$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663230303a3a2f34302d3430203d3e20323634313230.roa File: 323830343a323263303a663230303a3a2f34302d3430203d3e20323634313230.roa (raw, json) Hash identifier: grtnXFV3AOpIflbjQXtA6BsyfElm89Cs2CphB2q8WFY= Subject key identifier: AC:B8:58:7D:B8:86:2E:EB:9A:4A:D9:CC:AD:49:FA:85:3A:6C:A0:02 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 2A275D8C5E73EE502768B4C9113C86D9050BC72E Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663230303a3a2f34302d3430203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:43 +0000 ROA not before: Mon 02 Mar 2026 15:31:43 +0000 ROA not after: Mon 01 Mar 2027 15:36:43 +0000 asID: 264120 IP address blocks: 2804:22c0:f200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:27:5d:8c:5e:73:ee:50:27:68:b4:c9:11:3c:86:d9:05:0b:c7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:43 2026 GMT Not After : Mar 1 15:36:43 2027 GMT Subject: CN=ACB8587DB8862EEB9A4AD9CCAD49FA853A6CA002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:a1:55:ef:bb:fa:7f:01:80:54:aa:01:b5: 15:39:0f:89:89:19:16:73:40:94:40:97:71:2d:36: 86:63:18:a1:14:fe:61:dc:2d:d9:30:55:b3:f1:da: 7f:78:37:a8:f3:fe:f8:01:7e:2e:9f:17:02:8b:c0: e9:2f:a9:4d:9c:48:59:fe:6f:55:6d:44:45:59:4f: 4c:a8:6b:9a:d4:ca:4a:81:64:8b:82:20:f4:a8:2c: 82:34:98:ce:5e:0a:85:58:bc:e4:6f:6c:c8:15:8e: 7d:d6:81:79:61:92:eb:8a:d0:77:3b:6c:d8:32:dd: 49:aa:8b:99:40:5d:6b:7c:d9:cd:f9:a4:3a:86:04: 6d:8b:ad:5a:dc:ea:14:3c:31:df:99:14:ed:7c:ec: d7:16:13:a1:e5:3e:58:c9:49:ea:b1:96:6d:7e:be: 51:f1:30:02:d0:e0:69:43:4a:38:a0:ac:d8:89:fd: dd:32:03:9f:13:81:1c:95:20:84:0a:4e:51:bd:20: cd:2a:ee:7c:6a:0b:c0:22:8b:02:ed:7c:c1:a4:53: 2d:27:f1:d3:e7:fe:97:6e:ee:33:78:49:98:37:3b: 1c:4d:37:a7:20:98:54:4a:27:84:77:8f:a0:6a:06: e2:27:05:61:fb:8f:35:e9:0e:6f:c6:3a:be:b4:89: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:58:7D:B8:86:2E:EB:9A:4A:D9:CC:AD:49:FA:85:3A:6C:A0:02 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663230303a3a2f34302d3430203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f200::/40 Signature Algorithm: sha256WithRSAEncryption 5d:c1:7f:21:f4:85:60:b2:d0:82:b9:1f:e2:38:21:9f:4d:54: 39:75:df:01:f4:8a:a8:97:68:8d:f3:cd:c0:de:92:10:83:70: 62:56:6f:60:d3:c7:a0:88:82:42:13:12:0c:7e:59:e9:8a:30: b0:52:c1:6d:69:44:6a:06:ff:a6:0f:f9:b7:8e:f9:6c:f4:66: c3:d1:f5:d9:09:41:16:10:cb:31:32:65:84:cf:2c:8b:2f:ec: 2b:b9:3e:7f:2e:56:97:b3:65:fc:48:fb:c8:dd:1c:f0:b2:e2: 15:9c:d5:cd:a7:1d:55:c3:2f:b1:96:b9:8d:ab:82:e0:5f:36: e8:8a:3a:7b:6d:7b:21:84:14:11:b7:c4:53:dc:f3:72:ce:21: 82:0b:b5:5a:83:b6:05:4e:4e:0b:a3:65:cb:32:1f:30:95:3d: 2a:20:4b:a4:f9:bd:2f:cb:56:6f:47:41:ee:cd:a2:75:f2:59: 50:5d:62:75:66:3b:51:55:0f:8a:fb:76:1f:4e:93:ab:e8:6a: 32:3b:9f:d8:1f:2f:a1:93:ce:48:26:94:8e:52:b8:39:2f:56: 06:ee:e7:7b:f9:72:d3:97:b0:c5:4e:b5:4d:ed:6e:ad:89:91: 8d:5b:0f:b6:01:ee:88:bd:10:88:55:18:76:70:89:7f:04:94: dd:e5:2b:39 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKiddjF5z7lAnaLTJETyG2QULxy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxNDNaFw0yNzAzMDExNTM2NDNaMDMxMTAvBgNV BAMTKEFDQjg1ODdEQjg4NjJFRUI5QTRBRDlDQ0FENDlGQTg1M0E2Q0EwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1aFV77v6fwGAVKoBtRU5D4mJ GRZzQJRAl3EtNoZjGKEU/mHcLdkwVbPx2n94N6jz/vgBfi6fFwKLwOkvqU2cSFn+ b1VtREVZT0yoa5rUykqBZIuCIPSoLII0mM5eCoVYvORvbMgVjn3WgXlhkuuK0Hc7 bNgy3Umqi5lAXWt82c35pDqGBG2LrVrc6hQ8Md+ZFO187NcWE6HlPljJSeqxlm1+ vlHxMALQ4GlDSjigrNiJ/d0yA58TgRyVIIQKTlG9IM0q7nxqC8AiiwLtfMGkUy0n 8dPn/pdu7jN4SZg3OxxNN6cgmFRKJ4R3j6BqBuInBWH7jzXpDm/GOr60iey/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUrLhYfbiGLuuaStnMrUn6hTpsoAIwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsDyMA0GCSqGSIb3DQEBCwUA A4IBAQBdwX8h9IVgstCCuR/iOCGfTVQ5dd8B9Iqol2iN883A3pIQg3BiVm9g08eg iIJCExIMflnpijCwUsFtaURqBv+mD/m3jvls9GbD0fXZCUEWEMsxMmWEzyyLL+wr uT5/LlaXs2X8SPvI3RzwsuIVnNXNpx1Vwy+xlrmNq4LgXzboijp7bXshhBQRt8RT 3PNyziGCC7Vag7YFTk4Lo2XLMh8wlT0qIEuk+b0vy1ZvR0HuzaJ18llQXWJ1ZjtR VQ+K+3YfTpOr6GoyO5/YHy+hk85IJpSOUrg5L1YG7ud7+XLTl7DFTrVN7W6tiZGN Ww+2Ae6IvRCIVRh2cIl/BJTd5Ss5 -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:17 2026 by rpki-client