$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32342d3234203d3e20323632333933.roa File: 3133382e3132312e3235302e302f32342d3234203d3e20323632333933.roa (raw, json) Hash identifier: uDVVXnZU4csrRu6OLjeFdt3qbqQ7I6o7DIHDeuPXDq4= Subject key identifier: 4F:E5:A0:79:26:59:2B:E8:3A:3D:0A:FB:0B:36:CB:27:2D:08:87:08 Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Certificate serial: 56A5AEC4846CA71486B9260EA1733DC465C48DB6 Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32342d3234203d3e20323632333933.roa Signing time: Sat 28 Feb 2026 15:57:15 +0000 ROA not before: Sat 28 Feb 2026 15:52:15 +0000 ROA not after: Sat 27 Feb 2027 15:57:15 +0000 asID: 262393 IP address blocks: 138.121.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 12:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a5:ae:c4:84:6c:a7:14:86:b9:26:0e:a1:73:3d:c4:65:c4:8d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Validity Not Before: Feb 28 15:52:15 2026 GMT Not After : Feb 27 15:57:15 2027 GMT Subject: CN=4FE5A07926592BE83A3D0AFB0B36CB272D088708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:39:90:40:8c:2c:95:fe:3e:8b:81:cd:59: c8:92:a8:17:9c:d9:13:4d:7e:c9:ef:62:69:c9:58: 13:4a:9e:2a:90:c7:8f:6e:c8:e7:e1:89:d8:9e:7a: 6a:10:b4:5e:46:bd:a0:ad:96:a8:e6:7b:9b:1c:13: 6b:8b:67:78:df:74:49:f9:98:61:ae:b2:9d:ae:ab: 0d:76:f3:eb:07:f1:26:03:67:fe:6a:36:c0:61:15: ce:fa:04:1f:f9:f7:cd:a3:21:33:8c:0c:ae:19:4d: ba:a1:c9:9e:6d:df:69:2b:80:82:c7:97:98:cb:03: 3e:84:37:05:1a:03:5e:9f:19:48:17:39:d4:81:a8: 43:01:95:6c:cc:1a:57:3c:6e:6e:e7:9b:b3:81:8a: 4b:8a:8a:17:fc:b5:3d:58:b0:7c:d6:a2:be:87:c3: 1b:ff:af:e0:61:d5:e3:fe:9d:8e:69:5e:d1:c8:e6: b8:49:f0:5d:60:af:ce:01:53:56:dd:35:17:de:63: 14:bc:9e:e3:9d:c1:97:da:6d:50:d0:93:b6:65:f8: 1e:6a:f6:3c:f3:36:cc:65:95:7b:b3:bd:a5:e5:24: e6:36:72:f8:16:2b:1e:36:1e:fa:62:4f:27:9c:d2: 0c:f9:db:d0:44:bf:8c:62:2f:fe:9b:9b:cb:c1:2a: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E5:A0:79:26:59:2B:E8:3A:3D:0A:FB:0B:36:CB:27:2D:08:87:08 X509v3 Authority Key Identifier: keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32342d3234203d3e20323632333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.250.0/24 Signature Algorithm: sha256WithRSAEncryption 28:1d:2d:17:87:16:90:e5:26:b7:6f:1b:6e:0f:ca:b7:c6:79: 2b:40:78:32:41:f6:b7:20:11:f7:53:16:61:6e:5a:19:eb:5c: c0:8a:28:27:da:53:f0:fe:b6:a3:27:14:a2:28:65:f7:dc:bf: bd:f4:dd:73:9f:2a:18:ab:52:75:8a:1d:0c:97:99:72:8b:1f: 2b:a6:f0:cf:a9:cc:de:f9:f6:ca:88:7a:16:92:c0:dc:f3:ff: c5:0a:eb:f3:83:e3:a3:e3:b1:80:ce:85:8f:0f:7d:19:82:98: 7e:80:64:dc:06:d1:ca:bf:9e:22:17:48:19:70:26:ab:f5:df: 6d:24:37:2c:72:5e:20:c8:07:be:ba:36:97:25:9a:e2:d9:77: 0a:ce:15:e4:d6:64:23:e6:f2:7c:aa:2f:eb:0d:c8:76:6a:aa: e1:92:d4:1d:8b:79:43:8d:4a:37:a7:7c:58:3c:a6:ea:2f:8e: 30:e7:a5:2b:b2:84:4a:e3:fb:8b:26:33:69:c0:ee:05:f4:3c: e7:b7:e6:e5:89:6d:89:57:7e:b6:fe:8c:cb:d2:f3:74:f7:a5: 4e:dc:69:a5:86:3a:94:61:1b:5d:0d:0b:2a:76:6f:c1:13:80: 2d:88:5e:08:36:81:4e:b2:a4:a3:4d:e6:50:48:fa:9f:a7:b6: 13:28:07:e7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUVqWuxIRspxSGuSYOoXM9xGXEjbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF NEM0QjFFNTAeFw0yNjAyMjgxNTUyMTVaFw0yNzAyMjcxNTU3MTVaMDMxMTAvBgNV BAMTKDRGRTVBMDc5MjY1OTJCRTgzQTNEMEFGQjBCMzZDQjI3MkQwODg3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpATmQQIwslf4+i4HNWciSqBec 2RNNfsnvYmnJWBNKniqQx49uyOfhidieemoQtF5GvaCtlqjme5scE2uLZ3jfdEn5 mGGusp2uqw128+sH8SYDZ/5qNsBhFc76BB/5982jITOMDK4ZTbqhyZ5t32krgILH l5jLAz6ENwUaA16fGUgXOdSBqEMBlWzMGlc8bm7nm7OBikuKihf8tT1YsHzWor6H wxv/r+Bh1eP+nY5pXtHI5rhJ8F1gr84BU1bdNRfeYxS8nuOdwZfabVDQk7Zl+B5q 9jzzNsxllXuzvaXlJOY2cvgWKx42HvpiTyec0gz529BEv4xiL/6bm8vBKgynAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUT+WgeSZZK+g6PQr7CzbLJy0IhwgwHwYDVR0j BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5 N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv MzEzMzM4MmUzMTMyMzEyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5+jANBgkqhkiG9w0BAQsFAAOCAQEAKB0t F4cWkOUmt28bbg/Kt8Z5K0B4MkH2tyAR91MWYW5aGetcwIooJ9pT8P62oycUoihl 99y/vfTdc58qGKtSdYodDJeZcosfK6bwz6nM3vn2yoh6FpLA3PP/xQrr84Pjo+Ox gM6Fjw99GYKYfoBk3AbRyr+eIhdIGXAmq/XfbSQ3LHJeIMgHvro2lyWa4tl3Cs4V 5NZkI+byfKov6w3Idmqq4ZLUHYt5Q41KN6d8WDym6i+OMOelK7KESuP7iyYzacDu BfQ857fm5YltiVd+tv6My9LzdPelTtxppYY6lGEbXQ0LKnZvwROALYheCDaBTrKk o03mUEj6n6e2EygH5w== -----END CERTIFICATE-----Generated at Sun Mar 1 14:56:33 2026 by rpki-client