$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a313030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a313030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: /n+eEi3drwUGA9zn3BVb9LVHrpD2xO8hibNdlDD9Osc= Subject key identifier: 05:E2:71:59:5B:1C:AC:F8:8C:A0:CF:4B:7C:90:F1:DE:0A:FB:67:7A Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 40A430B4A0E2A58958E92EAB8161FF5F9DC744E3 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a313030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:33:29 +0000 ROA not before: Mon 02 Mar 2026 15:28:29 +0000 ROA not after: Mon 01 Mar 2027 15:33:29 +0000 asID: 264120 IP address blocks: 2804:22c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:30:b4:a0:e2:a5:89:58:e9:2e:ab:81:61:ff:5f:9d:c7:44:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:28:29 2026 GMT Not After : Mar 1 15:33:29 2027 GMT Subject: CN=05E271595B1CACF88CA0CF4B7C90F1DE0AFB677A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:1d:92:1f:ca:6d:c0:ab:4f:0f:08:36:4a: 10:86:ec:e2:4a:cd:a8:15:1b:95:58:9e:00:7f:4a: 77:0e:cb:9a:1a:08:43:ef:43:0c:0b:03:0d:d6:fc: e9:de:8e:ed:cb:76:26:8a:2c:56:98:8a:9f:9e:b3: 12:a5:ad:66:db:0e:6d:0e:a7:8d:5b:06:b3:f9:56: ca:08:23:4a:2d:c5:6f:d0:28:a7:cf:1a:e9:2f:4b: 62:68:46:74:4c:12:e4:81:15:f7:83:25:a0:db:4e: d1:54:26:03:7a:91:a5:e0:72:c4:93:fb:81:49:ac: 6a:ed:c0:66:45:35:82:a0:c6:a1:77:ef:30:fb:68: a1:7a:b0:13:d6:62:ae:37:b7:82:1b:07:e9:e8:09: 9e:75:d7:d6:b7:da:54:f5:93:33:0a:de:48:89:b2: d4:6d:de:f7:cd:7d:d9:37:c6:b8:15:80:42:c2:3f: c0:65:aa:2f:3d:0b:04:f7:ba:55:7c:d7:22:28:1c: d0:b8:05:56:c3:db:e5:8a:bb:ae:bd:3d:42:a5:0f: 17:8e:ed:1f:5c:ba:b2:6e:b8:df:e3:8a:28:61:93: 79:8c:bb:ab:6c:4b:fe:24:de:b3:07:06:bf:91:c3: c6:8f:2f:4e:a5:8f:9f:a4:47:6c:e9:58:ba:0f:64: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:71:59:5B:1C:AC:F8:8C:A0:CF:4B:7C:90:F1:DE:0A:FB:67:7A X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a313030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 45:1b:b2:ee:2c:2a:ca:08:81:f6:a7:4e:4b:b3:19:5a:2d:d1: af:a5:4b:45:09:9c:c7:18:c4:66:4e:fb:18:20:54:73:67:89: d6:5d:60:10:b5:68:e3:dd:92:7f:6b:b3:53:be:99:c9:63:cf: 80:9d:ec:e6:11:e1:81:2d:7f:06:a9:26:5e:62:b8:ea:bd:4e: cb:89:2c:b5:69:a0:10:32:5f:27:aa:e4:f3:ae:68:48:33:59: 02:b6:52:da:fb:7c:b5:51:06:6d:69:40:14:ac:22:2a:7b:42: 5a:96:bf:18:0a:fb:8e:3b:2d:b5:51:94:6c:91:3d:c2:6f:4e: fb:3f:a1:c5:0d:da:b9:b0:fa:85:39:82:5d:f8:de:b1:4c:69: d2:0b:b7:16:1a:6c:95:c2:12:17:2c:a3:ce:d1:7f:26:4a:0e: 29:6b:92:da:68:a8:7f:55:f3:99:24:27:e2:7f:4b:a1:32:a6: bd:af:2a:46:f1:d3:e7:f0:67:3d:cd:42:19:ee:7b:f5:29:ae: ff:6a:5c:a9:1f:93:a3:be:b3:7c:49:35:69:db:e8:0b:9f:b1: 37:6d:79:ee:e6:a9:29:b3:46:95:d8:15:61:95:2e:59:e3:42: fb:34:b0:c9:01:0d:80:f6:cc:71:0d:c1:16:fc:7c:4b:7d:68: 59:44:38:12 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQKQwtKDipYlY6S6rgWH/X53HROMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI4MjlaFw0yNzAzMDExNTMzMjlaMDMxMTAvBgNV BAMTKDA1RTI3MTU5NUIxQ0FDRjg4Q0EwQ0Y0QjdDOTBGMURFMEFGQjY3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYB2SH8ptwKtPDwg2ShCG7OJK zagVG5VYngB/SncOy5oaCEPvQwwLAw3W/Oneju3LdiaKLFaYip+esxKlrWbbDm0O p41bBrP5VsoII0otxW/QKKfPGukvS2JoRnRMEuSBFfeDJaDbTtFUJgN6kaXgcsST +4FJrGrtwGZFNYKgxqF37zD7aKF6sBPWYq43t4IbB+noCZ5119a32lT1kzMK3kiJ stRt3vfNfdk3xrgVgELCP8Blqi89CwT3ulV81yIoHNC4BVbD2+WKu669PUKlDxeO 7R9curJuuN/jiihhk3mMu6tsS/4k3rMHBr+Rw8aPL06lj5+kR2zpWLoPZOFfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUBeJxWVscrPiMoM9LfJDx3gr7Z3owHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsAQMA0GCSqGSIb3DQEBCwUA A4IBAQBFG7LuLCrKCIH2p05LsxlaLdGvpUtFCZzHGMRmTvsYIFRzZ4nWXWAQtWjj 3ZJ/a7NTvpnJY8+AnezmEeGBLX8GqSZeYrjqvU7LiSy1aaAQMl8nquTzrmhIM1kC tlLa+3y1UQZtaUAUrCIqe0Jalr8YCvuOOy21UZRskT3Cb077P6HFDdq5sPqFOYJd +N6xTGnSC7cWGmyVwhIXLKPO0X8mSg4pa5LaaKh/VfOZJCfif0uhMqa9rypG8dPn 8Gc9zUIZ7nv1Ka7/alypH5OjvrN8STVp2+gLn7E3bXnu5qkps0aV2BVhlS5Z40L7 NLDJAQ2A9sxxDcEW/HxLfWhZRDgS -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:17 2026 by rpki-client