$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa File: 323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa (raw, json) Hash identifier: tGAMklgWTZ1W4WcWaUWwvCEHQ8+WUUZT+PEKU58UhPo= Subject key identifier: D5:AA:ED:86:38:BC:FF:76:26:DA:BB:35:D9:29:65:79:F8:47:B0:CB Certificate issuer: /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Certificate serial: 5520BC82E814B9F8D8C5346A1052C868D7F37BCF Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa Signing time: Tue 14 Apr 2026 11:31:22 +0000 ROA not before: Tue 14 Apr 2026 11:26:22 +0000 ROA not after: Tue 13 Apr 2027 11:31:22 +0000 asID: 269609 IP address blocks: 2804:672c:7400::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 09:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:20:bc:82:e8:14:b9:f8:d8:c5:34:6a:10:52:c8:68:d7:f3:7b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29 Validity Not Before: Apr 14 11:26:22 2026 GMT Not After : Apr 13 11:31:22 2027 GMT Subject: CN=D5AAED8638BCFF7626DABB35D9296579F847B0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:80:95:2c:b3:9b:0b:ab:a8:7a:55:73:26: 7b:0c:9a:5a:9e:ee:2e:6b:14:10:b0:11:fe:fc:f3: ea:7c:30:11:d7:44:32:5a:c4:54:38:5b:b8:a0:b6: 10:f1:d3:05:f9:ef:97:b4:91:f1:73:f2:35:21:85: d3:58:06:bf:68:ee:b4:66:f6:14:08:d7:49:ed:b4: 48:96:19:09:16:46:d0:ce:42:a4:a3:af:1d:3e:5f: 69:81:7f:ed:40:0e:48:43:a8:91:d3:0d:fe:d0:cb: 90:99:0b:10:aa:04:06:ed:3c:ad:dd:40:fb:8d:87: f3:d4:ad:94:3f:92:d8:94:1e:29:90:db:d3:9a:80: f1:ba:52:60:77:7c:44:6d:75:26:b1:35:56:6b:6c: 94:4e:13:a9:97:f1:a2:dc:f7:10:2b:f9:4a:4d:05: 5c:da:8a:fb:cd:69:d7:11:30:08:1c:57:da:50:01: d1:2e:97:13:af:9d:f9:b3:ac:e6:52:c6:26:c4:80: f2:1b:a3:3c:04:fd:09:39:7b:0e:ac:3b:31:75:19: 82:c0:71:5d:68:2a:4c:56:eb:da:da:af:e6:84:20: 6e:e1:ec:93:60:e5:e3:ae:35:6d:14:9f:2e:3a:2a: f3:90:2b:ce:e7:99:3f:36:88:b3:7e:76:a6:98:75: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AA:ED:86:38:BC:FF:76:26:DA:BB:35:D9:29:65:79:F8:47:B0:CB X509v3 Authority Key Identifier: keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:672c:7400::/39 Signature Algorithm: sha256WithRSAEncryption 2f:7a:c4:16:35:3e:70:2b:cd:24:d2:a2:0e:1e:5e:4f:f0:f9: 55:fb:d0:c0:62:04:fe:00:dd:f0:ba:26:cd:93:75:08:0d:1d: b5:b0:09:7f:7c:d2:dc:7c:44:4b:fd:c5:ac:d3:1a:ed:15:74: 17:26:4d:0e:5a:e1:0a:cf:5f:47:46:ed:6d:c3:38:a6:71:59: d9:2b:04:46:7c:75:c9:42:b8:61:95:07:12:99:17:e3:7e:e3: