$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33342d3334203d3e20323732353031.roa File: 323830343a383232343a383030303a3a2f33342d3334203d3e20323732353031.roa (raw, json) Hash identifier: I8XuZ1kWj6D49/eMVA38IuDF8BrFsxLA1nMIo+FFBzw= Subject key identifier: A9:67:94:5A:79:80:17:77:90:DE:BA:E6:01:E7:72:28:00:2E:DA:14 Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF Certificate serial: 2FD103A2F8F452415FC595E78B002A247E5D5828 Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33342d3334203d3e20323732353031.roa Signing time: Tue 24 Feb 2026 23:20:58 +0000 ROA not before: Tue 24 Feb 2026 23:15:58 +0000 ROA not after: Tue 23 Feb 2027 23:20:58 +0000 asID: 272501 IP address blocks: 2804:8224:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d1:03:a2:f8:f4:52:41:5f:c5:95:e7:8b:00:2a:24:7e:5d:58:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF Validity Not Before: Feb 24 23:15:58 2026 GMT Not After : Feb 23 23:20:58 2027 GMT Subject: CN=A967945A7980177790DEBAE601E77228002EDA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:b1:eb:c0:b0:69:fe:7a:51:cf:8d:10:77: 2f:99:53:0b:03:bd:d3:80:6f:39:75:5c:29:2a:fe: 28:80:2e:67:77:6b:be:b6:73:4b:03:f4:11:fc:ab: 5b:dd:7e:5c:ae:30:b3:c0:71:e8:5b:c2:97:e9:43: dc:0d:8e:18:8a:90:e1:92:d7:92:70:0d:5a:e1:5a: e8:c6:e2:5e:65:63:c0:28:13:7d:a7:db:00:4a:66: e9:87:9e:7f:8e:78:b6:8b:f6:cf:f3:a6:97:47:db: d5:a0:dc:37:01:09:45:44:da:0d:c4:08:f1:99:34: b2:34:e0:6b:06:c5:fb:1e:f5:17:24:87:a6:95:f1: 98:a2:a8:2b:70:9e:ea:69:71:d6:90:85:f9:e0:3d: 3c:37:04:e7:02:7a:a2:ff:94:cf:b1:1d:de:10:94: f5:7e:68:5f:f5:25:57:d0:3c:c2:fa:56:d0:99:aa: fc:99:06:27:c9:42:82:41:a0:6d:5e:c0:f5:00:39: 45:0e:a7:1c:9c:84:53:ed:91:15:ef:ea:68:31:42: c5:48:a4:c8:40:34:6d:3b:21:a8:19:37:4e:e2:51: 18:f1:c2:34:bf:cb:7c:11:f4:0c:18:e6:03:52:d1: ae:03:f9:b4:a5:38:45:33:48:02:79:b5:f9:e3:3d: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:67:94:5A:79:80:17:77:90:DE:BA:E6:01:E7:72:28:00:2E:DA:14 X509v3 Authority Key Identifier: keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a383030303a3a2f33342d3334203d3e20323732353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8224:8000::/34 Signature Algorithm: sha256WithRSAEncryption 8f:3c:0e:b3:7d:96:0b:7d:3b:31:86:2b:a1:b4:5b:d7:e5:a6: e5:52:df:61:92:ad:4f:25:50:06:cb:4c:ed:19:5c:a6:c9:0e: bb:75:ad:3e:8a:f5:9a:76:53:7a:0f:da:74:ea:6f:01:52:d7: 