$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa File: 323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa (raw, json) Hash identifier: 3q8uQeASfS0yjvQbaz5dkUga3Y6RoeYvPUSsxpG+o4s= Subject key identifier: 17:89:95:C6:A9:27:68:F7:AA:09:30:82:7F:2A:EE:02:77:E4:E7:94 Certificate issuer: /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C Certificate serial: 7A4531C8617608649A0DFD37F1B5DEDDFEE23BDE Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa Signing time: Thu 09 Apr 2026 18:53:04 +0000 ROA not before: Thu 09 Apr 2026 18:48:04 +0000 ROA not after: Thu 08 Apr 2027 18:53:04 +0000 asID: 268091 IP address blocks: 2804:57dc:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 02:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:31:c8:61:76:08:64:9a:0d:fd:37:f1:b5:de:dd:fe:e2:3b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C Validity Not Before: Apr 9 18:48:04 2026 GMT Not After : Apr 8 18:53:04 2027 GMT Subject: CN=178995C6A92768F7AA0930827F2AEE0277E4E794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:e6:40:bf:d4:97:1f:6a:48:e4:8a:27:36: 61:39:f7:94:d4:fa:06:bd:12:9b:df:4f:ad:8a:4f: 31:81:c1:48:f5:1a:eb:b1:d7:67:5e:56:8a:8b:53: 41:ae:2d:b3:27:b1:56:5f:37:6d:b9:9a:a1:f4:e2: fe:57:14:d1:31:8d:d7:19:24:28:4b:e8:7a:d8:1e: e5:a3:78:d5:1c:c0:e2:2e:e3:3c:92:8c:5e:04:8c: 92:7c:22:1f:69:d9:32:03:5f:22:b7:98:a1:71:3b: 42:7a:cd:57:a8:d9:52:a1:41:2c:2c:1c:61:2c:3e: cd:96:c9:65:10:fa:ed:4f:5a:ec:f3:ac:9d:a2:df: 22:a4:05:64:97:5d:3b:77:82:41:60:35:78:d3:f1: 06:01:fd:aa:4e:45:ae:e0:22:f5:e4:b6:fd:ce:a4: ef:c5:9f:1a:24:72:63:55:dc:fe:24:b0:32:93:ce: f0:ef:3e:88:80:9a:ba:5e:3f:a6:44:46:5f:d2:bc: ed:37:01:ac:33:a8:5c:d4:fd:c6:72:31:d0:65:e0: f6:6d:27:0f:24:dc:bc:76:a7:6c:aa:7e:08:85:46: 94:5b:34:f6:10:4f:ab:4c:d5:5d:95:15:dd:3e:6b: 65:67:45:1e:9d:a8:05:55:39:62:14:3c:dd:5d:07: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:95:C6:A9:27:68:F7:AA:09:30:82:7F:2A:EE:02:77:E4:E7:94 X509v3 Authority Key Identifier: keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:57dc:8000::/33 Signature Algorithm: sha256WithRSAEncryption b5:83:3b:be:95:1f:09:06:04:25:73:21:44:b3:aa:df:f4:66: a2:8b:51:93:eb:33:0d:4d:60:33:18:67:77:35:fc:7e:b0:ec: e6:68:64:de:10:e5:d3:8c:60:df:94:e2:11:ff:29:e4:2a:bd: 34:85:00:f5:d2:a8:d4:71:c1:cd:09:d2:1c:78:03:83:21:7c: 32:fe:82:2e:ce:25:bc:81:98:72:19:67:12:56:4c:9e:2a:ca: 50:51:d3:15:3e:2b:e0:7f:61:aa:b8:5a:3c:f2:15:96:22:ff: 5b:4d:97:86:f7:4c:90:b9:f5:9b:bf:ed:26:bb:fd:c7:19:3e: ab:c5:09:2d:0c:2d:15:1d:f1:98:c8:28:00:af:6d:d0:fa:e9: 92:04:af:b9:d3:49:83:ee:4c:b0:50:8e:41:b4:d6:93:3e:ed: de:81:5c:fe:7a:76:0f:97:fe:44:dc:ff:19:1e:90:47:d5:37: f5:27:17:06:aa:8e:e5:98:20:f0:91:ab:8e:8d:30:12:d3:54: 6a:27:55:46:f5:5e:c0:ce:c9:65:9a:ec:78:dd:22:d6:19:c4: 04:e8:d7:2c:7d:03:30:ae:f1:73:d0:65:f0:82:14:d0:81:8b: 7b:14:21:d7:1e:db:b8:69:e1:1d:d9:23:53:e7:6c:43:58:30: 24:20:02:b7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUekUxyGF2CGSaDf038bXe3f7iO94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0ODlBOEUyQ0FGMkVBMTZDMURBQTZFMDdGQjAwNDYz RjRGNzg4QzAeFw0yNjA0MDkxODQ4MDRaFw0yNzA0MDgxODUzMDRaMDMxMTAvBgNV BAMTKDE3ODk5NUM2QTkyNzY4RjdBQTA5MzA4MjdGMkFFRTAyNzdFNEU3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkOZAv9SXH2pI5IonNmE595TU +ga9EpvfT62KTzGBwUj1Guux12deVoqLU0GuLbMnsVZfN225mqH04v5XFNExjdcZ JChL6HrYHuWjeNUcwOIu4zySjF4EjJJ8Ih9p2TIDXyK3mKFxO0J6zVeo2VKhQSws HGEsPs2WyWUQ+u1PWuzzrJ2i3yKkBWSXXTt3gkFgNXjT8QYB/apORa7gIvXktv3O pO/FnxokcmNV3P4ksDKTzvDvPoiAmrpeP6ZERl/SvO03AawzqFzU/cZyMdBl4PZt Jw8k3Lx2p2yqfgiFRpRbNPYQT6tM1V2VFd0+a2VnRR6dqAVVOWIUPN1dB02fAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUF4mVxqknaPeqCTCCfyruAnfk55QwHwYDVR0j BBgwFoAUiUiajiyvLqFsHapuB/sARj9PeIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn RTgvMC84OTQ4OUE4RTJDQUYyRUExNkMxREFBNkUwN0ZCMDA0NjNGNEY3ODhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NDg5QThFMkNBRjJFQTE2 QzFEQUE2RTA3RkIwMDQ2M0Y0Rjc4OEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv MzIzODMwMzQzYTM1Mzc2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEV9yAMA0GCSqGSIb3DQEBCwUA A4IBAQC1gzu+lR8JBgQlcyFEs6rf9Gaii1GT6zMNTWAzGGd3Nfx+sOzmaGTeEOXT jGDflOIR/ynkKr00hQD10qjUccHNCdIceAODIXwy/oIuziW8gZhyGWcSVkyeKspQ UdMVPivgf2GquFo88hWWIv9bTZeG90yQufWbv+0mu/3HGT6rxQktDC0VHfGYyCgA r23Q+umSBK+500mD7kywUI5BtNaTPu3egVz+enYPl/5E3P8ZHpBH1Tf1JxcGqo7l mCDwkauOjTAS01RqJ1VG9V7Azsllmux43SLWGcQE6NcsfQMwrvFz0GXwghTQgYt7 FCHXHtu4aeEd2SNT52xDWDAkIAK3 -----END CERTIFICATE-----Generated at Sat Apr 18 10:32:46 2026 by rpki-client