$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa File: 3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa (raw, json) Hash identifier: Kw3R6Vgt4/vP5Pi+QGfJhaghGCvuKuQ8T9QKzaI+FzU= Subject key identifier: 24:FA:DC:58:65:76:2B:FD:A6:79:B2:7E:4A:4D:1C:85:E9:D7:3B:48 Certificate issuer: /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Certificate serial: 79CFB291C3F08824E9116CCC91E9F688C9F5C811 Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa Signing time: Wed 25 Feb 2026 12:25:17 +0000 ROA not before: Wed 25 Feb 2026 12:20:17 +0000 ROA not after: Wed 24 Feb 2027 12:25:17 +0000 asID: 263424 IP address blocks: 170.231.152.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 04:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cf:b2:91:c3:f0:88:24:e9:11:6c:cc:91:e9:f6:88:c9:f5:c8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2 Validity Not Before: Feb 25 12:20:17 2026 GMT Not After : Feb 24 12:25:17 2027 GMT Subject: CN=24FADC5865762BFDA679B27E4A4D1C85E9D73B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:81:ed:a9:4a:59:c8:18:cb:af:64:6a:dc: 66:0e:89:8a:5b:f8:ff:69:2b:2e:93:fb:ff:77:87: 8e:7a:a9:2c:a8:43:fa:56:7b:71:d0:80:24:f2:58: ca:ee:17:e2:ba:46:5e:63:15:8b:13:ca:24:06:1f: 3a:fc:00:1e:d8:cb:13:d4:21:ed:8f:eb:58:d8:54: 90:2c:c1:52:8c:05:b4:76:09:5e:ec:38:1e:4f:b6: 6e:df:2a:02:cd:de:a3:b5:29:53:cf:da:f9:60:66: aa:09:74:d1:60:16:8e:fc:d9:81:89:35:01:38:9c: 26:9d:f6:b1:68:de:b8:87:2c:73:c8:a4:a2:59:8a: 37:8b:72:90:40:84:6f:63:50:ae:31:ce:29:a8:f5: a9:15:6d:de:24:e2:b8:0c:7c:7a:d9:44:d0:15:aa: 14:83:8f:a7:c8:b2:49:f7:b1:5a:d4:ee:2b:c1:b5: 33:8f:9e:7c:91:12:52:e5:3f:f2:c8:4f:45:d1:fe: a5:09:58:d1:36:42:59:ad:14:7b:6c:ee:33:6f:96: 7b:45:36:b9:11:fc:cb:29:6e:a0:ca:26:ff:66:12: 95:d4:c6:1d:c3:11:a1:f2:3f:82:fd:a2:cf:06:1d: 5e:e2:2f:f4:a7:d7:41:7c:a3:b1:1b:22:1c:4d:91: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:DC:58:65:76:2B:FD:A6:79:B2:7E:4A:4D:1C:85:E9:D7:3B:48 X509v3 Authority Key Identifier: keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e3233312e3135322e302f32322d3332203d3e20323633343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.152.0/22 Signature Algorithm: sha256WithRSAEncryption 10:c1:46:20:4d:1b:f1:0a:c7:ae:ee:cf:6c:0d:4e:0e:03:cb: 06:2f:55:f1:bb:02:59:60:34:37:69:8c:ae:eb:2f:a6:b2:fa: 0f:90:91:a5:ea:5b:f0:24:ea:63:3f:a5:7e:de:73:27:a7:3d: d2:6c:06:49:a6:3f:24:1f:f2:95:4c:ac:45:87:f9:bf:cc:66: f9:63:50:e5:e0:01:6c:fd:04:bc:55:43:98:b5:a2:c8:f4:f8: bd:10:74:fd:0c:6e:aa:bd:df:6a:87:f8:81:b5:59:29:9b:b3: c4:ae:c2:69:0a:9c:6a:e5:42:40:7b:a4:f9:5d:56:cb:ba:2e: 5f:12:64:b4:95:a1:7a:3b:0c:ca:0b:44:ed:d8:45:96:17:be: cd:4c:e0:b7:21:5f:cf:b2:46:4f:5a:cc:0c:9c:dc:22:86:27: b2:76:34:05:e6:65:c4:ed:c0:a3:01:52:e3:b3:8a:27:31:17: d1:9a:ad:3d:3e:a1:b3:b9:68:22:6b:c4:45:25:a5:02:0d:92: 26:89:41:79:1d:d0:d7:22:93:95:3e:43:77:2d:67:99:77:6a: 51:93:39:4c:fe:93:c2:83:84:ae:3e:77:09:97:67:83:11:9f: 1d:da:9c:27:f6:38:e7:e5:e2:3a:6e:ea:01:1a:66:1d:53:ae: d9:fb:55:b9 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUec+ykcPwiCTpEWzMken2iMn1yBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4 NEVERUNEMjAeFw0yNjAyMjUxMjIwMTdaFw0yNzAyMjQxMjI1MTdaMDMxMTAvBgNV BAMTKDI0RkFEQzU4NjU3NjJCRkRBNjc5QjI3RTRBNEQxQzg1RTlENzNCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaoHtqUpZyBjLr2Rq3GYOiYpb +P9pKy6T+/93h456qSyoQ/pWe3HQgCTyWMruF+K6Rl5jFYsTyiQGHzr8AB7YyxPU Ie2P61jYVJAswVKMBbR2CV7sOB5Ptm7fKgLN3qO1KVPP2vlgZqoJdNFgFo782YGJ NQE4nCad9rFo3riHLHPIpKJZijeLcpBAhG9jUK4xzimo9akVbd4k4rgMfHrZRNAV qhSDj6fIskn3sVrU7ivBtTOPnnyRElLlP/LIT0XR/qUJWNE2QlmtFHts7jNvlntF NrkR/MspbqDKJv9mEpXUxh3DEaHyP4L9os8GHV7iL/Sn10F8o7EbIhxNkWoVAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUJPrcWGV2K/2mebJ+Sk0chenXO0gwHwYDVR0j BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4 QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv MzEzNzMwMmUzMjMzMzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzMzM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrnmDANBgkqhkiG9w0BAQsFAAOCAQEAEMFG IE0b8QrHru7PbA1ODgPLBi9V8bsCWWA0N2mMrusvprL6D5CRpepb8CTqYz+lft5z J6c90mwGSaY/JB/ylUysRYf5v8xm+WNQ5eABbP0EvFVDmLWiyPT4vRB0/Qxuqr3f aof4gbVZKZuzxK7CaQqcauVCQHuk+V1Wy7ouXxJktJWhejsMygtE7dhFlhe+zUzg tyFfz7JGT1rMDJzcIoYnsnY0BeZlxO3AowFS47OKJzEX0ZqtPT6hs7loImvERSWl Ag2SJolBeR3Q1yKTlT5Ddy1nmXdqUZM5TP6TwoOErj53CZdngxGfHdqcJ/Y45+Xi Om7qARpmHVOu2ftVuQ== -----END CERTIFICATE-----Generated at Sun Mar 1 14:59:49 2026 by rpki-client