$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a323030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a323030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: bLrvWNfSmCBnEJRhgTqf2xLc26AGylXMBLlN0AcxVp8= Subject key identifier: D2:9B:07:04:42:16:0A:9A:59:A9:F8:16:F9:9E:1E:BB:80:15:D3:08 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 1AD15ABF50464BB0314F181E06AB39001C23B245 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a323030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:33:39 +0000 ROA not before: Mon 02 Mar 2026 15:28:39 +0000 ROA not after: Mon 01 Mar 2027 15:33:39 +0000 asID: 264120 IP address blocks: 2804:22c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d1:5a:bf:50:46:4b:b0:31:4f:18:1e:06:ab:39:00:1c:23:b2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:28:39 2026 GMT Not After : Mar 1 15:33:39 2027 GMT Subject: CN=D29B070442160A9A59A9F816F99E1EBB8015D308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:20:fc:a4:ef:25:89:e1:fe:d9:6e:dd:03: 1f:7a:87:0d:ed:c0:51:28:78:20:4b:da:4a:98:66: 47:7e:b0:2b:b0:ed:b8:7d:1f:8b:11:02:b6:93:5b: 15:25:46:65:fa:19:25:05:1c:97:54:54:1b:9d:2d: 15:86:1f:05:de:37:19:25:01:8b:12:90:2c:86:10: 05:3a:85:a8:b7:e4:68:53:13:d7:5d:6d:ce:cb:64: ce:83:5b:52:68:d4:68:bd:27:b0:75:09:fa:ba:af: 16:7c:7c:93:a9:3d:67:53:37:2c:94:21:2d:2c:fb: 8c:5a:eb:37:90:15:8a:97:6f:8f:f4:ae:72:ea:ce: c0:f7:42:90:0b:7f:78:81:b7:a4:59:f2:0c:b7:15: dd:f6:f0:37:a6:75:09:ca:69:39:e7:dd:3b:e5:55: e4:16:45:57:29:5f:1d:cc:af:e7:ee:f7:5d:91:55: 9a:de:20:69:6f:7b:f4:c8:c8:0c:ff:25:15:58:74: cc:3f:c4:d1:98:20:d8:24:eb:ce:68:27:27:37:a6: d0:99:0c:71:78:72:ec:5c:aa:f4:af:9d:cc:61:ed: bd:08:6f:49:58:c2:ab:d4:24:09:ec:90:f7:34:65: 33:6b:1f:fc:0c:b7:ec:c5:a0:df:6e:11:a6:ea:d6: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:07:04:42:16:0A:9A:59:A9:F8:16:F9:9E:1E:BB:80:15:D3:08 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a323030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption c2:be:59:03:8b:75:95:c5:bb:b0:6a:80:a4:29:21:fe:18:07: 40:d7:f6:d9:55:84:70:52:56:b7:e9:55:36:83:99:aa:22:82: f0:7a:55:bd:58:e3:c4:e2:c5:dc:21:39:99:2a:02:6d:7d:f4: 14:3f:17:57:5c:42:98:3f:03:f0:9a:41:65:fe:d2:aa:8a:65: 22:da:72:24:cf:16:84:8f:87:e2:80:86:d1:07:cb:ba:c9:31: 4b:26:d4:3a:a5:9f:ce:d0:e8:5e:87:5a:b6:10:ba:f0:34:f3: c7:4a:96:8f:7f:15:83:70:24:fe:68:61:b4:88:af:04:c5:64: ce:ab:39:a5:d2:cf:e4:bd:a6:49:02:bc:43:7f:06:08:60:87: 74:c6:2a:78:f4:fe:c2:17:b9:ed:08:62:51:ff:e1:97:7c:45: 82:3d:e2:89:8c:6d:82:23:71:e6:c5:dc:34:f0:70:69:c2:84: aa:bb:42:f8:e1:df:4f:33:dc:d1:69:0a:93:20:b3:74:7c:eb: f0:e7:ea:c4:30:eb:64:1c:b4:52:65:c9:b7:5d:96:ca:dc:fe: 10:da:cd:09:dc:e4:ab:b4:b0:5b:12:96:02:44:39:17:e8:c5: 50:69:f3:77:b0:40:08:5f:7f:af:f6:10:5f:93:62:b2:d6:14: d6:d4:f1:04 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGtFav1BGS7AxTxgeBqs5ABwjskUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI4MzlaFw0yNzAzMDExNTMzMzlaMDMxMTAvBgNV BAMTKEQyOUIwNzA0NDIxNjBBOUE1OUE5RjgxNkY5OUUxRUJCODAxNUQzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKCD8pO8lieH+2W7dAx96hw3t wFEoeCBL2kqYZkd+sCuw7bh9H4sRAraTWxUlRmX6GSUFHJdUVBudLRWGHwXeNxkl AYsSkCyGEAU6hai35GhTE9ddbc7LZM6DW1Jo1Gi9J7B1Cfq6rxZ8fJOpPWdTNyyU IS0s+4xa6zeQFYqXb4/0rnLqzsD3QpALf3iBt6RZ8gy3Fd328DemdQnKaTnn3Tvl VeQWRVcpXx3Mr+fu912RVZreIGlve/TIyAz/JRVYdMw/xNGYINgk685oJyc3ptCZ DHF4cuxcqvSvncxh7b0Ib0lYwqvUJAnskPc0ZTNrH/wMt+zFoN9uEabq1uiNAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU0psHBEIWCppZqfgW+Z4eu4AV0wgwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsAgMA0GCSqGSIb3DQEBCwUA A4IBAQDCvlkDi3WVxbuwaoCkKSH+GAdA1/bZVYRwUla36VU2g5mqIoLwelW9WOPE 4sXcITmZKgJtffQUPxdXXEKYPwPwmkFl/tKqimUi2nIkzxaEj4figIbRB8u6yTFL JtQ6pZ/O0Oheh1q2ELrwNPPHSpaPfxWDcCT+aGG0iK8ExWTOqzml0s/kvaZJArxD fwYIYId0xip49P7CF7ntCGJR/+GXfEWCPeKJjG2CI3Hmxdw08HBpwoSqu0L44d9P M9zRaQqTILN0fOvw5+rEMOtkHLRSZcm3XZbK3P4Q2s0J3OSrtLBbEpYCRDkX6MVQ afN3sEAIX3+v9hBfk2Ky1hTW1PEE -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:21 2026 by rpki-client