$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3630303a3a2f34302d3430203d3e203532393734.roa File: 323830343a316239343a3630303a3a2f34302d3430203d3e203532393734.roa (raw, json) Hash identifier: Q4A3JxBlydCpIEh+ZaOAAfpdyQ8ThFnj2QaFFHLb8Y8= Subject key identifier: 22:7B:D2:A3:7A:D0:B1:91:3A:AF:02:07:54:6A:14:BB:D5:3B:9C:95 Certificate issuer: /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45 Certificate serial: 292AE60CD4427A2AA2845BC8F62469837A5F9B29 Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer Subject info access: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3630303a3a2f34302d3430203d3e203532393734.roa Signing time: Mon 13 Apr 2026 13:53:53 +0000 ROA not before: Mon 13 Apr 2026 13:48:53 +0000 ROA not after: Mon 12 Apr 2027 13:53:53 +0000 asID: 52974 IP address blocks: 2804:1b94:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 15:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2a:e6:0c:d4:42:7a:2a:a2:84:5b:c8:f6:24:69:83:7a:5f:9b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45 Validity Not Before: Apr 13 13:48:53 2026 GMT Not After : Apr 12 13:53:53 2027 GMT Subject: CN=227BD2A37AD0B1913AAF0207546A14BBD53B9C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:d1:a8:32:f3:8a:12:5d:fd:a3:69:68:7f: 56:04:33:3d:dc:e1:31:91:5b:85:25:14:53:12:80: 8b:6c:27:19:1a:f4:10:f4:7f:65:a5:04:40:76:3d: 64:8c:d7:32:ab:4c:30:09:f5:79:e0:1c:f2:2d:01: dc:f1:29:05:20:10:26:9a:ad:e5:85:41:63:b2:65: 82:bf:ea:48:d5:32:df:dc:20:2f:15:13:22:c2:ce: 48:31:28:99:9a:5f:4c:b7:81:ec:81:c7:3c:51:d8: c5:a9:63:18:30:3a:04:36:9b:dc:ff:a0:43:4b:f2: 3d:64:22:79:f8:80:bf:ad:77:5f:52:c1:a1:b8:46: 4c:8a:e8:36:ac:1d:52:3c:fd:d4:ad:c9:77:bb:7f: bf:52:c4:38:23:aa:c3:85:1a:2a:f8:2b:11:db:4a: 81:1a:e2:34:54:18:8d:9c:54:8c:88:73:25:95:db: 29:5c:5b:40:91:25:f9:f9:32:0a:e4:c9:c4:39:02: 5b:43:81:ab:89:78:6e:0a:79:92:07:5c:9d:e0:93: cf:bc:da:0c:94:a9:54:67:5a:f8:cb:9c:76:8f:b4: fa:95:6f:af:f4:cd:67:25:16:94:cd:4d:cc:a1:27: 8e:3f:0c:75:96:2c:85:07:98:7e:19:da:ea:fe:33: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:D2:A3:7A:D0:B1:91:3A:AF:02:07:54:6A:14:BB:D5:3B:9C:95 X509v3 Authority Key Identifier: keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3630303a3a2f34302d3430203d3e203532393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1b94:600::/40 Signature Algorithm: sha256WithRSAEncryption b1:88:db:4e:a1:5c:1c:28:51:13:6f:12:2c:d5:3e:33:26:33: 