$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa File: 323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa (raw, json) Hash identifier: NiTMcir6q1YX5yJlvakJlUihKCwpKUoyso5+SewyuPo= Subject key identifier: C9:2D:76:70:1D:80:32:3F:95:2A:3E:9C:A9:E5:D4:2C:D4:C9:D4:5B Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 013620D7325D9FC1788E57CFB77C7EC569EA9EF3 Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa Signing time: Tue 14 Apr 2026 11:31:17 +0000 ROA not before: Tue 14 Apr 2026 11:26:17 +0000 ROA not after: Tue 13 Apr 2027 11:31:17 +0000 asID: 269609 IP address blocks: 2804:672c:7000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 09:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:36:20:d7:32:5d:9f:c1:78:8e:57:cf:b7:7c:7e:c5:69:ea:9e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Apr 14 11:26:17 2026 GMT Not After : Apr 13 11:31:17 2027 GMT Subject: CN=C92D76701D80323F952A3E9CA9E5D42CD4C9D45B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:ad:b2:b2:a0:3e:ba:99:0a:40:7f:15:3a: 2c:44:54:2a:fe:32:c6:6a:6a:35:e3:3b:4c:c3:f2: 6d:4a:df:44:77:45:9f:d0:90:87:2e:89:6b:8c:a0: 22:85:d9:20:6d:5d:28:ec:49:bb:08:28:25:74:e7: e0:32:10:a4:4f:83:90:8e:91:33:3b:0b:35:1b:b6: 15:d4:5e:8b:4c:88:9d:98:c3:52:f7:b9:33:63:11: 38:39:52:a8:c0:13:6c:b3:95:66:9b:12:6d:b1:c5: 0b:3b:b5:64:f3:a1:49:5a:36:34:ac:03:c6:81:d3: fd:9b:3d:d8:55:2d:9f:b0:55:ec:ca:06:8d:6d:2a: b3:94:6c:5e:a4:4f:73:45:f9:ac:c1:ac:20:39:df: 76:bf:6e:40:1c:72:50:3d:36:c3:67:7f:80:b2:bb: 4a:43:72:8f:9c:8b:2b:05:93:2e:d3:5f:a7:c5:88: 6b:e3:c9:86:48:0d:4c:c1:a1:58:f0:1d:c7:be:1c: 7c:71:ff:e8:c5:58:a3:56:24:5e:23:d7:98:68:be: eb:87:b3:75:ef:f2:7e:dd:2f:61:0c:00:ca:81:05: 5d:8b:d1:2f:d5:2f:fb:6b:9d:7e:af:a3:12:23:6b: aa:da:eb:8c:2a:0c:dd:87:e1:7d:cc:9e:cc:45:e8: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:76:70:1D:80:32:3F:95:2A:3E:9C:A9:E5:D4:2C:D4:C9:D4:5B X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:7000::/39 Signature Algorithm: sha256WithRSAEncryption 1a:3f:4b:b7:a7:fb:30:cb:19:96:fe:f0:5f:bd:77:21:99:90: 17:96:23:1a:5b:32:fe:19:75:b2:2b:5c:e3:9f:aa:9c:bd:1e: 33:1d:e4:1a:bb:97:79:2e:7a:ee:9d:dd:03:f4:51:24:b3:5d: 95:ea:88:5e:eb:d9:53:3d:dc:8f:b6:e7:34:ba:a6:58:a1:0d: f0:e1:95:78:77:a8:be:e2:be:ce:05:be:ed:77:75:9f:c1:36: 2f:e2:88:a0:9a:c5:d3:0d:0d:2e:a2:db:65:44:f1:f7:f0:1e: ce:94:b9:43:06:ea:c9:43:fa:57:61:bf:1e:7b:04:61:17:09: 83:7f:90:99:36:5a:85:ae:80:05:cd:33:5c:01:2d:d3:2f:7a: 35:e4:34:43:9a:ed:b4:57:e6:ce:96:d6:9f:b1:7b:d8:fb:11: 9b:0d:69:f6:95:98:a1:46:b3:37:2e:f0:0d:51:2d:03:d4:cf: e8:a9:7a:f3:44:c7:79:9b:20:8f:34:80:18:b1:bf:c4:68:b4: 65:14:df:49:fe:d6:85:40:06:d2:c9:16:18:03:0e:12:e9:d9: b2:36:99:2f:47:4d:32:65:0c:ca:3b:42:15:cd:fc:97:53:60: d3:9b:01:84:81:80:8e:53:63:64:56:73:60:80:30:0e:94:e4: 0c:58:af:27 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUATYg1zJdn8F4jlfPt3x+xWnqnvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNjA0MTQxMTI2MTdaFw0yNzA0MTMxMTMxMTdaMDMxMTAvBgNV BAMTKEM5MkQ3NjcwMUQ4MDMyM0Y5NTJBM0U5Q0E5RTVENDJDRDRDOUQ0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+62ysqA+upkKQH8VOixEVCr+ MsZqajXjO0zD8m1K30R3RZ/QkIcuiWuMoCKF2SBtXSjsSbsIKCV05+AyEKRPg5CO kTM7CzUbthXUXotMiJ2Yw1L3uTNjETg5UqjAE2yzlWabEm2xxQs7tWTzoUlaNjSs A8aB0/2bPdhVLZ+wVezKBo1tKrOUbF6kT3NF+azBrCA533a/bkAcclA9NsNnf4Cy u0pDco+ciysFky7TX6fFiGvjyYZIDUzBoVjwHce+HHxx/+jFWKNWJF4j15hovuuH s3Xv8n7dL2EMAMqBBV2L0S/VL/trnX6voxIja6ra64wqDN2H4X3MnsxF6LWPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUyS12cB2AMj+VKj6cqeXULNTJ1FswHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzNzMwMzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk M2UyMDMyMzYzOTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEZyxwMA0GCSqGSIb3DQEBCwUA A4IBAQAaP0u3p/swyxmW/vBfvXchmZAXliMaWzL+GXWyK1zjn6qcvR4zHeQau5d5 Lnrund0D9FEks12V6ohe69lTPdyPtuc0uqZYoQ3w4ZV4d6i+4r7OBb7td3WfwTYv 4oigmsXTDQ0uottlRPH38B7OlLlDBurJQ/pXYb8eewRhFwmDf5CZNlqFroAFzTNc AS3TL3o15DRDmu20V+bOltafsXvY+xGbDWn2lZihRrM3LvANUS0D1M/oqXrzRMd5 myCPNIAYsb/EaLRlFN9J/taFQAbSyRYYAw4S6dmyNpkvR00yZQzKO0IVzfyXU2DT mwGEgYCOU2NkVnNggDAOlOQMWK8n -----END CERTIFICATE-----Generated at Sat Apr 18 10:33:06 2026 by rpki-client