$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a353030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a353030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: 1O/PIQwD/9vKQgpZeaoXfjxa1EzPRHRS40Dkk/D8vw0= Subject key identifier: AF:A0:F4:A3:6C:EF:E3:2B:FC:25:33:CE:41:3E:89:BE:B5:7E:78:6F Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 3A453CFCDC72F30E54EC37753D88EAB02FCCD8E7 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a353030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:34:25 +0000 ROA not before: Mon 02 Mar 2026 15:29:25 +0000 ROA not after: Mon 01 Mar 2027 15:34:25 +0000 asID: 264120 IP address blocks: 2804:22c0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:45:3c:fc:dc:72:f3:0e:54:ec:37:75:3d:88:ea:b0:2f:cc:d8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:29:25 2026 GMT Not After : Mar 1 15:34:25 2027 GMT Subject: CN=AFA0F4A36CEFE32BFC2533CE413E89BEB57E786F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:65:95:6c:4e:23:02:ce:56:02:14:ff:d2:04: 64:bc:ea:43:4d:e5:ce:30:1b:4c:b1:7d:e1:7d:b4: 74:b6:58:c1:4a:64:a1:5e:29:72:2b:dc:e6:38:d5: 83:86:3c:6f:29:86:a8:96:95:40:a2:ed:3f:3c:26: 23:28:12:91:d2:b6:d7:2b:9b:db:3e:95:33:00:11: df:e5:61:c1:41:ba:1b:bb:c2:24:cd:00:d6:95:e6: 97:11:fa:f7:6d:44:d7:9a:01:0f:57:ae:e1:36:d0: a3:2a:b9:54:03:02:8a:6d:46:5a:28:e4:05:d6:c7: 08:d3:cb:a8:be:d9:70:99:42:bb:b9:18:80:4f:06: c1:c9:26:30:e3:b9:e2:98:0a:3e:f3:5b:b6:fc:62: 13:eb:07:0f:be:9e:1f:d6:57:28:89:f3:67:f9:8d: 2d:09:cf:d5:82:8a:60:48:7c:da:e3:e1:51:e5:35: 4a:da:c7:92:f2:b0:37:42:e3:58:c5:f7:45:23:51: 40:0c:bf:f9:3d:bb:3f:d5:b1:11:d1:de:5c:f3:4f: 16:c4:33:c4:54:fa:0d:92:28:57:f6:d3:3a:09:0b: 8f:57:8d:e6:cf:d2:ef:25:d1:9c:68:be:e1:6b:52: d0:13:3e:34:68:d3:ae:1b:f5:5c:22:70:27:33:ca: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:F4:A3:6C:EF:E3:2B:FC:25:33:CE:41:3E:89:BE:B5:7E:78:6F X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a353030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 2c:55:dd:89:fe:d1:5a:b5:ca:6f:87:67:3b:38:3e:ec:b1:c0: 1d:21:1d:11:01:92:77:1e:ea:37:7c:ff:b3:d8:c8:d9:82:4e: 35:e4:2b:69:6a:01:cd:95:f9:bd:58:79:6f:da:d8:e7:7d:f0: 69:b0:6d:cc:b6:d4:c8:ed:d8:43:c4:9d:51:7d:07:1a:85:76: e3:34:82:af:36:87:19:64:9b:b5:39:d1:f0:d0:ed:5d:51:2f: 1f:a0:ff:c7:01:44:25:8b:25:1c:fb:e4:c1:60:91:b4:19:83: 9e:bb:7e:0b:b0:7d:c1:1b:49:96:12:2b:52:13:5f:67:bc:2b: 2b:0d:9a:8d:b3:75:4a:8f:77:5f:bd:25:fa:78:c4:dc:3d:ca: c8:3c:60:fb:40:2f:25:d5:54:59:8e:eb:f2:3e:e0:cc:b0:52: 38:8d:a3:94:5d:89:14:cd:9e:ab:f0:59:18:8f:12:92:86:a7: cc:b0:9b:e5:97:e2:9d:6e:a2:f6:40:8b:e6:4a:47:b4:a1:d6: bc:8b:68:46:f7:44:a9:50:d7:88:13:04:55:30:92:64:df:7e: 91:3d:ec:7b:da:4f:8b:e4:a6:5a:ab:48:9c:10:d3:b8:aa:ec: ca:a7:9c:c8:1c:a4:b3:05:25:6f:73:57:b2:7f:e7:96:ca:f9: 74:d7:f6:bf -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUOkU8/Nxy8w5U7Dd1PYjqsC/M2OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI5MjVaFw0yNzAzMDExNTM0MjVaMDMxMTAvBgNV BAMTKEFGQTBGNEEzNkNFRkUzMkJGQzI1MzNDRTQxM0U4OUJFQjU3RTc4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZZVsTiMCzlYCFP/SBGS86kNN 5c4wG0yxfeF9tHS2WMFKZKFeKXIr3OY41YOGPG8phqiWlUCi7T88JiMoEpHSttcr m9s+lTMAEd/lYcFBuhu7wiTNANaV5pcR+vdtRNeaAQ9XruE20KMquVQDAoptRloo 5AXWxwjTy6i+2XCZQru5GIBPBsHJJjDjueKYCj7zW7b8YhPrBw++nh/WVyiJ82f5 jS0Jz9WCimBIfNrj4VHlNUrax5LysDdC41jF90UjUUAMv/k9uz/VsRHR3lzzTxbE M8RU+g2SKFf20zoJC49XjebP0u8l0ZxovuFrUtATPjRo064b9VwicCczyqlVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUr6D0o2zv4yv8JTPOQT6JvrV+eG8wHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsBQMA0GCSqGSIb3DQEBCwUA A4IBAQAsVd2J/tFatcpvh2c7OD7sscAdIR0RAZJ3Huo3fP+z2MjZgk415CtpagHN lfm9WHlv2tjnffBpsG3MttTI7dhDxJ1RfQcahXbjNIKvNocZZJu1OdHw0O1dUS8f oP/HAUQliyUc++TBYJG0GYOeu34LsH3BG0mWEitSE19nvCsrDZqNs3VKj3dfvSX6 eMTcPcrIPGD7QC8l1VRZjuvyPuDMsFI4jaOUXYkUzZ6r8FkYjxKShqfMsJvll+Kd bqL2QIvmSke0oda8i2hG90SpUNeIEwRVMJJk336RPex72k+L5KZaq0icENO4quzK p5zIHKSzBSVvc1eyf+eWyvl01/a/ -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:22 2026 by rpki-client