$ rpki-client -vvvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa File: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (raw, json) Hash identifier: lOCawNxT5mf6+GPq54yH9MFBwDMl7colTClYKLgG+8Q= Subject key identifier: EC:C4:64:35:7F:A4:3E:57:D5:05:94:33:F2:09:A2:F2:63:0D:43:CE Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 3A03EB64246B9BE3EEA15C77E5132A051C3608B0 Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa Signing time: Fri 23 Oct 2026 15:25:08 +0000 ROA not before: Fri 23 Oct 2026 15:20:08 +0000 ROA not after: Fri 22 Oct 2027 15:25:08 +0000 asID: 53158 IP address blocks: 200.229.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:03:eb:64:24:6b:9b:e3:ee:a1:5c:77:e5:13:2a:05:1c:36:08:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Oct 23 15:20:08 2026 GMT Not After : Oct 22 15:25:08 2027 GMT Subject: CN=ECC464357FA43E57D5059433F209A2F2630D43CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:ec:c2:9e:8b:98:65:10:f8:6d:67:0a:b4: 75:36:a7:a7:0c:08:39:b5:cb:0b:56:0d:c8:0f:f7: d1:e5:73:56:03:44:9a:c2:9c:88:a6:9b:2f:8a:76: 0e:0d:55:01:32:f5:01:fc:6f:a4:99:aa:09:5a:37: f8:0a:24:c5:93:c5:ff:14:e0:15:99:69:b2:ab:04: 9b:9e:3a:be:2e:bc:b9:07:22:23:4c:95:f6:a1:db: 27:69:1d:d7:37:0d:73:f4:1a:a7:d9:d8:80:35:a0: 32:51:05:b0:ba:6f:48:56:66:42:a7:fd:3f:e3:16: e2:a7:7e:09:70:17:19:49:de:82:ed:ff:59:01:9e: 08:30:c2:8e:90:53:df:84:27:36:38:29:6b:1f:e7: 47:f9:4b:a9:5c:21:90:5a:d9:58:b4:41:e1:92:3f: cf:70:45:07:c8:44:46:5f:7d:c2:84:4c:65:58:44: a3:24:54:9f:05:ef:77:9f:2b:71:73:c0:04:a8:f6: 5c:d7:1c:cb:57:53:37:7f:a2:fa:10:f8:9e:00:b1: 19:34:3b:b7:bf:bb:02:d6:5c:b5:3e:7a:ef:98:27: f5:e3:49:f3:12:2c:73:dd:f1:1e:d0:ce:5c:5d:30: 40:3d:14:22:7b:26:c6:a1:55:1b:17:64:1a:05:3a: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:64:35:7F:A4:3E:57:D5:05:94:33:F2:09:A2:F2:63:0D:43:CE X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.88.0/22 Signature Algorithm: sha256WithRSAEncryption bf:7c:e4:1e:67:2d:52:23:4b:b6:52:8a:13:ea:49:b6:b4:46: 95:fd:6a:1d:e8:c1:39:d4:ff:51:a1:c3:4d:81:9b:a5:69:a3: d2:ab:2e:80:db:e3:ee:37:4e:36:36:6f:44:2c:11:f8:db:ed: 5d:3d:59:54:de:26:eb:c2:41:65:ff:b4:2e:e9:2e:7f:51:8b: 68:22:bd:82:0e:d2:59:c7:d5:85:c3:7f:ea:52:d1:25:08:15: 55:bb:17:56:71:7a:77:ee:b5:42:3a:db:27:47:49:ad:a6:88: 46:9a:44:81:1e:fa:25:f4:5f:f9:a2:e5:f5:59:df:e7:6f:88: 7c:4e:99:58:86:35:96:dd:15:74:2f:d3:b0:7b:91:32:90:14: 19:2d:04:92:8b:c7:25:4e:f1:26:48:5d:d3:a7:53:28:6c:1f: e3:ae:df:34:14:d7:65:d8:5e:2c:d2:c0:73:da:71:97:bd:9b: 33:ee:66:76:1f:18:2e:9e:4a:49:c8:d2:df:ee:17:43:4a:1c: 72:b3:bc:1c:71:c3:c3:7b:6c:33:69:2c:d4:43:cf:12:6c:18: 06:d6:98:8e:46:92:1b:82:14:c9:ca:ea:dc:19:e3:9e:fa:2e: 1a:7e:8a:3e:7e:a5:43:28:89:80:c5:a4:16:84:f2:1e:ee:5c: 9b:ec:bb:12 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUOgPrZCRrm+PuoVx35RMqBRw2CLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNjEwMjMxNTIwMDhaFw0yNzEwMjIxNTI1MDhaMDMxMTAvBgNV BAMTKEVDQzQ2NDM1N0ZBNDNFNTdENTA1OTQzM0YyMDlBMkYyNjMwRDQzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKuzCnouYZRD4bWcKtHU2p6cM CDm1ywtWDcgP99Hlc1YDRJrCnIimmy+Kdg4NVQEy9QH8b6SZqglaN/gKJMWTxf8U 4BWZabKrBJueOr4uvLkHIiNMlfah2ydpHdc3DXP0GqfZ2IA1oDJRBbC6b0hWZkKn /T/jFuKnfglwFxlJ3oLt/1kBnggwwo6QU9+EJzY4KWsf50f5S6lcIZBa2Vi0QeGS P89wRQfIREZffcKETGVYRKMkVJ8F73efK3FzwASo9lzXHMtXUzd/ovoQ+J4AsRk0 O7e/uwLWXLU+eu+YJ/XjSfMSLHPd8R7QzlxdMEA9FCJ7JsahVRsXZBoFOl4LAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU7MRkNX+kPlfVBZQz8gmi8mMNQ84wHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n RVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRlLzAvMzIz MDMwMmUzMjMyMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMzMzEz NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCyOVYMA0GCSqGSIb3DQEBCwUAA4IBAQC/fOQeZy1SI0u2 UooT6km2tEaV/Wod6ME51P9RocNNgZulaaPSqy6A2+PuN042Nm9ELBH42+1dPVlU 3ibrwkFl/7Qu6S5/UYtoIr2CDtJZx9WFw3/qUtElCBVVuxdWcXp37rVCOtsnR0mt pohGmkSBHvol9F/5ouX1Wd/nb4h8TplYhjWW3RV0L9Owe5EykBQZLQSSi8clTvEm SF3Tp1MobB/jrt80FNdl2F4s0sBz2nGXvZsz7mZ2HxgunkpJyNLf7hdDShxys7wc ccPDe2wzaSzUQ88SbBgG1piORpIbghTJyurcGeOe+i4afoo+fqVDKImAxaQWhPIe 7lyb7LsS -----END CERTIFICATE-----Generated at Thu Oct 29 13:26:23 2026 by rpki-client