$ rpki-client -vvvf rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232312e302f32342d3234203d3e20323635313331.roa File: 3134332e3230382e3232312e302f32342d3234203d3e20323635313331.roa (raw, json) Hash identifier: 1ABNvcp9Ms6Yvc6BMDRaf7nGZvfslLFSV8qwgZCF6wg= Subject key identifier: DD:C5:12:44:B8:A5:66:3B:EE:AB:D3:54:48:FD:78:D7:40:03:47:D3 Certificate issuer: /CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43 Certificate serial: 5FFED2832E901858C03290D6D8FEDAE9DC1D65DE Authority key identifier: 1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer Subject info access: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232312e302f32342d3234203d3e20323635313331.roa Signing time: Fri 28 Aug 2026 15:58:43 +0000 ROA not before: Fri 28 Aug 2026 15:53:43 +0000 ROA not after: Fri 27 Aug 2027 15:58:43 +0000 asID: 265131 IP address blocks: 143.208.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 16:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fe:d2:83:2e:90:18:58:c0:32:90:d6:d8:fe:da:e9:dc:1d:65:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43 Validity Not Before: Aug 28 15:53:43 2026 GMT Not After : Aug 27 15:58:43 2027 GMT Subject: CN=DDC51244B8A5663BEEABD35448FD78D7400347D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ae:ab:98:b1:16:6a:b0:1b:15:de:66:f6:4e: fe:ed:ec:9a:8a:6d:6d:fe:bc:8a:d1:57:3d:34:78: 9b:7e:63:f6:85:9e:46:f4:0f:85:dc:49:fe:62:88: e3:41:6a:d4:02:5f:1f:15:0b:a8:bd:34:58:f2:f6: 7d:e3:71:8c:a3:67:6a:87:19:b0:e0:57:96:4f:12: 08:dc:f8:fd:b3:cc:33:39:55:8c:0a:a1:85:2c:72: 04:0c:86:8f:76:b9:8d:7c:39:01:ea:bb:e1:e0:31: fb:28:9c:0e:0f:eb:b2:9e:67:29:a3:3a:3e:40:77: 39:00:5a:7a:c3:7b:b6:a8:4c:0f:db:25:e1:ea:57: eb:c3:ae:f7:2c:dc:29:b4:69:ff:7d:2c:2c:6d:ea: d4:16:e4:50:17:c6:e0:ec:e3:9e:08:72:0a:02:a2: 48:32:75:42:f0:45:bb:fa:2d:9c:a7:50:e6:e8:21: ae:1d:a8:2e:2d:b6:bd:9b:e4:32:21:42:90:1b:b6: 89:8b:f7:b6:fe:67:b1:59:a6:b2:90:78:55:6f:46: 00:97:00:1d:f6:77:da:42:a5:ee:36:0c:79:0f:98: 6b:fd:85:01:1c:98:3e:54:34:b5:c4:4a:7d:c2:3b: cc:d5:22:13:09:86:2b:9a:37:da:de:aa:76:0d:39: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:12:44:B8:A5:66:3B:EE:AB:D3:54:48:FD:78:D7:40:03:47:D3 X509v3 Authority Key Identifier: keyid:1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232312e302f32342d3234203d3e20323635313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.221.