6e:50:8a:51:32:56:a5:3d:fc:6a:9a:c2:1d:38:00:c9:d0:cf: c4:5e:b3:d9:35:9f:2e:42:d1:20:4a:13:0c:bc:36:aa:c3:1a: 10:48:4d:e6:19:3b:6c:79:11:22:46:c6:80:ce:72:02:b7:49: fc:2e:0c:00:2f:61:6d:76:9f:c2:aa:70:45:14:74:05:70:d9: 94:70:cf:a0:b7:0a:64:b8:a8:b8:79:6a:7b:fe:e5:dd:30:0d: 5a:cc:c1:9d:57:e3:10:bc:0b:34:e6:c3:32:3d:e9:c9:39:a2: cf:a0:f0:78:ce:bd:c1:ec:a3:2c:10:af:e6:04:52:5a:12:e1: 73:e3:7b:58:7f:95:df:bc:52:14:78:04:f4:50:69:4c:f2:16: 4d:f1:fe:ea:ed:d3:cf:d1:a1:95:19:3c:65:bf:5f:47:f5:83: a2:f5:b5:38:c5:d7:8f:56:e0:6c:e5:bb:05:45:82:bf:aa:b6: 1e:56:ba:a7:b4:17:d0:e5:05:6f:7e:f5:ce:35:11:7a:eb:a2: 20:d6:44:9c:ea:bd:ec:cf:aa:c9:f0:d5:9e:ad:f6:fe:68:3d: 8a:8c:b2:2b:36:e9:30:fd:42:79:d7:fc:58:91:ed:a8:f8:30: 8c:f0:81:9d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUKSrmDNRCeiqihFvI9iRpg3pfmykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQURDRURCRDZGNzIxMjFGQjQyMTk2RjYxRTA1OUEx QjNEMkY0NTAeFw0yNjA0MTMxMzQ4NTNaFw0yNzA0MTIxMzUzNTNaMDMxMTAvBgNV BAMTKDIyN0JEMkEzN0FEMEIxOTEzQUFGMDIwNzU0NkExNEJCRDUzQjlDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GtGoMvOKEl39o2lof1YEMz3c 4TGRW4UlFFMSgItsJxka9BD0f2WlBEB2PWSM1zKrTDAJ9XngHPItAdzxKQUgECaa reWFQWOyZYK/6kjVMt/cIC8VEyLCzkgxKJmaX0y3geyBxzxR2MWpYxgwOgQ2m9z/ oENL8j1kInn4gL+td19SwaG4RkyK6DasHVI8/dStyXe7f79SxDgjqsOFGir4KxHb SoEa4jRUGI2cVIyIcyWV2ylcW0CRJfn5MgrkycQ5AltDgauJeG4KeZIHXJ3gk8+8 2gyUqVRnWvjLnHaPtPqVb6/0zWclFpTNTcyhJ44/DHWWLIUHmH4Z2ur+M/wbAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUInvSo3rQsZE6rwIHVGoUu9U7nJUwHwYDVR0j BBgwFoAUnfrc7b1vchIftCGW9h4Fmhs9L0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo ekwvMC85REZBRENFREJENkY3MjEyMUZCNDIxOTZGNjFFMDU5QTFCM0QyRjQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERkFEQ0VEQkQ2RjcyMTIx RkI0MjE5NkY2MUUwNTlBMUIzRDJGNDUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv MzIzODMwMzQzYTMxNjIzOTM0M2EzNjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzNTMyMzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQblAYwDQYJKoZIhvcNAQELBQADggEB ALGI206hXBwoURNvEizVPjMmM25QilEyVqU9/Gqawh04AMnQz8Res9k1ny5C0SBK Ewy8NqrDGhBITeYZO2x5ESJGxoDOcgK3SfwuDAAvYW12n8KqcEUUdAVw2ZRwz6C3 CmS4qLh5anv+5d0wDVrMwZ1X4xC8CzTmwzI96ck5os+g8HjOvcHsoywQr+YEUloS 4XPje1h/ld+8UhR4BPRQaUzyFk3x/urt08/RoZUZPGW/X0f1g6L1tTjF149W4Gzl uwVFgr+qth5Wuqe0F9DlBW9+9c41EXrroiDWRJzqvezPqsnw1Z6t9v5oPYqMsis2 6TD9QnnX/FiR7aj4MIzwgZ0= -----END CERTIFICATE-----Generated at Sat Apr 18 06:25:51 2026 by rpki-client