$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a643030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a643030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: kK5mS8t8IjjF88LH3vXlZKgnW6HtuuOZFeO6PgToHyQ= Subject key identifier: 04:FF:DC:9C:D3:DB:EB:E0:E5:E4:C5:FB:09:2A:92:17:E5:43:B2:2A Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 40CDBED51F07AAD8E08D9EE54CA4B9B7AEB6F3D7 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a643030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:24 +0000 ROA not before: Mon 02 Mar 2026 15:31:24 +0000 ROA not after: Mon 01 Mar 2027 15:36:24 +0000 asID: 264120 IP address blocks: 2804:22c0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cd:be:d5:1f:07:aa:d8:e0:8d:9e:e5:4c:a4:b9:b7:ae:b6:f3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:24 2026 GMT Not After : Mar 1 15:36:24 2027 GMT Subject: CN=04FFDC9CD3DBEBE0E5E4C5FB092A9217E543B22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:e9:67:4d:10:29:70:8c:ca:d6:68:44:83: c2:ae:da:1a:1e:57:0c:c2:0d:ec:11:e3:1c:09:f2: 9b:48:0f:69:bf:74:bd:a7:91:c2:60:d7:db:b2:a5: 00:25:67:25:ec:b5:60:62:21:6c:51:7e:0f:96:d6: 2e:ea:7d:4f:a0:60:19:2c:73:45:c5:c3:5d:61:58: 89:7d:27:d2:8d:2b:78:fd:83:3f:60:bf:7a:a1:69: 64:57:b3:2d:f2:81:e6:a8:94:ef:bf:5f:7f:1e:5a: 83:c9:b3:db:d2:46:16:d1:6a:c5:eb:e6:61:c3:e2: 18:7d:e9:c7:46:63:71:60:f4:69:55:9e:11:34:44: 30:5d:f1:a6:33:16:c2:83:c0:7f:d0:5d:f9:ab:00: 9c:cc:28:35:81:f3:35:a3:1b:21:ac:d4:1f:eb:1c: c7:d5:dd:fc:b5:53:90:0c:4a:e1:e1:6b:2d:9a:4d: 85:b8:4b:41:97:36:e8:89:89:7a:91:bb:dd:61:15: 9a:3e:9c:77:b3:f1:a2:bf:a9:80:74:76:36:2c:42: 16:38:ed:90:94:c7:91:55:20:26:6f:ce:be:ff:86: 1c:8d:16:6e:79:43:8c:e6:31:36:ff:20:29:7e:77: d0:bf:0c:ae:1d:cf:ec:f1:d3:2e:fc:6d:b7:09:d5: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:DC:9C:D3:DB:EB:E0:E5:E4:C5:FB:09:2A:92:17:E5:43:B2:2A X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a643030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:d000::/36 Signature Algorithm: sha256WithRSAEncryption a6:49:8e:43:46:c6:1b:6a:bd:53:7e:ed:9c:b9:fd:17:28:2f: f0:d3:90:e4:72:d1:3d:0c:12:cc:5b:5d:d1:58:7f:2c:b9:01: d2:99:c7:8f:f0:ee:a1:7a:c7:ed:94:96:f0:cc:9a:58:b3:8b: f1:5a:11:51:f8:bf:01:a0:b0:36:30:32:e8:8f:66:12:7a:37: d0:a8:05:c7:cb:f6:be:10:0a:57:ad:cc:a1:a2:af:42:7b:aa: ca:ee:26:e1:dc:ee:f1:a7:c8:ff:68:eb:a7:f6:a6:c4:cc:4f: d6:35:b3:d1:99:b4:92:e6:cd:24:0b:1e:13:0e:03:ae:f5:51: 4f:24:1a:de:08:31:36:bf:e0:e2:3d:98:ac:f5:cd:c1:14:1e: fb:c0:65:ea:23:ab:75:4e:84:a6:44:ae:4e:62:24:5f:84:42: 69:3c:23:7c:8a:fe:ba:b5:17:8b:65:3d:3c:6e:69:ed:0e:f1: 30:94:02:21:6a:13:c3:3c:bf:f2:0c:82:fd:69:de:85:a2:15: da:54:dc:6d:03:ff:0d:31:76:3d:1a:f7:b6:a2:fe:99:d0:c3: a5:dd:e9:d5:57:2f:6d:65:d5:6e:65:6a:8e:9b:dd:ac:2f:55: 06:bd:05:d3:61:ca:bf:75:72:34:6a:fd:bf:1e:be:f2:60:b0: 17:c1:d8:d4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQM2+1R8HqtjgjZ7lTKS5t66289cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxMjRaFw0yNzAzMDExNTM2MjRaMDMxMTAvBgNV BAMTKDA0RkZEQzlDRDNEQkVCRTBFNUU0QzVGQjA5MkE5MjE3RTU0M0IyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXOlnTRApcIzK1mhEg8Ku2hoe VwzCDewR4xwJ8ptID2m/dL2nkcJg19uypQAlZyXstWBiIWxRfg+W1i7qfU+gYBks c0XFw11hWIl9J9KNK3j9gz9gv3qhaWRXsy3ygeaolO+/X38eWoPJs9vSRhbRasXr 5mHD4hh96cdGY3Fg9GlVnhE0RDBd8aYzFsKDwH/QXfmrAJzMKDWB8zWjGyGs1B/r HMfV3fy1U5AMSuHhay2aTYW4S0GXNuiJiXqRu91hFZo+nHez8aK/qYB0djYsQhY4 7ZCUx5FVICZvzr7/hhyNFm55Q4zmMTb/ICl+d9C/DK4dz+zx0y78bbcJ1RTxAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUBP/cnNPb6+Dl5MX7CSqSF+VDsiowHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsDQMA0GCSqGSIb3DQEBCwUA A4IBAQCmSY5DRsYbar1Tfu2cuf0XKC/w05DkctE9DBLMW13RWH8suQHSmceP8O6h esftlJbwzJpYs4vxWhFR+L8BoLA2MDLoj2YSejfQqAXHy/a+EApXrcyhoq9Ce6rK 7ibh3O7xp8j/aOun9qbEzE/WNbPRmbSS5s0kCx4TDgOu9VFPJBreCDE2v+DiPZis 9c3BFB77wGXqI6t1ToSmRK5OYiRfhEJpPCN8iv66tReLZT08bmntDvEwlAIhahPD PL/yDIL9ad6FohXaVNxtA/8NMXY9Gve2ov6Z0MOl3enVVy9tZdVuZWqOm92sL1UG vQXTYcq/dXI0av2/Hr7yYLAXwdjU -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:18 2026 by rpki-client