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:5a:40:ba:2e:fe:78:a8:48:52:fc:a2:17:cf:5b:61:97:e0: 80:8e:be:1e:f1:e7:8b:7c:e2:a2:5c:83:22:6e:e3:8e:43:ee: c7:ce:09:64:29:e2:1d:9e:ff:fc:77:09:19:0b:d7:f6:8b:f6: 8b:12:17:27:2f:53:90:99:89:42:4b:b4:44:e2:e8:90:e4:dc: 97:a0:50:57:37:37:11:2e:d8:ab:5c:4a:ad:ea:f9:57:6e:a1: 52:4e:e6:ee:a9:fe:37:f1:a7:f5:07:bf:3f:3e:76:63:d4:0a: ad:54:2a:49:e1:18:c1:0e:10:4e:2a:60:9b:05:c3:a1:a0:59: 8e:be:1f:ea:7c:b8:d2:d4:ab:d6:0e:92:47:38:11:dd:d9:0a: c4:eb:5b:33:ef:9b:7c:6a:8a:90:10:1e:f9:7d:43:a2:c2:84: 3a:77:c5:92:53:2d:a1:0d:03:73:74:1d:06:7a:15:86:55:27: 92:ab:a1:d8:83:cb:d0:ee:fa:42:4f:ba:e1:89:7d:cf:24:a5: 8d:79:7e:60:f0:ed:c4:5d:8c:84:d6:6e:51:30:87:b7:7c:35: a3:2e:38:34:c6:9d:f1:85:b5:2d:29:d7:b8:80:d7:6e:fe:e5: a8:4d:ae:8b:aa:31:7c:d7:d8:b3:76:a2:6c:4b:e4:ac:e3:62: 83:82:16:f7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUX/7Sgy6QGFjAMpDW2P7a6dwdZd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBQzU5RkNEQTI4QzdGMDk0OTIzQzBCQjUwOTk2RTRD RTMyOUY0MzAeFw0yNjA4MjgxNTUzNDNaFw0yNzA4MjcxNTU4NDNaMDMxMTAvBgNV BAMTKEREQzUxMjQ0QjhBNTY2M0JFRUFCRDM1NDQ4RkQ3OEQ3NDAwMzQ3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwrquYsRZqsBsV3mb2Tv7t7JqK bW3+vIrRVz00eJt+Y/aFnkb0D4XcSf5iiONBatQCXx8VC6i9NFjy9n3jcYyjZ2qH GbDgV5ZPEgjc+P2zzDM5VYwKoYUscgQMho92uY18OQHqu+HgMfsonA4P67KeZymj Oj5AdzkAWnrDe7aoTA/bJeHqV+vDrvcs3Cm0af99LCxt6tQW5FAXxuDs454IcgoC okgydULwRbv6LZynUOboIa4dqC4ttr2b5DIhQpAbtomL97b+Z7FZprKQeFVvRgCX AB32d9pCpe42DHkPmGv9hQEcmD5UNLXESn3CO8zVIhMJhiuaN9reqnYNOQhpAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU3cUSRLilZjvuq9NUSP1410ADR9MwHwYDVR0j BBgwFoAUG6xZ/Noox/CUkjwLtQmW5M4yn0MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0xkVHV2a1B6ck1wQ2ZBVUIzVXNkVG0yZjZtNmVXd0VpdjdDZ29DUDZK Z2UvMC8xQkFDNTlGQ0RBMjhDN0YwOTQ5MjNDMEJCNTA5OTZFNENFMzI5RjQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQUM1OUZDREEyOEM3RjA5 NDkyM0MwQkI1MDk5NkU0Q0UzMjlGNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NMZFR1dmtQenJNcENmQVVCM1VzZFRtMmY2bTZlV3dFaXY3Q2dvQ1A2SmdlLzAv MzEzNDMzMmUzMjMwMzgyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzYzNTMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/Q3TANBgkqhkiG9w0BAQsFAAOCAQEAalpA ui7+eKhIUvyiF89bYZfggI6+HvHni3ziolyDIm7jjkPux84JZCniHZ7//HcJGQvX 9ov2ixIXJy9TkJmJQku0ROLokOTcl6BQVzc3ES7Yq1xKrer5V26hUk7m7qn+N/Gn 9Qe/Pz52Y9QKrVQqSeEYwQ4QTipgmwXDoaBZjr4f6ny40tSr1g6SRzgR3dkKxOtb M++bfGqKkBAe+X1DosKEOnfFklMtoQ0Dc3QdBnoVhlUnkquh2IPL0O76Qk+64Yl9 zySljXl+YPDtxF2MhNZuUTCHt3w1oy44NMad8YW1LSnXuIDXbv7lqE2ui6oxfNfY s3aibEvkrONig4IW9w== -----END CERTIFICATE-----Generated at Sun Oct 11 19:48:21 2026 by rpki-client