d9:a7:07:b9:da:2d:ae:cc:b5:02:0c:32:66:53:ad:e5:c8:6f: ba:b4:61:f4:1c:b5:71:c8:6c:19:3b:46:2e:fb:2d:0e:f4:64: 35:49:88:5e:a5:cf:58:7e:90:e7:7e:ca:12:d7:26:00:49:33: 30:4b:43:b3:71:ed:4a:79:0a:8f:b3:ae:d9:0a:b5:aa:e7:d6: 8f:c7:6f:5e:3b:38:38:da:f8:d3:4b:31:89:ae:35:db:6c:3e: 16:61:c1:6f:cb:d4:3e:04:6f:f9:36:a4:fd:4d:72:53:53:62: 10:3d:cd:15:ef:c8:b9:ae:af:13:fe:02:fd:65:ca:a8:86:22: 4f:8f:3b:e3:9f:26:64:9f:9a:96:ae:17:21:cf:07:0b:a8:06: 64:e8:d3:c8:85:51:81:b9:39:f1:7d:1b:17:bb:36:96:f4:40: 63:0d:9a:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUVSC8gugUufjYxTRqEFLIaNfze88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNFQThDREM0MTA1Qjg3RUQ5QzJGQzhDQTQxQ0ExRDM1 QzE4N0IyOTAeFw0yNjA0MTQxMTI2MjJaFw0yNzA0MTMxMTMxMjJaMDMxMTAvBgNV BAMTKEQ1QUFFRDg2MzhCQ0ZGNzYyNkRBQkIzNUQ5Mjk2NTc5Rjg0N0IwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS94CVLLObC6uoelVzJnsMmlqe 7i5rFBCwEf788+p8MBHXRDJaxFQ4W7igthDx0wX575e0kfFz8jUhhdNYBr9o7rRm 9hQI10nttEiWGQkWRtDOQqSjrx0+X2mBf+1ADkhDqJHTDf7Qy5CZCxCqBAbtPK3d QPuNh/PUrZQ/ktiUHimQ29OagPG6UmB3fERtdSaxNVZrbJROE6mX8aLc9xAr+UpN BVzaivvNadcRMAgcV9pQAdEulxOvnfmzrOZSxibEgPIbozwE/Qk5ew6sOzF1GYLA cV1oKkxW69rar+aEIG7h7JNg5eOuNW0Uny46KvOQK87nmT82iLN+dqaYdVAfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU1arthji8/3Ym2rs12SllefhHsMswHwYDVR0j BBgwFoAUQ+qM3EEFuH7ZwvyMpByh01wYeykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE44emlCbmY2bnpVUkJkSEtWaVZRelpNUVZwVWVld1hBdXhTU0NQWmli SEgvMC80M0VBOENEQzQxMDVCODdFRDlDMkZDOENBNDFDQTFEMzVDMTg3QjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUE4Q0RDNDEwNUI4N0VE OUMyRkM4Q0E0MUNBMUQzNUMxODdCMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ROOHppQm5mNm56VVJCZEhLVmlWUXpaTVFWcFVlZXdYQXV4U1NDUFppYkhILzAv MzIzODMwMzQzYTM2MzczMjYzM2EzNzM0MzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk M2UyMDMyMzYzOTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEZyx0MA0GCSqGSIb3DQEBCwUA A4IBAQAvesQWNT5wK80k0qIOHl5P8PlV+9DAYgT+AN3wuibNk3UIDR21sAl/fNLc fERL/cWs0xrtFXQXJk0OWuEKz19HRu1twzimcVnZKwRGfHXJQrhhlQcSmRfjfuPZ pwe52i2uzLUCDDJmU63lyG+6tGH0HLVxyGwZO0Yu+y0O9GQ1SYhepc9YfpDnfsoS 1yYASTMwS0Ozce1KeQqPs67ZCrWq59aPx29eOzg42vjTSzGJrjXbbD4WYcFvy9Q+ BG/5NqT9TXJTU2IQPc0V78i5rq8T/gL9ZcqohiJPjzvjnyZkn5qWrhchzwcLqAZk 6NPIhVGBuTnxfRsXuzaW9EBjDZpB -----END CERTIFICATE-----Generated at Sat Apr 18 10:32:44 2026 by rpki-client