$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa File: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (raw, json) Hash identifier: hjXD43xsRRSrAt7rE4XT6hQODpkNUh+cNRANo5DJ34w= Subject key identifier: D9:0C:D4:60:58:39:15:E4:4C:64:B4:AD:4A:E0:85:6B:D4:FD:3F:E9 Certificate issuer: /CN=BFB702449CB10F3DC44E7121930F9410743965D8 Certificate serial: 3FCFB50377AA85B0BD3C95F39EDCBB97A4BC7EE1 Authority key identifier: BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa Signing time: Sat 28 Feb 2026 23:53:28 +0000 ROA not before: Sat 28 Feb 2026 23:48:28 +0000 ROA not after: Sat 27 Feb 2027 23:53:28 +0000 asID: 265397 IP address blocks: 2804:3374::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.crl rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 16:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cf:b5:03:77:aa:85:b0:bd:3c:95:f3:9e:dc:bb:97:a4:bc:7e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFB702449CB10F3DC44E7121930F9410743965D8 Validity Not Before: Feb 28 23:48:28 2026 GMT Not After : Feb 27 23:53:28 2027 GMT Subject: CN=D90CD460583915E44C64B4AD4AE0856BD4FD3FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:78:b3:22:4e:18:c7:bc:b9:3e:c1:25:9d: 70:d0:be:bf:84:b5:1f:aa:64:08:b9:c8:db:55:92: 6e:9f:65:76:c3:90:0b:77:81:1c:a1:13:66:40:ac: 71:a7:91:0a:07:d4:20:07:e9:63:6c:7c:66:ea:0b: 01:87:ba:80:a6:fc:e9:02:88:c2:ac:18:41:08:50: a2:32:5c:3e:ab:bc:59:7b:58:f2:ba:56:33:b4:de: 99:c6:ff:65:b3:2c:fe:81:22:96:6d:f7:8f:67:85: 99:33:1a:b8:2b:9c:35:89:d8:94:6e:4d:13:f7:81: 90:38:9a:af:eb:63:30:d3:01:e8:ce:c3:a1:d1:97: 1d:20:d8:ad:e6:d8:6b:54:be:10:c4:7f:c2:02:89: c7:c2:cf:4f:d4:55:fc:7f:5b:d4:b6:67:3f:bd:06: 94:0c:05:8d:6b:4b:da:7e:af:fe:33:04:3b:3f:ef: df:05:27:73:c6:5d:0d:41:bd:38:c8:a5:88:9b:8c: 9d:dd:07:55:6e:9c:07:1c:61:fc:4f:c2:bb:36:bc: b4:18:43:20:6f:fc:6e:a2:7f:7e:8d:f1:c1:2b:2a: a9:2a:4e:b4:3d:50:16:6f:25:4e:8c:8f:de:37:a5: bb:58:ed:2a:84:c4:7d:fd:2f:8a:c5:d8:89:b3:44: ae:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:D4:60:58:39:15:E4:4C:64:B4:AD:4A:E0:85:6B:D4:FD:3F:E9 X509v3 Authority Key Identifier: keyid:BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3374::/32 Signature Algorithm: sha256WithRSAEncryption 3a:dd:d4:ab:6e:c6:a2:9e:5c:6b:02:c2:d2:80:c5:43:4a:2e: 4c:f3:22:a9:3f:21:72:15:84:9b:d8:8e:d1:f1:65:3c:28:ec: 3b:f7:5c:19:b9:32:73:eb:b9:73:8d:0d:c3:ed:f6:11:6f:0b: