$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663930303a3a2f34302d3430203d3e20323634313230.roa File: 323830343a323263303a663930303a3a2f34302d3430203d3e20323634313230.roa (raw, json) Hash identifier: 9VhdDimrpEOn1/F5Ka+hQELzG6W9ctsCFc6wm4IMleI= Subject key identifier: 8B:C4:7E:D0:E2:A5:4D:A2:A4:90:0E:03:C4:06:9D:F0:58:1C:2B:DB Certificate issuer: /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Certificate serial: 50CD35B4FB80F74ED6FA88A600708BD669976D61 Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663930303a3a2f34302d3430203d3e20323634313230.roa Signing time: Mon 02 Mar 2026 15:37:32 +0000 ROA not before: Mon 02 Mar 2026 15:32:32 +0000 ROA not after: Mon 01 Mar 2027 15:37:32 +0000 asID: 264120 IP address blocks: 2804:22c0:f900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cd:35:b4:fb:80:f7:4e:d6:fa:88:a6:00:70:8b:d6:69:97:6d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96 Validity Not Before: Mar 2 15:32:32 2026 GMT Not After : Mar 1 15:37:32 2027 GMT Subject: CN=8BC47ED0E2A54DA2A4900E03C4069DF0581C2BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:d1:76:62:df:89:27:ad:0f:97:15:17:da: 78:00:cd:fe:79:00:ac:5e:c9:29:76:e9:35:db:de: 4f:52:cb:45:4d:d4:51:5c:0c:4d:84:45:4b:1f:75: 3a:37:21:00:18:72:77:92:e1:56:c1:a5:82:41:e1: 67:f6:95:26:ec:a6:a8:1b:4b:07:83:fe:e4:80:c7: d7:d0:75:d6:03:e0:0a:20:ea:fc:36:4c:2f:21:38: bc:17:0d:06:24:f3:26:53:ec:6f:ac:24:2d:23:97: bc:47:0f:1d:b4:ff:fe:f3:8d:91:0d:1c:fd:75:5e: c7:f4:9d:1a:60:34:10:15:dc:6e:d8:29:fa:d6:dc: db:9a:88:cd:ce:60:d5:a5:1e:30:53:d1:55:33:3b: 7b:9c:a9:80:e0:9b:34:0f:5a:21:77:9d:6d:f8:3b: c4:7b:6e:cc:84:75:23:1d:8d:a1:7a:65:b7:b8:91: b8:43:30:d9:48:be:3f:b8:30:89:a2:a7:3e:3b:bd: 61:bc:e9:77:e2:0f:b8:b8:2d:2e:d5:f7:84:10:18: d4:88:fc:09:f0:f8:cc:19:9d:2e:48:c5:82:40:cd: fb:2e:02:b9:2a:75:d4:f4:ed:75:89:2c:f0:29:62: c7:49:cd:1c:a7:69:10:6a:f6:18:7c:74:bc:0c:2c: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:7E:D0:E2:A5:4D:A2:A4:90:0E:03:C4:06:9D:F0:58:1C:2B:DB X509v3 Authority Key Identifier: keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a663930303a3a2f34302d3430203d3e20323634313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:22c0:f900::/40 Signature Algorithm: sha256WithRSAEncryption 38:b0:6d:a8:b6:fc:1e:46:b6:3b:6b:17:e4:15:c3:a8:6a:7c: 46:16:d7:3f:28:a8:5a:89:88:06:2d:63:fd:42:70:d4:5a:bf: 8b:08:20:69:d4:b1:0b:03:6d:78:24:e8:93:6e:5a:71:6d:bd: 61:e3:41:21:f6:9a:26:35:d2:38:56:2b:6e:51:39:a9:88:e1: 1a:73:45:a9:cb:f1:d0:c6:f7:c6:66:10:0d:1c:fd:b8:0d:90: cc:48:38:e0:30:1d:a6:70:3f:68:1d:96:75:50:2b:ff:bf:9b: ce:88:74:3e:cd:6d:f9:cb:ad:b7:7a:7c:bf:30:ac:06:f9:c9: ee:5a:94:5d:a6:4a:6a:09:25:d5:85:b0:82:8f:07:fd:1e:89: cb:33:47:3a:21:68:05:e2:3c:39:61:d6:b4:8d:3e:bd:e4:9e: 8f:63:27:6a:00:d4:82:37:70:fe:6c:fe:5e:fa:26:63:bf:d7: 1e:13:6c:f1:2b:10:cc:53:77:e1:e1:f7:da:d0:0f:3b:44:3b: 68:41:8e:66:09:73:18:54:8a:61:55:44:97:d9:16:1a:02:23: 34:cd:97:26:18:d9:5a:46:df:2f:d6:94:b9:fa:86:20:68:15: a9:3b:6a:7c:32:32:f8:c6:bc:4c:0b:40:fb:b7:dd:3b:08:9a: 78:15:1f:16 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUM01tPuA907W+oimAHCL1mmXbWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw MzNBMUM5NjAeFw0yNjAzMDIxNTMyMzJaFw0yNzAzMDExNTM3MzJaMDMxMTAvBgNV BAMTKDhCQzQ3RUQwRTJBNTREQTJBNDkwMEUwM0M0MDY5REYwNTgxQzJCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3dF2Yt+JJ60PlxUX2ngAzf55 AKxeySl26TXb3k9Sy0VN1FFcDE2ERUsfdTo3IQAYcneS4VbBpYJB4Wf2lSbspqgb SweD/uSAx9fQddYD4Aog6vw2TC8hOLwXDQYk8yZT7G+sJC0jl7xHDx20//7zjZEN HP11Xsf0nRpgNBAV3G7YKfrW3NuaiM3OYNWlHjBT0VUzO3ucqYDgmzQPWiF3nW34 O8R7bsyEdSMdjaF6Zbe4kbhDMNlIvj+4MImipz47vWG86XfiD7i4LS7V94QQGNSI /Anw+MwZnS5IxYJAzfsuArkqddT07XWJLPApYsdJzRynaRBq9hh8dLwMLDEZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUi8R+0OKlTaKkkA4DxAad8FgcK9swHwYDVR0j BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv MzIzODMwMzQzYTMyMzI2MzMwM2E2NjM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsD5MA0GCSqGSIb3DQEBCwUA A4IBAQA4sG2otvweRrY7axfkFcOoanxGFtc/KKhaiYgGLWP9QnDUWr+LCCBp1LEL A214JOiTblpxbb1h40Eh9pomNdI4VituUTmpiOEac0Wpy/HQxvfGZhANHP24DZDM SDjgMB2mcD9oHZZ1UCv/v5vOiHQ+zW35y623eny/MKwG+cnuWpRdpkpqCSXVhbCC jwf9HonLM0c6IWgF4jw5Yda0jT695J6PYydqANSCN3D+bP5e+iZjv9ceE2zxKxDM U3fh4ffa0A87RDtoQY5mCXMYVIphVUSX2RYaAiM0zZcmGNlaRt8v1pS5+oYgaBWp O2p8MjL4xrxMC0D7t907CJp4FR8W -----END CERTIFICATE-----Generated at Mon Mar 2 20:53:14 2026 by rpki-client