$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33332d3333203d3e20323732353031.roa File: 323830343a383232343a383030303a3a2f33332d3333203d3e20323732353031.roa (raw, json) Hash identifier: P3LTxzeR9l2CXf9s/Wd0vsZAn5m4ayTBbfriXj1M4Xo= Subject key identifier: 89:9B:39:CA:D2:3F:B6:1C:47:25:88:15:94:17:DB:07:78:B4:D5:51 Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF Certificate serial: 678158BB846899F1BBAF350BEC754399CEE8268C Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33332d3333203d3e20323732353031.roa Signing time: Tue 24 Feb 2026 23:20:58 +0000 ROA not before: Tue 24 Feb 2026 23:15:58 +0000 ROA not after: Tue 23 Feb 2027 23:20:58 +0000 asID: 272501 IP address blocks: 2804:8224:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:81:58:bb:84:68:99:f1:bb:af:35:0b:ec:75:43:99:ce:e8:26:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF Validity Not Before: Feb 24 23:15:58 2026 GMT Not After : Feb 23 23:20:58 2027 GMT Subject: CN=899B39CAD23FB61C472588159417DB0778B4D551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:09:f1:74:ae:6d:e0:b4:66:8d:49:85:5c: 05:01:26:3d:66:55:44:50:5b:08:2a:14:5b:1e:14: e4:35:48:08:cf:0b:46:21:02:a7:e3:85:b3:f9:ba: 7e:97:0e:ef:f2:a0:98:81:3c:cd:82:5c:70:fa:34: 44:cc:13:e5:e8:63:4b:76:f9:b4:f6:d1:85:fc:68: 7c:39:6d:c7:36:8d:1c:45:a4:88:49:44:fb:3f:86: db:79:0b:f5:37:34:1a:91:53:63:8b:51:97:76:a2: bb:75:fa:21:e3:e5:37:6b:e0:90:94:17:ed:84:1b: e5:77:30:30:c5:49:65:ba:e0:ba:75:99:2b:a9:8a: 0b:b9:f3:4c:30:70:3d:3d:41:62:92:a1:4c:d5:8d: 4c:be:fb:e7:b3:fe:11:7f:23:96:b3:76:87:34:d9: da:f7:fb:fd:4b:c4:d1:6c:db:68:ab:4a:16:95:ca: 25:fe:31:4c:5e:e0:01:40:8b:2a:82:d4:d6:4f:fd: 30:57:b6:13:f4:c6:22:b1:71:97:f5:00:dd:81:d0: 9f:e2:e6:a9:90:75:ab:07:64:a6:df:3d:32:30:0e: 46:cf:a4:c7:c7:24:ff:c7:9c:18:d8:a4:94:20:0a: 93:f6:d6:c4:f9:c3:30:2e:9b:5c:a9:cf:ed:44:8e: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:39:CA:D2:3F:B6:1C:47:25:88:15:94:17:DB:07:78:B4:D5:51 X509v3 Authority Key Identifier: keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33332d3333203d3e20323732353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8224:8000::/33 Signature Algorithm: sha256WithRSAEncryption 9a:f9:43:f0:7e:35:ec:84:ea:94:6a:c4:d3:c0:55:e4:3c:f7: f8:55:85:a5:d5:8d:1d:87:a2:ac:84:a4:32:42:f3:31:62:db: f8:36:c6:4f:f0:3c:a6:be:2a:61:f7:e6:23:1b:76:8e:ff:39: bf:af:ef:13:09:2a:72:3e:3c:b3:e3:8f:b3:af:88:ff:1f:57: 11:e8:5b:7b:42:3c:9f:26:d2:72:f7:c2:f4:92:05:26:df:d0: ca:8c:02:d5:f2:5d:59:87:1e:b6:6c:22:fb:6b:4e:33:d3:0b: 26:3a:af:04:bc:b0:0b:06:b0:7a:cd:a8:54:57:15:78:17:b3: c8:ed:e1:d5:e0:bf:da:a7:b9:9d:c9:f0:8f:78:cb:89:e7:51: 27:e1:03:f2:42:9e:69:af:a3:e8:de:e5:32:ef:a4:70:a3:b7: f5:93:51:df:64:08:cd:73:c3:9b:89:cd:04:c1:f9:bd:d6:88: 6a:ae:21:82:97:b1:fb:ba:e2:99:c4:3f:ef:d1:8b:a7:ef:82: ea:e8:ea:70:8a:db:f3:94:ce:57:d3:0b:5d:a9:58:fe:19:ac: d1:26:0d:36:cd:f7:5f:0a:ec:ae:d0:bd:eb:4e:6b:18:d4:53: fd:d1:e5:3d:17:32:37:ef:c3:68:3b:ef:6f:71:7c:0c:f9:9a: e5:cd:55:a2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZ4FYu4RomfG7rzUL7HVDmc7oJowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5Q0JCRjE4RkM3QTc5REM4MzI4QkFERTE2QUM3MTJD OTlDRkZCRjAeFw0yNjAyMjQyMzE1NThaFw0yNzAyMjMyMzIwNThaMDMxMTAvBgNV BAMTKDg5OUIzOUNBRDIzRkI2MUM0NzI1ODgxNTk0MTdEQjA3NzhCNEQ1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGngnxdK5t4LRmjUmFXAUBJj1m VURQWwgqFFseFOQ1SAjPC0YhAqfjhbP5un6XDu/yoJiBPM2CXHD6NETME+XoY0t2 +bT20YX8aHw5bcc2jRxFpIhJRPs/htt5C/U3NBqRU2OLUZd2ort1+iHj5Tdr4JCU F+2EG+V3MDDFSWW64Lp1mSupigu580wwcD09QWKSoUzVjUy+++ez/hF/I5azdoc0 2dr3+/1LxNFs22irShaVyiX+MUxe4AFAiyqC1NZP/TBXthP0xiKxcZf1AN2B0J/i 5qmQdasHZKbfPTIwDkbPpMfHJP/HnBjYpJQgCpP21sT5wzAum1ypz+1EjsjXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUiZs5ytI/thxHJYgVlBfbB3i01VEwHwYDVR0j BBgwFoAU5Zy78Y/Hp53IMout4WrHEsmc/78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO SFMvMC9FNTlDQkJGMThGQzdBNzlEQzgzMjhCQURFMTZBQzcxMkM5OUNGRkJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1OUNCQkYxOEZDN0E3OURD ODMyOEJBREUxNkFDNzEyQzk5Q0ZGQkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hlaDVkU1dONjF6VGtwWGdMdzhuTk5BaDUzZ1NEN2I5SFlBUmlWeno0TkhTLzAv MzIzODMwMzQzYTM4MzIzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMjM1MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgiSAMA0GCSqGSIb3DQEBCwUA A4IBAQCa+UPwfjXshOqUasTTwFXkPPf4VYWl1Y0dh6KshKQyQvMxYtv4NsZP8Dym viph9+YjG3aO/zm/r+8TCSpyPjyz44+zr4j/H1cR6Ft7QjyfJtJy98L0kgUm39DK jALV8l1Zhx62bCL7a04z0wsmOq8EvLALBrB6zahUVxV4F7PI7eHV4L/ap7mdyfCP eMuJ51En4QPyQp5pr6Po3uUy76Rwo7f1k1HfZAjNc8Obic0Ewfm91ohqriGCl7H7 uuKZxD/v0Yun74Lq6OpwitvzlM5X0wtdqVj+GazRJg02zfdfCuyu0L3rTmsY1FP9 0eU9FzI378NoO+9vcXwM+ZrlzVWi -----END CERTIFICATE-----Generated at Mon Mar 2 23:43:51 2026 by rpki-client