$ rpki-client -vvvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa File: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (raw, json) Hash identifier: CnC/RDPfiUc9iAiTyxb0n3WpGQwUvXnM6w0/I15Hk9w= Subject key identifier: A8:43:8E:95:33:33:88:64:1D:24:D5:7C:B5:58:AE:98:1E:20:73:4E Certificate issuer: /CN=307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE Certificate serial: 78BF112D80D208401274CC6037B381ED5F7CE145 Authority key identifier: 30:7A:C3:36:81:CD:47:BD:66:DB:7E:D3:9C:0B:E4:94:B5:EC:1E:BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa Signing time: Thu 24 Sep 2026 19:50:57 +0000 ROA not before: Thu 24 Sep 2026 19:45:57 +0000 ROA not after: Thu 23 Sep 2027 19:50:57 +0000 asID: 264091 IP address blocks: 143.208.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.crl rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 08:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bf:11:2d:80:d2:08:40:12:74:cc:60:37:b3:81:ed:5f:7c:e1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE Validity Not Before: Sep 24 19:45:57 2026 GMT Not After : Sep 23 19:50:57 2027 GMT Subject: CN=A8438E95333388641D24D57CB558AE981E20734E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:f1:a6:bf:93:3f:af:bc:e7:bf:3e:e5:c2: 21:4f:b0:e2:c8:a7:06:cb:58:95:7b:17:fa:1b:63: 91:c0:67:df:d5:cd:b9:4e:d9:5b:06:3f:91:ef:65: da:d1:bb:bf:7c:3d:5c:a4:94:1c:55:33:21:5a:43: 1e:7d:ca:22:4c:ee:d2:c7:86:be:56:25:1c:9d:bb: 4c:51:69:13:79:00:e3:bb:71:ef:c0:0e:0c:9f:ef: 62:b9:96:b3:1a:b8:55:7d:e6:c5:89:97:8f:89:76: b5:06:d5:06:34:24:3d:ef:3b:1e:e9:80:39:f1:c7: 19:af:ae:a2:cb:56:56:d4:34:61:53:f3:27:c7:36: 92:6b:bd:bb:60:fb:aa:0b:15:b4:96:59:b1:8e:2b: ad:9d:44:c0:60:86:0d:f5:7d:74:33:a5:9c:87:7a: 32:21:ec:1e:f8:4d:26:df:1b:30:0f:a9:a8:16:85: a4:ba:73:11:25:59:be:a4:aa:e2:9b:ce:1c:da:59: 18:76:35:57:74:64:8b:4f:9b:14:92:7b:d2:ab:2a: a7:1b:a7:ec:6f:ed:9f:b1:45:f4:49:06:d7:e4:22: 82:ca:9b:3d:4f:fb:51:e8:d4:a7:4e:1b:ad:9d:28: 9e:9b:78:9c:1c:87:6d:fa:56:51:ef:5d:7f:8e:e3: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:8E:95:33:33:88:64:1D:24:D5:7C:B5:58:AE:98:1E:20:73:4E X509v3 Authority Key Identifier: keyid:30:7A:C3:36:81:CD:47:BD:66:DB:7E:D3:9C:0B:E4:94:B5:EC:1E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/307AC33681CD47BD66DB7ED39C0BE494B5EC1EBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.128.0/22 Signature Algorithm: sha256WithRSAEncryption ad:3e:42:30:21:d6:aa:ec:15:de:48:c5:55:81:ba:1c:bd:7b: 