$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663430303a3a2f34302d3430203d3e20323634313230.roa File: 323830343a323263303a663430303a3a2f34302d3430203d3e20323634313230.roa (raw, json) Hash identifier: cUzfY9F7ver+YqJrBHUFamtp90RJ/sK3FVMvXbHF/gY= Subject key identifier: 80:D6:AA:80:BF:F3:2A:87:D2:A3:91:B1:20:71:4C:A0:62:A6:9C:A1 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 11631E15BE975AE2BE5824092956DDC3DD5F2585 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663430303a3a2f34302d3430203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:36:58 +0000 ROA not before: Mon 02 Mar 2026 15:31:58 +0000 ROA not after: Mon 01 Mar 2027 15:36:58 +0000 asID: 264120 IP address blocks: 2804:22c0:f400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:63:1e:15:be:97:5a:e2:be:58:24:09:29:56:dd:c3:dd:5f:25:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:31:58 2026 GMT Not After : Mar 1 15:36:58 2027 GMT Subject: CN=80D6AA80BFF32A87D2A391B120714CA062A69CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:0f:bd:1a:4d:e2:e9:5f:34:ba:8e:3b:2e: 21:ad:0c:4e:0a:13:a8:8c:ab:4e:9c:e1:0d:6d:a4: 92:10:e7:83:6b:dd:4b:c9:4b:7a:48:6f:ae:c2:04: 0f:8d:43:d1:51:a8:7d:86:6d:44:b7:5f:d7:8c:93: 3a:0f:a5:95:c1:09:17:c4:38:17:19:38:d5:5b:03: 70:03:b2:1c:6e:81:07:4f:6b:ca:ea:79:23:d3:21: 3b:91:ca:48:44:85:60:fb:ff:da:76:88:a7:ab:10: 40:6d:5b:29:a6:3d:f6:d4:23:fa:44:20:26:c6:c3: 7f:64:ac:ae:5c:32:f2:f3:b7:f3:94:59:22:dc:b0: 41:2a:9b:0d:08:8a:1c:c9:42:65:e3:36:0e:a3:e1: 5c:8a:bc:48:3f:5e:19:b4:14:f0:79:93:c5:ce:f5: 77:19:8a:be:21:81:49:42:28:36:f1:2d:72:fc:8d: 78:7b:5c:0b:08:8a:2e:5c:0b:93:3e:0e:46:58:59: 58:a0:62:2a:2f:cc:c9:f2:3b:7c:77:07:49:00:3a: 65:20:b0:91:4a:5d:60:58:20:dc:d8:b2:f3:77:30: 30:ab:40:d8:71:3a:be:f3:3f:32:40:24:2f:93:3d: 77:fe:d0:d4:14:ba:a8:7e:8c:ea:d1:40:b4:e9:9f: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:AA:80:BF:F3:2A:87:D2:A3:91:B1:20:71:4C:A0:62:A6:9C:A1 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663430303a3a2f34302d3430203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f400::/40 Signature Algorithm: sha256WithRSAEncryption 8b:f8:4e:f0:29:09:c5:3a:87:a6:8d:c1:06:0a:84:f0:c6:5c: ff:e7:8c:c7:cb:2f:12:9b:36:27:22:a7:92:88:e6:c1:58:c6: b5:a5:ea:5b:dd:59:ae:b7:2e:36:50:e6:d1:5b:d0:fc:a5:f1: 9b:85:30:9c:d7:0a:2e:6d:52:b3:74:e2:13:30:e3:ca:8f:2e: 9f:7f:2e:51:b4:af:ee:00:3f:2d:ba:39:84:8a:d7:8b:65:e3: 9e:c6:1a:71:57:c8:9f:5d:da:53:40:ad:fd:3e:c4:d7:b9:a6: 5b:85:69:36:3d:54:d1:18:44:2e:ac:ae:f2:6d:69:20:a1:d3: 9a:56:e2:e6:85:5e:bc:4a:3b:fe:b0:86:f5:ef:40:cd:f3:32: 3e:bd:7d:f2:5b:2c:50:5a:16:15:db:a5:6d:eb:49:40:14:f6: 09:30:e4:4d:8d:62:25:0c:35:b7:03:f4:00:5f:ca:9d:1a:b1: 09:05:05:60:cb:80:5e:26:e4:17:20:c3:c9:bb:8a:80:46:69: cc:ae:65:c1:a5:d4:e1:7a:7e:38:4d:52:5b:f9:1b:38:7b:81: 46:1b:92:82:49:eb:a6:b8:41:f7:95:d2:08:14:3e:a2:86:c9: 14:cf:c8:01:97:f1:01:50:eb:1c:39:96:79:37:2e:24:b3:71: 8f:39:29:5d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUEWMeFb6XWuK+WCQJKVbdw91fJYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMxNThaFw0yNzAzMDExNTM2NThaMDMxMTAvBgNV BAMTKDgwRDZBQTgwQkZGMzJBODdEMkEzOTFCMTIwNzE0Q0EwNjJBNjlDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGw+9Gk3i6V80uo47LiGtDE4K E6iMq06c4Q1tpJIQ54Nr3UvJS3pIb67CBA+NQ9FRqH2GbUS3X9eMkzoPpZXBCRfE OBcZONVbA3ADshxugQdPa8rqeSPTITuRykhEhWD7/9p2iKerEEBtWymmPfbUI/pE ICbGw39krK5cMvLzt/OUWSLcsEEqmw0IihzJQmXjNg6j4VyKvEg/Xhm0FPB5k8XO 9XcZir4hgUlCKDbxLXL8jXh7XAsIii5cC5M+DkZYWVigYiovzMnyO3x3B0kAOmUg sJFKXWBYINzYsvN3MDCrQNhxOr7zPzJAJC+TPXf+0NQUuqh+jOrRQLTpn4qNAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUgNaqgL/zKofSo5GxIHFMoGKmnKEwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsD0MA0GCSqGSIb3DQEBCwUA A4IBAQCL+E7wKQnFOoemjcEGCoTwxlz/54zHyy8SmzYnIqeSiObBWMa1pepb3Vmu ty42UObRW9D8pfGbhTCc1woubVKzdOITMOPKjy6ffy5RtK/uAD8tujmEiteLZeOe xhpxV8ifXdpTQK39PsTXuaZbhWk2PVTRGEQurK7ybWkgodOaVuLmhV68Sjv+sIb1 70DN8zI+vX3yWyxQWhYV26Vt60lAFPYJMORNjWIlDDW3A/QAX8qdGrEJBQVgy4Be JuQXIMPJu4qARmnMrmXBpdThen44TVJb+Rs4e4FGG5KCSeumuEH3ldIIFD6ihskU z8gBl/EBUOscOZZ5Ny4ks3GPOSld -----END CERTIFICATE-----Generated at Mon Mar 2 22:33:19 2026 by rpki-client