$ rpki-client -vvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa File: 323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa (raw, json) Hash identifier: jsbdrkUIjnV9BjmAurKSVUYnCq+mndjZHWR9jwwkQeM= Subject key identifier: BE:66:AA:4C:05:A3:D9:00:99:2B:DD:10:8D:7E:30:0F:84:2C:F1:C9 Certificate issuer: /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4 Certificate serial: 63CE67542B032E76498906AA7122688DC850EB08 Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer Subject info access: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa Signing time: Tue 24 Mar 2026 00:04:39 +0000 ROA not before: Mon 23 Mar 2026 23:59:39 +0000 ROA not after: Tue 23 Mar 2027 00:04:39 +0000 asID: 272436 IP address blocks: 2804:8128:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 07:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ce:67:54:2b:03:2e:76:49:89:06:aa:71:22:68:8d:c8:50:eb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4 Validity Not Before: Mar 23 23:59:39 2026 GMT Not After : Mar 23 00:04:39 2027 GMT Subject: CN=BE66AA4C05A3D900992BDD108D7E300F842CF1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:0e:b7:5b:63:d1:7d:ba:60:3a:40:9f:52: fd:4f:20:fc:b4:86:2c:26:5b:08:c1:b1:d9:85:50: 90:94:e0:ee:74:c8:70:84:47:91:3d:90:7d:f9:9e: b6:0d:11:10:62:b6:14:79:bf:5e:cb:fc:8e:8c:6f: a6:fa:8b:09:db:28:2b:d3:17:c3:08:3a:e1:3a:6a: ba:0f:75:6b:26:c9:11:f3:96:10:cd:f7:dd:e9:ef: 9c:22:19:06:43:fc:c2:69:ef:63:a3:5a:a9:f8:1c: 88:2b:c5:62:3a:32:ab:36:d0:c0:af:3a:a2:c0:06: ef:d2:96:db:09:d7:8f:e1:e8:25:92:c3:e3:e5:8e: bc:99:12:31:9c:1d:81:0e:a8:b9:6b:46:dd:a2:cf: f8:3e:9d:e2:3e:8a:73:3d:b2:2d:6d:73:c7:f1:a9: 7b:9a:ca:8a:ab:20:d9:0a:84:ca:86:9d:86:9b:98: e8:08:3c:5f:ea:be:f0:dc:72:75:05:02:7f:62:61: 29:7a:6c:da:4f:4a:cb:c0:40:7e:1a:1c:47:ef:6c: 2d:ef:d3:c2:8c:dd:72:6d:78:bc:17:41:9e:63:2d: da:33:c1:12:9a:09:1f:a6:2d:b1:63:f4:8c:e0:15: 10:14:18:59:5f:a5:da:ca:dd:55:d4:5c:6f:ae:19: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:AA:4C:05:A3:D9:00:99:2B:DD:10:8D:7E:30:0F:84:2C:F1:C9 X509v3 Authority Key Identifier: keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/323830343a383132383a383030303a3a2f33332d3333203d3e20323732343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8128:8000::/33 Signature Algorithm: sha256WithRSAEncryption 75:aa:2d:9e:ba:80:15:71:c2:8b:71:e9:a2:fa:f4:3f:5d:77: 5d:13:d8:62:78:b9:8c:e8:56:49:5c:0e:41:3a:77:ad:82:0e: d0:92:00:74:52:18:05:01:ff:44:a5:8b:4d:60:ca:f5:d6:93: