$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a363030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a363030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: XHI9NClrjThT3HADohISsxCNZVQkDC68K4vdtuLBr94= Subject key identifier: 60:8B:E1:F0:4F:68:79:14:36:D8:BC:4B:A5:72:04:48:2F:21:3D:78 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 53EEAF981694DB777EB3508669BEAABB782C88FA Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a363030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:34:37 +0000 ROA not before: Mon 02 Mar 2026 15:29:37 +0000 ROA not after: Mon 01 Mar 2027 15:34:37 +0000 asID: 264120 IP address blocks: 2804:22c0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:af:98:16:94:db:77:7e:b3:50:86:69:be:aa:bb:78:2c:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:29:37 2026 GMT Not After : Mar 1 15:34:37 2027 GMT Subject: CN=608BE1F04F68791436D8BC4BA57204482F213D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:f2:86:3a:ef:32:aa:a5:42:af:c3:31:81: 2d:a4:bb:b6:a5:f0:ce:c6:23:59:55:63:ed:87:3a: e0:63:5e:52:ef:84:db:e1:85:14:db:0b:a8:f2:44: 48:e2:3d:d3:cc:8a:d7:07:00:0c:95:68:2e:3c:2b: 64:95:2c:04:32:6f:1d:f9:18:d3:1c:bf:52:4f:47: 86:74:28:01:69:75:36:82:64:42:19:74:1b:ef:5e: b0:0a:f5:a6:8a:f1:51:a0:56:f3:15:34:b7:41:99: 73:56:38:e3:2f:a0:c6:d3:f0:7e:c7:97:9c:e1:76: e3:a1:c3:a7:0e:cf:b9:46:10:3a:46:0d:95:41:83: 34:1e:22:9b:8c:c6:08:bf:6a:50:24:33:0a:ee:2d: f2:8c:df:cd:90:c0:6a:84:47:a1:1f:37:3d:2d:ec: 39:81:14:f8:5a:8c:cc:ea:e0:65:5f:38:73:f2:8d: eb:3d:08:22:07:cc:2c:59:99:19:95:b2:9a:50:b8: 19:25:e2:76:4c:30:39:fe:09:5a:8a:15:c8:46:71: c7:fb:24:b0:2e:1c:8a:7b:c2:34:43:78:75:b8:c8: 07:21:1c:5a:f1:20:c1:b2:76:94:7c:f8:bf:6f:75: fb:c4:ca:dd:5f:1f:f4:66:c7:5e:82:f1:d7:11:48: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:E1:F0:4F:68:79:14:36:D8:BC:4B:A5:72:04:48:2F:21:3D:78 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a363030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:6000::/36 Signature Algorithm: sha256WithRSAEncryption c7:34:81:9d:da:5b:97:d9:85:b3:c2:3f:56:a3:e6:fc:18:c3: a9:ba:b7:56:9c:b0:a8:68:05:55:e7:0b:65:34:9c:79:bc:bd: 6b:8e:b5:f5:e1:36:ed:41:44:59:a2:b8:a9:33:3b:47:94:73: 77:d4:72:9c:df:a3:8a:f5:c7:f2:39:86:ee:8f:a0:0f:1b:1c: b7:90:0d:51:02:09:73:16:8e:39:80:d5:0d:e1:ae:65:10:45: 4e:aa:c5:db:8d:87:2e:e8:45:45:b6:88:db:48:57:41:33:46: 59:43:8c:1d:49:12:82:8c:a2:6c:88:0a:62:28:f1:56:cb:f3: 1a:6d:80:2b:9a:bd:46:8d:2f:f5:00:76:2d:d2:c8:ac:52:81: ff:04:dc:ed:26:fa:81:43:bb:8d:18:af:74:91:02:81:88:a5: 3c:f7:28:90:b3:a5:60:40:29:ec:9e:7a:87:86:85:05:ce:5a: 37:bf:32:6e:07:3f:b9:a6:8a:61:9e:3b:39:43:42:10:be:75: 67:c5:c3:0d:61:94:c5:e1:43:94:b7:fc:89:6b:83:05:07:b1: 04:be:43:68:4e:a5:f0:a1:5a:68:34:eb:e7:16:a8:a0:1c:ea: 69:35:b7:cc:87:23:86:25:80:ef:cd:b0:82:8c:a7:8e:2a:39: 7f:43:24:4c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUU+6vmBaU23d+s1CGab6qu3gsiPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI5MzdaFw0yNzAzMDExNTM0MzdaMDMxMTAvBgNV BAMTKDYwOEJFMUYwNEY2ODc5MTQzNkQ4QkM0QkE1NzIwNDQ4MkYyMTNENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBfKGOu8yqqVCr8MxgS2ku7al 8M7GI1lVY+2HOuBjXlLvhNvhhRTbC6jyREjiPdPMitcHAAyVaC48K2SVLAQybx35 GNMcv1JPR4Z0KAFpdTaCZEIZdBvvXrAK9aaK8VGgVvMVNLdBmXNWOOMvoMbT8H7H l5zhduOhw6cOz7lGEDpGDZVBgzQeIpuMxgi/alAkMwruLfKM382QwGqER6EfNz0t 7DmBFPhajMzq4GVfOHPyjes9CCIHzCxZmRmVsppQuBkl4nZMMDn+CVqKFchGccf7 JLAuHIp7wjRDeHW4yAchHFrxIMGydpR8+L9vdfvEyt1fH/Rmx16C8dcRSKInAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUYIvh8E9oeRQ22LxLpXIESC8hPXgwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsBgMA0GCSqGSIb3DQEBCwUA A4IBAQDHNIGd2luX2YWzwj9Wo+b8GMOpurdWnLCoaAVV5wtlNJx5vL1rjrX14Tbt QURZoripMztHlHN31HKc36OK9cfyOYbuj6APGxy3kA1RAglzFo45gNUN4a5lEEVO qsXbjYcu6EVFtojbSFdBM0ZZQ4wdSRKCjKJsiApiKPFWy/MabYArmr1GjS/1AHYt 0sisUoH/BNztJvqBQ7uNGK90kQKBiKU89yiQs6VgQCnsnnqHhoUFzlo3vzJuBz+5 pophnjs5Q0IQvnVnxcMNYZTF4UOUt/yJa4MFB7EEvkNoTqXwoVpoNOvnFqigHOpp NbfMhyOGJYDvzbCCjKeOKjl/QyRM -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:19 2026 by rpki-client