$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373830303a3a2f33372d3337203d3e20323632373239.roa File: 323830343a313664383a373830303a3a2f33372d3337203d3e20323632373239.roa (raw, json) Hash identifier: umCuVFUFgNrQSqicgP7TbJ4sdMlm9ES7MvJcw+zlv50= Subject key identifier: CE:08:7C:F1:F8:F2:51:B0:B0:DC:DB:E2:11:18:B3:67:07:E1:C5:F3 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 0DAC74BA66B8CF15E06D69DEE6A3A37DA9A08894 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373830303a3a2f33372d3337203d3e20323632373239.roa Signing time: Mon 23 Feb 2026 17:42:15 +0000 ROA not before: Mon 23 Feb 2026 17:37:15 +0000 ROA not after: Mon 22 Feb 2027 17:42:15 +0000 asID: 262729 IP address blocks: 2804:16d8:7800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:74:ba:66:b8:cf:15:e0:6d:69:de:e6:a3:a3:7d:a9:a0:88:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: Feb 23 17:37:15 2026 GMT Not After : Feb 22 17:42:15 2027 GMT Subject: CN=CE087CF1F8F251B0B0DCDBE21118B36707E1C5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:2c:78:0f:57:67:c4:46:a0:d5:db:53:76: 93:b7:bc:21:2d:27:a7:a1:3e:a6:07:2d:ce:b8:5c: 04:cc:07:16:52:38:bc:37:5d:9f:7b:9b:fd:57:04: 97:97:91:8e:56:40:b0:d3:44:64:bd:80:5b:b6:90: 5a:c8:2a:f2:ed:8f:51:cd:0f:f1:bf:bf:be:46:80: e6:e1:b0:8e:97:25:96:b9:4a:af:d6:79:de:9d:8e: 16:a9:16:3d:d4:6f:7f:c4:0d:8e:7c:84:af:4a:bd: f8:be:bb:ae:d7:e7:1a:c0:1e:23:8d:47:50:1e:6a: 04:9e:e7:87:d2:d7:ef:74:2d:98:7d:a0:c3:3e:97: d5:26:4f:60:0e:7c:0b:75:09:c2:ac:fe:1c:91:8b: 0f:f9:62:50:4d:d9:f1:33:5c:1b:9a:a3:10:18:f7: 4f:52:78:b1:7e:dc:dc:f9:9f:d9:d2:cc:64:53:75: 1b:0b:15:9a:c1:5c:aa:0d:a0:3d:99:e5:a2:bf:aa: bc:12:7e:dc:51:70:95:10:a6:98:ac:89:15:7d:47: 90:40:c7:3d:3e:b5:39:94:37:e3:94:70:31:86:9e: ba:fa:0b:b7:bc:88:b6:4b:88:0b:f2:72:cd:7d:b4: d7:e9:a9:c8:f6:27:cd:55:c2:4f:74:16:9b:7b:74: f5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:08:7C:F1:F8:F2:51:B0:B0:DC:DB:E2:11:18:B3:67:07:E1:C5:F3 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a373830303a3a2f33372d3337203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:7800::/37 Signature Algorithm: sha256WithRSAEncryption 90:e7:bb:1f:f1:b2:bc:43:86:eb:e9:07:4f:ce:3d:87:96:a9: fb:24:39:6f:ce:fa:a7:b4:d2:01:b0:49:25:86:24:7f:3f:b7: 10:3e:2b:e6:f8:ec:38:b6:de:50:13:70:36:43:8f:1a:ac:0d: 0b:82:c8:70:3e:b5:94:c2:69:b5:71:07:ba:a5:b5:76:06:90: 4c:e8:e0:c3:1b:0d:2e:5b:0a:d1:ab:95:ae:cd:98:74:d6:c5: 3a:c7:a8:05:a2:ed:ba:2d:16:3d:10:ec:9c:47:ba:7b:94:78: eb:b5:a5:ad:13:de:e9:c3:92:65:61:32:e4:fd:e9:84:70:98: 31:06:52:7d:52:3e:d2:a9:21:28:0f:ac:ca:9c:b1:ac:46:45: 67:67:c9:eb:45:ab:57:f0:dc:bb:31:c6:37:f4:80:01:f0:b9: 70:63:8b:85:b5:a0:12:48:e3:47:b0:c7:b7:c4:3b:0c:28:12: b9:8c:8e:7a:ca:3e:8f:a3:c1:67:f0:79:4a:fc:ae:91:3b:66: 6b:c1:50:13:59:89:0f:98:24:6c:9b:94:46:a6:d1:13:6b:f6: 8f:db:14:12:0f:b5:ba:98:0b:de:fe:f7:65:64:01:0e:e0:b7: 3b:1d:b0:8f:28:c3:b2:22:1c:bb:67:a2:e6:77:e0:ca:93:a2: 60:71:d3:56 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDax0uma4zxXgbWne5qOjfamgiJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNjAyMjMxNzM3MTVaFw0yNzAyMjIxNzQyMTVaMDMxMTAvBgNV BAMTKENFMDg3Q0YxRjhGMjUxQjBCMERDREJFMjExMThCMzY3MDdFMUM1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCix4D1dnxEag1dtTdpO3vCEt J6ehPqYHLc64XATMBxZSOLw3XZ97m/1XBJeXkY5WQLDTRGS9gFu2kFrIKvLtj1HN D/G/v75GgObhsI6XJZa5Sq/Wed6djhapFj3Ub3/EDY58hK9Kvfi+u67X5xrAHiON R1AeagSe54fS1+90LZh9oMM+l9UmT2AOfAt1CcKs/hyRiw/5YlBN2fEzXBuaoxAY 909SeLF+3Nz5n9nSzGRTdRsLFZrBXKoNoD2Z5aK/qrwSftxRcJUQppisiRV9R5BA xz0+tTmUN+OUcDGGnrr6C7e8iLZLiAvycs19tNfpqcj2J81Vwk90Fpt7dPVVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUzgh88fjyUbCw3NviERizZwfhxfMwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzNzM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFth4MA0GCSqGSIb3DQEBCwUA A4IBAQCQ57sf8bK8Q4br6QdPzj2Hlqn7JDlvzvqntNIBsEklhiR/P7cQPivm+Ow4 tt5QE3A2Q48arA0LgshwPrWUwmm1cQe6pbV2BpBM6ODDGw0uWwrRq5WuzZh01sU6 x6gFou26LRY9EOycR7p7lHjrtaWtE97pw5JlYTLk/emEcJgxBlJ9Uj7SqSEoD6zK nLGsRkVnZ8nrRatX8Ny7McY39IAB8LlwY4uFtaASSONHsMe3xDsMKBK5jI56yj6P o8Fn8HlK/K6RO2ZrwVATWYkPmCRsm5RGptETa/aP2xQSD7W6mAve/vdlZAEO4Lc7 HbCPKMOyIhy7Z6Lmd+DKk6JgcdNW -----END CERTIFICATE-----Generated at Mon Mar 2 21:09:10 2026 by rpki-client