0c:d2:7a:d6:a9:25:06:0d:4d:66:7d:c6:b0:ed:8b:66:5c:82: b0:94:f7:9e:54:00:43:60:cc:16:e9:8c:6d:8e:6b:18:c5:e7: 9a:b3:1a:29:a6:37:e6:ec:d1:9f:49:a0:1c:25:6d:f8:1f:df: d7:34:99:af:36:c6:5b:78:2f:e8:a7:ec:79:11:4b:aa:63:fd: d5:f0:97:9c:d9:c7:11:f7:e0:3d:2e:f5:ce:89:3f:a7:dd:36: cf:fe:cd:7c:4f:b2:a6:76:c7:51:ce:10:7b:0c:2b:c7:c4:8f: 2d:bd:13:99:4d:b2:c7:fb:10:a2:e0:61:9a:86:20:ff:5c:92: ff:27:e2:aa:d0:3f:60:9b:2d:66:fc:f5:af:6b:18:6f:8b:f6: 01:bc:e4:e3:e3:76:a6:a9:b4:6a:bd:47:e9:b9:86:94:2d:bc: cc:81:5b:94:c2:11:37:96:44:d9:71:8c:ec:d4:e2:cf:d7:fd: 39:dc:58:1f:a2:7f:3a:de:39:5d:8c:55:3a:80:c0:9e:64:d9: d9:01:e5:df:2a:9e:5c:b7:9b:e0:13:eb:17:d0:46:36:2a:9e: 99:0f:95:cc:97:5b:14:40:8a:8c:5a:a8:ee:35:84:8f:79:8d: bc:e2:b5:0a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUeL8RLYDSCEASdMxgN7OB7V984UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QUMzMzY4MUNENDdCRDY2REI3RUQzOUMwQkU0OTRC NUVDMUVCRTAeFw0yNjA5MjQxOTQ1NTdaFw0yNzA5MjMxOTUwNTdaMDMxMTAvBgNV BAMTKEE4NDM4RTk1MzMzMzg4NjQxRDI0RDU3Q0I1NThBRTk4MUUyMDczNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFvGmv5M/r7znvz7lwiFPsOLI pwbLWJV7F/obY5HAZ9/VzblO2VsGP5HvZdrRu798PVyklBxVMyFaQx59yiJM7tLH hr5WJRydu0xRaRN5AOO7ce/ADgyf72K5lrMauFV95sWJl4+JdrUG1QY0JD3vOx7p gDnxxxmvrqLLVlbUNGFT8yfHNpJrvbtg+6oLFbSWWbGOK62dRMBghg31fXQzpZyH ejIh7B74TSbfGzAPqagWhaS6cxElWb6kquKbzhzaWRh2NVd0ZItPmxSSe9KrKqcb p+xv7Z+xRfRJBtfkIoLKmz1P+1Ho1KdOG62dKJ6beJwch236VlHvXX+O4xPrAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUqEOOlTMziGQdJNV8tViumB4gc04wHwYDVR0j BBgwFoAUMHrDNoHNR71m237TnAvklLXsHr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw YTUvMC8zMDdBQzMzNjgxQ0Q0N0JENjZEQjdFRDM5QzBCRTQ5NEI1RUMxRUJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwN0FDMzM2ODFDRDQ3QkQ2 NkRCN0VEMzlDMEJFNDk0QjVFQzFFQkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JLSEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAv MzEzNDMzMmUzMjMwMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy MzYzNDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QgDANBgkqhkiG9w0BAQsFAAOCAQEArT5C MCHWquwV3kjFVYG6HL17DNJ61qklBg1NZn3GsO2LZlyCsJT3nlQAQ2DMFumMbY5r GMXnmrMaKaY35uzRn0mgHCVt+B/f1zSZrzbGW3gv6KfseRFLqmP91fCXnNnHEffg PS71zok/p902z/7NfE+ypnbHUc4Qewwrx8SPLb0TmU2yx/sQouBhmoYg/1yS/yfi qtA/YJstZvz1r2sYb4v2Abzk4+N2pqm0ar1H6bmGlC28zIFblMIRN5ZE2XGM7NTi z9f9OdxYH6J/Ot45XYxVOoDAnmTZ2QHl3yqeXLeb4BPrF9BGNiqemQ+VzJdbFECK jFqo7jWEj3mNvOK1Cg== -----END CERTIFICATE-----Generated at Wed Oct 14 21:33:32 2026 by rpki-client