$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f33362d3336203d3e20323634313230.roa File: 323830343a323263303a663030303a3a2f33362d3336203d3e20323634313230.roa (raw, json) Hash identifier: OQEKF2338ZqEBete0vfnn7r/zWAq5ggB1ppZlj/lOyE= Subject key identifier: 43:32:62:A9:06:9E:C5:14:F4:25:C3:67:69:AC:94:3E:F4:C6:5E:49 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 03967AE176BA01CA8DB4843E37DDBEC23732BC14 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f33362d3336203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:32 +0000 ROA not before: Mon 02 Mar 2026 15:31:32 +0000 ROA not after: Mon 01 Mar 2027 15:36:32 +0000 asID: 264120 IP address blocks: 2804:22c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:7a:e1:76:ba:01:ca:8d:b4:84:3e:37:dd:be:c2:37:32:bc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:32 2026 GMT Not After : Mar 1 15:36:32 2027 GMT Subject: CN=433262A9069EC514F425C36769AC943EF4C65E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:b9:e5:97:c8:63:55:b0:86:c2:6f:10:db: ec:78:5f:19:c6:cc:1d:fe:63:fc:3d:ed:a1:14:16: 77:88:fc:bf:0f:f5:00:af:25:a7:cf:df:cf:16:48: 5e:8a:7b:7b:71:0f:b9:24:f7:86:46:fb:d0:ee:57: 14:cd:30:c6:e9:e8:e3:37:10:46:4b:9f:ee:06:c8: dd:6c:32:cd:e6:12:16:22:d4:94:a2:8e:bc:8c:f9: df:3f:2a:45:9f:a3:1e:8d:6d:2f:d3:82:0d:cb:29: 00:69:fb:01:c0:a5:f9:5e:2a:1f:9c:e2:9f:72:43: a3:07:64:40:d6:02:ef:29:8a:3c:a9:9b:8e:3c:36: cf:3e:91:11:35:dd:2d:56:a7:ce:1a:a9:ed:a1:15: bd:86:ff:69:5a:e0:eb:87:45:eb:c6:d2:3f:7d:98: 92:7c:82:4f:71:a9:46:f3:d0:e8:9a:1b:ec:7a:b1: 36:0c:f8:55:5f:4f:59:9b:f0:d4:c2:ca:26:7a:03: f8:3f:24:6c:b7:b3:38:4e:2c:bf:ad:63:f2:44:77: 5e:de:9a:2d:0a:76:b0:b0:71:a6:27:60:b5:3a:c1: 17:34:39:72:c1:ea:59:1a:d2:ef:43:22:c7:fb:d5: b5:11:b5:ab:c3:d9:9c:44:21:43:28:09:eb:07:c9: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:62:A9:06:9E:C5:14:F4:25:C3:67:69:AC:94:3E:F4:C6:5E:49 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663030303a3a2f33362d3336203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 4b:01:ec:d4:83:fb:1a:4f:e4:0c:5a:30:70:46:22:1a:45:16: 7e:86:35:f6:35:04:1d:54:3a:7c:58:76:c2:ec:21:55:5e:4d: 11:81:25:6a:7f:13:68:f2:1b:8b:be:f7:ec:10:ca:49:92:34: 25:82:c3:06:09:8f:3c:a6:04:4e:35:10:21:86:44:72:55:80: db:91:8d:98:1c:f8:dc:d9:56:66:c7:14:0f:cf:6b:ee:83:fb: 88:43:e6:30:dc:c7:cf:53:05:4d:c2:ba:19:da:f0:c8:9c:78: ed:fb:54:6f:58:53:3c:a9:c6:ff:ff:db:4a:50:20:f3:60:d4: 47:b4:46:15:9b:bd:80:af:39:11:3c:06:97:fb:aa:49:78:f7: e4:9d:f7:68:47:40:ff:cc:f8:b9:6a:db:83:2d:a2:35:01:10: 12:83:11:7c:ed:b1:7e:41:5a:5d:5d:3a:41:24:89:78:c2:b3: b0:57:1c:c4:6f:36:3c:03:3a:de:78:77:5f:7b:30:cc:da:8c: a3:1e:1a:53:e7:e5:71:ca:c4:63:07:d4:54:8d:18:78:d6:b2: e7:ea:73:40:29:6e:a9:f8:06:d2:8e:73:d5:ee:21:4a:26:a0: d1:17:c4:2a:d0:ad:4d:48:9a:d6:c2:37:2b:03:eb:e0:00:81: c0:2a:d6:56 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUA5Z64Xa6AcqNtIQ+N92+wjcyvBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxMzJaFw0yNzAzMDExNTM2MzJaMDMxMTAvBgNV BAMTKDQzMzI2MkE5MDY5RUM1MTRGNDI1QzM2NzY5QUM5NDNFRjRDNjVFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96rnll8hjVbCGwm8Q2+x4XxnG zB3+Y/w97aEUFneI/L8P9QCvJafP388WSF6Ke3txD7kk94ZG+9DuVxTNMMbp6OM3 EEZLn+4GyN1sMs3mEhYi1JSijryM+d8/KkWfox6NbS/Tgg3LKQBp+wHApfleKh+c 4p9yQ6MHZEDWAu8pijypm448Ns8+kRE13S1Wp84aqe2hFb2G/2la4OuHRevG0j99 mJJ8gk9xqUbz0OiaG+x6sTYM+FVfT1mb8NTCyiZ6A/g/JGy3szhOLL+tY/JEd17e mi0KdrCwcaYnYLU6wRc0OXLB6lka0u9DIsf71bURtavD2ZxEIUMoCesHyXQpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQzJiqQaexRT0JcNnaayUPvTGXkkwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIsDwMA0GCSqGSIb3DQEBCwUA A4IBAQBLAezUg/saT+QMWjBwRiIaRRZ+hjX2NQQdVDp8WHbC7CFVXk0RgSVqfxNo 8huLvvfsEMpJkjQlgsMGCY88pgRONRAhhkRyVYDbkY2YHPjc2VZmxxQPz2vug/uI Q+Yw3MfPUwVNwroZ2vDInHjt+1RvWFM8qcb//9tKUCDzYNRHtEYVm72ArzkRPAaX +6pJePfknfdoR0D/zPi5atuDLaI1ARASgxF87bF+QVpdXTpBJIl4wrOwVxzEbzY8 AzreeHdfezDM2oyjHhpT5+VxysRjB9RUjRh41rLn6nNAKW6p+AbSjnPV7iFKJqDR F8Qq0K1NSJrWwjcrA+vgAIHAKtZW -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:16 2026 by rpki-client