$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3730303a3a2f34302d3430203d3e203532393734.roa File: 323830343a316239343a3730303a3a2f34302d3430203d3e203532393734.roa (raw, json) Hash identifier: kZFFT9ch9P1QmBlWVgf4Eq8odEbdFYnYSDf7vrDAzHU= Subject key identifier: F1:D7:3B:A6:02:6D:9E:51:4E:A9:C7:78:D3:6D:C3:AF:84:3C:90:35 Certificate issuer: /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45 Certificate serial: 2137C0B36C432C9C3F91A2FC89D18B2BFBF02787 Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer Subject info access: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3730303a3a2f34302d3430203d3e203532393734.roa Signing time: Mon 13 Apr 2026 13:53:54 +0000 ROA not before: Mon 13 Apr 2026 13:48:54 +0000 ROA not after: Mon 12 Apr 2027 13:53:54 +0000 asID: 52974 IP address blocks: 2804:1b94:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 15:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:37:c0:b3:6c:43:2c:9c:3f:91:a2:fc:89:d1:8b:2b:fb:f0:27:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45 Validity Not Before: Apr 13 13:48:54 2026 GMT Not After : Apr 12 13:53:54 2027 GMT Subject: CN=F1D73BA6026D9E514EA9C778D36DC3AF843C9035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:23:dc:c3:1a:4d:e3:cb:60:03:9c:e9:4c: f5:fb:87:4d:ec:f1:d9:bc:95:2d:e0:b4:2a:b2:a7: c5:3f:eb:c2:b5:9c:07:3b:a0:7c:4e:f1:95:ab:7d: 4e:82:c7:a0:75:d9:db:ac:07:d8:3d:ee:0b:be:58: df:6c:fe:02:32:60:4f:6f:13:93:47:28:bc:f4:3c: 6a:40:f6:8e:fe:69:ed:91:de:b5:42:a3:5f:14:7d: 80:6b:c9:15:0c:4e:9a:19:a9:98:0c:05:1c:fc:c5: 4d:ff:b0:04:62:a4:6b:dd:e9:62:aa:ca:f1:cc:a0: fc:1b:c7:2b:34:7c:60:ab:e4:b4:0e:84:6b:f6:52: 1c:10:ee:3c:14:f3:f7:b8:68:5a:47:c8:a0:d4:8c: f8:56:ee:93:2c:e4:4e:9f:f0:b3:87:bd:6d:56:62: de:ac:8f:9a:b5:d3:5a:6c:7b:60:59:70:45:9a:3b: d7:b6:9f:60:65:10:9d:6b:e6:7c:5f:6a:bc:b4:82: e7:e3:5d:f0:d6:90:52:62:8d:0d:ba:2d:4b:68:ff: 63:f3:e8:84:9c:69:f5:2d:74:f8:f2:60:fd:bc:76: 24:6b:42:11:d4:96:77:83:be:1a:88:2b:91:6e:1e: c5:eb:1e:e0:17:61:48:ed:ab:96:d4:38:80:4c:84: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D7:3B:A6:02:6D:9E:51:4E:A9:C7:78:D3:6D:C3:AF:84:3C:90:35 X509v3 Authority Key Identifier: keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3730303a3a2f34302d3430203d3e203532393734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1b94:700::/40 Signature Algorithm: sha256WithRSAEncryption 29:44:bd:16:90:2e:95:eb:d4:fb:63:86:9e:b4:45:01:45:4c: