$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3234203d3e20323733343930.roa File: 3139312e3234302e3135322e302f32322d3234203d3e20323733343930.roa (raw, json) Hash identifier: H1Tm6xqeKLDoOpPAwsXlCeeBvvCgFgaIbqnf3sdy2xA= Subject key identifier: 39:AC:5A:E3:6B:0D:70:6D:F3:DE:0A:7B:DD:39:F5:71:25:B6:82:7A Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 22B8D98A495D792D87D85264277DF00EF92673AD Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:33:06 +0000 ROA not before: Fri 20 Feb 2026 12:28:06 +0000 ROA not after: Fri 19 Feb 2027 12:33:06 +0000 asID: 273490 IP address blocks: 191.240.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b8:d9:8a:49:5d:79:2d:87:d8:52:64:27:7d:f0:0e:f9:26:73:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:28:06 2026 GMT Not After : Feb 19 12:33:06 2027 GMT Subject: CN=39AC5AE36B0D706DF3DE0A7BDD39F57125B6827A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:53:d2:3f:67:20:bd:dc:f8:5d:84:01:60: 31:b8:b8:e9:a6:6b:d7:f3:bd:ae:91:7b:6e:7f:4f: 6f:94:b3:7a:f0:5b:33:ba:f5:ae:18:16:31:72:de: 1c:aa:e5:30:cc:48:fc:dd:f8:58:e6:8e:29:ad:54: a4:b3:0b:94:96:53:b8:2d:f2:c3:e1:dd:fa:62:53: 46:ce:7f:87:7c:d7:7f:73:15:9f:e7:3f:a3:2c:cd: 44:af:2e:19:3b:d1:04:0b:67:9e:8a:10:0d:7d:99: 07:dc:9c:d7:fd:fa:19:20:f2:8f:81:7e:ee:8a:81: fe:d1:9c:c0:9a:04:62:e9:1a:bc:6c:a2:69:43:c5: d1:7f:d4:bb:fb:8f:d4:65:94:18:c2:91:49:f9:f8: 42:f4:5f:e5:26:38:f9:32:7d:66:1e:07:61:cf:8b: ae:19:af:7d:78:6c:99:a8:ff:79:16:af:24:f8:83: d8:2b:f9:f6:55:23:87:3a:7f:e2:30:fc:fe:9f:95: 2a:f7:76:e9:46:85:05:3f:41:b5:de:4a:ba:10:a9: f3:8b:71:dd:4f:68:2c:a0:76:cc:96:f4:4d:68:1e: 87:4d:9a:01:b4:f3:64:fd:9e:85:54:20:d1:31:98: 4f:a6:62:aa:9d:aa:50:9e:f2:7f:ce:0d:9c:e4:e2: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:5A:E3:6B:0D:70:6D:F3:DE:0A:7B:DD:39:F5:71:25:B6:82:7A X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.240.152.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:fb:f0:11:ec:e5:70:6a:08:89:35:a2:9d:f5:b7:8f:7f:fc: 87:8b:ba:b2:ce:a8:c1:b7:01:d1:ed:2b:b2:5f:ff:d8:6a:25: be:5a:bb:a0:ef:2a:b3:a1:b8:d8:71:47:83:46:a6:44:00:fc: 99:87:f8:1c:41:13:03:70:20:8b:ba:0e:e2:3e:19:b3:08:15: e6:f0:97:f3:0b:ab:bf:ee:b2:e5:ee:0e:b8:70:d1:8f:1c:f6: dd:f4:55:9d:5c:c5:07:49:66:2c:73:09:7c:0c:7f:2b:b2:27: b7:fb:d3:5e:19:02:31:a6:87:c0:f3:f8:b4:9c:b8:95:60:05: 84:a7:7a:05:e5:f6:53:44:e9:ab:00:2b:d6:cd:a5:1d:ca:37: ef:22:43:49:50:31:6f:ab:1e:79:3f:30:00:1b:fd:d9:45:ea: f6:2a:11:1a:ff:01:a5:5c:87:75:54:66:5c:74:f0:d4:c6:1e: 3c:5b:ad:2c:8f:53:c0:5a:1c:af:d5:aa:14:3d:41:6e:88:d5: c7:86:aa:11:89:11:e9:87:63:4a:81:ac:d7:e3:19:93:00:bc: 61:78:9a:81:52:8e:9e:cf:66:03:07:2c:d6:80:c0:50:6c:87: 3f:e8:78:04:97:74:74:77:d8:3b:04:2c:74:dc:76:30:61:70: de:6c:ac:16 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUIrjZikldeS2H2FJkJ33wDvkmc60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDZaFw0yNzAyMTkxMjMzMDZaMDMxMTAvBgNV BAMTKDM5QUM1QUUzNkIwRDcwNkRGM0RFMEE3QkREMzlGNTcxMjVCNjgyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBlPSP2cgvdz4XYQBYDG4uOmm a9fzva6Re25/T2+Us3rwWzO69a4YFjFy3hyq5TDMSPzd+FjmjimtVKSzC5SWU7gt 8sPh3fpiU0bOf4d8139zFZ/nP6MszUSvLhk70QQLZ56KEA19mQfcnNf9+hkg8o+B fu6Kgf7RnMCaBGLpGrxsomlDxdF/1Lv7j9RllBjCkUn5+EL0X+UmOPkyfWYeB2HP i64Zr314bJmo/3kWryT4g9gr+fZVI4c6f+Iw/P6flSr3dulGhQU/QbXeSroQqfOL cd1PaCygdsyW9E1oHodNmgG082T9noVUINExmE+mYqqdqlCe8n/ODZzk4jrJAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUOaxa42sNcG3z3gp73Tn1cSW2gnowHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzEzOTMxMmUzMjM0MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/wmDANBgkqhkiG9w0BAQsFAAOCAQEAf/vw EezlcGoIiTWinfW3j3/8h4u6ss6owbcB0e0rsl//2Golvlq7oO8qs6G42HFHg0am RAD8mYf4HEETA3Agi7oO4j4ZswgV5vCX8wurv+6y5e4OuHDRjxz23fRVnVzFB0lm LHMJfAx/K7Int/vTXhkCMaaHwPP4tJy4lWAFhKd6BeX2U0TpqwAr1s2lHco37yJD SVAxb6seeT8wABv92UXq9ioRGv8BpVyHdVRmXHTw1MYePFutLI9TwFocr9WqFD1B bojVx4aqEYkR6YdjSoGs1+MZkwC8YXiagVKOns9mAwcs1oDAUGyHP+h4BJd0dHfY OwQsdNx2MGFw3mysFg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:03:56 2026 by rpki-client