$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a613030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a613030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: hWDe5Rrg9IlRS/vMRdKMUddEO7tKeFRHs8wryJzYMqY= Subject key identifier: DA:5B:14:8A:8C:56:BC:79:48:14:DE:7D:66:56:70:43:07:57:88:14 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 4AAB11504342D80E5EF0605171371BF25A696D88 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a613030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:35:34 +0000 ROA not before: Mon 02 Mar 2026 15:30:34 +0000 ROA not after: Mon 01 Mar 2027 15:35:34 +0000 asID: 264120 IP address blocks: 2804:22c0:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ab:11:50:43:42:d8:0e:5e:f0:60:51:71:37:1b:f2:5a:69:6d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:30:34 2026 GMT Not After : Mar 1 15:35:34 2027 GMT Subject: CN=DA5B148A8C56BC794814DE7D6656704307578814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:64:0d:8c:77:99:8d:be:dc:15:c1:92:1c: 7c:15:a8:b6:6a:21:97:b5:c8:e7:3d:ca:a2:c9:df: 9b:74:7a:dc:d4:99:7f:fc:24:6f:8f:fe:da:39:af: a9:c6:fd:30:4e:af:6a:63:94:6b:67:be:25:c7:a4: 3c:fd:2c:c0:7e:d1:b6:79:f5:07:8c:6f:88:52:07: 52:b1:2d:25:42:f0:f4:91:ab:cb:20:3d:72:cf:b0: 64:b6:57:e6:ed:94:8f:ec:ca:23:40:15:12:36:1d: f1:f1:c7:7a:b4:79:bb:29:c5:69:9a:e9:a6:19:60: 44:9d:15:f8:24:81:49:d9:a4:97:e7:33:74:61:52: 60:80:7b:0f:42:60:03:ee:65:61:dd:93:d7:20:0a: 34:83:c7:2d:0c:58:63:e5:7a:95:1e:e1:13:29:6a: 3f:09:fe:12:86:05:f7:7e:2b:c4:e6:69:91:17:e0: cb:f4:7f:ac:2f:eb:91:0f:04:ce:53:c4:11:48:ae: 37:b2:80:70:8b:67:0c:7e:fc:9d:8b:39:6a:5b:54: 5f:10:5f:11:f9:97:54:7e:c8:cd:56:a0:3c:e9:66: 61:82:f1:56:40:d9:94:13:80:35:64:bb:36:58:db: ae:ce:6b:1c:d6:ff:b8:f8:9a:64:a3:a1:d1:4c:b2: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5B:14:8A:8C:56:BC:79:48:14:DE:7D:66:56:70:43:07:57:88:14 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a613030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:a000::/36 Signature Algorithm: sha256WithRSAEncryption 3f:0d:9d:91:be:3b:28:5e:36:c9:de:d5:a8:85:4a:5a:24:3c: e4:23:29:c2:7b:1b:18:85:16:8d:ea:6e:88:4c:c0:a8:b6:50: 1b:9f:19:88:e8:2d:39:26:3a:87:27:4f:a2:cc:4c:3e:24:cc: 1e:a8:21:f3:09:f8:42:10:23:98:eb:b8:d2:c6:99:69:71:c5: 39:7b:c3:a3:83:66:fe:e5:fb:96:f6:1c:06:ce:67:43:79:f3: 1e:b0:b9:12:50:e4:71:68:48:91:05:42:fc:19:1e:73:2e:80: f3:2c:54:f4:05:8d:2a:17:20:f8:30:7d:eb:3f:4f:a9:15:ed: 5c:93:f2:9d:73:40:61:b3:e4:19:80:4d:0b:cc:c1:b4:92:23: f4:7d:65:63:f5:b1:e6:28:ea:2c:ea:65:ce:f7:bf:d6:e4:46: bd:95:f1:00:3d:7e:8b:c7:d7:dc:86:ba:27:7b:c6:84:99:bf: b5:f4:28:81:db:7d:15:44:5d:91:86:de:65:3c:6f:18:09:72: b9:38:ab:20:f8:d8:fe:b4:f9:fb:b6:c5:3c:23:3c:2e:a5:1c: 7c:35:9f:59:2f:8a:72:20:f6:6a:1e:ef:f3:71:f8:10:2d:0d: 4f:b2:35:4b:f9:39:26:00:69:66:5c:82:6e:ad:87:46:bf:65: c9:37:0a:5c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSqsRUENC2A5e8GBRcTcb8lppbYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMwMzRaFw0yNzAzMDExNTM1MzRaMDMxMTAvBgNV BAMTKERBNUIxNDhBOEM1NkJDNzk0ODE0REU3RDY2NTY3MDQzMDc1Nzg4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrWQNjHeZjb7cFcGSHHwVqLZq IZe1yOc9yqLJ35t0etzUmX/8JG+P/to5r6nG/TBOr2pjlGtnviXHpDz9LMB+0bZ5 9QeMb4hSB1KxLSVC8PSRq8sgPXLPsGS2V+btlI/syiNAFRI2HfHxx3q0ebspxWma 6aYZYESdFfgkgUnZpJfnM3RhUmCAew9CYAPuZWHdk9cgCjSDxy0MWGPlepUe4RMp aj8J/hKGBfd+K8TmaZEX4Mv0f6wv65EPBM5TxBFIrjeygHCLZwx+/J2LOWpbVF8Q XxH5l1R+yM1WoDzpZmGC8VZA2ZQTgDVkuzZY267OaxzW/7j4mmSjodFMstnXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU2lsUioxWvHlIFN59ZlZwQwdXiBQwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsCgMA0GCSqGSIb3DQEBCwUA A4IBAQA/DZ2RvjsoXjbJ3tWohUpaJDzkIynCexsYhRaN6m6ITMCotlAbnxmI6C05 JjqHJ0+izEw+JMweqCHzCfhCECOY67jSxplpccU5e8Ojg2b+5fuW9hwGzmdDefMe sLkSUORxaEiRBUL8GR5zLoDzLFT0BY0qFyD4MH3rP0+pFe1ck/Kdc0Bhs+QZgE0L zMG0kiP0fWVj9bHmKOos6mXO97/W5Ea9lfEAPX6Lx9fchrone8aEmb+19CiB230V RF2Rht5lPG8YCXK5OKsg+Nj+tPn7tsU8IzwupRx8NZ9ZL4pyIPZqHu/zcfgQLQ1P sjVL+TkmAGlmXIJurYdGv2XJNwpc -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:18 2026 by rpki-client