$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e20323733343930.roa File: 3139312e3234302e3134352e302f32342d3234203d3e20323733343930.roa (raw, json) Hash identifier: CI78Ou6u8Y3TQl+06Uwu58helYT8pQ6iAdZ2L1O2+Cw= Subject key identifier: D2:98:CA:DB:64:08:3A:2B:F5:91:76:D7:E4:3B:A0:DD:6E:0D:54:B0 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 4F9B9C7E8E2C9E71F8FF12546741976A032D363D Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:33:00 +0000 ROA not before: Fri 20 Feb 2026 12:28:00 +0000 ROA not after: Fri 19 Feb 2027 12:33:00 +0000 asID: 273490 IP address blocks: 191.240.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:9c:7e:8e:2c:9e:71:f8:ff:12:54:67:41:97:6a:03:2d:36:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:28:00 2026 GMT Not After : Feb 19 12:33:00 2027 GMT Subject: CN=D298CADB64083A2BF59176D7E43BA0DD6E0D54B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:db:be:a6:8e:92:03:48:10:dd:d5:08:ed: bd:41:18:fb:99:31:ab:2e:7a:ab:c0:0a:00:7a:54: 9a:35:0d:89:d9:4a:8f:4a:9a:62:ad:38:d1:21:57: e7:cd:70:a1:08:59:5e:39:55:97:3f:fd:5e:43:08: 4b:8f:87:6f:86:15:4e:cf:e4:b5:f3:e6:98:b5:07: 1a:2b:15:f0:63:31:a0:e7:d7:6f:99:17:3e:cb:89: fd:b5:8c:c0:4b:1b:d0:3c:83:b2:17:4d:94:de:23: d8:35:fd:9d:6d:03:e3:69:cd:f3:1f:e5:51:6a:b5: 30:0e:e7:1b:a9:24:a0:be:63:b9:f6:db:a1:8b:f3: bc:ed:21:7d:37:52:90:51:f9:3a:ba:43:10:87:98: 46:5f:9b:c2:7c:88:6a:2b:54:78:09:9f:16:a4:40: 10:c1:f0:89:05:5d:9a:72:b9:67:22:35:70:a0:3f: 01:42:22:62:26:73:33:da:5d:ec:a3:93:88:04:61: 14:09:ae:fc:ee:a0:d5:1f:69:93:f5:f8:77:0f:e5: 6c:5d:e6:c5:6b:20:c3:18:74:ce:ad:a8:09:5c:d0: 69:7a:3d:e0:0f:5f:d1:a8:46:0e:e3:43:9f:c4:30: 9b:dd:50:dd:b9:cb:87:ab:d1:7a:ef:ad:78:bf:a5: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:98:CA:DB:64:08:3A:2B:F5:91:76:D7:E4:3B:A0:DD:6E:0D:54:B0 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.145.0/24 Signature Algorithm: sha256WithRSAEncryption af:69:4f:74:fb:c7:95:b7:14:ae:91:ec:53:fa:d8:7d:49:e2: ee:d4:8c:09:7f:f0:5b:af:78:4f:59:15:d4:d1:74:4e:f4:38: cf:b4:53:6a:39:8f:9e:1e:37:60:70:41:23:e1:f5:b6:39:80: e9:da:b0:7a:8f:70:14:b1:7e:0c:dc:b9:d7:20:0a:84:3f:8e: ce:31:c0:f1:00:48:80:67:55:a9:dc:0d:76:c9:f4:7f:37:61: 00:c2:2a:69:4a:bc:82:f1:6f:af:1a:7f:f2:a3:29:46:cc:82: e8:03:35:47:df:19:31:f8:46:3a:b4:6c:58:1b:9f:15:a8:38: 7e:79:30:82:56:d8:ad:ac:09:00:af:ba:bd:ba:df:62:0f:39: 01:4a:24:d9:59:22:ca:47:d2:0d:9f:2c:d9:a8:59:c1:ab:94: e3:5b:91:ab:9c:ef:f5:9e:4a:e2:31:05:4f:e7:67:32:cc:c6: 55:7f:df:c0:ed:71:75:12:cc:93:f8:b7:d9:0a:22:72:b8:5f: 8a:18:a1:ca:20:fd:ab:00:75:07:29:fa:ba:59:c5:5f:6e:d8: e1:6e:a5:93:be:35:23:69:ef:fe:c6:2f:ca:63:2a:28:2e:f3: 4b:39:6a:d3:6a:b4:d0:61:57:43:f9:49:1b:f6:5c:a5:78:82: e1:aa:b3:fe -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUT5ucfo4snnH4/xJUZ0GXagMtNj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDBaFw0yNzAyMTkxMjMzMDBaMDMxMTAvBgNV BAMTKEQyOThDQURCNjQwODNBMkJGNTkxNzZEN0U0M0JBMERENkUwRDU0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gtu+po6SA0gQ3dUI7b1BGPuZ MasueqvACgB6VJo1DYnZSo9KmmKtONEhV+fNcKEIWV45VZc//V5DCEuPh2+GFU7P 5LXz5pi1BxorFfBjMaDn12+ZFz7Lif21jMBLG9A8g7IXTZTeI9g1/Z1tA+NpzfMf 5VFqtTAO5xupJKC+Y7n226GL87ztIX03UpBR+Tq6QxCHmEZfm8J8iGorVHgJnxak QBDB8IkFXZpyuWciNXCgPwFCImImczPaXeyjk4gEYRQJrvzuoNUfaZP1+HcP5Wxd 5sVrIMMYdM6tqAlc0Gl6PeAPX9GoRg7jQ5/EMJvdUN25y4er0XrvrXi/pd3hAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU0pjK22QIOiv1kXbX5Dug3W4NVLAwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wkTANBgkqhkiG9w0BAQsFAAOCAQEAr2lP dPvHlbcUrpHsU/rYfUni7tSMCX/wW694T1kV1NF0TvQ4z7RTajmPnh43YHBBI+H1 tjmA6dqweo9wFLF+DNy51yAKhD+OzjHA8QBIgGdVqdwNdsn0fzdhAMIqaUq8gvFv rxp/8qMpRsyC6AM1R98ZMfhGOrRsWBufFag4fnkwglbYrawJAK+6vbrfYg85AUok 2VkiykfSDZ8s2ahZwauU41uRq5zv9Z5K4jEFT+dnMszGVX/fwO1xdRLMk/i32Qoi crhfihihyiD9qwB1Byn6ulnFX27Y4W6lk741I2nv/sYvymMqKC7zSzlq02q00GFX Q/lJG/ZcpXiC4aqz/g== -----END CERTIFICATE-----Generated at Mon Mar 2 17:03:57 2026 by rpki-client