$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa File: 3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa (raw, json) Hash identifier: 3HP81u/8KHVBctmoV725jb64tt9H6JVLBvpMH1Gvgq8= Subject key identifier: 36:78:4F:2F:A9:D3:51:16:1B:D0:FF:B2:18:B1:AE:41:D1:8C:9E:96 Certificate issuer: /CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2 Certificate serial: 05041CF0E426B9B07CA85798E0DE2C2A009D20F9 Authority key identifier: C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa Signing time: Wed 25 Feb 2026 18:42:20 +0000 ROA not before: Wed 25 Feb 2026 18:37:20 +0000 ROA not after: Wed 24 Feb 2027 18:42:20 +0000 asID: 268605 IP address blocks: 190.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 05:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:04:1c:f0:e4:26:b9:b0:7c:a8:57:98:e0:de:2c:2a:00:9d:20:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2 Validity Not Before: Feb 25 18:37:20 2026 GMT Not After : Feb 24 18:42:20 2027 GMT Subject: CN=36784F2FA9D351161BD0FFB218B1AE41D18C9E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:2e:92:74:d5:bd:d5:cd:e6:f1:84:15:42: 8d:e7:71:5e:ad:71:96:1e:49:f2:6a:85:db:81:ef: d7:cb:33:c5:dd:3e:85:29:92:82:7f:e9:04:16:99: 16:f4:84:51:9d:ae:d6:6e:c8:ca:b5:68:54:41:a4: 9b:a2:47:d0:92:fc:c8:72:7f:d3:0d:b5:1d:3e:b3: c7:5e:fa:d2:b8:3b:b7:02:ae:32:06:e8:c9:26:13: 74:23:bf:4c:98:ee:4a:25:94:ba:1a:72:10:1c:3e: e2:98:f4:9b:b9:02:b9:76:a9:ed:30:56:6a:52:34: 5b:34:df:ea:2f:ea:f9:43:ef:99:62:2a:ef:d7:e0: f0:94:a3:3f:58:6a:c5:05:1e:a3:a5:47:51:cb:22: de:3e:a9:7f:e7:e0:c5:5d:bd:ee:a0:9d:82:e3:15: 41:52:48:c9:11:17:2b:ba:a3:29:32:09:5c:11:9b: 57:b8:f3:68:ca:76:7b:01:d4:23:94:90:eb:f3:71: 21:d7:48:1f:09:8d:8c:fc:f4:09:ad:09:11:f1:de: ec:35:a9:1e:41:96:81:86:47:ef:32:78:c8:67:88: 7a:04:7b:12:4b:be:3d:d2:33:f8:03:96:02:4d:06: 6b:52:1f:71:e4:48:65:fd:7b:92:1f:d1:d9:7d:1d: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:78:4F:2F:A9:D3:51:16:1B:D0:FF:B2:18:B1:AE:41:D1:8C:9E:96 X509v3 Authority Key Identifier: keyid:C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323638363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.159.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f5:4b:3e:ea:1f:c9:79:0d:2c:7f:90:4c:b9:18:35:d6:93: 71:df:87:97:fc:dd:69:72:64:69:a6:57:c3:a6:2d:65:5c:82: 21:5b:5c:e4:ab:9e:9b:23:47:30:ec:88:06:26:f2:f2:d2:f3: 34:13:cd:0d:de:39:47:7c:3a:31:e1:76:65:aa:67:1a:f2:b0: d3:ff:da:e7:84:e8:3d:8f:4f:98:4e:b8:a6:fe:4f:ad:a1:9a: 6d:1b:2e:cc:95:75:4d:1e:a1:cd:3d:ce:68:60:9b:fc:8a:a8: ae:cf:13:0a:88:2a:2b:86:3c:c2:be:d0:e7:e8:9e:36:55:cd: 31:62:05:7f:1c:b7:45:a0:84:15:7b:02:68:30:31:52:2b:22: 6e:2c:83:c7:6d:15:2b:cd:42:30:0b:18:e0:e0:26:4e:65:64: a9:13:09:09:31:a4:3c:be:a0:9a:09:37:1e:8f:25:53:28:7b: ad:8b:0f:2a:9b:85:b2:54:e1:c3:9a:b1:25:d8:59:6f:20:5c: 60:7f:96:80:79:ec:ce:f1:f5:a2:59:a3:e0:4b:b4:ac:a9:35: 46:bf:9a:1f:88:e0:bd:dc:11:75:f0:34:ec:40:be:33:59:ce: bc:25:ff:7c:9d:99:9c:ed:db:54:5a:30:60:b1:23:6d:9f:a2: 56:ea:83:d8 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUBQQc8OQmubB8qFeY4N4sKgCdIPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGRTAxQjA5NURBNTZEN0JEQUMyOENCNDYyNjdDNjFD RTlBMzlDMjAeFw0yNjAyMjUxODM3MjBaFw0yNzAyMjQxODQyMjBaMDMxMTAvBgNV BAMTKDM2Nzg0RjJGQTlEMzUxMTYxQkQwRkZCMjE4QjFBRTQxRDE4QzlFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsIC6SdNW91c3m8YQVQo3ncV6t cZYeSfJqhduB79fLM8XdPoUpkoJ/6QQWmRb0hFGdrtZuyMq1aFRBpJuiR9CS/Mhy f9MNtR0+s8de+tK4O7cCrjIG6MkmE3Qjv0yY7kollLoachAcPuKY9Ju5Arl2qe0w VmpSNFs03+ov6vlD75liKu/X4PCUoz9YasUFHqOlR1HLIt4+qX/n4MVdve6gnYLj FUFSSMkRFyu6oykyCVwRm1e482jKdnsB1COUkOvzcSHXSB8JjYz89AmtCRHx3uw1 qR5BloGGR+8yeMhniHoEexJLvj3SM/gDlgJNBmtSH3HkSGX9e5If0dl9HYivAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUNnhPL6nTURYb0P+yGLGuQdGMnpYwHwYDVR0j BBgwFoAUw/4BsJXaVte9rCjLRiZ8Yc6aOcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr VEwvMC9DM0ZFMDFCMDk1REE1NkQ3QkRBQzI4Q0I0NjI2N0M2MUNFOUEzOUMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRkUwMUIwOTVEQTU2RDdC REFDMjhDQjQ2MjY3QzYxQ0U5QTM5QzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlkWnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAv MzEzOTMwMmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzODM2MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5vnzANBgkqhkiG9w0BAQsFAAOCAQEAkfVL PuofyXkNLH+QTLkYNdaTcd+Hl/zdaXJkaaZXw6YtZVyCIVtc5KuemyNHMOyIBiby 8tLzNBPNDd45R3w6MeF2ZapnGvKw0//a54ToPY9PmE64pv5PraGabRsuzJV1TR6h zT3OaGCb/Iqors8TCogqK4Y8wr7Q5+ieNlXNMWIFfxy3RaCEFXsCaDAxUisibiyD x20VK81CMAsY4OAmTmVkqRMJCTGkPL6gmgk3Ho8lUyh7rYsPKpuFslThw5qxJdhZ byBcYH+WgHnszvH1olmj4Eu0rKk1Rr+aH4jgvdwRdfA07EC+M1nOvCX/fJ2ZnO3b VFowYLEjbZ+iVuqD2A== -----END CERTIFICATE-----Generated at Mon Mar 2 17:47:53 2026 by rpki-client