:30 +0000 ROA not before: Thu 08 Oct 2026 13:29:30 +0000 ROA not after: Thu 07 Oct 2027 13:34:30 +0000 asID: 263932 IP address blocks: 138.219.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.crl rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 03:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:33:70:0a:89:89:8c:32:00:71:5b:35:a9:e4:af:82:ee:10:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4 Validity Not Before: Oct 8 13:29:30 2026 GMT Not After : Oct 7 13:34:30 2027 GMT Subject: CN=B0095BB17AA461589C0AE0DA36242DABD9FC3A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:c0:a7:b2:37:e2:11:e5:0b:90:3e:59:39: 4e:3d:f2:14:6a:a3:72:67:cb:f7:6d:a2:ac:df:d8: ab:32:89:d3:c6:ae:24:dc:6a:3c:6e:3f:20:a0:79: 3f:49:0a:38:70:5d:4b:83:1a:e0:23:b0:ce:61:1e: a8:02:21:a6:0f:ca:8b:c3:99:50:c0:8a:2f:25:10: bf:56:e0:be:d3:e9:47:b7:49:ec:21:ce:b2:b9:44: 71:3f:9a:60:f9:2f:29:d1:5f:f2:54:10:66:3e:9d: 80:db:d9:7a:e0:a1:d7:47:5e:24:a2:a7:b6:76:7b: dd:8e:74:09:c4:40:0c:e4:92:9a:bb:fc:d6:9f:1f: 04:9d:ee:71:c9:ea:ef:01:30:35:ee:94:68:6d:19: f2:56:73:f5:03:ca:fa:34:89:72:90:fc:49:96:6e: 18:a6:6f:b8:a8:b3:47:36:2a:1f:06:43:15:ad:f5: bd:64:bb:b7:c9:af:0f:d0:9b:dc:82:ff:50:49:20: 4a:76:fa:55:97:ce:75:5b:5d:27:49:e1:3b:b8:65: 1a:2b:56:01:52:49:7a:f1:91:be:50:ea:85:0f:15: f3:ba:59:af:2c:b5:e5:7b:8a:88:81:5b:a6:d4:ef: f1:a6:9e:88:d5:8d:be:58:ab:cc:e6:4e:42:a0:22: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:5B:B1:7A:A4:61:58:9C:0A:E0:DA:36:24:2D:AB:D9:FC:3A:7C X509v3 Authority Key Identifier: keyid:73:B4:2E:9A:73:F7:9B:09:F2:6D:4E:C2:22:4A:4C:AF:77:9F:0B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73B42E9A73F79B09F26D4EC2224A4CAF779F0BC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.188.0/22 Signature Algorithm: sha256WithRSAEncryption 89:49:ba:34:01:5e:0c:fe:46:25:56:47:7f:d7:f7:46:6d:ac: e3:6d:e1:ad:96:eb:d7:fc:88:97:b1:29:3e:8f:56:78:1a:a2: 19:66:8a:5e:67:ae:f9:08:07:85:50:6f:a6:26:bb:ac:4b:a4: f2:74:3c:44:26:4c:1b:d7:1d:42:2d:99:42:31:74:e0:00:31: 18:c3:e2:c8:8f:d7:7b:5e:9e:19:e5:86:fc:60:7f:20:90:81: 2a:ef:c0:35:cd:ba:6e:d0:b9:50:9c:76:4a:52:57:04:9f:de: 25:3a:11:99:1b:2b:99:1f:7f:cc:fc:20:c2:23:91:bc:4f:77: 7b:4e:e1:43:06:5f:5a:af:25:a4:6e:8e:41:12:78:07:c8:00: 92:7d:0f:73:f1:b8:c1:49:e8:6e:46:2d:b0:18:e5:ab:c0:c6: 43:b4:f7:be:5a:0b:71:58:f8:02:77:c5:b8:43:f2:47:ec:3f: 75:85:91:8c:19:fb:99:b4:eb:e0:f0:f0:90:be:b0:35:ed:05: e8:fd:e2:28:82:57:45:8b:01:79:5e:53:3f:6a:d2:36:90:8b: f1:a1:58:3e:53:a4:8f:58:7d:d4:c0:9c:eb:f2:bd:fd:e8:35: d4:1c:c7:78:79:64:f1:ab:fd:46:46:82:56:ba:c4:90:38:f7: 09:df:ce:3c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUXzNwComJjDIAcVs1qeSvgu4QIsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCNDJFOUE3M0Y3OUIwOUYyNkQ0RUMyMjI0QTRDQUY3 NzlGMEJDNDAeFw0yNjEwMDgxMzI5MzBaFw0yNzEwMDcxMzM0MzBaMDMxMTAvBgNV BAMTKEIwMDk1QkIxN0FBNDYxNTg5QzBBRTBEQTM2MjQyREFCRDlGQzNBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslsCnsjfiEeULkD5ZOU498hRq o3Jny/dtoqzf2KsyidPGriTcajxuPyCgeT9JCjhwXUuDGuAjsM5hHqgCIaYPyovD mVDAii8lEL9W4L7T6Ue3SewhzrK5RHE/mmD5LynRX/JUEGY+nYDb2XrgoddHXiSi p7Z2e92OdAnEQAzkkpq7/NafHwSd7nHJ6u8BMDXulGhtGfJWc/UDyvo0iXKQ/EmW bhimb7ios0c2Kh8GQxWt9b1ku7fJrw/Qm9yC/1BJIEp2+lWXznVbXSdJ4Tu4ZRor VgFSSXrxkb5Q6oUPFfO6Wa8steV7ioiBW6bU7/GmnojVjb5Yq8zmTkKgIsWlAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUsAlbsXqkYVicCuDaNiQtq9n8OnwwHwYDVR0j BBgwFoAUc7QumnP3mwnybU7CIkpMr3efC8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEx4OXNKOUZRbmsyYlZtZXZTUkZ4UGFhSlg4VFFMVEM3ZDYzVW1XSHdL eG8vMC83M0I0MkU5QTczRjc5QjA5RjI2RDRFQzIyMjRBNENBRjc3OUYwQkM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczQjQyRTlBNzNGNzlCMDlG MjZENEVDMjIyNEE0Q0FGNzc5RjBCQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hMeDlzSjlGUW5rMmJWbWV2U1JGeFBhYUpYOFRRTFRDN2Q2M1VtV0h3S3hvLzAv MzEzMzM4MmUzMjMxMzkyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzMzM5MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbvDANBgkqhkiG9w0BAQsFAAOCAQEAiUm6 NAFeDP5GJVZHf9f3Rm2s423hrZbr1/yIl7EpPo9WeBqiGWaKXmeu+QgHhVBvpia7 rEuk8nQ8RCZMG9cdQi2ZQjF04AAxGMPiyI/Xe16eGeWG/GB/IJCBKu/ANc26btC5 UJx2SlJXBJ/eJToRmRsrmR9/zPwgwiORvE93e07hQwZfWq8lpG6OQRJ4B8gAkn0P c/G4wUnobkYtsBjlq8DGQ7T3vloLcVj4AnfFuEPyR+w/dYWRjBn7mbTr4PDwkL6w Ne0F6P3iKIJXRYsBeV5TP2rSNpCL8aFYPlOkj1h91MCc6/K9/eg11BzHeHlk8av9 RkaCVrrEkDj3Cd/OPA== -----END CERTIFICATE-----Generated at Wed Oct 28 18:56:14 2026 by rpki-client