$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: Aw9fasgBnuZAepySGxsZx5IIQpagTX+5RvZdfpyFd8M= Subject key identifier: 9F:1D:73:99:F9:8F:59:97:54:95:7C:BC:D5:EE:FA:A2:00:C8:9E:A6 Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 138E4D409C2D0C67D601E699EC3C04182711E6A9 Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 08 Sep 2026 13:11:31 +0000 ROA not before: Tue 08 Sep 2026 13:06:31 +0000 ROA not after: Tue 07 Sep 2027 13:11:31 +0000 asID: 274486 IP address blocks: 2804:94e8:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 17:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8e:4d:40:9c:2d:0c:67:d6:01:e6:99:ec:3c:04:18:27:11:e6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Sep 8 13:06:31 2026 GMT Not After : Sep 7 13:11:31 2027 GMT Subject: CN=9F1D7399F98F599754957CBCD5EEFAA200C89EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:96:38:c9:79:3a:af:e4:2c:76:2f:e2:42: 73:54:e8:b7:ff:47:e2:39:e8:68:c8:37:c5:6c:57: 90:19:e2:c4:55:c1:5d:ba:d0:1f:65:a7:9e:5f:82: 3c:db:75:20:72:bc:31:cd:65:94:c0:f4:e1:91:43: b6:6c:b3:c5:3d:fd:ee:0f:30:6c:b8:5d:ab:59:c5: aa:99:b6:5a:0b:77:ba:08:19:d0:cf:18:36:6f:62: 84:c9:3c:ed:bd:c2:1b:f5:f4:1e:09:e5:de:3d:10: b9:6d:06:6a:91:cd:01:0b:09:99:98:6c:8c:75:2b: ea:bf:d3:99:e1:ba:cd:1f:c2:03:16:22:09:f6:a4: a8:b6:5e:c1:ba:ef:3a:c4:e3:07:0a:fd:4d:1d:45: f4:ae:72:b7:2e:de:e3:60:05:e3:40:d5:6a:98:b9: 25:29:27:eb:93:18:95:51:9a:7b:b7:33:e2:f4:e1: 86:ba:c2:50:29:47:06:ea:32:ec:22:ec:d8:dd:17: 2f:ec:1c:ca:63:45:ec:5a:34:7d:47:6f:7d:cd:c5: b7:22:68:bf:95:03:0b:93:e7:51:ef:b5:43:55:89: b2:e1:e9:a0:3c:3a:9e:f3:96:80:6e:37:22:7c:cd: 55:c3:a2:18:da:16:f6:7c:b0:2b:73:80:39:79:f6: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:73:99:F9:8F:59:97:54:95:7C:BC:D5:EE:FA:A2:00:C8:9E:A6 X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:3000::/48 Signature Algorithm: sha256WithRSAEncryption 48:ea:99:76:f6:62:03:fd:5c:7c:28:ac:4d:86:8d:0c:81:77: 0e:b0:85:2b:3b:8e:2f:a8:7a:cc:cc:5f:68:e4:46:94:d2:6c: 61:43:84:9c:10:9b:ab:4e:56:78:c3:7e:d6:90:0e:04:5c:50: 19:56:b2:72:f6:6b:04:39:3d:69:27:d2:1a:2c:46:22:80:c2: 5a:1a:f7:60:42:61:8d:53:d8:7b:4f:78:74:1e:08:98:61:74: 36:93:f3:55:eb:bd:8f:ea:28:f9:9e:37:ea:f3:bf:1e:26:bd: 5d:08:26:f9:28:ae:cb:0a:14:3f:a8:4a:33:be:8a:8d:86:63: fb:b7:4d:1f:03:5c:fb:25:3a:0a:63:79:3e:12:7b:50:f6:7d: 80:2a:b4:16:7d:ad:f1:df:7c:ac:4e:c0:c1:6a:35:91:e0:46: 74:84:9a:60:74:52:ea:b9:93:b6:90:e0:3f:8b:d8:ab:61:26: f2:1a:d3:17:b3:57:90:77:40:9f:79:f7:7f:37:41:4a:4c:69: 36:ca:32:a3:18:a7:ed:d0:07:a8:f3:ca:78:48:35:a2:1b:71: ce:6c:eb:e1:5c:81:7c:4d:f0:b6:93:7b:c3:99:8f:fa:87:a7: 93:90:31:cd:f1:a6:1a:0c:01:b1:35:69:c7:c3:d5:e8:c1:56: fa:e3:e7:e0 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUE45NQJwtDGfWAeaZ7DwEGCcR5qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNjA5MDgxMzA2MzFaFw0yNzA5MDcxMzExMzFaMDMxMTAvBgNV BAMTKDlGMUQ3Mzk5Rjk4RjU5OTc1NDk1N0NCQ0Q1RUVGQUEyMDBDODlFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03ZY4yXk6r+Qsdi/iQnNU6Lf/ R+I56GjIN8VsV5AZ4sRVwV260B9lp55fgjzbdSByvDHNZZTA9OGRQ7Zss8U9/e4P MGy4XatZxaqZtloLd7oIGdDPGDZvYoTJPO29whv19B4J5d49ELltBmqRzQELCZmY bIx1K+q/05nhus0fwgMWIgn2pKi2XsG67zrE4wcK/U0dRfSucrcu3uNgBeNA1WqY uSUpJ+uTGJVRmnu3M+L04Ya6wlApRwbqMuwi7NjdFy/sHMpjRexaNH1Hb33Nxbci aL+VAwuT51HvtUNVibLh6aA8Op7zloBuNyJ8zVXDohjaFvZ8sCtzgDl59hBvAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUnx1zmfmPWZdUlXy81e76ogDInqYwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgwADANBgkqhkiG9w0BAQsF AAOCAQEASOqZdvZiA/1cfCisTYaNDIF3DrCFKzuOL6h6zMxfaORGlNJsYUOEnBCb q05WeMN+1pAOBFxQGVaycvZrBDk9aSfSGixGIoDCWhr3YEJhjVPYe094dB4ImGF0 NpPzVeu9j+oo+Z436vO/Hia9XQgm+SiuywoUP6hKM76KjYZj+7dNHwNc+yU6CmN5 PhJ7UPZ9gCq0Fn2t8d98rE7AwWo1keBGdISaYHRS6rmTtpDgP4vYq2Em8hrTF7NX kHdAn3n3fzdBSkxpNsoyoxin7dAHqPPKeEg1ohtxzmzr4VyBfE3wtpN7w5mP+oen k5AxzfGmGgwBsTVpx8PV6MFW+uPn4A== -----END CERTIFICATE-----Generated at Wed Oct 14 21:34:44 2026 by rpki-client