c0:73:67:4f:0e:13:65:91:d2:97:4a:65:0e:f1:66:37:d2:19: 5a:61:ca:17:9d:5c:aa:5b:41:0f:64:37:14:58:88:1b:08:14: 23:44:8b:c3:50:d2:c4:96:9c:03:d0:85:66:a9:3e:59:76:c2: cc:ea:41:4e:ff:6f:12:e5:f4:9d:ef:df:a0:ea:e9:10:02:2c: 0a:36:2d:97:3d:c7:03:e4:cb:cd:4f:e4:8e:2c:f7:4b:b1:44: 7c:2d:61:7c:a6:85:7f:5d:67:98:8d:29:9e:5f:2a:99:11:70: 2a:6c:13:e4:4c:04:e4:2a:53:f8:3c:e2:3c:5e:3e:c1:fe:21: 9e:d7:2d:d2:64:32:52:cf:7e:a0:c1:a2:ab:1e:ec:cf:01:41: cb:92:3d:0c:89:bc:5f:8d:47:f4:bf:67:f8:00:47:1a:ce:55: c3:3e:2f:91:e4:bd:34:a2:92:72:4b:76:6c:34:5f:13:d5:4a: 51:c3:10:97:05:f2:cb:34:3f:28:17:2b:d2:67:cf:8d:d0:19: c4:b1:6b:31 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUY85nVCsDLnZJiQaqcSJojchQ6wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVCNjRDNEJEOEU4MzBDRTE0N0Y2RUJDNDcxOTlCRUFF N0U2M0JCNDAeFw0yNjAzMjMyMzU5MzlaFw0yNzAzMjMwMDA0MzlaMDMxMTAvBgNV BAMTKEJFNjZBQTRDMDVBM0Q5MDA5OTJCREQxMDhEN0UzMDBGODQyQ0YxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWQ63W2PRfbpgOkCfUv1PIPy0 hiwmWwjBsdmFUJCU4O50yHCER5E9kH35nrYNERBithR5v17L/I6Mb6b6iwnbKCvT F8MIOuE6aroPdWsmyRHzlhDN993p75wiGQZD/MJp72OjWqn4HIgrxWI6Mqs20MCv OqLABu/SltsJ14/h6CWSw+PljryZEjGcHYEOqLlrRt2iz/g+neI+inM9si1tc8fx qXuayoqrINkKhMqGnYabmOgIPF/qvvDccnUFAn9iYSl6bNpPSsvAQH4aHEfvbC3v 08KM3XJteLwXQZ5jLdozwRKaCR+mLbFj9IzgFRAUGFlfpdrK3VXUXG+uGct/AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUvmaqTAWj2QCZK90QjX4wD4Qs8ckwHwYDVR0j BBgwFoAUJbZMS9joMM4Uf268Rxmb6ufmO7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjJDSGVoR1V4cGRNaGhQR2czdXdDNngxNk1kZ3I0QjlpaU44SDZkYWJ4 bksvMC8yNUI2NEM0QkQ4RTgzMENFMTQ3RjZFQkM0NzE5OUJFQUU3RTYzQkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QjY0QzRCRDhFODMwQ0Ux NDdGNkVCQzQ3MTk5QkVBRTdFNjNCQjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzIyQ0hlaEdVeHBkTWhoUEdnM3V3QzZ4MTZNZGdyNEI5aWlOOEg2ZGFieG5LLzAv MzIzODMwMzQzYTM4MzEzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMjM0MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgSiAMA0GCSqGSIb3DQEBCwUA A4IBAQB1qi2euoAVccKLcemi+vQ/XXddE9hieLmM6FZJXA5BOnetgg7QkgB0UhgF Af9EpYtNYMr11pPAc2dPDhNlkdKXSmUO8WY30hlaYcoXnVyqW0EPZDcUWIgbCBQj RIvDUNLElpwD0IVmqT5ZdsLM6kFO/28S5fSd79+g6ukQAiwKNi2XPccD5MvNT+SO LPdLsUR8LWF8poV/XWeYjSmeXyqZEXAqbBPkTATkKlP4POI8Xj7B/iGe1y3SZDJS z36gwaKrHuzPAUHLkj0MibxfjUf0v2f4AEcazlXDPi+R5L00opJyS3ZsNF8T1UpR wxCXBfLLND8oFyvSZ8+N0BnEsWsx -----END CERTIFICATE-----Generated at Thu Mar 26 19:57:44 2026 by rpki-client