$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663630303a3a2f34302d3430203d3e20323634313230.roa File: 323830343a323263303a663630303a3a2f34302d3430203d3e20323634313230.roa (raw, json) Hash identifier: dbekZi/UxC72y6D0gyx6ivCWx76G1lNXvDeH9lKDJ88= Subject key identifier: 77:A3:C3:84:87:6D:CF:DB:34:13:1C:AC:36:BB:B2:D1:4B:5D:60:B3 Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 22DEFE21D9A8AA84755B26EFF4B1FB934590C25C Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663630303a3a2f34302d3430203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:37:10 +0000 ROA not before: Mon 02 Mar 2026 15:32:10 +0000 ROA not after: Mon 01 Mar 2027 15:37:10 +0000 asID: 264120 IP address blocks: 2804:22c0:f600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:de:fe:21:d9:a8:aa:84:75:5b:26:ef:f4:b1:fb:93:45:90:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:32:10 2026 GMT Not After : Mar 1 15:37:10 2027 GMT Subject: CN=77A3C384876DCFDB34131CAC36BBB2D14B5D60B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:ed:64:2c:65:45:bc:ae:e7:03:97:23:1d: c3:72:d4:63:89:f3:c8:89:be:9b:88:21:9e:3a:4a: 2e:4c:14:54:06:74:9e:7e:cd:bb:6e:d3:20:3c:22: 08:62:4b:d5:e7:10:ba:0b:58:ad:85:54:b8:83:3a: e2:64:dc:33:69:23:f7:d3:f6:86:40:71:a9:ee:4e: 60:dd:76:5c:0e:3e:b8:02:57:04:6d:7f:c9:59:cc: 03:a2:fc:57:28:2e:b4:de:ae:ca:48:b7:73:e2:b3: 90:49:4c:66:b7:e8:bb:a2:b5:f8:d0:4f:5f:8e:ed: 00:8a:b1:45:ce:ac:18:5b:90:38:35:2b:8d:3e:7b: 0a:b2:f7:ee:5c:70:ee:8d:08:c3:1e:24:d3:7c:dc: b3:a9:b0:07:cc:bf:fe:3b:12:48:44:79:cd:c0:33: 0d:32:b0:1c:96:94:fa:8e:c1:c9:64:28:8b:ba:60: 4a:d5:5e:5d:c2:8b:ce:01:d3:db:a0:91:92:df:e5: db:f5:8e:a8:4a:7f:13:b1:b0:d8:cf:1f:32:c6:21: 69:2d:c5:0e:0d:50:7c:68:f6:9f:4e:f7:00:68:61: 8b:87:f7:ae:41:c0:5f:b2:86:52:0f:7f:03:a5:3d: 16:f5:6c:1c:6c:47:89:01:f3:7b:a9:e4:c4:e4:4a: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A3:C3:84:87:6D:CF:DB:34:13:1C:AC:36:BB:B2:D1:4B:5D:60:B3 X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663630303a3a2f34302d3430203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f600::/40 Signature Algorithm: sha256WithRSAEncryption c7:cd:0c:92:b3:4f:b2:2f:0b:d9:56:48:a0:84:6d:8f:7e:8a: a9:eb:6c:3b:9c:bd:d7:70:08:fe:d9:0c:e8:d4:ce:be:e2:67: 82:29:1d:49:b6:fb:15:1c:ab:bf:36:30:b5:bc:4c:49:1f:80: 74:52:f5:c1:a8:4d:07:07:4a:82:22:ae:f3:ab:0f:84:28:d7: 28:2b:68:13:67:54:ad:b4:8e:f3:15:6b:ae:80:bc:87:dc:b8: be:19:01:79:d2:49:de:6b:5f:92:db:0f:f9:b7:64:dc:12:b7: a8:2b:4c:2e:f0:cb:c2:78:3d:45:75:89:f8:22:e9:1f:cb:3c: d9:1c:7b:e6:71:34:8c:18:aa:02:50:ab:22:cd:4d:c1:8b:a7: 6b:26:b5:cb:5d:50:c4:1a:87:f5:28:ec:ec:ed:24:0a:71:4e: 4c:e8:82:52:ce:cf:53:b2:1d:48:a5:ae:2d:c8:30:87:1c:2d: 48:ba:15:e0:0d:c2:a7:c1:19:92:22:ed:82:fd:4f:bf:84:c3: 97:47:3f:77:75:50:2c:12:36:ab:ee:84:8f:94:b1:9d:06:d2: 77:30:3a:9e:f5:82:e8:6b:f1:2e:a1:23:ac:0b:4c:cd:d4:26: 52:c2:20:ce:f4:15:c7:95:2a:f0:8f:c2:f2:9e:a6:ef:84:af: 23:db:6c:d8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUIt7+IdmoqoR1Wybv9LH7k0WQwlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMyMTBaFw0yNzAzMDExNTM3MTBaMDMxMTAvBgNV BAMTKDc3QTNDMzg0ODc2RENGREIzNDEzMUNBQzM2QkJCMkQxNEI1RDYwQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYe1kLGVFvK7nA5cjHcNy1GOJ 88iJvpuIIZ46Si5MFFQGdJ5+zbtu0yA8IghiS9XnELoLWK2FVLiDOuJk3DNpI/fT 9oZAcanuTmDddlwOPrgCVwRtf8lZzAOi/FcoLrTerspIt3Pis5BJTGa36LuitfjQ T1+O7QCKsUXOrBhbkDg1K40+ewqy9+5ccO6NCMMeJNN83LOpsAfMv/47EkhEec3A Mw0ysByWlPqOwclkKIu6YErVXl3Ci84B09ugkZLf5dv1jqhKfxOxsNjPHzLGIWkt xQ4NUHxo9p9O9wBoYYuH965BwF+yhlIPfwOlPRb1bBxsR4kB83up5MTkSqENAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUd6PDhIdtz9s0ExysNruy0UtdYLMwHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsD2MA0GCSqGSIb3DQEBCwUA A4IBAQDHzQySs0+yLwvZVkighG2Pfoqp62w7nL3XcAj+2Qzo1M6+4meCKR1JtvsV HKu/NjC1vExJH4B0UvXBqE0HB0qCIq7zqw+EKNcoK2gTZ1SttI7zFWuugLyH3Li+ GQF50knea1+S2w/5t2TcEreoK0wu8MvCeD1FdYn4IukfyzzZHHvmcTSMGKoCUKsi zU3Bi6drJrXLXVDEGof1KOzs7SQKcU5M6IJSzs9Tsh1Ipa4tyDCHHC1IuhXgDcKn wRmSIu2C/U+/hMOXRz93dVAsEjar7oSPlLGdBtJ3MDqe9YLoa/EuoSOsC0zN1CZS wiDO9BXHlSrwj8LynqbvhK8j22zY -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:15 2026 by rpki-client