f0:f1:24:a6:6b:94:93:f4:39:ba:f7:d1:ec:c5:67:fd:ff:84: 94:bc:b2:d6:43:a9:6c:03:d8:aa:b2:83:d1:c2:f6:14:aa:fd: 08:24:31:20:44:31:c2:0c:04:6a:fe:15:2e:7a:4b:6f:b8:73: b8:df:c3:80:1a:32:b1:2d:d0:35:26:f5:81:85:06:ec:dc:2b: ba:74:13:05:f5:86:92:02:44:d8:59:e7:e7:6d:4e:a4:32:20: 8e:cd:25:7e:4c:d4:d2:ce:07:f5:4e:cb:98:ef:ee:d1:9f:88: f6:0b:10:ce:39:85:f5:e0:d6:cf:b5:62:8d:b1:a7:2b:3a:f4: ad:07:c3:65:ec:f1:13:0e:31:08:20:53:36:01:bb:74:cb:50: fa:00:80:6a:30:7e:39:06:9f:d5:fc:aa:9c:38:f0:37:1d:da: a0:89:9f:63:b2:be:16:99:eb:4f:fc:9a:16:fe:06:7e:82:0d: e3:e4:a6:6d:c7:ec:cc:0a:62:1f:c6:10:80:11:68:45:69:3b: c8:39:dc:cd:07:da:a5:96:05:62:d4:77:ec:49:bc:a7:ce:df: 6d:d9:38:2a:ea:4a:f1:d1:66:85:5a:ec:08:a5:81:87:2a:c3: 6c:07:d4:19 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUITfAs2xDLJw/kaL8idGLK/vwJ4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQURDRURCRDZGNzIxMjFGQjQyMTk2RjYxRTA1OUEx QjNEMkY0NTAeFw0yNjA0MTMxMzQ4NTRaFw0yNzA0MTIxMzUzNTRaMDMxMTAvBgNV BAMTKEYxRDczQkE2MDI2RDlFNTE0RUE5Qzc3OEQzNkRDM0FGODQzQzkwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FCPcwxpN48tgA5zpTPX7h03s 8dm8lS3gtCqyp8U/68K1nAc7oHxO8ZWrfU6Cx6B12dusB9g97gu+WN9s/gIyYE9v E5NHKLz0PGpA9o7+ae2R3rVCo18UfYBryRUMTpoZqZgMBRz8xU3/sARipGvd6WKq yvHMoPwbxys0fGCr5LQOhGv2UhwQ7jwU8/e4aFpHyKDUjPhW7pMs5E6f8LOHvW1W Yt6sj5q101pse2BZcEWaO9e2n2BlEJ1r5nxfary0gufjXfDWkFJijQ26LUto/2Pz 6IScafUtdPjyYP28diRrQhHUlneDvhqIK5FuHsXrHuAXYUjtq5bUOIBMhNpRAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU8dc7pgJtnlFOqcd4023Dr4Q8kDUwHwYDVR0j BBgwFoAUnfrc7b1vchIftCGW9h4Fmhs9L0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo ekwvMC85REZBRENFREJENkY3MjEyMUZCNDIxOTZGNjFFMDU5QTFCM0QyRjQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERkFEQ0VEQkQ2RjcyMTIx RkI0MjE5NkY2MUUwNTlBMUIzRDJGNDUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv MzIzODMwMzQzYTMxNjIzOTM0M2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzNTMyMzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQblAcwDQYJKoZIhvcNAQELBQADggEB AClEvRaQLpXr1Ptjhp60RQFFTPDxJKZrlJP0Obr30ezFZ/3/hJS8stZDqWwD2Kqy g9HC9hSq/QgkMSBEMcIMBGr+FS56S2+4c7jfw4AaMrEt0DUm9YGFBuzcK7p0EwX1 hpICRNhZ5+dtTqQyII7NJX5M1NLOB/VOy5jv7tGfiPYLEM45hfXg1s+1Yo2xpys6 9K0Hw2Xs8RMOMQggUzYBu3TLUPoAgGowfjkGn9X8qpw48Dcd2qCJn2OyvhaZ60/8 mhb+Bn6CDePkpm3H7MwKYh/GEIARaEVpO8g53M0H2qWWBWLUd+xJvKfO323ZOCrq SvHRZoVa7AilgYcqw2wH1Bk= -----END CERTIFICATE-----Generated at Sat Apr 18 06:25:47 2026 by rpki-client