$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a373030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a373030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: 25WNfJ9Ur3w/QMVsxunWEg8G5cXuph3O5FMCjrPEyKU= Subject key identifier: 15:68:E6:56:F1:6C:1F:6D:69:43:33:CD:A3:7D:6A:E5:6D:CF:EF:EB Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 25027FA11A723AF1769F72AF40722F0B8DDF83A3 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a373030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:34:51 +0000 ROA not before: Mon 02 Mar 2026 15:29:51 +0000 ROA not after: Mon 01 Mar 2027 15:34:51 +0000 asID: 264120 IP address blocks: 2804:22c0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:7f:a1:1a:72:3a:f1:76:9f:72:af:40:72:2f:0b:8d:df:83:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:29:51 2026 GMT Not After : Mar 1 15:34:51 2027 GMT Subject: CN=1568E656F16C1F6D694333CDA37D6AE56DCFEFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:69:ba:d9:fb:f4:94:ab:a2:b4:bc:96:b2: 60:a4:32:ab:ec:e3:59:9d:af:52:b4:03:3f:a4:c7: a3:f0:fe:31:7b:3d:bc:e5:d7:4f:59:ae:74:eb:b9: 4c:92:bc:ec:95:6a:87:d6:9f:3e:c4:25:96:26:40: 3f:fb:be:19:a9:fe:8f:87:17:24:48:c4:a2:8a:af: 6b:74:bc:5d:80:cd:1d:1f:e5:23:e5:b3:ab:60:9e: 62:10:e3:a1:49:bf:34:b2:32:e1:c0:1e:ec:e8:f8: 63:3b:9a:87:b8:52:6b:34:8d:d7:08:6e:3c:ed:7a: 17:ac:72:8d:01:cb:6d:e6:f2:f6:1d:23:e1:9f:42: 31:07:c1:6f:59:30:31:31:52:5f:8e:ab:af:05:66: a7:f6:f5:86:bd:2e:53:e3:ea:07:38:86:5b:3d:35: e1:f4:bc:1c:b7:ca:2a:cb:69:28:37:99:12:83:b9: f2:f6:2f:3e:d6:f6:fd:e1:ea:12:21:aa:59:51:90: 23:7f:74:e4:2d:be:64:55:d4:e6:9b:d3:d8:49:01: 16:47:c7:58:f6:57:5a:2b:79:ca:e3:4b:23:c0:7c: f4:d7:e0:4d:31:8e:ac:03:23:11:d0:92:0e:ef:b5: 2f:ba:1d:35:3e:0f:13:5f:2b:b1:be:33:1d:9a:20: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:68:E6:56:F1:6C:1F:6D:69:43:33:CD:A3:7D:6A:E5:6D:CF:EF:EB X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a373030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:7000::/36 Signature Algorithm: sha256WithRSAEncryption 63:a7:65:b5:69:cd:ef:9c:c9:2f:f3:e2:a2:af:a3:2d:c2:27: 40:67:1d:3d:b3:4e:66:42:02:57:11:a7:16:34:59:56:b7:b4: bf:7a:2b:e2:7a:b4:c1:e8:ec:5b:8e:cb:5e:c0:31:16:fe:25: 4a:99:69:24:7f:3f:b3:2d:30:ce:65:02:94:f8:16:a1:eb:9d: b3:98:9e:3e:78:ee:97:ba:6e:48:82:38:1f:f7:6d:df:d9:74: 35:35:fb:b2:27:9c:4d:28:9e:cd:62:12:a3:f5:af:6d:b5:74: d0:75:de:90:c5:4a:a4:17:6d:96:6b:6d:fd:c7:47:86:22:e2: 69:5d:b2:91:f8:78:63:53:0f:45:7a:23:da:fa:1b:da:ef:b2: 5b:01:a7:e8:19:60:73:b0:e0:bd:25:fc:ba:5a:f4:84:51:6d: 54:1e:03:1b:47:c9:21:0c:12:3d:43:55:7a:56:48:f5:1b:1d: 2b:c8:ca:52:9f:79:fe:ba:02:b9:cb:fb:3d:2c:e9:57:79:41: 0a:9a:c7:f4:b3:ff:6b:49:37:c5:78:f8:97:7b:35:df:08:0c: d1:e2:d7:9a:6c:95:d0:ac:09:b8:94:77:13:f3:17:fe:b6:5f: 77:3c:1a:e0:d9:34:9c:b3:2a:64:ca:58:fc:81:82:66:0e:f4: 3f:c9:b1:0f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUJQJ/oRpyOvF2n3KvQHIvC43fg6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTI5NTFaFw0yNzAzMDExNTM0NTFaMDMxMTAvBgNV BAMTKDE1NjhFNjU2RjE2QzFGNkQ2OTQzMzNDREEzN0Q2QUU1NkRDRkVGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BGm62fv0lKuitLyWsmCkMqvs 41mdr1K0Az+kx6Pw/jF7Pbzl109ZrnTruUySvOyVaofWnz7EJZYmQD/7vhmp/o+H FyRIxKKKr2t0vF2AzR0f5SPls6tgnmIQ46FJvzSyMuHAHuzo+GM7moe4Ums0jdcI bjztehesco0By23m8vYdI+GfQjEHwW9ZMDExUl+Oq68FZqf29Ya9LlPj6gc4hls9 NeH0vBy3yirLaSg3mRKDufL2Lz7W9v3h6hIhqllRkCN/dOQtvmRV1Oab09hJARZH x1j2V1orecrjSyPAfPTX4E0xjqwDIxHQkg7vtS+6HTU+DxNfK7G+Mx2aIBSPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUFWjmVvFsH21pQzPNo31q5W3P7+swHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsBwMA0GCSqGSIb3DQEBCwUA A4IBAQBjp2W1ac3vnMkv8+Kir6MtwidAZx09s05mQgJXEacWNFlWt7S/eivierTB 6OxbjstewDEW/iVKmWkkfz+zLTDOZQKU+Bah652zmJ4+eO6Xum5Igjgf923f2XQ1 NfuyJ5xNKJ7NYhKj9a9ttXTQdd6QxUqkF22Wa239x0eGIuJpXbKR+HhjUw9FeiPa +hva77JbAafoGWBzsOC9Jfy6WvSEUW1UHgMbR8khDBI9Q1V6Vkj1Gx0ryMpSn3n+ ugK5y/s9LOlXeUEKmsf0s/9rSTfFePiXezXfCAzR4teabJXQrAm4lHcT8xf+tl93 PBrg2TScsypkylj8gYJmDvQ/ybEP -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:01 2026 by rpki-client