$ rpki-client -vvvf rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa File: 3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa (raw, json) Hash identifier: dC8IeVeUQdk4dxjs2JIwqoPkS8lTVsJmWePHMr60NzQ= Subject key identifier: 8D:EF:DA:C9:77:28:6B:01:91:BB:87:35:7A:9E:0A:E5:4A:0D:F1:34 Certificate issuer: /CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Certificate serial: 31D3CE25CB016A6603D98CE686B70C4F5FE33A3E Authority key identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa Signing time: Mon 26 Oct 2026 16:25:20 +0000 ROA not before: Mon 26 Oct 2026 16:20:20 +0000 ROA not after: Mon 25 Oct 2027 16:25:20 +0000 asID: 266332 IP address blocks: 170.238.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Oct 2026 19:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d3:ce:25:cb:01:6a:66:03:d9:8c:e6:86:b7:0c:4f:5f:e3:3a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Validity Not Before: Oct 26 16:20:20 2026 GMT Not After : Oct 25 16:25:20 2027 GMT Subject: CN=8DEFDAC977286B0191BB87357A9E0AE54A0DF134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:a1:26:b8:43:60:2a:1d:dd:62:7d:05:81: c9:90:22:3a:4c:0e:d0:b1:a3:71:fb:63:1e:53:71: 54:26:86:71:fd:f5:57:4e:02:05:8a:28:b5:04:3f: 4e:d5:ef:42:25:29:d8:e3:98:63:51:43:7c:39:77: c0:a3:32:7b:53:8e:33:53:49:12:bf:48:bf:d1:bf: 5f:95:71:23:08:1c:30:ca:68:e5:0a:e8:b0:1c:09: 2b:fd:72:fe:c3:6e:92:51:53:4c:18:a7:ca:f0:1b: fb:30:20:b8:94:62:b5:db:e2:37:e8:bd:ba:6c:51: 23:90:ed:ad:5d:67:df:65:de:0e:ac:59:6a:af:b5: d4:ca:6f:9a:8a:6c:a3:8a:5d:7b:49:c2:9d:e7:9f: 77:4c:21:17:1e:98:8f:12:17:7b:96:39:58:61:99: a4:73:8e:f9:c1:be:53:fb:34:af:74:da:4f:90:6c: a2:e9:af:34:f9:95:73:2f:b7:da:3a:ad:9e:19:76: 88:e1:07:05:b6:54:2c:e8:7e:09:09:01:74:81:d0: 2a:db:4a:39:58:eb:9e:b8:c7:7d:89:5b:99:2e:9f: 3b:97:a9:ad:84:6b:eb:53:72:bc:24:a6:31:0c:71: 41:5a:03:40:42:2f:4e:c6:57:be:71:24:3c:31:44: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EF:DA:C9:77:28:6B:01:91:BB:87:35:7A:9E:0A:E5:4A:0D:F1:34 X509v3 Authority Key Identifier: keyid:14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/3137302e3233382e3138382e302f32322d3234203d3e20323636333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.188.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:b5:3d:37:74:cd:26:a5:1d:89:8f:0e:ed:37:48:48:68:d3: b4:9a:76:ec:26:61:11:0c:1c:eb:b6:f6:ee:4e:52:f9:eb:16: da:78:35:f4:ce:67:43:84:28:58:67:29:5e:6d:d5:0f:37:5d: 6e:05:20:69:72:13:e7:bd:33:76:c7:d5:98:65:7b:a6:fa:9c: f2:4e:eb:d1:87:3b:c6:4f:33:3a:82:e0:48:84:a7:51:3a:6b: ab:c7:60:94:6d:03:df:b5:4e:20:49:40:76:ac:44:0b:e9:8d: 67:c2:b2:32:45:f3:9b:8b:8a:c6:e2:1f:c5:88:98:f2:67:3f: 13:ff:65:7a:d5:a4:0b:15:1f:ac:a4:54:1a:3d:0b:66:02:3b: 58:01:c3:73:e2:e7:3f:15:bd:93:83:da:e7:ea:6d:1d:a4:94: 52:54:33:3b:f3:63:00:24:ef:f8:fe:e4:4e:c8:96:e7:7e:af: fa:15:88:45:16:ba:c3:ca:b9:0a:44:84:fe:46:e8:d5:3d:19: 0b:fa:65:e6:9c:8d:bb:1d:d5:43:cd:39:2b:1b:56:bf:d3:6e: ce:d7:34:80:bc:f0:90:ef:81:56:58:8f:11:ca:9d:dc:d1:41: ee:6f:73:36:07:bd:58:ba:cc:06:cd:1f:6e:a7:8b:32:c3:83: 9f:b2:99:0c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUMdPOJcsBamYD2YzmhrcMT1/jOj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMUNFMEMxNjQzRENGRDA2NkY2NjJDRTlFMzA3NDM3 OUE2NzMyQjAeFw0yNjEwMjYxNjIwMjBaFw0yNzEwMjUxNjI1MjBaMDMxMTAvBgNV BAMTKDhERUZEQUM5NzcyODZCMDE5MUJCODczNTdBOUUwQUU1NEEwREYxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6qEmuENgKh3dYn0FgcmQIjpM DtCxo3H7Yx5TcVQmhnH99VdOAgWKKLUEP07V70IlKdjjmGNRQ3w5d8CjMntTjjNT SRK/SL/Rv1+VcSMIHDDKaOUK6LAcCSv9cv7DbpJRU0wYp8rwG/swILiUYrXb4jfo vbpsUSOQ7a1dZ99l3g6sWWqvtdTKb5qKbKOKXXtJwp3nn3dMIRcemI8SF3uWOVhh maRzjvnBvlP7NK902k+QbKLprzT5lXMvt9o6rZ4ZdojhBwW2VCzofgkJAXSB0Crb SjlY6564x32JW5kunzuXqa2Ea+tTcrwkpjEMcUFaA0BCL07GV75xJDwxRIqPAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUje/ayXcoawGRu4c1ep4K5UoN8TQwHwYDVR0j BBgwFoAUFPHODBZD3P0Gb2Ys6eMHQ3mmcyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2NhTXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZB a0gvMC8xNEYxQ0UwQzE2NDNEQ0ZEMDY2RjY2MkNFOUUzMDc0Mzc5QTY3MzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RjFDRTBDMTY0M0RDRkQw NjZGNjYyQ0U5RTMwNzQzNzlBNjczMkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNjYU1yNlFmNXNZcnRRbmk3SmhDOTEzRzFaUGNWd3l3bkJUaVh3QzRWQWtILzAv MzEzNzMwMmUzMjMzMzgyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNjMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqruvDANBgkqhkiG9w0BAQsFAAOCAQEAirU9 N3TNJqUdiY8O7TdISGjTtJp27CZhEQwc67b27k5S+esW2ng19M5nQ4QoWGcpXm3V DzddbgUgaXIT570zdsfVmGV7pvqc8k7r0Yc7xk8zOoLgSISnUTprq8dglG0D37VO IElAdqxEC+mNZ8KyMkXzm4uKxuIfxYiY8mc/E/9letWkCxUfrKRUGj0LZgI7WAHD c+LnPxW9k4Pa5+ptHaSUUlQzO/NjACTv+P7kTsiW536v+hWIRRa6w8q5CkSE/kbo 1T0ZC/pl5pyNux3VQ805KxtWv9Nuztc0gLzwkO+BVliPEcqd3NFB7m9zNge9WLrM Bs0fbqeLMsODn7KZDA== -----END CERTIFICATE-----Generated at Tue Oct 27 07:16:21 2026 by rpki-client