$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343030303a3a2f33382d3338203d3e20323632323936.roa File: 323830343a6138343a343030303a3a2f33382d3338203d3e20323632323936.roa (raw, json) Hash identifier: 4DlJBMpX3XZ8yz0U5FdnYQFqgNfQYn94mD0AsS5vaAM= Subject key identifier: 5A:6B:6E:37:DC:4F:AC:09:A3:75:17:63:EC:64:4A:4B:2F:F4:40:DE Certificate issuer: /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Certificate serial: 1C7A09A11807A41F4B85B1526ECDDF4E79059E2D Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343030303a3a2f33382d3338203d3e20323632323936.roa Signing time: Mon 02 Mar 2026 18:35:15 +0000 ROA not before: Mon 02 Mar 2026 18:30:15 +0000 ROA not after: Mon 01 Mar 2027 18:35:15 +0000 asID: 262296 IP address blocks: 2804:a84:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7a:09:a1:18:07:a4:1f:4b:85:b1:52:6e:cd:df:4e:79:05:9e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Validity Not Before: Mar 2 18:30:15 2026 GMT Not After : Mar 1 18:35:15 2027 GMT Subject: CN=5A6B6E37DC4FAC09A3751763EC644A4B2FF440DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:57:f9:d2:93:2a:33:7f:e3:d6:be:2b:59: 07:35:6d:e5:3d:3f:06:21:0a:c3:2f:a0:c9:de:f1: 4e:c2:37:f0:44:f8:fd:57:14:7f:d2:04:aa:c7:f8: 4b:d5:84:08:e4:40:a5:fc:83:89:40:27:43:4b:5c: 01:93:13:f6:f2:05:6c:f6:38:33:a6:4d:2f:73:63: 73:b4:8a:d2:cd:7b:bb:f4:ff:55:2c:e1:d0:d9:56: 49:e9:80:5b:b0:7a:55:bd:94:db:a8:54:4a:1d:3c: 11:84:a1:f0:f0:7b:22:68:04:d6:d6:ca:d2:14:48: 88:9d:d7:36:54:c8:66:6d:61:cd:c6:37:c2:15:8d: db:33:0b:06:09:1c:e7:d9:6d:44:eb:4d:6c:27:0e: 6b:ae:c2:f9:28:1f:3e:63:2a:7e:49:a2:c9:3f:a1: f9:6b:fe:9f:15:8f:28:ef:98:34:eb:74:d1:77:3f: 52:48:8f:7c:44:f9:bb:00:08:30:d9:3c:3a:50:1c: 57:24:14:68:50:37:c4:8c:84:3b:dd:72:4d:9c:18: 24:f5:5e:fa:cb:28:f0:3c:5f:f7:fb:57:e9:68:4d: ab:16:b3:ab:2d:ea:f0:82:8c:aa:95:03:17:56:14: 3e:dc:96:5a:bf:46:5f:12:c6:78:86:fd:2b:45:0d: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6B:6E:37:DC:4F:AC:09:A3:75:17:63:EC:64:4A:4B:2F:F4:40:DE X509v3 Authority Key Identifier: keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a343030303a3a2f33382d3338203d3e20323632323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a84:4000::/38 Signature Algorithm: sha256WithRSAEncryption 82:24:80:47:5e:95:a1:f9:b2:7c:25:bb:70:0e:40:d5:80:05: 5e:d0:38:61:93:bb:55:36:61:ea:68:b9:eb:8e:02:a4:f4:a5: 01:81:12:bc:99:a6:43:d4:c6:70:09:86:45:6c:55:ec:6d:0e: 8f:44:f5:e3:69:45:d5:f9:9f:82:d1:0a:80:aa:65:1c:6c:fd: 1f:5c:c0:64:2c:55:c2:65:f9:69:4c:09:52:59:e4:54:6c:65: 97:80:08:57:eb:4c:c0:a1:96:98:5a:8e:a0:73:3e:d7:58:d6: 9e:2d:80:70:e6:29:d3:a9:ea:05:0d:d6:44:b7:0b:ae:db:ba: d0:28:9e:83:61:e7:8c:46:3a:c9:9f:e1:67:13:2c:e9:f3:5e: ef:8a:e1:44:99:f6:8a:f7:93:eb:05:bb:b4:df:45:bd:d8:02: 8f:7c:69:ad:f6:0b:75:6c:ae:1f:87:12:09:26:02:f0:7d:e4: b3:d8:cf:4d:4e:65:c4:74:3e:57:ca:cc:a1:60:32:4c:f5:b6: 52:1c:4d:cc:6b:72:aa:8b:20:81:5a:3c:6e:65:db:83:03:21: 95:4c:b0:0a:77:c7:27:2d:b3:7e:1b:e1:6d:14:52:ee:0f:45: 37:38:2f:b1:b1:58:51:56:d8:09:29:c8:7b:c2:c1:b7:38:cf: 3f:db:01:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHHoJoRgHpB9LhbFSbs3fTnkFni0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC NEYwQjk5MDAeFw0yNjAzMDIxODMwMTVaFw0yNzAzMDExODM1MTVaMDMxMTAvBgNV BAMTKDVBNkI2RTM3REM0RkFDMDlBMzc1MTc2M0VDNjQ0QTRCMkZGNDQwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6Ff50pMqM3/j1r4rWQc1beU9 PwYhCsMvoMne8U7CN/BE+P1XFH/SBKrH+EvVhAjkQKX8g4lAJ0NLXAGTE/byBWz2 ODOmTS9zY3O0itLNe7v0/1Us4dDZVknpgFuwelW9lNuoVEodPBGEofDweyJoBNbW ytIUSIid1zZUyGZtYc3GN8IVjdszCwYJHOfZbUTrTWwnDmuuwvkoHz5jKn5Josk/ oflr/p8VjyjvmDTrdNF3P1JIj3xE+bsACDDZPDpQHFckFGhQN8SMhDvdck2cGCT1 XvrLKPA8X/f7V+loTasWs6st6vCCjKqVAxdWFD7cllq/Rl8SxniG/StFDX8hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWmtuN9xPrAmjdRdj7GRKSy/0QN4wHwYDVR0j BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv MzIzODMwMzQzYTYxMzgzNDNhMzQzMDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl MjAzMjM2MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBAqEQDANBgkqhkiG9w0BAQsFAAOC AQEAgiSAR16VofmyfCW7cA5A1YAFXtA4YZO7VTZh6mi5644CpPSlAYESvJmmQ9TG cAmGRWxV7G0Oj0T142lF1fmfgtEKgKplHGz9H1zAZCxVwmX5aUwJUlnkVGxll4AI V+tMwKGWmFqOoHM+11jWni2AcOYp06nqBQ3WRLcLrtu60Cieg2HnjEY6yZ/hZxMs 6fNe74rhRJn2iveT6wW7tN9FvdgCj3xprfYLdWyuH4cSCSYC8H3ks9jPTU5lxHQ+ V8rMoWAyTPW2UhxNzGtyqosggVo8bmXbgwMhlUywCnfHJy2zfhvhbRRS7g9FNzgv sbFYUVbYCSnIe8LBtzjPP9sBPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:38:23 2026 by rpki-client