1e:7f:56:d3:19:76:c5:2d:8a:52:39:40:39:b2:9c:12:c5:e8: aa:4e:16:3f:61:8b:6e:94:11:53:b2:64:47:5d:fe:58:cb:4d: 91:50:5c:28:6c:82:8d:e6:ce:98:97:56:34:6c:9c:ce:15:2a: cd:9e:be:b8:70:37:b1:f2:42:ad:89:50:e6:ff:0f:ec:ac:f3: ff:3d:b0:d6:0c:16:e0:ff:4a:1d:c0:5e:f6:de:19:4d:96:62: 74:0a:8a:c8:1e:c5:43:1e:9a:4f:d6:bc:fa:ff:22:7f:cd:eb: e3:2b:3c:7c:22:2c:ac:d2:8a:ee:43:09:88:64:72:5c:7a:8e: 64:16:0c:60:23:0d:61:7e:5e:0a:02:5b:f4:07:ed:d4:f9:4d: af:dd:eb:b6:e8:f5:89:87:c5:af:39:4d:25:d8:b3:fd:84:10: ad:3b:16:33:78:4b:c6:45:8d:0a:9a:a2:55:ca:84:4c:da:e6: 03:e9:7b:87:aa:66:8a:8e:13:46:ce:49:cb:53:a9:2d:5e:6b: ec:0d:79:44 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUL9EDovj0UkFfxZXniwAqJH5dWCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5Q0JCRjE4RkM3QTc5REM4MzI4QkFERTE2QUM3MTJD OTlDRkZCRjAeFw0yNjAyMjQyMzE1NThaFw0yNzAyMjMyMzIwNThaMDMxMTAvBgNV BAMTKEE5Njc5NDVBNzk4MDE3Nzc5MERFQkFFNjAxRTc3MjI4MDAyRURBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStrHrwLBp/npRz40Qdy+ZUwsD vdOAbzl1XCkq/iiALmd3a762c0sD9BH8q1vdflyuMLPAcehbwpfpQ9wNjhiKkOGS 15JwDVrhWujG4l5lY8AoE32n2wBKZumHnn+OeLaL9s/zppdH29Wg3DcBCUVE2g3E CPGZNLI04GsGxfse9Rckh6aV8ZiiqCtwnuppcdaQhfngPTw3BOcCeqL/lM+xHd4Q lPV+aF/1JVfQPML6VtCZqvyZBifJQoJBoG1ewPUAOUUOpxychFPtkRXv6mgxQsVI pMhANG07IagZN07iURjxwjS/y3wR9AwY5gNS0a4D+bSlOEUzSAJ5tfnjPZbvAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUqWeUWnmAF3eQ3rrmAedyKAAu2hQwHwYDVR0j BBgwFoAU5Zy78Y/Hp53IMout4WrHEsmc/78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO SFMvMC9FNTlDQkJGMThGQzdBNzlEQzgzMjhCQURFMTZBQzcxMkM5OUNGRkJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1OUNCQkYxOEZDN0E3OURD ODMyOEJBREUxNkFDNzEyQzk5Q0ZGQkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hlaDVkU1dONjF6VGtwWGdMdzhuTk5BaDUzZ1NEN2I5SFlBUmlWeno0TkhTLzAv MzIzODMwMzQzYTM4MzIzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjM1MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgiSAMA0GCSqGSIb3DQEBCwUA A4IBAQCPPA6zfZYLfTsxhiuhtFvX5ablUt9hkq1PJVAGy0ztGVymyQ67da0+ivWa dlN6D9p06m8BUtcef1bTGXbFLYpSOUA5spwSxeiqThY/YYtulBFTsmRHXf5Yy02R UFwobIKN5s6Yl1Y0bJzOFSrNnr64cDex8kKtiVDm/w/srPP/PbDWDBbg/0odwF72 3hlNlmJ0CorIHsVDHppP1rz6/yJ/zevjKzx8Iiys0oruQwmIZHJceo5kFgxgIw1h fl4KAlv0B+3U+U2v3eu26PWJh8WvOU0l2LP9hBCtOxYzeEvGRY0KmqJVyoRM2uYD 6XuHqmaKjhNGzknLU6ktXmvsDXlE -----END CERTIFICATE-----Generated at Mon Mar 2 21:59:43 2026 by rpki-client