$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a333030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a333030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: O6s6CcK11pS3umTjDzKGFZrKAmJ3NscbvOoVjyGigMo= Subject key identifier: 4C:CC:DC:D2:A8:15:3D:43:5C:C6:7D:B1:96:BF:DF:A1:D7:78:A5:2F Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 2A82233796B010BE9F1544C2CC54CEA95684E976 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a333030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:33:53 +0000 ROA not before: Mon 02 Mar 2026 15:28:53 +0000 ROA not after: Mon 01 Mar 2027 15:33:53 +0000 asID: 264120 IP address blocks: 2804:22c0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:82:23:37:96:b0:10:be:9f:15:44:c2:cc:54:ce:a9:56:84:e9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:28:53 2026 GMT Not After : Mar 1 15:33:53 2027 GMT Subject: CN=4CCCDCD2A8153D435CC67DB196BFDFA1D778A52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:6c:10:f4:79:05:ba:c0:1c:25:8f:80:36: 35:70:65:2f:59:af:a5:5d:65:df:6a:85:88:0c:c2: a4:20:1e:f1:3a:51:23:32:ad:52:0b:ae:e5:0e:1a: 19:f3:75:2c:86:2a:21:9d:2b:3f:9a:f2:d8:08:50: 39:9f:7d:7f:6e:5e:fc:a3:da:4c:d6:e2:bb:6f:37: ec:39:a9:b6:21:ac:c0:f9:0e:bc:42:f9:33:61:8c: b0:aa:83:6b:03:87:dc:b0:3d:fe:df:b9:a1:81:b2: 36:06:92:68:4f:8b:be:0c:a5:91:04:4c:ab:92:61: 7c:ea:52:68:7c:84:1a:c2:b5:91:82:33:3f:c5:2c: 47:76:de:1a:bb:01:2c:75:64:05:83:40:8d:50:3b: e8:b7:c4:2a:fc:72:e1:80:56:44:f6:3b:3b:93:a2: 5b:37:be:35:7d:f6:a0:2a:82:54:6a:ab:0d:5b:51: 5f:88:53:b9:d4:ec:9c:7f:47:cb:14:fb:2b:a2:06: a5:07:df:0e:2a:50:d6:1d:53:1b:54:0a:b3:a5:8e: f7:b8:03:9a:79:53:73:7b:e1:68:e0:13:9d:04:6b: 17:e6:67:43:0b:e2:f2:3c:c0:d3:43:6a:5d:6a:53: 8b:5a:32:da:f6:28:bf:45:38:a3:ce:7d:da:45:a3: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CC:DC:D2:A8:15:3D:43:5C:C6:7D:B1:96:BF:DF:A1:D7:78:A5:2F X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a333030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 73:6c:88:2f:27:4a:a0:87:d0:d0:ac:63:3b:f1:2d:3c:76:f7: d3:b1:c8:fc:3a:c7:d9:23:2c:3f:3a:2a:f7:ab:45:90:d5:eb: 68:fd:66:f2:65:54:e4:7c:77:d4:fb:4c:34:00:38:43:e5:6a: df:ca:8c:df:ae:a3:5f:fd:79:a1:56:46:4e:79:55:e7:59:6c: de:c5:b9:fa:9d:fb:97:f1:f4:95:ce:cc:f6:c0:4a:ac:e0:21: 0f:d0:4c:2b:8c:94:de:8a:52:01:5b:7f:e4:ea:0a:00:db:95: ab:da:c9:08:d6:cf:f9:fa:7e:e9:0f:d5:4c:91:71:ce:61:3e: 9c:b4:ec:15:4d:98:7b:bc:fc:0d:6e:59:9e:83:0a:2a:27:02: 72:8f:23:7b:ca:64:0b:a8:e3:11:6a:88:2a:a2:2f:83:f2:5a: 90:12:54:52:ec:47:51:1e:f0:35:b3:df:11:56:c7:8d:d8:e0: 80:d6:45:32:9a:9b:8d:b2:94:ce:9d:4a:f0:3d:bb:0c:0d:15: 70:5f:23:a4:ff:b0:a4:5c:b4:50:61:4d:2b:e8:32:18:f1:88: f9:ff:b2:39:ab:bc:c4:ae:b4:12:47:cd:e9:88:84:32:f0:da: bb:6c:d2:91:e4:fc:c4:ef:8b:d1:b7:b6:81:81:e4:52:2e:61: e9:07:75:fa -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKoIjN5awEL6fFUTCzFTOqVaE6XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI4NTNaFw0yNzAzMDExNTMzNTNaMDMxMTAvBgNV BAMTKDRDQ0NEQ0QyQTgxNTNENDM1Q0M2N0RCMTk2QkZERkExRDc3OEE1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHGwQ9HkFusAcJY+ANjVwZS9Z r6VdZd9qhYgMwqQgHvE6USMyrVILruUOGhnzdSyGKiGdKz+a8tgIUDmffX9uXvyj 2kzW4rtvN+w5qbYhrMD5DrxC+TNhjLCqg2sDh9ywPf7fuaGBsjYGkmhPi74MpZEE TKuSYXzqUmh8hBrCtZGCMz/FLEd23hq7ASx1ZAWDQI1QO+i3xCr8cuGAVkT2OzuT ols3vjV99qAqglRqqw1bUV+IU7nU7Jx/R8sU+yuiBqUH3w4qUNYdUxtUCrOljve4 A5p5U3N74WjgE50EaxfmZ0ML4vI8wNNDal1qU4taMtr2KL9FOKPOfdpFozG1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUTMzc0qgVPUNcxn2xlr/fodd4pS8wHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsAwMA0GCSqGSIb3DQEBCwUA A4IBAQBzbIgvJ0qgh9DQrGM78S08dvfTscj8OsfZIyw/Oir3q0WQ1eto/WbyZVTk fHfU+0w0ADhD5WrfyozfrqNf/XmhVkZOeVXnWWzexbn6nfuX8fSVzsz2wEqs4CEP 0EwrjJTeilIBW3/k6goA25Wr2skI1s/5+n7pD9VMkXHOYT6ctOwVTZh7vPwNblme gwoqJwJyjyN7ymQLqOMRaogqoi+D8lqQElRS7EdRHvA1s98RVseN2OCA1kUympuN spTOnUrwPbsMDRVwXyOk/7CkXLRQYU0r6DIY8Yj5/7I5q7zErrQSR83piIQy8Nq7 bNKR5PzE74vRt7aBgeRSLmHpB3X6 -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:20 2026 by rpki-client