$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233372e302f32342d3234203d3e20323733343930.roa File: 3230302e3232392e3233372e302f32342d3234203d3e20323733343930.roa (raw, json) Hash identifier: qrXbCdW9JSu+QO5G/lzv6FJQ4rjcyvaG1kJlFOfBnzg= Subject key identifier: 20:1D:12:DA:47:25:E5:BA:F7:4A:D6:E4:B1:5F:55:E8:6D:96:36:85 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 1FEC9EED9E36E3E9F8E4908584358E48EDDED403 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233372e302f32342d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:33:09 +0000 ROA not before: Fri 20 Feb 2026 12:28:09 +0000 ROA not after: Fri 19 Feb 2027 12:33:09 +0000 asID: 273490 IP address blocks: 200.229.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ec:9e:ed:9e:36:e3:e9:f8:e4:90:85:84:35:8e:48:ed:de:d4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:28:09 2026 GMT Not After : Feb 19 12:33:09 2027 GMT Subject: CN=201D12DA4725E5BAF74AD6E4B15F55E86D963685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:60:97:c9:8d:87:6a:24:5d:0b:fb:0f:32: fd:22:32:07:b8:7d:d4:2a:e0:16:c0:3e:27:20:34: 1a:92:66:85:03:d3:32:1e:cc:37:06:aa:09:48:40: 1e:dc:83:0a:7f:65:7d:7a:2c:82:e0:52:39:e0:e4: c1:1a:97:7a:c4:3d:99:98:de:75:af:a4:bf:34:d9: a0:27:5e:82:44:ac:d9:f8:14:04:c3:1f:c9:b2:74: 1e:6a:8c:d1:87:05:fa:12:bf:79:df:70:e7:65:a4: 24:10:67:09:2d:7d:ea:6f:9a:34:16:9a:19:45:86: aa:53:09:36:a6:09:d8:57:d5:76:af:e4:4f:bb:b6: 63:02:eb:92:04:10:24:85:2e:b5:5a:90:0f:0c:f2: 5c:8f:59:da:cd:c9:f4:f4:f6:fc:69:f3:4b:38:59: 58:0a:f2:cc:62:45:85:52:66:29:20:11:30:82:5a: 2d:cd:79:15:cc:e0:d3:93:e7:d8:66:2d:e1:ba:9f: ab:2b:00:7c:0c:f1:1e:43:68:d8:2e:06:04:23:1a: 73:e7:f1:17:9d:23:70:0c:37:63:8a:72:7d:c2:00: 80:43:e6:06:e7:46:37:9f:79:12:df:f6:34:91:6c: a7:ff:b0:b4:57:db:f7:3d:de:78:95:6e:fe:50:fc: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:12:DA:47:25:E5:BA:F7:4A:D6:E4:B1:5F:55:E8:6D:96:36:85 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233372e302f32342d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.237.0/24 Signature Algorithm: sha256WithRSAEncryption 36:91:57:bd:0f:ce:36:de:19:0c:15:60:1d:ad:0b:07:a9:05: f4:66:da:cc:aa:db:79:79:bb:89:6c:48:99:50:ce:6c:d4:e3: c4:8f:c7:f0:98:ca:a8:19:4f:7f:18:e3:d2:ab:f6:37:57:e0: f8:b6:87:4b:01:cd:7e:8c:76:32:23:3a:c9:10:65:73:97:9e: 3f:10:19:13:37:1d:3c:53:21:d9:eb:5a:b6:f5:c9:b4:52:19: da:f9:07:32:30:df:9e:6d:09:d3:2d:90:ff:1b:30:7d:a6:22: fa:1a:94:77:36:95:dd:27:b9:20:29:80:ab:94:ec:1a:9a:c4: d2:fa:dd:40:a0:7e:f0:b5:d6:3a:dd:96:0d:6a:2b:c4:d7:da: 87:ad:5e:6f:fb:76:7a:36:b4:e7:d1:62:fe:98:6f:87:d6:91: 54:20:35:06:ca:28:ca:ea:6a:dd:28:57:89:ed:c1:5b:8b:9a: d6:ff:7b:c2:2f:4b:1f:dc:cb:ac:3d:41:bf:fa:ab:ec:8c:c5: 82:2d:42:36:99:b2:00:40:e2:1f:58:0f:cd:28:b9:33:2f:81: 71:74:9b:35:9f:31:d2:23:24:4f:31:1f:bf:b0:6f:dd:08:a3: 5d:97:b7:71:4c:75:2e:83:26:62:b9:fc:67:10:7a:5b:0d:c3: 98:63:a0:ff -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUH+ye7Z424+n45JCFhDWOSO3e1AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDlaFw0yNzAyMTkxMjMzMDlaMDMxMTAvBgNV BAMTKDIwMUQxMkRBNDcyNUU1QkFGNzRBRDZFNEIxNUY1NUU4NkQ5NjM2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMTGCXyY2HaiRdC/sPMv0iMge4 fdQq4BbAPicgNBqSZoUD0zIezDcGqglIQB7cgwp/ZX16LILgUjng5MEal3rEPZmY 3nWvpL802aAnXoJErNn4FATDH8mydB5qjNGHBfoSv3nfcOdlpCQQZwktfepvmjQW mhlFhqpTCTamCdhX1Xav5E+7tmMC65IEECSFLrVakA8M8lyPWdrNyfT09vxp80s4 WVgK8sxiRYVSZikgETCCWi3NeRXM4NOT59hmLeG6n6srAHwM8R5DaNguBgQjGnPn 8RedI3AMN2OKcn3CAIBD5gbnRjefeRLf9jSRbKf/sLRX2/c93niVbv5Q/CbrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUIB0S2kcl5br3StbksV9V6G2WNoUwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl7TANBgkqhkiG9w0BAQsFAAOCAQEANpFX vQ/ONt4ZDBVgHa0LB6kF9GbazKrbeXm7iWxImVDObNTjxI/H8JjKqBlPfxjj0qv2 N1fg+LaHSwHNfox2MiM6yRBlc5eePxAZEzcdPFMh2etatvXJtFIZ2vkHMjDfnm0J 0y2Q/xswfaYi+hqUdzaV3Se5ICmAq5TsGprE0vrdQKB+8LXWOt2WDWorxNfah61e b/t2eja059Fi/phvh9aRVCA1Bsooyupq3ShXie3BW4ua1v97wi9LH9zLrD1Bv/qr 7IzFgi1CNpmyAEDiH1gPzSi5My+BcXSbNZ8x0iMkTzEfv7Bv3QijXZe3cUx1LoMm Yrn8ZxB6Ww3DmGOg/w== -----END CERTIFICATE-----Generated at Mon Mar 2 18:47:11 2026 by rpki-client