$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33352d3335203d3e20323731343134.roa File: 323830343a376232383a323030303a3a2f33352d3335203d3e20323731343134.roa (raw, json) Hash identifier: L4ADV6RVcZv7yo9FTSl3FFiITBy8XWmYCrjZGytZwfE= Subject key identifier: E4:D6:C2:99:CE:A1:ED:EB:66:C6:A1:11:18:4B:CE:F6:74:76:F0:F2 Certificate issuer: /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB Certificate serial: 0E0B8C2505074D293A0CB1C77D9B9591D6EBF74A Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer Subject info access: rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33352d3335203d3e20323731343134.roa Signing time: Thu 23 Jul 2026 18:22:21 +0000 ROA not before: Thu 23 Jul 2026 18:17:21 +0000 ROA not after: Thu 22 Jul 2027 18:22:21 +0000 asID: 271414 IP address blocks: 2804:7b28:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 Jul 2026 09:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0b:8c:25:05:07:4d:29:3a:0c:b1:c7:7d:9b:95:91:d6:eb:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB Validity Not Before: Jul 23 18:17:21 2026 GMT Not After : Jul 22 18:22:21 2027 GMT Subject: CN=E4D6C299CEA1EDEB66C6A111184BCEF67476F0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:62:12:0d:03:24:2a:69:0e:39:f7:6f:b1: 17:16:ac:41:bd:c9:e6:82:d2:00:56:db:cb:8e:03: c5:bf:8b:64:ae:41:6a:af:5a:7d:24:cc:80:eb:fd: 9c:e2:84:df:e2:9a:68:5d:2b:d7:25:b3:95:6e:98: 8f:a1:54:25:cd:2c:9e:d7:67:62:ec:2f:42:6c:82: f2:bf:f7:3c:99:5d:b1:3c:d3:90:97:23:2f:31:83: 61:6b:e8:86:e7:f1:6d:4a:9f:66:c5:f0:ce:03:09: 29:bd:de:76:f2:d8:bb:13:e1:ed:a7:f4:14:ec:5b: 20:93:94:b1:82:7e:19:8e:c9:a4:e5:36:f0:54:94: af:3c:b2:3f:66:1f:34:70:20:17:dd:1a:42:7e:87: ae:a4:83:1b:42:a9:d8:36:19:36:2d:2a:44:d4:4a: 0c:de:0a:06:9a:4f:b7:69:c8:89:0d:f4:cf:ab:30: 3e:fb:af:07:6d:97:50:fc:85:c3:9d:f8:d6:6f:a4: 3a:57:dc:ea:d0:c4:28:6a:6f:e8:53:51:13:41:6f: 65:03:10:d7:d3:d6:cd:ab:c5:c8:d6:11:74:28:f8: db:fb:2e:cc:1e:19:47:25:a8:69:1f:21:e5:9f:1f: ea:54:c6:60:1d:a7:88:98:fc:07:9d:be:b0:9a:71: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:C2:99:CE:A1:ED:EB:66:C6:A1:11:18:4B:CE:F6:74:76:F0:F2 X509v3 Authority Key Identifier: keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33352d3335203d3e20323731343134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7b28:2000::/35 Signature Algorithm: sha256WithRSAEncryption 1a:72:f3:a3:73:62:38:c4:08:ec:f8:06:34:5d:2e:de:c7:eb: