$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3234203d3e20323733343930.roa File: 3133382e35392e3134382e302f32332d3234203d3e20323733343930.roa (raw, json) Hash identifier: BavbtEj+/W+q1oYMhtgs7unJEMslkzXV16usvhbFzoQ= Subject key identifier: 9A:B2:95:20:95:C0:E4:64:0A:A6:B7:D6:3B:EB:68:A3:4F:72:A2:40 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 7E531AC0C54BF97C692A335E361312EAE8EA85F7 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:32:54 +0000 ROA not before: Fri 20 Feb 2026 12:27:54 +0000 ROA not after: Fri 19 Feb 2027 12:32:54 +0000 asID: 273490 IP address blocks: 138.59.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:53:1a:c0:c5:4b:f9:7c:69:2a:33:5e:36:13:12:ea:e8:ea:85:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:27:54 2026 GMT Not After : Feb 19 12:32:54 2027 GMT Subject: CN=9AB2952095C0E4640AA6B7D63BEB68A34F72A240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:e0:03:db:e9:a8:6e:7d:3e:62:f0:aa:82: f2:07:c8:34:57:da:94:14:07:8f:a3:64:85:8f:3b: 5c:11:c4:ba:8f:ef:66:10:91:b2:5e:e3:6e:86:e1: 3f:e8:f4:b7:dd:97:50:43:5c:2a:6d:75:d9:e6:59: ca:c2:df:b5:8b:12:70:8c:40:54:7a:18:16:c3:5c: 6a:38:a8:16:3d:73:64:dd:5f:f2:a4:4d:1e:b3:bc: 7b:db:56:b4:0a:23:de:e6:11:ea:b6:d5:4c:8f:af: 38:6f:74:fe:fd:85:c7:3a:d3:65:f0:df:79:a4:3a: eb:13:fc:80:2f:c6:18:68:fd:99:c8:98:ff:b7:6f: fa:5e:cd:2a:7a:c2:fd:e0:5d:18:77:48:5a:5e:fb: 1a:6d:42:ba:99:0e:48:2f:b5:7e:e3:43:60:c3:d0: 12:e6:cb:81:5e:68:a6:1a:e8:f8:d5:9b:f2:a2:4b: b0:db:10:c2:a9:60:08:c6:50:04:06:86:81:21:22: 3c:dc:db:93:0a:03:20:77:9a:a8:1f:42:ae:91:09: b3:37:f7:85:bb:d6:3a:a4:fb:d4:51:fc:06:e7:cb: e8:a0:44:64:93:3a:2f:41:c2:9e:6c:60:ff:a3:87: c8:9a:e2:06:33:e6:1b:3f:5c:c4:13:98:0a:63:76: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:95:20:95:C0:E4:64:0A:A6:B7:D6:3B:EB:68:A3:4F:72:A2:40 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.148.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:df:a6:1d:a2:61:bd:41:a5:30:c5:bc:62:be:b9:3c:ac:d5: a7:e7:49:96:71:7e:ba:28:02:c2:3c:c7:b9:ab:e1:4e:a0:9c: b9:1c:a0:c7:cf:e3:0f:62:ff:bd:fa:f1:0d:20:54:f4:43:56: df:0e:4c:17:2f:cb:7c:dd:71:b7:02:56:28:b8:cb:96:22:3e: fd:e3:76:5c:c5:c6:3e:b6:bf:cc:e8:33:41:a6:27:ef:01:f6: be:10:39:d6:ec:6f:e5:f3:8c:f4:19:0c:a6:4f:cf:27:45:3b: 4e:dd:3c:0d:00:15:3a:40:d7:24:3f:a9:3f:95:69:0e:97:f2: 16:5d:52:86:06:ce:07:a3:c8:1a:18:0a:07:40:fb:ff:31:78: 3c:23:65:e7:d9:5f:3e:5c:76:de:1b:cf:aa:d6:72:7a:3d:a1: 2d:a1:78:b0:f0:2e:75:eb:97:51:4e:b7:d5:ca:6f:ec:72:91: 47:db:b4:da:8a:d4:e2:aa:17:e5:bf:d2:9c:1b:b1:af:94:07: bb:ee:f8:20:7d:0b:d4:73:46:af:a3:fe:f8:8c:b9:6f:8a:e1: 41:d5:07:ae:0d:d7:93:0d:c9:bc:dd:54:02:b6:7c:df:cb:bc: 37:2f:43:b8:47:42:2f:cc:c1:bf:1f:8d:b0:17:4c:9d:3a:86: c5:33:e5:ef -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUflMawMVL+XxpKjNeNhMS6ujqhfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI3NTRaFw0yNzAyMTkxMjMyNTRaMDMxMTAvBgNV BAMTKDlBQjI5NTIwOTVDMEU0NjQwQUE2QjdENjNCRUI2OEEzNEY3MkEyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7eAD2+mobn0+YvCqgvIHyDRX 2pQUB4+jZIWPO1wRxLqP72YQkbJe426G4T/o9Lfdl1BDXCptddnmWcrC37WLEnCM QFR6GBbDXGo4qBY9c2TdX/KkTR6zvHvbVrQKI97mEeq21UyPrzhvdP79hcc602Xw 33mkOusT/IAvxhho/ZnImP+3b/pezSp6wv3gXRh3SFpe+xptQrqZDkgvtX7jQ2DD 0BLmy4FeaKYa6PjVm/KiS7DbEMKpYAjGUAQGhoEhIjzc25MKAyB3mqgfQq6RCbM3 94W71jqk+9RR/Abny+igRGSTOi9Bwp5sYP+jh8ia4gYz5hs/XMQTmApjdl+fAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmrKVIJXA5GQKprfWO+too09yokAwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzMzM4MmUzNTM5MmUzMTM0MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3 MzMzNDM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGKO5QwDQYJKoZIhvcNAQELBQADggEBACrfph2i Yb1BpTDFvGK+uTys1afnSZZxfrooAsI8x7mr4U6gnLkcoMfP4w9i/7368Q0gVPRD Vt8OTBcvy3zdcbcCVii4y5YiPv3jdlzFxj62v8zoM0GmJ+8B9r4QOdbsb+XzjPQZ DKZPzydFO07dPA0AFTpA1yQ/qT+VaQ6X8hZdUoYGzgejyBoYCgdA+/8xeDwjZefZ Xz5cdt4bz6rWcno9oS2heLDwLnXrl1FOt9XKb+xykUfbtNqK1OKqF+W/0pwbsa+U B7vu+CB9C9RzRq+j/viMuW+K4UHVB64N15MNybzdVAK2fN/LvDcvQ7hHQi/Mwb8f jbAXTJ06hsUz5e8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:03:59 2026 by rpki-client