$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373030303a3a2f33372d3337203d3e20323632373239.roa File: 323830343a313664383a373030303a3a2f33372d3337203d3e20323632373239.roa (raw, json) Hash identifier: FRfBM6ntVfuj4jgrrGUbLboO90T6hW2qwnHg+1CkzOY= Subject key identifier: AE:FF:1E:84:D2:8F:29:ED:BD:9D:0F:AC:3E:63:A9:04:FD:83:AF:16 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 7CF7640E160E537D2DC243219DD9B081E4BFE236 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373030303a3a2f33372d3337203d3e20323632373239.roa Signing time: Mon 23 Feb 2026 17:41:57 +0000 ROA not before: Mon 23 Feb 2026 17:36:57 +0000 ROA not after: Mon 22 Feb 2027 17:41:57 +0000 asID: 262729 IP address blocks: 2804:16d8:7000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f7:64:0e:16:0e:53:7d:2d:c2:43:21:9d:d9:b0:81:e4:bf:e2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Feb 23 17:36:57 2026 GMT Not After : Feb 22 17:41:57 2027 GMT Subject: CN=AEFF1E84D28F29EDBD9D0FAC3E63A904FD83AF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:41:01:e8:5f:f3:a6:28:ce:79:f2:e2:6c: 9c:8f:d0:a9:cf:51:24:49:8f:6f:16:d3:34:dd:1a: 8a:ce:ca:8b:39:87:b3:af:6a:43:b7:c3:be:ed:96: 07:24:43:ad:12:b9:9e:ce:2e:c1:21:4b:56:10:32: c1:b2:f8:fd:46:a8:c9:45:3c:0f:86:e5:7a:88:47: 08:25:4d:33:bc:31:62:ab:29:70:97:f5:58:e4:79: 3e:ab:18:6e:86:57:49:21:bd:6a:6f:03:ab:32:57: 07:51:3a:6b:c1:26:9f:01:f3:a8:3a:f5:ab:b4:ef: fc:7b:e1:08:b1:88:f8:a7:cc:35:cc:77:d7:80:53: b7:38:37:81:48:c2:ab:2c:22:71:7f:81:9e:1a:f6: ba:a6:2a:b8:fd:8a:13:c2:4b:9a:53:b9:69:39:1e: 26:6b:43:14:a0:1e:53:45:3c:87:2b:2a:93:da:b2: 35:84:b1:93:8b:f9:0e:53:81:77:50:75:b6:77:4a: 33:3e:5f:08:02:1c:63:63:79:98:7b:b3:fd:66:37: 3e:16:eb:a6:72:ed:ba:14:5b:28:04:37:bc:1c:fd: b9:1c:23:2c:cd:5f:54:8f:32:51:86:1e:38:47:50: 97:29:ba:b8:62:4a:c6:99:11:df:45:f9:e1:d2:fc: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:1E:84:D2:8F:29:ED:BD:9D:0F:AC:3E:63:A9:04:FD:83:AF:16 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373030303a3a2f33372d3337203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:7000::/37 Signature Algorithm: sha256WithRSAEncryption 83:8f:8f:52:1a:d1:e3:38:50:74:30:47:7d:3d:b0:92:89:8d: c4:f6:fa:33:3d:bf:fd:93:dc:7e:e1:1d:d9:14:61:18:ad:41: 02:aa:c9:78:75:c2:1a:08:ba:77:de:04:b1:d6:58:30:80:0e: e1:46:ec:38:35:52:7c:ee:2c:a4:3a:61:6d:ed:99:f8:c4:a4: 21:60:a7:95:bf:2f:1f:0f:d6:46:6c:10:56:2d:08:c7:02:0b: 2e:62:a5:9a:35:5c:1c:40:7d:69:8b:b8:8c:78:03:71:d6:10: cf:35:21:04:66:41:31:14:f0:0f:07:ab:34:03:ea:ca:4c:61: 5e:d4:69:3e:fe:16:55:4f:2d:9e:c7:d6:f7:5b:27:89:e0:f6: 5a:13:15:be:32:0d:2d:39:41:74:51:e1:6e:91:3a:0d:62:ed: 9e:7f:4d:3a:09:73:8b:24:e7:d1:21:27:8f:e7:8b:27:7d:20: 05:d8:df:af:ef:0f:68:df:50:df:c6:e2:53:b5:8c:fa:ab:4d: 98:29:b4:31:4d:33:6b:20:c5:f9:be:47:5a:41:07:d8:ec:3b: ea:30:10:a6:a6:b3:07:6e:0d:37:43:1c:17:88:bb:15:1f:55: 02:d0:cf:30:02:74:2f:17:83:62:8f:0f:3e:cd:88:b1:c9:1c: ac:24:4e:c9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfPdkDhYOU30twkMhndmwgeS/4jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNjAyMjMxNzM2NTdaFw0yNzAyMjIxNzQxNTdaMDMxMTAvBgNV BAMTKEFFRkYxRTg0RDI4RjI5RURCRDlEMEZBQzNFNjNBOTA0RkQ4M0FGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0UEB6F/zpijOefLibJyP0KnP USRJj28W0zTdGorOyos5h7OvakO3w77tlgckQ60SuZ7OLsEhS1YQMsGy+P1GqMlF PA+G5XqIRwglTTO8MWKrKXCX9VjkeT6rGG6GV0khvWpvA6syVwdROmvBJp8B86g6 9au07/x74QixiPinzDXMd9eAU7c4N4FIwqssInF/gZ4a9rqmKrj9ihPCS5pTuWk5 HiZrQxSgHlNFPIcrKpPasjWEsZOL+Q5TgXdQdbZ3SjM+XwgCHGNjeZh7s/1mNz4W 66Zy7boUWygEN7wc/bkcIyzNX1SPMlGGHjhHUJcpurhiSsaZEd9F+eHS/CxPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUrv8ehNKPKe29nQ+sPmOpBP2DrxYwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzNzMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthwMA0GCSqGSIb3DQEBCwUA A4IBAQCDj49SGtHjOFB0MEd9PbCSiY3E9vozPb/9k9x+4R3ZFGEYrUECqsl4dcIa CLp33gSx1lgwgA7hRuw4NVJ87iykOmFt7Zn4xKQhYKeVvy8fD9ZGbBBWLQjHAgsu YqWaNVwcQH1pi7iMeANx1hDPNSEEZkExFPAPB6s0A+rKTGFe1Gk+/hZVTy2ex9b3 WyeJ4PZaExW+Mg0tOUF0UeFukToNYu2ef006CXOLJOfRISeP54snfSAF2N+v7w9o 31DfxuJTtYz6q02YKbQxTTNrIMX5vkdaQQfY7DvqMBCmprMHbg03QxwXiLsVH1UC 0M8wAnQvF4Nijw8+zYixyRysJE7J -----END CERTIFICATE-----Generated at Mon Mar 2 22:50:18 2026 by rpki-client