$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3232203d3e20323733343930.roa File: 3230302e3232392e3233322e302f32312d3232203d3e20323733343930.roa (raw, json) Hash identifier: txdfQH2vkocXTTWmO9kFsy2bw3Kr9TlyilzI1y+9ZNU= Subject key identifier: D8:AB:C1:74:2F:23:D5:84:C7:21:99:72:9E:4F:B1:53:8B:45:D4:55 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 72F7E1C357EB79FF25A4BB25118AF90F38D4925E Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3232203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:32:51 +0000 ROA not before: Fri 20 Feb 2026 12:27:51 +0000 ROA not after: Fri 19 Feb 2027 12:32:51 +0000 asID: 273490 IP address blocks: 200.229.232.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f7:e1:c3:57:eb:79:ff:25:a4:bb:25:11:8a:f9:0f:38:d4:92:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:27:51 2026 GMT Not After : Feb 19 12:32:51 2027 GMT Subject: CN=D8ABC1742F23D584C72199729E4FB1538B45D455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:0f:4d:6a:a8:90:f7:58:b8:d4:b5:71:26: a3:ea:69:89:60:33:90:e0:5e:70:b6:f0:46:3a:7a: d4:fc:49:11:de:53:16:27:50:cd:22:18:3c:70:bd: b9:6f:54:0e:24:2f:95:9f:c0:11:e0:08:0b:3c:da: e4:3d:b1:ad:3e:2d:c6:db:17:86:e7:2d:24:0c:f5: 4a:92:91:f4:70:b8:1f:96:5e:de:1b:94:1c:71:05: 8d:9a:ff:8b:81:72:16:e5:89:7b:cf:ea:43:98:34: e4:aa:fe:29:c1:65:ec:4d:a4:02:9b:fa:3d:c3:16: 02:9c:17:cb:1a:53:80:1f:c4:49:d2:7b:b7:25:af: e7:c7:02:53:29:d4:3e:37:61:4f:b7:1e:61:39:0b: 91:e7:3f:19:5e:a0:a1:43:0c:b7:be:64:16:5f:97: e9:9a:3f:63:77:c2:11:fc:42:a3:1e:a3:13:e4:77: 96:fc:a5:27:38:d8:60:5f:f2:c6:56:4b:3b:9c:a8: 97:ce:76:a6:2b:3b:7a:71:db:ab:2e:1d:0f:94:bd: 03:66:7b:4f:3a:0c:b0:9c:41:be:09:a4:a4:84:b1: 57:56:11:0c:d1:c4:b6:ae:38:f0:97:34:21:5a:c8: 48:89:4f:bf:2e:50:84:97:83:69:93:0c:45:51:a1: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:C1:74:2F:23:D5:84:C7:21:99:72:9E:4F:B1:53:8B:45:D4:55 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3232203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.232.0/21 Signature Algorithm: sha256WithRSAEncryption ad:38:9a:65:1e:f8:3c:0f:45:79:7f:2e:d4:57:f9:c0:39:3a: 18:3d:09:d1:b4:89:43:48:f7:91:08:4c:8e:f2:03:d0:c7:7e: 6a:df:ba:8a:27:8e:af:42:63:73:61:d9:71:1e:c7:06:66:57: ff:d2:33:19:e5:6f:92:b6:eb:77:26:f9:56:03:ef:1f:5e:d2: 42:a5:db:9e:88:16:dd:84:e1:44:6c:1a:a5:30:0a:9b:28:94: b2:da:b1:3b:d2:79:6f:88:d6:b4:02:83:c8:42:03:98:0f:3e: 45:a7:1a:0f:1d:d1:78:58:cf:da:4f:07:43:85:a3:99:bd:6a: 67:10:b6:3f:24:53:e5:45:7e:25:99:76:06:0e:e5:a7:29:6e: 25:b0:2b:91:f9:96:4f:bb:02:af:52:e6:7c:1c:84:41:ce:9e: 3c:40:31:c4:1d:2d:4e:0e:f3:1a:fe:9f:a0:12:d2:b6:71:18: f7:f1:ef:89:cd:6a:a1:4b:61:15:d2:27:b6:9d:d2:57:45:5e: 4f:70:96:d9:9d:ca:ca:e4:ac:1d:59:31:d3:f6:f3:90:08:57: d8:d2:91:57:3d:3b:03:ce:e5:06:15:0a:67:79:5c:1a:ac:90: 46:39:65:30:1f:ce:4d:8c:2a:95:fb:9f:01:14:a3:af:29:be: c2:e1:3c:a3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUcvfhw1fref8lpLslEYr5DzjUkl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI3NTFaFw0yNzAyMTkxMjMyNTFaMDMxMTAvBgNV BAMTKEQ4QUJDMTc0MkYyM0Q1ODRDNzIxOTk3MjlFNEZCMTUzOEI0NUQ0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKw9NaqiQ91i41LVxJqPqaYlg M5DgXnC28EY6etT8SRHeUxYnUM0iGDxwvblvVA4kL5WfwBHgCAs82uQ9sa0+Lcbb F4bnLSQM9UqSkfRwuB+WXt4blBxxBY2a/4uBchbliXvP6kOYNOSq/inBZexNpAKb +j3DFgKcF8saU4AfxEnSe7clr+fHAlMp1D43YU+3HmE5C5HnPxleoKFDDLe+ZBZf l+maP2N3whH8QqMeoxPkd5b8pSc42GBf8sZWSzucqJfOdqYrO3px26suHQ+UvQNm e086DLCcQb4JpKSEsVdWEQzRxLauOPCXNCFayEiJT78uUISXg2mTDEVRoSfFAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU2KvBdC8j1YTHIZlynk+xU4tF1FUwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzMzMjJlMzAyZjMyMzEyZDMyMzIyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA8jl6DANBgkqhkiG9w0BAQsFAAOCAQEArTia ZR74PA9FeX8u1Ff5wDk6GD0J0bSJQ0j3kQhMjvID0Md+at+6iieOr0Jjc2HZcR7H BmZX/9IzGeVvkrbrdyb5VgPvH17SQqXbnogW3YThRGwapTAKmyiUstqxO9J5b4jW tAKDyEIDmA8+RacaDx3ReFjP2k8HQ4Wjmb1qZxC2PyRT5UV+JZl2Bg7lpyluJbAr kfmWT7sCr1LmfByEQc6ePEAxxB0tTg7zGv6foBLStnEY9/Hvic1qoUthFdIntp3S V0VeT3CW2Z3KyuSsHVkx0/bzkAhX2NKRVz07A87lBhUKZ3lcGqyQRjllMB/OTYwq lfufARSjrym+wuE8ow== -----END CERTIFICATE-----Generated at Mon Mar 2 18:47:15 2026 by rpki-client