eb:ed:a8:7d:ec:33:9f:c3:49:40:1a:a0:e5:90:08:9b:74:0e: c9:d9:14:54:ea:12:1c:3b:26:64:af:92:27:a0:88:16:63:9f: 00:1d:86:f2:0c:bd:1d:d7:04:7d:a3:a6:5c:fe:8c:bb:87:b0: d4:43:b6:fe:dc:60:b1:05:16:4b:5d:a5:01:d8:97:96:52:f7: 64:f9:d4:27:ab:cb:35:75:ca:3b:a2:cb:05:fa:05:a3:12:44: 70:64:d2:e4:5c:9f:7c:72:28:04:e6:09:b7:7f:c5:e5:90:6f: a5:b8:b9:df:4e:77:cf:e1:c9:9f:5b:86:1f:a8:e2:ba:40:10: a6:fc:79:73:2a:6e:16:04:9a:b8:22:7f:89:a7:bb:81:f9:76: 75:34:bc:8b:2b:f5:cb:8e:29:5a:fa:1d:99:cb:b9:b3:ae:18: 93:86:2e:f3:ae:42:77:26:b3:96:4d:ff:fa:05:ef:05:22:c3: 63:b6:25:eb:ba:a0:ed:ef:f5:9d:a9:68:4a:8b:42:e5:d1:96: 1a:0e:54:61:01:0c:5f:36:01:c8:80:44:cc:0b:a6:86:38:ec: f1:23:f1:09:e8:cd:7c:4b:39:b0:68:ac:e6:24:df:9e:64:97: 0e:1e:85:09 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDguMJQUHTSk6DLHHfZuVkdbr90owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCOERGNTFGMkU1Qzk2NkQyNEIxMTc4RjNCQjc4QzIy OERCMUZBQjAeFw0yNjA3MjMxODE3MjFaFw0yNzA3MjIxODIyMjFaMDMxMTAvBgNV BAMTKEU0RDZDMjk5Q0VBMUVERUI2NkM2QTExMTE4NEJDRUY2NzQ3NkYwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcWISDQMkKmkOOfdvsRcWrEG9 yeaC0gBW28uOA8W/i2SuQWqvWn0kzIDr/ZzihN/immhdK9cls5VumI+hVCXNLJ7X Z2LsL0JsgvK/9zyZXbE805CXIy8xg2Fr6Ibn8W1Kn2bF8M4DCSm93nby2LsT4e2n 9BTsWyCTlLGCfhmOyaTlNvBUlK88sj9mHzRwIBfdGkJ+h66kgxtCqdg2GTYtKkTU SgzeCgaaT7dpyIkN9M+rMD77rwdtl1D8hcOd+NZvpDpX3OrQxChqb+hTURNBb2UD ENfT1s2rxcjWEXQo+Nv7LsweGUclqGkfIeWfH+pUxmAdp4iY/AedvrCacaCzAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU5NbCmc6h7etmxqERGEvO9nR28PIwHwYDVR0j BBgwFoAU2bjfUfLlyWbSSxF487t4wijbH6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z WHcvMC9EOUI4REY1MUYyRTVDOTY2RDI0QjExNzhGM0JCNzhDMjI4REIxRkFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QjhERjUxRjJFNUM5NjZE MjRCMTE3OEYzQkI3OEMyMjhEQjFGQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv MzIzODMwMzQzYTM3NjIzMjM4M2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzczMTM0MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEeyggMA0GCSqGSIb3DQEBCwUA A4IBAQAacvOjc2I4xAjs+AY0XS7ex+vr7ah97DOfw0lAGqDlkAibdA7J2RRU6hIc OyZkr5InoIgWY58AHYbyDL0d1wR9o6Zc/oy7h7DUQ7b+3GCxBRZLXaUB2JeWUvdk +dQnq8s1dco7ossF+gWjEkRwZNLkXJ98cigE5gm3f8XlkG+luLnfTnfP4cmfW4Yf qOK6QBCm/HlzKm4WBJq4In+Jp7uB+XZ1NLyLK/XLjila+h2Zy7mzrhiThi7zrkJ3 JrOWTf/6Be8FIsNjtiXruqDt7/WdqWhKi0Ll0ZYaDlRhAQxfNgHIgETMC6aGOOzx I/EJ6M18SzmwaKzmJN+eZJcOHoUJ -----END CERTIFICATE-----Generated at Wed Jul 29 11:09:22 2026 by rpki-client