$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e20323733343930.roa File: 3139312e3234302e3135302e302f32342d3234203d3e20323733343930.roa (raw, json) Hash identifier: Wltpevmf2NDfYVhXNzJ6ywxSSsCAXyQ30M79ytSbtsA= Subject key identifier: C7:E0:38:02:B6:38:5A:D9:6D:71:35:93:47:1B:70:C3:74:B6:FF:C2 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 28A1277629CB09C6561CB352C25A5F35B5653C2C Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:32:52 +0000 ROA not before: Fri 20 Feb 2026 12:27:52 +0000 ROA not after: Fri 19 Feb 2027 12:32:52 +0000 asID: 273490 IP address blocks: 191.240.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a1:27:76:29:cb:09:c6:56:1c:b3:52:c2:5a:5f:35:b5:65:3c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:27:52 2026 GMT Not After : Feb 19 12:32:52 2027 GMT Subject: CN=C7E03802B6385AD96D713593471B70C374B6FFC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:87:56:10:72:b9:58:c2:bb:df:8a:ea:03: 49:37:1d:b9:01:76:e2:77:96:d1:2e:a2:26:e4:c8: 05:11:4d:0f:be:52:4e:e1:ec:a0:ef:8b:e6:85:05: 6a:dc:90:e2:f5:d3:e3:10:85:e2:7e:86:86:a7:9e: 58:b2:0e:bd:dc:40:56:6d:c0:cd:4b:d9:87:a6:a0: b7:40:da:6c:a7:db:c0:c7:b7:83:f7:2c:92:e0:ad: de:d0:ad:de:7e:b1:80:bc:08:bc:91:e3:7b:68:fc: 9d:4b:cf:ca:e1:bd:bd:9f:f8:1d:70:3c:36:4f:2d: 82:73:7e:60:a1:e3:4c:b9:ac:36:68:16:b0:24:49: 04:f5:17:b1:d0:c0:05:b3:60:2b:46:44:be:b0:c5: 02:65:dc:51:1c:59:d1:be:b4:43:56:bf:87:62:45: 3c:2b:e6:e9:af:ea:59:20:20:89:4b:a8:6c:3a:50: e5:e5:6c:fc:2a:4f:83:ad:e6:3e:1f:e2:cb:b9:5a: 6a:d5:a1:09:0c:6b:cc:27:42:e3:bd:f0:0d:8a:f2: e4:38:f6:a5:d2:ce:19:82:b4:82:08:99:0a:ef:52: 70:87:ae:fb:5e:1e:68:92:00:a3:cd:5a:95:da:34: 72:d8:15:0c:6e:5c:f7:43:9d:d2:38:27:be:a1:6f: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:38:02:B6:38:5A:D9:6D:71:35:93:47:1B:70:C3:74:B6:FF:C2 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.150.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f9:b0:8c:3a:02:0b:d6:97:7f:b3:54:fd:f2:99:1e:db:3c: e5:50:ff:cf:1f:59:a1:49:59:ac:b0:f5:65:b3:76:12:5b:25: e7:57:c4:bc:77:ab:5c:d1:34:71:d3:6d:b4:bc:5a:e1:21:00: ef:b0:58:ea:b2:e7:e6:7d:07:fc:f2:b5:8d:c8:55:d1:e0:df: 7e:db:53:8d:e7:82:dc:21:cd:b4:35:d8:d2:ec:e4:41:e2:5b: 13:b7:af:b8:0b:5f:15:f8:da:c5:a3:ad:47:0d:b6:4b:b1:4d: 0a:6e:0b:49:7e:98:7f:23:ce:d4:9c:5f:9c:0d:74:df:0e:79: 43:91:75:77:00:d6:c2:4d:35:da:6d:48:b0:71:6b:ab:fa:e0: df:c1:b6:b9:af:7b:c5:82:58:42:7f:8d:32:0e:b9:f9:98:5d: d4:c1:b0:86:fe:b3:28:a3:f0:33:f3:a0:4f:83:31:2b:c0:92: d2:d7:e9:07:97:11:b7:2f:19:57:d0:03:27:cf:6d:06:e7:15: 04:f4:8c:ba:04:e4:e4:72:f8:b7:2c:f2:b1:77:8a:53:5c:37: 85:81:e8:b2:6b:db:89:8f:a0:93:92:5c:05:f1:a5:b3:dc:2d: d0:57:24:79:7a:91:2c:b7:dc:21:d5:04:38:d0:fa:4a:2e:ed: 54:7b:26:dc -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUKKEndinLCcZWHLNSwlpfNbVlPCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI3NTJaFw0yNzAyMTkxMjMyNTJaMDMxMTAvBgNV BAMTKEM3RTAzODAyQjYzODVBRDk2RDcxMzU5MzQ3MUI3MEMzNzRCNkZGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WIdWEHK5WMK734rqA0k3HbkB duJ3ltEuoibkyAURTQ++Uk7h7KDvi+aFBWrckOL10+MQheJ+hoannliyDr3cQFZt wM1L2YemoLdA2myn28DHt4P3LJLgrd7Qrd5+sYC8CLyR43to/J1Lz8rhvb2f+B1w PDZPLYJzfmCh40y5rDZoFrAkSQT1F7HQwAWzYCtGRL6wxQJl3FEcWdG+tENWv4di RTwr5umv6lkgIIlLqGw6UOXlbPwqT4Ot5j4f4su5WmrVoQkMa8wnQuO98A2K8uQ4 9qXSzhmCtIIImQrvUnCHrvteHmiSAKPNWpXaNHLYFQxuXPdDndI4J76hbyUtAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUx+A4ArY4WtltcTWTRxtww3S2/8IwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/wljANBgkqhkiG9w0BAQsFAAOCAQEAbPmw jDoCC9aXf7NU/fKZHts85VD/zx9ZoUlZrLD1ZbN2Elsl51fEvHerXNE0cdNttLxa 4SEA77BY6rLn5n0H/PK1jchV0eDffttTjeeC3CHNtDXY0uzkQeJbE7evuAtfFfja xaOtRw22S7FNCm4LSX6YfyPO1JxfnA103w55Q5F1dwDWwk012m1IsHFrq/rg38G2 ua97xYJYQn+NMg65+Zhd1MGwhv6zKKPwM/OgT4MxK8CS0tfpB5cRty8ZV9ADJ89t BucVBPSMugTk5HL4tyzysXeKU1w3hYHosmvbiY+gk5JcBfGls9wt0FckeXqRLLfc IdUEOND6Si7tVHsm3A== -----END CERTIFICATE-----Generated at Mon Mar 2 17:03:56 2026 by rpki-client