$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa File: 3230302e3135322e38342e302f32342d3234203d3e203232373036.roa (raw, json) Hash identifier: XonIbyVozJ2rhv/8+1vRwuMrpkvzWvyQ1s40YtEo1nc= Subject key identifier: 8A:54:23:A0:A0:88:6D:DA:E2:21:9A:DD:1B:C5:82:CB:9F:98:3E:46 Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Certificate serial: 2ABB5591A50B3CAA440AD4A24CEC124BC7924DEF Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa Signing time: Fri 23 Oct 2026 14:01:19 +0000 ROA not before: Fri 23 Oct 2026 13:56:19 +0000 ROA not after: Fri 22 Oct 2027 14:01:19 +0000 asID: 22706 IP address blocks: 200.152.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 20:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bb:55:91:a5:0b:3c:aa:44:0a:d4:a2:4c:ec:12:4b:c7:92:4d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072 Validity Not Before: Oct 23 13:56:19 2026 GMT Not After : Oct 22 14:01:19 2027 GMT Subject: CN=8A5423A0A0886DDAE2219ADD1BC582CB9F983E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:d0:de:44:2f:ef:9b:c7:8b:04:e9:20:a8: 04:b8:58:5f:c2:22:ed:52:4a:57:ee:81:8d:48:7f: 5e:7c:5f:a6:e8:c1:af:af:43:54:84:b2:17:39:03: 70:3e:26:38:a8:fe:0b:52:10:d2:ba:b3:b7:5c:d1: 44:b4:a6:68:59:8f:cd:b1:e3:6d:e2:e9:d4:0d:f8: 76:37:84:87:eb:1a:53:60:c6:dd:fb:21:16:79:b2: ca:4b:40:3d:14:b9:88:27:65:46:f3:9a:c2:c7:bf: 28:d5:53:71:12:9a:a7:96:7e:34:b9:a5:4d:c8:88: fb:79:67:08:e8:31:e5:47:05:7c:9f:50:7b:ff:cf: 63:c4:76:14:77:4c:4c:fc:47:d7:fa:1a:a0:44:72: 5d:6d:f9:14:cc:84:de:6c:a7:5b:b8:bd:a4:89:92: eb:09:ff:65:8a:7b:6e:10:cd:07:93:28:1e:b7:7b: 6f:21:73:98:16:8b:91:bf:ee:02:b5:18:d0:aa:6d: 95:0e:b4:3b:91:17:b0:9b:77:0a:41:8c:95:a5:39: f9:7c:a1:36:00:3d:7e:5d:40:90:e6:eb:05:34:fc: 25:c4:e1:19:68:21:6d:e5:40:66:e3:99:54:bb:aa: 38:9e:cb:f2:7f:4a:3f:9b:14:59:c4:3c:ac:8f:eb: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:23:A0:A0:88:6D:DA:E2:21:9A:DD:1B:C5:82:CB:9F:98:3E:46 X509v3 Authority Key Identifier: keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.152.84.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:88:25:08:41:4e:df:0a:bc:98:35:56:f1:74:7e:f1:5e:eb: 20:17:93:f7:76:a4:2c:fd:1b:db:9e:5b:cd:ab:92:bd:9c:5b: eb:86:f4:fb:06:2e:9a:79:00:6a:bc:c5:1c:c7:05:e1:e9:6e: 4c:da:99:53:ea:97:d3:8f:17:9b:68:2d:4c:12:50:04:8a:4e: 09:af:6e:41:37:0b:18:5e:0c:8e:c1:b8:82:96:a5:74:31:02: 78:a2:f8:21:3e:9e:cd:e6:d3:b1:02:1d:72:ae:78:60:53:25: 27:66:54:ca:48:2d:cc:38:db:06:a5:3c:68:1e:1e:96:c1:6f: 06:3c:1f:bf:05:fe:be:0f:11:b4:77:70:a7:74:06:50:a8:d2: ad:24:39:55:12:ee:69:cc:de:91:3b:73:0f:1d:83:61:77:1d: 8a:a6:7b:ab:f0:76:49:3d:72:79:8f:f6:80:c0:8f:35:99:22: d9:49:8f:8c:e1:74:b0:7a:8f:74:96:9f:43:12:a1:fb:ce:29: ae:27:e8:b4:7f:21:fa:0a:14:f7:e5:21:9f:b1:91:1a:50:d3: 04:20:90:cc:76:41:56:d9:cb:a8:14:4d:9e:fb:10:41:32:e4: a1:10:fd:b1:cf:4f:b0:69:60:46:9b:25:50:14:05:18:dd:d5: be:68:17:fe -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUKrtVkaULPKpECtSiTOwSS8eSTe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw ODUzNDA3MjAeFw0yNjEwMjMxMzU2MTlaFw0yNzEwMjIxNDAxMTlaMDMxMTAvBgNV BAMTKDhBNTQyM0EwQTA4ODZEREFFMjIxOUFERDFCQzU4MkNCOUY5ODNFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNp9DeRC/vm8eLBOkgqAS4WF/C Iu1SSlfugY1If158X6bowa+vQ1SEshc5A3A+Jjio/gtSENK6s7dc0US0pmhZj82x 423i6dQN+HY3hIfrGlNgxt37IRZ5sspLQD0UuYgnZUbzmsLHvyjVU3ESmqeWfjS5 pU3IiPt5ZwjoMeVHBXyfUHv/z2PEdhR3TEz8R9f6GqBEcl1t+RTMhN5sp1u4vaSJ kusJ/2WKe24QzQeTKB63e28hc5gWi5G/7gK1GNCqbZUOtDuRF7CbdwpBjJWlOfl8 oTYAPX5dQJDm6wU0/CXE4RloIW3lQGbjmVS7qjiey/J/Sj+bFFnEPKyP6wrHAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUilQjoKCIbdriIZrdG8WCy5+YPkYwHwYDVR0j BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40 bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5 Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv MzIzMDMwMmUzMTM1MzIyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAyJhUMA0GCSqGSIb3DQEBCwUAA4IBAQBdiCUIQU7f CryYNVbxdH7xXusgF5P3dqQs/RvbnlvNq5K9nFvrhvT7Bi6aeQBqvMUcxwXh6W5M 2plT6pfTjxebaC1MElAEik4Jr25BNwsYXgyOwbiClqV0MQJ4ovghPp7N5tOxAh1y rnhgUyUnZlTKSC3MONsGpTxoHh6WwW8GPB+/Bf6+DxG0d3CndAZQqNKtJDlVEu5p zN6RO3MPHYNhdx2Kpnur8HZJPXJ5j/aAwI81mSLZSY+M4XSweo90lp9DEqH7zimu J+i0fyH6ChT35SGfsZEaUNMEIJDMdkFW2cuoFE2e+xBBMuShEP2xz0+waWBGmyVQ FAUY3dW+aBf+ -----END CERTIFICATE-----Generated at Thu Oct 29 07:48:15 2026 by rpki-client