$ rpki-client -vvvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3430203d3e203631383530.roa File: 323830343a316134383a3a2f33322d3430203d3e203631383530.roa (raw, json) Hash identifier: HrcyWvD0a/hJY0Typ9cPPKj1DB/va0LrMSw9LiARrX4= Subject key identifier: 87:E1:88:0A:B7:CA:0B:DC:A5:B0:93:A2:96:E0:73:8D:2D:29:15:9D Certificate issuer: /CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E Certificate serial: 295E79B909EBF78EB606F49470F360E9A91DF62E Authority key identifier: C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer Subject info access: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3430203d3e203631383530.roa Signing time: Mon 14 Sep 2026 18:49:12 +0000 ROA not before: Mon 14 Sep 2026 18:44:12 +0000 ROA not after: Mon 13 Sep 2027 18:49:12 +0000 asID: 61850 IP address blocks: 2804:1a48::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 11:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5e:79:b9:09:eb:f7:8e:b6:06:f4:94:70:f3:60:e9:a9:1d:f6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E Validity Not Before: Sep 14 18:44:12 2026 GMT Not After : Sep 13 18:49:12 2027 GMT Subject: CN=87E1880AB7CA0BDCA5B093A296E0738D2D29159D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:9f:0d:6b:49:26:86:61:f7:ca:87:e5:26: 75:57:44:4d:81:44:b6:4c:c3:06:bc:01:7c:6b:1a: 12:1f:b8:15:82:a1:fa:5f:3f:f0:a1:8f:1e:f7:9d: d0:16:22:80:5c:86:fb:f2:d9:53:69:d6:c2:c8:08: 73:3b:7a:97:82:58:fa:6c:df:ee:ac:53:90:7c:ef: 36:e5:5b:b9:f1:14:ab:6b:6d:c7:81:e2:03:73:e9: 34:66:65:6a:9b:40:28:5e:a1:d8:7c:1f:02:bc:51: 18:a6:40:b0:60:bb:e8:ce:64:73:dc:b3:45:fa:26: 20:33:ce:3d:39:9a:83:52:3a:8b:de:f8:09:e3:f0: ed:1e:62:75:29:a6:6e:f6:1c:98:bb:81:3f:8e:e2: 23:6d:8f:c8:ee:33:26:0b:d2:06:ec:30:fb:f1:72: 7a:ec:66:3b:83:b7:4d:3d:6b:c1:5c:ee:5d:dc:94: 41:b3:08:00:07:5d:f3:76:b7:5e:01:e7:7f:0c:b6: 0c:73:ce:47:00:63:18:0e:0d:d9:96:52:3a:a6:72: 39:bd:da:20:3e:93:0f:a3:82:c6:0f:bf:85:2d:80: 2c:24:53:5a:98:53:b3:39:a4:e3:54:37:68:75:00: 77:6e:09:dd:03:f3:3d:8a:e2:f0:d2:d9:d7:35:d5: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E1:88:0A:B7:CA:0B:DC:A5:B0:93:A2:96:E0:73:8D:2D:29:15:9D X509v3 Authority Key Identifier: keyid:C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3430203d3e203631383530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1a48::/32 Signature Algorithm: sha256WithRSAEncryption 1a:85:05:20:50:bd:c2:dc:99:d7:9b:58:6d:a5:b1:95:a9:3b: e7:ca:13:7b:ea:1a:63:84:e8:47:2d:f2:8a:95:7d:4c:5f:38: 