$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa File: 323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa (raw, json) Hash identifier: 21q2UaMXYEMGBt7DQC5bvUb/uGC+RYFLjEaT1XyTk1U= Subject key identifier: 99:B5:79:5A:53:7C:D1:DD:67:B6:62:6C:C3:EA:24:F0:C1:59:CA:F5 Certificate issuer: /CN=C4B5041C433317D641803C99F33EBAC111F4589E Certificate serial: 63C628DE49C3D4890F81CFB3861717F14F4DE4E5 Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa Signing time: Wed 15 Apr 2026 17:59:24 +0000 ROA not before: Wed 15 Apr 2026 17:54:24 +0000 ROA not after: Wed 14 Apr 2027 17:59:24 +0000 asID: 264425 IP address blocks: 2804:1e60:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 09:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c6:28:de:49:c3:d4:89:0f:81:cf:b3:86:17:17:f1:4f:4d:e4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E Validity Not Before: Apr 15 17:54:24 2026 GMT Not After : Apr 14 17:59:24 2027 GMT Subject: CN=99B5795A537CD1DD67B6626CC3EA24F0C159CAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:ef:df:1e:38:6e:cd:54:66:82:0b:fd:86: 38:93:47:2e:0b:96:5c:b8:00:81:c1:18:2b:53:03: 77:7c:3a:ea:58:42:c9:c6:d7:1a:a8:ef:91:17:f7: ba:1d:9d:37:5c:33:8f:97:f4:d4:b7:88:cb:1f:e1: e3:9e:60:ad:80:36:63:0d:80:f9:26:ad:ae:f8:3b: c7:ac:b7:f7:3a:69:0e:ca:dd:0f:38:04:2a:b2:1e: 36:8e:9a:63:6e:e5:14:0e:a7:8c:ad:0f:77:f3:7c: 28:85:c4:05:bc:f7:e9:f3:4f:27:11:9b:8f:8d:54: 33:cd:25:94:93:0c:a5:8e:2a:84:e8:dd:42:f6:6f: 66:3e:e4:a5:39:08:ee:21:9f:47:5b:2c:5b:76:f0: 8d:bf:2c:fe:11:81:4c:2e:f3:a0:68:79:62:bd:ff: 6d:dd:72:33:f6:7b:3d:d9:f7:18:a9:e4:28:10:61: 76:c3:e7:c4:99:2f:ef:7e:8f:b5:f8:e6:66:e2:a0: 93:c6:95:62:64:b8:ff:5e:53:2e:34:6a:29:0d:cf: 0e:c4:25:9c:7d:e0:71:79:2f:d9:65:ac:fc:cc:fd: ad:ed:1d:6a:21:27:38:3d:75:cc:cc:d5:23:13:48: bd:d2:67:bd:4b:ab:1e:d0:a7:8b:5f:ae:70:e3:45: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B5:79:5A:53:7C:D1:DD:67:B6:62:6C:C3:EA:24:F0:C1:59:CA:F5 X509v3 Authority Key Identifier: keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1e60:2000::/36 Signature Algorithm: sha256WithRSAEncryption 24:db:ba:44:8a:fc:42:19:59:65:18:d5:c5:db:18:32:93:39: 94:74:ee:dc:38:1c:09:d8:b2:07:e9:e0:86:6c:d0:c0:9e:aa: be:76:91:20:1a:45:9d:29:d1:58:22:9f:d5:1c:70:e1:5e:a4: d5:e6:99:51:3b:74:72:07:3c:af:99:2e:39:85:fb:a5:f1:ea: 9b:2d:20:b2:3b:ac:a4:d9:57:3b:aa:63:51:b5:f3:69:e2:5f: 67:e7:d1:15:cc:14:2f:e3:49:cf:51:af:5d:ea:d6:55:70:55: 89:36:e7:1b:d9:90:20:f9:9c:84:68:91:d9:5a:66:11:54:f3: 03:0d:d5:49:e3:97:31:62:09:4e:41:74:ff:1c:83:5f:22:21: 1e:4f:96:94:a3:81:00:fe:21:3c:3f:b5:d3:34:14:bb:c8:ab: c1:4b:d8:72:92:79:56:ec:4a:78:96:cc:00:3d:9d:d6:d9:23: 10:47:28:8b:b2:b0:50:80:ad:76:e9:59:02:e7:e6:26:57:52: 80:23:a9:a3:18:b8:ea:90:67:03:ce:24:b5:d8:98:81:97:44: b1:12:ad:dc:c9:f8:db:67:21:42:9b:87:0a:74:90:63:d3:92: d6:67:cf:a3:b5:db:18:5a:0d:70:e7:ef:23:e4:78:11:cb:b2: 2a:35:ce:10 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUY8Yo3knD1IkPgc+zhhcX8U9N5OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCNTA0MUM0MzMzMTdENjQxODAzQzk5RjMzRUJBQzEx MUY0NTg5RTAeFw0yNjA0MTUxNzU0MjRaFw0yNzA0MTQxNzU5MjRaMDMxMTAvBgNV BAMTKDk5QjU3OTVBNTM3Q0QxREQ2N0I2NjI2Q0MzRUEyNEYwQzE1OUNBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw+/fHjhuzVRmggv9hjiTRy4L lly4AIHBGCtTA3d8OupYQsnG1xqo75EX97odnTdcM4+X9NS3iMsf4eOeYK2ANmMN gPkmra74O8est/c6aQ7K3Q84BCqyHjaOmmNu5RQOp4ytD3fzfCiFxAW89+nzTycR m4+NVDPNJZSTDKWOKoTo3UL2b2Y+5KU5CO4hn0dbLFt28I2/LP4RgUwu86BoeWK9 /23dcjP2ez3Z9xip5CgQYXbD58SZL+9+j7X45mbioJPGlWJkuP9eUy40aikNzw7E JZx94HF5L9llrPzM/a3tHWohJzg9dczM1SMTSL3SZ71Lqx7Qp4tfrnDjRYsvAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUmbV5WlN80d1ntmJsw+ok8MFZyvUwHwYDVR0j BBgwFoAUxLUEHEMzF9ZBgDyZ8z66wRH0WJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC9DNEI1MDQxQzQzMzMxN0Q2NDE4MDNDOTlGMzNFQkFDMTExRjQ1ODlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjUwNDFDNDMzMzE3RDY0 MTgwM0M5OUYzM0VCQUMxMTFGNDU4OUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzIzODMwMzQzYTMxNjUzNjMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmAgMA0GCSqGSIb3DQEBCwUA A4IBAQAk27pEivxCGVllGNXF2xgykzmUdO7cOBwJ2LIH6eCGbNDAnqq+dpEgGkWd KdFYIp/VHHDhXqTV5plRO3RyBzyvmS45hful8eqbLSCyO6yk2Vc7qmNRtfNp4l9n 59EVzBQv40nPUa9d6tZVcFWJNucb2ZAg+ZyEaJHZWmYRVPMDDdVJ45cxYglOQXT/ HINfIiEeT5aUo4EA/iE8P7XTNBS7yKvBS9hyknlW7Ep4lswAPZ3W2SMQRyiLsrBQ gK126VkC5+YmV1KAI6mjGLjqkGcDziS12JiBl0SxEq3cyfjbZyFCm4cKdJBj05LW Z8+jtdsYWg1w5+8j5HgRy7IqNc4Q -----END CERTIFICATE-----Generated at Fri Apr 17 23:46:20 2026 by rpki-client