$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a623030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a623030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: yXooz4CyAaxwzA6txlZGdu5QmY9LGxK0vpTRe8qIkmo= Subject key identifier: 59:86:B9:3B:39:DB:D0:9A:45:DB:6A:14:CD:4E:D0:C1:5F:FE:3F:2F Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 4219F83D0102C439F8F31F4B755110AAEE0FAB3C Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a623030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:07 +0000 ROA not before: Mon 02 Mar 2026 15:31:07 +0000 ROA not after: Mon 01 Mar 2027 15:36:07 +0000 asID: 264120 IP address blocks: 2804:22c0:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:19:f8:3d:01:02:c4:39:f8:f3:1f:4b:75:51:10:aa:ee:0f:ab:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:07 2026 GMT Not After : Mar 1 15:36:07 2027 GMT Subject: CN=5986B93B39DBD09A45DB6A14CD4ED0C15FFE3F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:5e:5b:98:c8:18:ae:d4:20:fe:bd:a5:66: f2:f6:61:37:6d:19:4f:7b:0f:ff:d1:7f:38:ab:98: 26:93:d8:87:44:24:9a:74:9b:c0:fd:aa:46:1f:13: f3:99:8d:df:87:d6:34:d9:30:ce:ef:b8:cc:e4:96: c3:b3:04:98:fd:b8:78:b3:4c:fb:6b:33:77:81:64: 4f:5a:d1:07:a8:82:14:43:79:9a:8f:24:d1:92:c8: f5:4c:64:49:0a:4d:1a:2b:48:71:34:92:51:dc:32: 73:02:24:b6:7d:b7:23:80:39:8f:d9:5b:b9:52:98: c2:8b:c8:5c:f3:ec:7e:18:63:03:0d:11:77:2f:19: e9:fb:17:3d:4f:00:be:0b:49:0a:35:ef:2a:b6:6c: e8:2e:38:5f:f2:29:4b:75:f7:1c:20:d6:9d:a4:81: ac:93:3c:d6:74:5f:9e:9e:47:16:cd:79:e5:b5:d3: cb:b4:3e:3a:c3:a2:44:4a:91:9e:a1:f5:4a:de:35: aa:d6:aa:f1:0a:3b:fd:09:f7:3a:1a:21:83:7e:ba: e7:8e:0a:50:2f:33:f6:65:7e:9d:4b:a9:4c:e8:0f: 03:87:5c:e4:6a:81:cd:0c:17:ea:87:16:ff:59:bd: 15:78:9b:09:5a:09:47:c4:c0:3f:cf:9a:2f:8f:80: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:B9:3B:39:DB:D0:9A:45:DB:6A:14:CD:4E:D0:C1:5F:FE:3F:2F X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a623030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption 64:31:fe:45:17:e8:e2:8a:20:9b:f4:d3:dd:af:4b:5e:90:32: eb:e7:f7:24:f0:c6:7a:b8:07:3a:df:3e:44:65:7f:4a:d9:45: 3d:be:de:cc:85:37:d7:88:cf:6e:5f:06:cf:b4:97:79:28:3b: 89:0d:9e:1a:f7:3d:45:0a:72:a0:f2:3f:79:73:f9:00:33:60: ba:7b:36:14:4b:c0:81:d2:ef:33:c0:a7:81:41:bf:2b:a5:24: b5:9f:98:28:2b:d6:a9:e8:44:95:4e:4a:4b:67:15:43:34:3e: f4:84:4f:7d:74:36:93:48:0f:88:19:b2:57:3f:87:ca:67:7c: fc:0a:b5:79:46:65:5c:0f:d1:8c:f7:be:ac:ea:6b:a0:df:c5: 6f:cd:fc:f3:d1:cb:3c:a8:dc:91:0a:ed:13:d9:f8:69:4d:9f: 5b:27:c6:f9:2e:9b:99:f3:53:55:d2:d6:99:cd:77:ed:74:ec: 4d:34:06:ba:e4:ba:10:c4:7f:ac:7e:4a:72:87:68:9f:35:fe: c3:98:29:66:ba:4f:e1:ec:f6:ea:eb:2e:09:a7:0f:1d:12:05: a1:81:df:1a:fc:b0:da:e4:75:b0:97:38:4d:30:c5:44:bc:67: 9f:ff:c5:17:6e:72:7b:ae:b3:17:0d:26:58:67:f1:b6:72:c5: 8a:dd:1d:e1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQhn4PQECxDn48x9LdVEQqu4PqzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxMDdaFw0yNzAzMDExNTM2MDdaMDMxMTAvBgNV BAMTKDU5ODZCOTNCMzlEQkQwOUE0NURCNkExNENENEVEMEMxNUZGRTNGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pF5bmMgYrtQg/r2lZvL2YTdt GU97D//RfzirmCaT2IdEJJp0m8D9qkYfE/OZjd+H1jTZMM7vuMzklsOzBJj9uHiz TPtrM3eBZE9a0QeoghRDeZqPJNGSyPVMZEkKTRorSHE0klHcMnMCJLZ9tyOAOY/Z W7lSmMKLyFzz7H4YYwMNEXcvGen7Fz1PAL4LSQo17yq2bOguOF/yKUt19xwg1p2k gayTPNZ0X56eRxbNeeW108u0PjrDokRKkZ6h9UreNarWqvEKO/0J9zoaIYN+uueO ClAvM/Zlfp1LqUzoDwOHXORqgc0MF+qHFv9ZvRV4mwlaCUfEwD/Pmi+PgE35AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUWYa5Oznb0JpF22oUzU7QwV/+Py8wHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsCwMA0GCSqGSIb3DQEBCwUA A4IBAQBkMf5FF+jiiiCb9NPdr0tekDLr5/ck8MZ6uAc63z5EZX9K2UU9vt7MhTfX iM9uXwbPtJd5KDuJDZ4a9z1FCnKg8j95c/kAM2C6ezYUS8CB0u8zwKeBQb8rpSS1 n5goK9ap6ESVTkpLZxVDND70hE99dDaTSA+IGbJXP4fKZ3z8CrV5RmVcD9GM976s 6mug38Vvzfzz0cs8qNyRCu0T2fhpTZ9bJ8b5LpuZ81NV0taZzXftdOxNNAa65LoQ xH+sfkpyh2ifNf7DmClmuk/h7Pbq6y4Jpw8dEgWhgd8a/LDa5HWwlzhNMMVEvGef /8UXbnJ7rrMXDSZYZ/G2csWK3R3h -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:15 2026 by rpki-client