$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: NeaG8JjQ+c3FWtG3/nWXjeqNLptNqst1n96HoNeMPjs= Subject key identifier: 13:FF:B3:61:BC:8B:4B:19:24:D3:26:49:E7:22:4C:18:37:03:45:38 Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 399C46E181DD30096F37183D7E271044E6DA2B9E Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 08 Sep 2026 13:11:31 +0000 ROA not before: Tue 08 Sep 2026 13:06:31 +0000 ROA not after: Tue 07 Sep 2027 13:11:31 +0000 asID: 274486 IP address blocks: 2804:94e8:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 09:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9c:46:e1:81:dd:30:09:6f:37:18:3d:7e:27:10:44:e6:da:2b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Sep 8 13:06:31 2026 GMT Not After : Sep 7 13:11:31 2027 GMT Subject: CN=13FFB361BC8B4B1924D32649E7224C1837034538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:c3:35:78:d7:3f:d0:e3:b1:66:9a:11:67: 74:1f:b8:3c:21:ae:33:48:e4:d3:be:64:1b:15:08: 37:14:5a:2f:52:fb:b3:d6:ab:f0:4e:3f:63:64:ca: 64:8b:7e:d1:e8:d6:be:58:65:08:db:0a:fa:fa:05: 2f:35:ad:7d:0c:66:2f:41:90:f1:7c:0c:20:10:14: 60:2a:b5:b4:1a:c5:da:b2:b4:4d:89:04:ee:e8:e0: 30:0d:f3:c5:15:2b:72:eb:e8:9e:53:f7:3b:03:aa: 16:7f:87:49:28:6d:9f:44:49:77:85:f6:50:4f:73: a8:17:51:a1:bc:ca:0e:93:b3:68:46:de:68:44:12: c2:be:04:c6:16:49:a8:fb:fb:37:15:e7:2d:2b:00: 26:7f:1d:e5:d8:73:58:8e:fb:4b:16:22:1d:c7:42: 1b:f4:b1:79:dd:17:56:43:6a:6f:f4:bd:73:67:94: ad:7a:09:22:98:8e:f2:7b:81:ba:e1:50:eb:a7:48: 0b:62:6d:50:17:e3:ca:87:64:76:b5:9d:55:57:f5: 69:72:9f:20:b4:50:43:dc:b0:e7:a1:fb:27:de:fc: 09:9c:49:d6:9a:b5:48:b8:cc:cc:18:07:57:96:84: c3:b6:a0:fd:e3:b4:29:84:23:0a:78:e2:b3:5d:02: 79:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FF:B3:61:BC:8B:4B:19:24:D3:26:49:E7:22:4C:18:37:03:45:38 X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:1000::/48 Signature Algorithm: sha256WithRSAEncryption c0:04:00:3a:e9:2f:7c:4f:51:f7:19:e0:e8:5d:ca:03:59:6e: 9c:d6:91:db:0f:e4:ae:2e:9f:4a:11:21:1b:79:74:db:39:88: 10:8c:f7:57:da:b0:d6:4a:e3:aa:87:21:66:40:ae:57:b4:14: eb:90:56:2f:e2:fe:35:5a:93:b4:4d:c2:4e:d8:40:49:f6:87: 7b:d8:71:f4:b5:90:11:aa:01:25:69:cb:ed:60:18:c5:90:3c: be:4d:47:64:0b:9d:2f:92:4f:b8:17:a4:86:82:a9:18:b1:cb: e5:fa:60:61:27:d6:42:87:e6:a5:46:49:8c:44:e4:b5:a2:2a: 27:13:64:a6:78:b3:ff:74:19:f1:4e:40:57:24:a6:53:d5:6f: aa:2c:f1:59:43:ce:47:07:a5:6c:60:d9:c2:16:5e:f7:e1:a7: 18:71:70:d8:5a:7d:44:01:b0:30:7a:17:73:22:a0:4a:a1:18: 5b:8b:c5:bd:a4:de:ae:67:62:4d:23:70:f3:ac:75:fb:a4:1f: d9:40:fa:dc:2e:17:31:23:8f:bc:62:d5:38:f3:69:f3:4c:00: 35:d5:4c:bd:48:61:05:e6:ad:db:00:de:45:77:f7:7f:d4:fe: e1:fb:6e:de:bd:f5:1e:83:e7:a2:b0:d3:34:98:a6:c8:af:13: c8:61:b2:c8 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUOZxG4YHdMAlvNxg9ficQRObaK54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNjA5MDgxMzA2MzFaFw0yNzA5MDcxMzExMzFaMDMxMTAvBgNV BAMTKDEzRkZCMzYxQkM4QjRCMTkyNEQzMjY0OUU3MjI0QzE4MzcwMzQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+A8M1eNc/0OOxZpoRZ3QfuDwh rjNI5NO+ZBsVCDcUWi9S+7PWq/BOP2NkymSLftHo1r5YZQjbCvr6BS81rX0MZi9B kPF8DCAQFGAqtbQaxdqytE2JBO7o4DAN88UVK3Lr6J5T9zsDqhZ/h0kobZ9ESXeF 9lBPc6gXUaG8yg6Ts2hG3mhEEsK+BMYWSaj7+zcV5y0rACZ/HeXYc1iO+0sWIh3H Qhv0sXndF1ZDam/0vXNnlK16CSKYjvJ7gbrhUOunSAtibVAX48qHZHa1nVVX9Wly nyC0UEPcsOeh+yfe/AmcSdaatUi4zMwYB1eWhMO2oP3jtCmEIwp44rNdAnltAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUE/+zYbyLSxkk0yZJ5yJMGDcDRTgwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgQADANBgkqhkiG9w0BAQsF AAOCAQEAwAQAOukvfE9R9xng6F3KA1lunNaR2w/kri6fShEhG3l02zmIEIz3V9qw 1krjqochZkCuV7QU65BWL+L+NVqTtE3CTthASfaHe9hx9LWQEaoBJWnL7WAYxZA8 vk1HZAudL5JPuBekhoKpGLHL5fpgYSfWQofmpUZJjETktaIqJxNkpniz/3QZ8U5A VySmU9VvqizxWUPORwelbGDZwhZe9+GnGHFw2Fp9RAGwMHoXcyKgSqEYW4vFvaTe rmdiTSNw86x1+6Qf2UD63C4XMSOPvGLVOPNp80wANdVMvUhhBeat2wDeRXf3f9T+ 4ftu3r31HoPnorDTNJimyK8TyGGyyA== -----END CERTIFICATE-----Generated at Tue Nov 3 15:34:12 2026 by rpki-client