f9:73:c0:19:47:e8:a3:33:4f:8d:04:4a:dc:46:93:d2:6c:70: c2:e2:09:87:ad:c2:68:2f:b2:44:65:82:2e:82:f6:ef:b2:37: 53:f2:6d:55:49:91:bc:2e:e5:8d:70:82:2b:2f:e1:db:22:a3: 22:ab:9d:62:4d:21:28:3b:e3:1e:54:59:ff:08:d7:0e:08:fe: 70:e5:64:6b:41:8b:5e:b7:3a:d9:1d:ec:05:d7:e6:7e:1d:0d: 64:85:0a:7e:8b:cd:fe:58:fd:0c:26:c9:46:b8:19:96:b4:c0: 0c:cd:b1:ee:e4:7e:28:0e:a9:19:29:36:4f:a1:1a:d1:9d:51: 26:e5:2b:c2:b6:14:70:84:75:de:35:94:79:b8:d2:ec:f2:0e: 4f:82:19:3f:99:4a:07:7b:3c:46:03:20:09:a6:2d:15:ac:3d: 5e:05:39:1d:b9:53:03:e6:c1:43:33:9a:1a:2b:ae:5a:99:77: a4:da:c5:d2:82:79:6a:61:74:da:31:3c:ce:9a:dc:f7:76:d6: da:27:42:b0 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUP8+1A3eqhbC9PJXznty7l6S8fuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCNzAyNDQ5Q0IxMEYzREM0NEU3MTIxOTMwRjk0MTA3 NDM5NjVEODAeFw0yNjAyMjgyMzQ4MjhaFw0yNzAyMjcyMzUzMjhaMDMxMTAvBgNV BAMTKEQ5MENENDYwNTgzOTE1RTQ0QzY0QjRBRDRBRTA4NTZCRDRGRDNGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7q3izIk4Yx7y5PsElnXDQvr+E tR+qZAi5yNtVkm6fZXbDkAt3gRyhE2ZArHGnkQoH1CAH6WNsfGbqCwGHuoCm/OkC iMKsGEEIUKIyXD6rvFl7WPK6VjO03pnG/2WzLP6BIpZt949nhZkzGrgrnDWJ2JRu TRP3gZA4mq/rYzDTAejOw6HRlx0g2K3m2GtUvhDEf8ICicfCz0/UVfx/W9S2Zz+9 BpQMBY1rS9p+r/4zBDs/798FJ3PGXQ1BvTjIpYibjJ3dB1VunAccYfxPwrs2vLQY QyBv/G6if36N8cErKqkqTrQ9UBZvJU6Mj943pbtY7SqExH39L4rF2ImzRK57AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU2QzUYFg5FeRMZLStSuCFa9T9P+kwHwYDVR0j BBgwFoAUv7cCRJyxDz3ETnEhkw+UEHQ5ZdgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRMUkU0eE54QW53RnBxcEdhN3k3R2ZBVXlzTHR4RWJiTDRrcGQzZVdU VXovMC9CRkI3MDI0NDlDQjEwRjNEQzQ0RTcxMjE5MzBGOTQxMDc0Mzk2NUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQjcwMjQ0OUNCMTBGM0RD NDRFNzEyMTkzMEY5NDEwNzQzOTY1RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJkTFJFNHhOeEFud0ZwcXBHYTd5N0dmQVV5c0x0eEViYkw0a3BkM2VXVFV6LzAv MzIzODMwMzQzYTMzMzMzNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1 MzMzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQzdDANBgkqhkiG9w0BAQsFAAOCAQEAOt3Uq27G op5cawLC0oDFQ0ouTPMiqT8hchWEm9iO0fFlPCjsO/dcGbkyc+u5c40Nw+32EW8L +XPAGUfoozNPjQRK3EaT0mxwwuIJh63CaC+yRGWCLoL277I3U/JtVUmRvC7ljXCC Ky/h2yKjIqudYk0hKDvjHlRZ/wjXDgj+cOVka0GLXrc62R3sBdfmfh0NZIUKfovN /lj9DCbJRrgZlrTADM2x7uR+KA6pGSk2T6Ea0Z1RJuUrwrYUcIR13jWUebjS7PIO T4IZP5lKB3s8RgMgCaYtFaw9XgU5HblTA+bBQzOaGiuuWpl3pNrF0oJ5amF02jE8 zprc93bW2idCsA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:53:36 2026 by rpki-client