8c:5f:46:d5:f0:1e:b4:d8:5a:1c:d5:71:f8:6d:c0:7d:98:59: d4:d9:93:be:a1:6c:9e:ec:aa:93:26:48:0d:8b:37:21:f2:24: bf:87:a5:24:fc:13:af:b3:86:cf:06:4d:b1:4e:79:f0:a1:4b: 04:0b:bc:d6:f4:3c:18:9b:33:5d:e3:bc:16:11:5e:82:aa:d8: a3:2d:9c:b4:36:0b:bb:91:97:2b:9f:19:c9:36:29:2b:14:cf: ec:d0:76:3d:5a:3a:69:db:04:20:17:d8:b1:30:74:ad:1d:3a: 78:37:22:e6:be:ca:5f:70:6f:b3:81:4b:8d:b7:e1:52:5e:8d: 60:2f:a7:46:1d:c3:8e:58:e4:cf:af:4a:a1:f6:cd:9f:a5:6e: 35:dd:2f:1a:b1:e0:a7:11:d8:c9:34:20:ae:05:25:52:96:97: 8a:45:ed:58:f2:fa:3b:cf:88:78:73:9d:61:d5:c4:aa:5f:7b: 2e:39:0d:1f:79:e9:3d:c2:5b:b8:7a:2b:2a:7b:6f:29:af:18: 1e:9f:cf:6a:b2:dd:fa:36:22:77:2b:d6:7a:75:55:2c:a4:fa: 43:f6:59:e4 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUKV55uQnr9462BvSUcPNg6akd9i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyRkQ5QURDNjU3OEYwRkVFMEFFNjNGRERFNTlGQkMx OTlGOTg5RTAeFw0yNjA5MTQxODQ0MTJaFw0yNzA5MTMxODQ5MTJaMDMxMTAvBgNV BAMTKDg3RTE4ODBBQjdDQTBCRENBNUIwOTNBMjk2RTA3MzhEMkQyOTE1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRB58Na0kmhmH3yoflJnVXRE2B RLZMwwa8AXxrGhIfuBWCofpfP/Chjx73ndAWIoBchvvy2VNp1sLICHM7epeCWPps 3+6sU5B87zblW7nxFKtrbceB4gNz6TRmZWqbQCheodh8HwK8URimQLBgu+jOZHPc s0X6JiAzzj05moNSOove+Anj8O0eYnUppm72HJi7gT+O4iNtj8juMyYL0gbsMPvx cnrsZjuDt009a8Fc7l3clEGzCAAHXfN2t14B538MtgxzzkcAYxgODdmWUjqmcjm9 2iA+kw+jgsYPv4UtgCwkU1qYU7M5pONUN2h1AHduCd0D8z2K4vDS2dc11dMLAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUh+GICrfKC9ylsJOiluBzjS0pFZ0wHwYDVR0j BBgwFoAUwi/ZrcZXjw/uCuY/3eWfvBmfmJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQ0MkFEZzZpeEFud3RuMUY3UFVYS3J2QnZBMkYxdTEyWFJkNktxSFRG bmsvMC9DMjJGRDlBREM2NTc4RjBGRUUwQUU2M0ZEREU1OUZCQzE5OUY5ODlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyMkZEOUFEQzY1NzhGMEZF RTBBRTYzRkRERTU5RkJDMTk5Rjk4OUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0NDJBRGc2aXhBbnd0bjFGN1BVWEtydkJ2QTJGMXUxMlhSZDZLcUhURm5rLzAv MzIzODMwMzQzYTMxNjEzNDM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzYzMTM4 MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGkgwDQYJKoZIhvcNAQELBQADggEBABqFBSBQvcLc mdebWG2lsZWpO+fKE3vqGmOE6Ect8oqVfUxfOIxfRtXwHrTYWhzVcfhtwH2YWdTZ k76hbJ7sqpMmSA2LNyHyJL+HpST8E6+zhs8GTbFOefChSwQLvNb0PBibM13jvBYR XoKq2KMtnLQ2C7uRlyufGck2KSsUz+zQdj1aOmnbBCAX2LEwdK0dOng3Iua+yl9w b7OBS4234VJejWAvp0Ydw45Y5M+vSqH2zZ+lbjXdLxqx4KcR2Mk0IK4FJVKWl4pF 7Vjy+jvPiHhznWHVxKpfey45DR956T3CW7h6Kyp7bymvGB6fz2qy3fo2Incr1np1 VSyk+kP2WeQ= -----END CERTIFICATE-----Generated at Wed Oct 14 04:58:08 2026 by rpki-client