$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a633030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a633030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: vsSFyfWWMnDSe5HHrJ9EyCkp8UlS5P4Bjbl/1FNGRg4= Subject key identifier: 49:7F:76:1F:C4:BE:7C:1E:E7:CE:E0:D4:0F:EF:B8:23:FF:2C:D4:B2 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 4106F65D5CB0BA52347B10755B2A420A6E8C40EB Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a633030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:20 +0000 ROA not before: Mon 02 Mar 2026 15:31:20 +0000 ROA not after: Mon 01 Mar 2027 15:36:20 +0000 asID: 264120 IP address blocks: 2804:22c0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:06:f6:5d:5c:b0:ba:52:34:7b:10:75:5b:2a:42:0a:6e:8c:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:20 2026 GMT Not After : Mar 1 15:36:20 2027 GMT Subject: CN=497F761FC4BE7C1EE7CEE0D40FEFB823FF2CD4B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:3f:8b:da:ff:ea:57:b1:e3:54:1d:08:c8: 06:bd:66:ba:49:de:59:de:b1:10:dd:25:7b:31:0c: a2:82:b4:4a:6d:b7:32:41:81:06:68:2b:44:e0:23: 06:65:98:07:b6:bc:5d:2d:93:c5:30:50:3b:6d:b1: 81:b3:49:b7:09:e2:49:cc:95:9f:86:4d:fc:ab:ab: a8:10:6e:ff:d6:84:b2:1e:29:3f:84:44:22:d5:49: 3f:34:47:f6:9b:f3:97:a3:e2:de:8b:f3:27:f8:9d: c6:b3:3a:0a:85:31:6e:b0:1f:1d:f1:a0:de:c1:5d: c4:ce:65:53:fc:90:20:fc:4a:39:22:ea:9b:c9:69: d2:00:84:dd:23:bc:98:82:ad:12:71:33:00:b0:c7: 6a:4f:fc:ac:bf:5a:e9:c0:11:f9:de:af:de:44:12: f6:00:c0:73:0a:6a:1b:48:0a:8c:bb:77:31:bc:ba: f6:e1:35:17:91:8c:a5:2d:ed:48:1d:af:7c:fc:08: 41:72:80:de:f9:ee:60:d3:05:b6:89:b4:58:c6:c4: 50:cd:c6:f2:2c:fa:c8:ca:7c:12:2a:79:d5:66:f5: d7:be:da:06:4e:37:98:46:02:63:6f:e2:e5:d3:11: 3c:dc:2f:c8:1c:43:77:64:c8:24:cb:82:3e:5a:b3: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:76:1F:C4:BE:7C:1E:E7:CE:E0:D4:0F:EF:B8:23:FF:2C:D4:B2 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a633030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 79:87:c6:2e:4c:49:05:a8:0c:d9:c2:9b:d8:ca:21:97:fd:51: d6:fd:7d:1d:29:8c:73:c2:67:42:53:b5:9f:04:05:18:99:00: fc:12:eb:af:7c:ef:1c:70:80:d2:5c:57:ee:13:c9:2c:49:3f: 05:ea:7a:5f:5b:25:09:b4:c9:55:81:02:46:4b:db:16:b8:a8: 78:5b:7b:e6:aa:a6:80:e0:1a:97:d1:f3:8d:b6:52:bb:28:9c: dc:73:e4:98:49:bf:b1:d0:6f:94:52:ee:28:04:85:89:10:28: 82:b2:27:b7:7e:1f:67:9b:16:60:8b:a9:7a:4b:fa:37:6e:d0: 81:f0:da:a5:1a:3b:dd:dc:e9:7e:27:1e:9f:dd:85:72:4b:af: b9:7d:85:34:1f:70:17:28:db:32:4c:b2:cc:2d:82:65:b7:de: ac:8e:1d:3d:31:80:6a:6d:62:1d:30:6c:21:e7:b9:c0:90:bc: af:4c:c3:46:fb:25:5c:4e:f1:7b:86:03:1e:f4:4b:43:c4:bb: ff:aa:7f:f7:6c:fc:f1:4b:04:e0:82:21:f8:30:41:bb:1b:5c: f1:9a:75:28:df:4f:d3:e1:d9:3a:01:23:b6:37:7e:79:e4:35: 76:38:29:c2:b1:20:0a:dd:24:6a:e9:85:4f:5f:5d:7a:2b:fa: 5a:db:97:88 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQQb2XVywulI0exB1WypCCm6MQOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxMjBaFw0yNzAzMDExNTM2MjBaMDMxMTAvBgNV BAMTKDQ5N0Y3NjFGQzRCRTdDMUVFN0NFRTBENDBGRUZCODIzRkYyQ0Q0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTj+L2v/qV7HjVB0IyAa9ZrpJ 3lnesRDdJXsxDKKCtEpttzJBgQZoK0TgIwZlmAe2vF0tk8UwUDttsYGzSbcJ4knM lZ+GTfyrq6gQbv/WhLIeKT+ERCLVST80R/ab85ej4t6L8yf4ncazOgqFMW6wHx3x oN7BXcTOZVP8kCD8Sjki6pvJadIAhN0jvJiCrRJxMwCwx2pP/Ky/WunAEfner95E EvYAwHMKahtICoy7dzG8uvbhNReRjKUt7Ugdr3z8CEFygN757mDTBbaJtFjGxFDN xvIs+sjKfBIqedVm9de+2gZON5hGAmNv4uXTETzcL8gcQ3dkyCTLgj5asx8pAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUSX92H8S+fB7nzuDUD++4I/8s1LIwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsDAMA0GCSqGSIb3DQEBCwUA A4IBAQB5h8YuTEkFqAzZwpvYyiGX/VHW/X0dKYxzwmdCU7WfBAUYmQD8EuuvfO8c cIDSXFfuE8ksST8F6npfWyUJtMlVgQJGS9sWuKh4W3vmqqaA4BqX0fONtlK7KJzc c+SYSb+x0G+UUu4oBIWJECiCsie3fh9nmxZgi6l6S/o3btCB8NqlGjvd3Ol+Jx6f 3YVyS6+5fYU0H3AXKNsyTLLMLYJlt96sjh09MYBqbWIdMGwh57nAkLyvTMNG+yVc TvF7hgMe9EtDxLv/qn/3bPzxSwTggiH4MEG7G1zxmnUo30/T4dk6ASO2N3555DV2 OCnCsSAK3SRq6YVPX116K/pa25eI -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:19 2026 by rpki-client