$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa File: 323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa (raw, json) Hash identifier: zUd8WFscrI98gRyzgH9IiLK50eKcU/HAz6r4pxULeCY= Subject key identifier: DE:E9:E9:E5:CB:69:AC:F3:7C:CE:A5:05:6A:FF:DB:48:47:C7:07:47 Certificate issuer: /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Certificate serial: 22103E8F4ADE2E7C0FBA84BEE3F04541EAD4A601 Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa Signing time: Mon 02 Mar 2026 18:35:13 +0000 ROA not before: Mon 02 Mar 2026 18:30:13 +0000 ROA not after: Mon 01 Mar 2027 18:35:13 +0000 asID: 262296 IP address blocks: 2804:a84:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:10:3e:8f:4a:de:2e:7c:0f:ba:84:be:e3:f0:45:41:ea:d4:a6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990 Validity Not Before: Mar 2 18:30:13 2026 GMT Not After : Mar 1 18:35:13 2027 GMT Subject: CN=DEE9E9E5CB69ACF37CCEA5056AFFDB4847C70747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:96:7a:a7:1d:26:77:0c:14:ba:aa:9c:62: 92:2a:10:63:da:db:b6:3e:9d:32:ab:ab:0a:7a:1a: 1d:c0:09:96:b1:10:63:6d:a9:0f:24:83:34:e1:6f: c9:9a:af:7a:b2:f8:0a:ac:47:9d:80:4b:98:b4:8b: 7d:9d:20:59:b8:23:e4:fb:e6:b3:bc:52:86:b5:53: 50:c3:ef:85:50:ed:ca:60:ef:12:be:3b:28:1f:26: 3d:db:fe:7e:f5:f8:f8:0a:c7:b2:61:d6:2d:03:66: f0:7d:df:71:19:1c:51:fe:08:ba:60:69:2a:f0:17: 12:da:0f:b0:81:19:50:09:eb:84:dd:5f:da:9a:7a: 4a:30:d7:c9:62:44:4a:b6:60:83:ca:c3:39:3e:92: f8:3a:7d:b6:5e:0e:d5:45:3b:8f:68:9d:4a:30:60: 15:88:f6:e8:ee:9e:14:e1:4e:2b:8a:29:d7:df:a3: 78:ed:66:3e:47:53:ab:2e:f3:a5:6e:fc:02:ea:92: f1:5a:6f:80:27:8f:04:3f:a0:46:17:7f:d4:26:a3: 63:ba:e7:a1:87:82:35:f6:8c:c6:a2:5e:5c:d1:dc: bb:55:56:af:90:c2:de:9e:46:3b:e4:15:75:94:08: 58:e0:38:f5:b0:00:03:d7:bc:e0:9c:a7:b4:9f:b4: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:E9:E5:CB:69:AC:F3:7C:CE:A5:05:6A:FF:DB:48:47:C7:07:47 X509v3 Authority Key Identifier: keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a84:8000::/48 Signature Algorithm: sha256WithRSAEncryption c3:23:00:51:35:ba:d8:98:12:69:13:8a:b5:3a:85:0c:37:6a: ef:95:1a:66:1d:94:a8:19:e2:15:23:cd:12:5f:4e:93:90:fb: 3b:48:21:17:48:0b:46:0f:aa:83:4f:aa:bb:9f:df:5b:16:6c: 82:4a:76:02:e1:93:83:f9:29:6f:fc:6b:7a:4f:22:fc:14:4f: f2:9a:41:f1:0d:aa:b3:e7:b7:53:37:92:56:c0:17:49:91:d1: 01:5d:56:68:e8:21:61:07:c9:ea:53:13:47:a8:04:eb:c2:e5: 96:22:07:28:f6:35:ca:a7:63:d5:3e:3b:94:1a:71:c2:28:d5: a8:c0:22:52:74:c1:f0:59:71:7a:81:57:48:b2:88:45:2f:1f: 6f:b5:77:fe:ca:5a:03:5e:f7:1f:01:28:f8:43:e5:7b:30:9a: 22:93:c8:29:d7:b6:7b:6a:fe:16:77:48:94:07:49:28:dd:c2: 58:f7:d3:d0:ae:15:3a:09:bb:87:04:68:71:b7:ea:22:29:ac: b1:e1:34:ce:62:9f:ee:1c:e3:73:9f:0c:46:84:cf:32:bc:03: 69:a4:29:64:00:1b:91:b0:d4:64:e0:20:de:e7:40:5d:2a:9f: 71:23:47:34:6f:14:52:f8:28:38:f4:cf:39:34:01:e2:ac:c3: 95:68:15:a5 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUIhA+j0reLnwPuoS+4/BFQerUpgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC NEYwQjk5MDAeFw0yNjAzMDIxODMwMTNaFw0yNzAzMDExODM1MTNaMDMxMTAvBgNV BAMTKERFRTlFOUU1Q0I2OUFDRjM3Q0NFQTUwNTZBRkZEQjQ4NDdDNzA3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QZZ6px0mdwwUuqqcYpIqEGPa 27Y+nTKrqwp6Gh3ACZaxEGNtqQ8kgzThb8mar3qy+AqsR52AS5i0i32dIFm4I+T7 5rO8Uoa1U1DD74VQ7cpg7xK+OygfJj3b/n71+PgKx7Jh1i0DZvB933EZHFH+CLpg aSrwFxLaD7CBGVAJ64TdX9qaekow18liREq2YIPKwzk+kvg6fbZeDtVFO49onUow YBWI9ujunhThTiuKKdffo3jtZj5HU6su86Vu/ALqkvFab4AnjwQ/oEYXf9Qmo2O6 56GHgjX2jMaiXlzR3LtVVq+Qwt6eRjvkFXWUCFjgOPWwAAPXvOCcp7SftLeRAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQU3unp5ctprPN8zqUFav/bSEfHB0cwHwYDVR0j BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv MzIzODMwMzQzYTYxMzgzNDNhMzgzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM2MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAqEgAAwDQYJKoZIhvcNAQELBQAD ggEBAMMjAFE1utiYEmkTirU6hQw3au+VGmYdlKgZ4hUjzRJfTpOQ+ztIIRdIC0YP qoNPqruf31sWbIJKdgLhk4P5KW/8a3pPIvwUT/KaQfENqrPnt1M3klbAF0mR0QFd VmjoIWEHyepTE0eoBOvC5ZYiByj2NcqnY9U+O5QaccIo1ajAIlJ0wfBZcXqBV0iy iEUvH2+1d/7KWgNe9x8BKPhD5XswmiKTyCnXtntq/hZ3SJQHSSjdwlj309CuFToJ u4cEaHG36iIprLHhNM5in+4c43OfDEaEzzK8A2mkKWQAG5Gw1GTgIN7nQF0qn3Ej RzRvFFL4KDj0zzk0AeKsw5VoFaU= -----END CERTIFICATE-----Generated at Mon Mar 2 21:38:19 2026 by rpki-client