$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa File: 323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa (raw, json) Hash identifier: Noa4Bji8Gj320jh4hjGFHuS+k8LUdvHgbLbG1pgeQ60= Subject key identifier: 43:90:CF:7E:E9:3A:36:F9:DF:47:0C:27:84:B1:CB:C3:48:8C:19:11 Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44 Certificate serial: 5143943223ADE2D2E6B2DD90935E74BD1DC18052 Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa Signing time: Sun 13 Sep 2026 17:57:49 +0000 ROA not before: Sun 13 Sep 2026 17:52:49 +0000 ROA not after: Sun 12 Sep 2027 17:57:49 +0000 asID: 28571 IP address blocks: 2001:12d0:8070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 22:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:43:94:32:23:ad:e2:d2:e6:b2:dd:90:93:5e:74:bd:1d:c1:80:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44 Validity Not Before: Sep 13 17:52:49 2026 GMT Not After : Sep 12 17:57:49 2027 GMT Subject: CN=4390CF7EE93A36F9DF470C2784B1CBC3488C1911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:5d:e5:d9:8d:c9:ee:2f:f6:2a:51:42:50: 80:ff:64:06:71:41:18:68:88:0a:d6:fc:0c:12:ae: fa:52:ed:2a:0d:52:59:c1:55:01:6d:d7:bd:2b:2c: 99:e9:6d:82:c6:6e:ba:2d:d8:b9:38:cf:cc:f4:5f: 40:92:89:be:b4:80:ae:d4:d0:0d:20:22:56:a8:b6: f0:8a:d4:02:aa:7f:fd:1f:94:a9:61:9c:43:e3:7e: 01:8a:38:15:bb:ee:d8:8f:8b:32:4b:58:e2:bc:9d: f7:70:c1:90:07:aa:6a:df:c4:33:72:58:d6:ce:23: a0:77:8d:5b:72:08:0d:b7:14:ce:15:c1:2c:d8:ee: a2:65:f7:b5:21:28:e4:1c:f6:38:42:92:89:b3:fa: 26:22:6d:1f:11:96:b4:47:18:e3:d3:19:7b:56:23: 85:0e:62:05:5f:71:fd:fa:71:6d:b8:4b:46:b9:fd: 1c:fa:3c:5e:63:22:7f:74:74:ec:ff:4b:20:3d:c4: b0:92:1c:54:f1:cd:47:d7:2b:62:42:c2:17:9c:a3: 28:c4:e2:fc:b7:e2:f0:05:35:7d:87:01:50:9d:1f: 62:10:37:08:7c:99:02:f9:8f:b0:e2:0a:a0:89:0f: 1c:6b:09:f1:18:ed:e4:62:bd:53:9a:00:d0:32:1d: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:CF:7E:E9:3A:36:F9:DF:47:0C:27:84:B1:CB:C3:48:8C:19:11 X509v3 Authority Key Identifier: keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:12d0:8070::/48 Signature Algorithm: sha256WithRSAEncryption 93:60:ab:b5:08:cc:10:99:b3:d9:c9:35:03:98:4e:83:d5:13: 37:ea:bd:35:c3:9e:90:72:f1:a1:16:d7:4f:29:e6:71:a2:9d: 12:e7:8b:92:7e:1a:22:59:96:d3:08:aa:2a:cf:6e:62:16:d7: 37:3a:ca:0f:29:b7:8e:8b:9f:f7:1e:7c:4c:31:70:2a:5f:f6: 6c:62:77:7d:b2:85:f0:06:dc:d6:5a:32:f2:54:00:0e:4a:59: 72:77:c9:e9:06:19:59:05:ed:9f:08:ef:b4:b3:9e:1c:d3:26: dd:3f:d9:47:6f:fc:f4:73:0a:3d:56:f4:96:64:0c:29:1d:0b: cc:70:3a:c0:3e:aa:35:c7:19:7f:b3:63:74:5e:f1:ab:ee:92: 24:45:d3:e5:2b:42:a7:1d:14:f1:45:c8:1b:a9:f9:db:55:d3: e0:66:33:9f:3a:98:6d:74:ef:cb:15:09:5d:50:48:ab:c5:44: 3a:5e:fc:0f:c9:db:24:da:3f:1f:a8:33:70:22:58:a6:8d:90: 41:83:e9:a6:22:d2:7f:e9:0d:67:12:57:93:a6:fd:27:b9:ed: 31:ea:d8:b0:84:75:b0:8d:3b:1e:c8:c3:72:0e:05:7f:aa:26: 6f:af:68:84:b5:f8:fd:bd:4d:d9:23:5f:71:e0:c6:b6:4f:5a: 61:18:78:f9 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUUUOUMiOt4tLmst2Qk150vR3BgFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5 REVGOUE0NDAeFw0yNjA5MTMxNzUyNDlaFw0yNzA5MTIxNzU3NDlaMDMxMTAvBgNV BAMTKDQzOTBDRjdFRTkzQTM2RjlERjQ3MEMyNzg0QjFDQkMzNDg4QzE5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTl3l2Y3J7i/2KlFCUID/ZAZx QRhoiArW/AwSrvpS7SoNUlnBVQFt170rLJnpbYLGbrot2Lk4z8z0X0CSib60gK7U 0A0gIlaotvCK1AKqf/0flKlhnEPjfgGKOBW77tiPizJLWOK8nfdwwZAHqmrfxDNy WNbOI6B3jVtyCA23FM4VwSzY7qJl97UhKOQc9jhCkomz+iYibR8RlrRHGOPTGXtW I4UOYgVfcf36cW24S0a5/Rz6PF5jIn90dOz/SyA9xLCSHFTxzUfXK2JCwhecoyjE 4vy34vAFNX2HAVCdH2IQNwh8mQL5j7DiCqCJDxxrCfEY7eRivVOaANAyHabpAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUQ5DPfuk6NvnfRwwnhLHLw0iMGREwHwYDVR0j BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3 RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv MzIzMDMwMzEzYTMxMzI2NDMwM2EzODMwMzczMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgARLQgHAwDQYJKoZIhvcNAQELBQAD ggEBAJNgq7UIzBCZs9nJNQOYToPVEzfqvTXDnpBy8aEW108p5nGinRLni5J+GiJZ ltMIqirPbmIW1zc6yg8pt46Ln/cefEwxcCpf9mxid32yhfAG3NZaMvJUAA5KWXJ3 yekGGVkF7Z8I77SznhzTJt0/2Udv/PRzCj1W9JZkDCkdC8xwOsA+qjXHGX+zY3Re 8avukiRF0+UrQqcdFPFFyBup+dtV0+BmM586mG1078sVCV1QSKvFRDpe/A/J2yTa Px+oM3AiWKaNkEGD6aYi0n/pDWcSV5Om/Se57THq2LCEdbCNOx7Iw3IOBX+qJm+v aIS1+P29TdkjX3HgxrZPWmEYePk= -----END CERTIFICATE-----Generated at Wed Oct 28 08:38:21 2026 by rpki-client