$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa File: 323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa (raw, json) Hash identifier: aGdNwMsK85Lh3w2fcuFNbvbjB7FO2AO5MrO94YHCKFA= Subject key identifier: 76:F2:E1:53:EC:2F:B9:37:CA:9C:5C:30:AE:06:E7:94:AF:A1:B1:78 Certificate issuer: /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Certificate serial: 62837C1AEAAAD81A2444F2915DCDE6A8C5D71916 Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa Signing time: Sun 08 Mar 2026 22:48:33 +0000 ROA not before: Sun 08 Mar 2026 22:43:33 +0000 ROA not after: Sun 07 Mar 2027 22:48:33 +0000 asID: 262393 IP address blocks: 2804:8c8:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 09:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:83:7c:1a:ea:aa:d8:1a:24:44:f2:91:5d:cd:e6:a8:c5:d7:19:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5 Validity Not Before: Mar 8 22:43:33 2026 GMT Not After : Mar 7 22:48:33 2027 GMT Subject: CN=76F2E153EC2FB937CA9C5C30AE06E794AFA1B178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:a1:eb:ea:b7:7c:7d:e8:a7:64:20:8e:a1: 0d:95:b2:4a:d2:72:bd:c5:9f:4a:cd:b2:44:03:27: 98:9a:1f:21:d7:99:3a:f5:17:fb:68:c2:46:ca:27: f9:9b:ba:f4:69:be:75:2a:59:4f:2c:96:b5:2f:a1: ba:5e:67:84:0c:8c:17:e4:70:ed:96:6c:ba:fe:9c: d2:0a:74:40:c2:0c:36:04:38:73:cd:a2:dd:25:d5: 3b:3b:dd:4b:10:20:70:24:f9:6c:92:89:7e:28:e4: 2f:e1:90:f3:30:31:9f:16:7f:96:1a:c8:3b:12:cd: 7c:a9:7e:58:1c:72:55:b8:3e:55:ec:3b:58:72:c8: b4:13:6d:71:b2:bf:82:b3:a6:eb:36:b4:0b:ed:8d: b3:77:ae:61:c2:54:a1:ae:99:9b:1b:76:ee:b0:7f: 5f:13:dc:eb:ee:07:d4:be:69:f8:55:1a:82:a7:48: 73:21:67:db:d5:61:94:f7:03:83:ae:3a:6a:85:f5: 81:e1:0e:bd:02:38:f7:61:7b:fc:d1:9a:cc:d2:6f: cc:df:7c:a4:5c:0a:f4:b9:95:11:ce:43:06:ae:c9: fb:e1:aa:07:f9:d6:02:24:bc:63:2e:c3:c5:85:14: d5:9a:1f:ea:57:ba:9a:c3:9c:d2:f5:fd:43:bb:eb: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F2:E1:53:EC:2F:B9:37:CA:9C:5C:30:AE:06:E7:94:AF:A1:B1:78 X509v3 Authority Key Identifier: keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8c8:2000::/35 Signature Algorithm: sha256WithRSAEncryption b8:6d:60:a3:80:8c:12:16:18:da:55:7f:31:71:af:0d:32:1f: 44:8a:a7:35:d8:27:d6:8a:a7:40:a4:a9:27:1d:46:a3:2d:b9: 99:d2:80:f9:15:53:04:f6:ef:db:58:99:ba:95:31:52:ff:20: 93:98:37:1a:cf:12:d5:1e:74:72:6c:16:6d:3d:37:55:65:13: 05:4d:fe:8a:52:9c:53:e6:65:c3:29:d4:97:5b:58:b7:9d:42: fc:d7:c8:0a:72:80:9a:01:79:c4:9d:0b:17:35:02:57:e4:15: 3b:71:67:95:da:0e:64:2a:99:36:07:a7:77:4b:e3:19:07:0e: 8b:8e:14:bc:61:a7:e2:17:a9:96:c6:32:c0:49:7c:bd:3b:29: 8c:6a:22:ce:5b:d0:0f:6e:34:6d:68:c5:3a:a8:4b:08:64:78: 32:4e:46:01:b3:49:11:42:65:6c:44:d3:67:cf:de:c4:70:ce: f5:fe:b6:05:68:20:cc:70:13:d1:31:f5:64:40:38:0c:61:8e: 16:77:e3:64:6a:b3:01:57:30:c6:6f:32:46:f7:8d:d8:4e:ca: 26:94:4f:a8:73:1c:8c:78:52:3e:fe:f9:a6:b4:eb:3e:22:c5: 91:71:0d:e8:f7:88:bc:2d:9e:f2:83:ad:aa:7f:bb:43:3f:8c: 30:ae:2e:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYoN8Guqq2BokRPKRXc3mqMXXGRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF NEM0QjFFNTAeFw0yNjAzMDgyMjQzMzNaFw0yNzAzMDcyMjQ4MzNaMDMxMTAvBgNV BAMTKDc2RjJFMTUzRUMyRkI5MzdDQTlDNUMzMEFFMDZFNzk0QUZBMUIxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhaHr6rd8feinZCCOoQ2VskrS cr3Fn0rNskQDJ5iaHyHXmTr1F/towkbKJ/mbuvRpvnUqWU8slrUvobpeZ4QMjBfk cO2WbLr+nNIKdEDCDDYEOHPNot0l1Ts73UsQIHAk+WySiX4o5C/hkPMwMZ8Wf5Ya yDsSzXypflgcclW4PlXsO1hyyLQTbXGyv4Kzpus2tAvtjbN3rmHCVKGumZsbdu6w f18T3OvuB9S+afhVGoKnSHMhZ9vVYZT3A4OuOmqF9YHhDr0COPdhe/zRmszSb8zf fKRcCvS5lRHOQwauyfvhqgf51gIkvGMuw8WFFNWaH+pXuprDnNL1/UO76zFDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdvLhU+wvuTfKnFwwrgbnlK+hsXgwHwYDVR0j BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5 N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv MzIzODMwMzQzYTM4NjMzODNhMzIzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl MjAzMjM2MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAjIIDANBgkqhkiG9w0BAQsFAAOC AQEAuG1go4CMEhYY2lV/MXGvDTIfRIqnNdgn1oqnQKSpJx1Goy25mdKA+RVTBPbv 21iZupUxUv8gk5g3Gs8S1R50cmwWbT03VWUTBU3+ilKcU+ZlwynUl1tYt51C/NfI CnKAmgF5xJ0LFzUCV+QVO3FnldoOZCqZNgend0vjGQcOi44UvGGn4heplsYywEl8 vTspjGoizlvQD240bWjFOqhLCGR4Mk5GAbNJEUJlbETTZ8/exHDO9f62BWggzHAT 0TH1ZEA4DGGOFnfjZGqzAVcwxm8yRveN2E7KJpRPqHMcjHhSPv75prTrPiLFkXEN 6PeIvC2e8oOtqn+7Qz+MMK4usw== -----END CERTIFICATE-----Generated at Wed Mar 25 21:31:13 2026 by rpki-client