$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e20323733343930.roa File: 3230302e3232392e3233392e302f32342d3234203d3e20323733343930.roa (raw, json) Hash identifier: ztj2ToT9bCyiCpk7F+E8PJ7r4K23ABEc8kC33ZCegDM= Subject key identifier: 18:D6:A3:3B:0A:20:DF:F3:EF:96:59:59:C7:F8:0B:EB:4B:A4:AD:D3 Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 5043D9FD5150B7C23DFC0D2B9FE040F5BC1940E4 Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:33:05 +0000 ROA not before: Fri 20 Feb 2026 12:28:05 +0000 ROA not after: Fri 19 Feb 2027 12:33:05 +0000 asID: 273490 IP address blocks: 200.229.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:43:d9:fd:51:50:b7:c2:3d:fc:0d:2b:9f:e0:40:f5:bc:19:40:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:28:05 2026 GMT Not After : Feb 19 12:33:05 2027 GMT Subject: CN=18D6A33B0A20DFF3EF965959C7F80BEB4BA4ADD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:fe:b8:00:db:fd:05:ca:3c:45:24:be:22: e9:64:8b:9c:83:45:f9:a9:3b:99:ef:b2:c7:1a:9d: 14:39:3e:f9:62:36:be:ab:eb:8e:f1:d0:ff:cd:a7: 1f:31:16:44:48:d7:e1:ad:84:d6:2d:8a:50:c5:ea: 7a:dc:9e:88:16:52:fc:6e:f8:9a:e2:db:c4:c1:fa: 83:55:e0:2e:a2:07:36:d4:7a:e5:2d:d2:93:15:3b: d1:61:5c:54:14:82:36:8f:62:74:7c:61:04:7b:9b: 1d:7a:3b:91:29:66:f5:28:61:5c:94:34:a7:c7:2d: f4:ec:0b:25:41:60:a3:5e:9a:1d:5b:dc:35:e9:91: 0d:11:85:9f:fa:0c:76:84:e5:9a:ef:ef:76:c4:c1: 2a:fb:54:e5:53:54:e6:13:cf:46:e8:2a:5e:81:27: dc:55:65:ac:ca:b7:06:15:a3:a7:c4:79:26:cd:8c: 01:98:ca:85:b8:2e:a7:bd:72:21:ac:6f:18:18:0f: f5:83:70:08:42:a6:e4:b7:a5:29:92:9a:7b:69:c9: 2d:2d:d7:13:d2:b8:6b:ac:38:4a:4f:94:6e:22:f5: 44:4e:87:21:fb:6f:2d:fb:82:5f:13:db:6b:94:f6: aa:f0:c5:f0:e6:af:8d:de:4f:a7:25:cd:0b:b3:9e: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D6:A3:3B:0A:20:DF:F3:EF:96:59:59:C7:F8:0B:EB:4B:A4:AD:D3 X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:c0:9a:77:1a:aa:89:9b:b9:2e:b8:9b:0a:5f:aa:f4:56:55: ea:f0:e4:5c:46:42:e4:f1:7a:5a:c7:50:1a:75:d4:fc:29:b1: bc:1f:8c:59:f1:56:eb:fc:8d:c0:96:87:f0:a7:3c:c2:82:65: 1d:c3:b6:28:dd:db:2a:51:f0:de:36:78:bf:9c:31:ad:d1:59: fe:e4:96:f4:23:26:f8:2f:d4:a5:67:7c:33:de:83:a8:f9:7a: 9c:9f:00:b9:f1:78:ae:1d:05:1f:94:ec:23:47:f6:17:06:5a: 6e:da:e6:4d:e3:b6:57:ba:0d:df:35:1f:fa:41:82:f4:d3:b7: fd:bc:00:3a:01:d9:fe:72:15:4d:23:17:f7:98:6c:5a:6c:c9: 9e:56:d0:fc:9f:88:72:44:97:08:d4:04:ee:18:bb:7d:f4:44: 7f:5a:ba:a8:8a:30:d2:05:ee:fb:3b:72:1a:87:0f:57:40:f7: 07:dc:0d:68:39:b6:16:0f:68:6a:31:a5:bf:81:91:41:c7:f8: 50:f3:29:fc:43:0e:64:55:35:b5:eb:67:00:a3:e5:85:0f:6d: 28:6a:21:3a:a9:04:c0:82:25:0d:b9:d4:6b:b0:3c:9d:f9:33: b1:25:dc:2f:dd:69:1f:59:26:bf:8e:e8:b1:91:ec:c5:31:0b: 2b:96:01:b9 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUUEPZ/VFQt8I9/A0rn+BA9bwZQOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI4MDVaFw0yNzAyMTkxMjMzMDVaMDMxMTAvBgNV BAMTKDE4RDZBMzNCMEEyMERGRjNFRjk2NTk1OUM3RjgwQkVCNEJBNEFERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhf64ANv9Bco8RSS+Iulki5yD RfmpO5nvsscanRQ5PvliNr6r647x0P/Npx8xFkRI1+GthNYtilDF6nrcnogWUvxu +Jri28TB+oNV4C6iBzbUeuUt0pMVO9FhXFQUgjaPYnR8YQR7mx16O5EpZvUoYVyU NKfHLfTsCyVBYKNemh1b3DXpkQ0RhZ/6DHaE5Zrv73bEwSr7VOVTVOYTz0boKl6B J9xVZazKtwYVo6fEeSbNjAGYyoW4Lqe9ciGsbxgYD/WDcAhCpuS3pSmSmntpyS0t 1xPSuGusOEpPlG4i9UROhyH7by37gl8T22uU9qrwxfDmr43eT6clzQuznhl/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUGNajOwog3/PvlllZx/gL60ukrdMwHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl7zANBgkqhkiG9w0BAQsFAAOCAQEAXsCa dxqqiZu5LribCl+q9FZV6vDkXEZC5PF6WsdQGnXU/CmxvB+MWfFW6/yNwJaH8Kc8 woJlHcO2KN3bKlHw3jZ4v5wxrdFZ/uSW9CMm+C/UpWd8M96DqPl6nJ8AufF4rh0F H5TsI0f2FwZabtrmTeO2V7oN3zUf+kGC9NO3/bwAOgHZ/nIVTSMX95hsWmzJnlbQ /J+IckSXCNQE7hi7ffREf1q6qIow0gXu+ztyGocPV0D3B9wNaDm2Fg9oajGlv4GR Qcf4UPMp/EMOZFU1tetnAKPlhQ9tKGohOqkEwIIlDbnUa7A8nfkzsSXcL91pH1km v47osZHsxTELK5YBuQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:47:11 2026 by rpki-client