$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a653030303a3a2f33362d3438203d3e20323730363834.roa File: 323830343a366663383a653030303a3a2f33362d3438203d3e20323730363834.roa (raw, json) Hash identifier: Ta5SrtnPC+KJ03/Rouoa8aOTe4CGeOdnl+UN5xi9YK4= Subject key identifier: 04:DB:C1:B6:38:7A:29:37:78:41:76:C2:71:7D:EC:B0:73:CF:7F:46 Certificate issuer: /CN=597A0EE976AA889BD891E5B5A82635E17925FB5A Certificate serial: 4F98E5E9397A2CD4485D9B5B070F6B0080ADF3F7 Authority key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a653030303a3a2f33362d3438203d3e20323730363834.roa Signing time: Mon 23 Mar 2026 13:54:16 +0000 ROA not before: Mon 23 Mar 2026 13:49:16 +0000 ROA not after: Mon 22 Mar 2027 13:54:16 +0000 asID: 270684 IP address blocks: 2804:6fc8:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 05:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:98:e5:e9:39:7a:2c:d4:48:5d:9b:5b:07:0f:6b:00:80:ad:f3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A Validity Not Before: Mar 23 13:49:16 2026 GMT Not After : Mar 22 13:54:16 2027 GMT Subject: CN=04DBC1B6387A2937784176C2717DECB073CF7F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c3:0c:f9:d7:bf:32:3f:9a:2a:97:07:e6:a5: a7:fd:71:2a:63:b1:74:67:56:15:74:46:66:6c:44: 64:20:34:21:89:d6:6f:e0:1c:50:7a:5d:f9:bc:50: 17:ca:2e:a4:26:eb:84:29:73:b7:e5:af:7d:c0:cc: 3e:0d:9e:2d:37:07:2f:26:0b:4d:7b:59:ce:14:ef: be:7f:ea:22:9d:f2:2f:1f:0c:36:a5:87:fc:1e:94: 0a:aa:b8:83:c8:73:54:76:c0:9e:32:8b:af:03:fe: c4:e1:1e:76:65:7e:be:85:1a:5e:a8:b4:cd:7e:68: 2e:de:05:60:7d:18:97:03:31:f3:68:30:1d:ea:c8: 64:ea:5c:84:35:e0:0b:dc:b5:b4:4d:04:4b:07:a0: 53:42:24:d2:7b:ff:99:c4:af:bd:e6:7e:97:c1:fa: f1:09:6d:3a:db:57:59:c7:77:7f:1e:23:45:6a:0f: 78:e8:41:e2:8d:d3:b2:fe:af:fe:e5:80:ab:a3:5a: 90:cf:84:98:57:0f:a2:c1:68:2c:58:17:49:b6:02: 0b:12:e1:9a:a2:f8:a4:5f:d3:f0:07:c6:30:5e:1b: 66:25:04:e3:8c:d8:c7:43:6a:7f:e0:5a:ea:f6:0a: 5f:9f:e5:20:c2:26:aa:c6:bf:2e:1a:7b:e3:95:84: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:C1:B6:38:7A:29:37:78:41:76:C2:71:7D:EC:B0:73:CF:7F:46 X509v3 Authority Key Identifier: keyid:59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a653030303a3a2f33362d3438203d3e20323730363834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6fc8:e000::/36 Signature Algorithm: sha256WithRSAEncryption 65:39:10:62:29:6d:44:8c:4b:d1:f3:df:57:90:fe:2a:2f:9d: 7b:1f:67:f3:1d:55:44:fe:d4:7f:06:21:7f:86:5c:ce:b3:80: bd:db:99:68:70:c1:e0:12:69:4d:13:52:df:1b:f8:33:d7:25: 99:04:1d:37:26:cb:f2:2e:78:25:9d:86:d2:79:8d:32:a0:96: 8c:87:33:13:35:03:ed:93:d7:5b:13:0c:98:a9:de:a5:3b:f7: 02:15:e1:f9:47:72:61:29:f2:4a:9b:b4:66:ed:e7:37:78:40: f0:3c:fd:f5:fa:10:13:8e:4f:be:04:23:50:db:62:6d:dd:03: 6c:23:d6:77:a1:82:96:61:8d:2a:b2:ba:9e:75:1e:c0:ad:38: 21:7a:8d:7c:4a:d0:38:ec:0f:02:f0:f0:e5:5b:ff:28:fb:07: 61:78:80:6e:1b:5b:8a:0d:dc:03:f5:24:4f:79:cb:09:20:ed: 75:46:2f:98:ed:2f:95:b6:1b:f7:b7:fe:a4:ad:e1:5e:a0:a8: 90:02:e3:61:e6:7b:b3:44:ad:17:0b:aa:ce:f8:00:76:46:60: 09:96:6a:48:63:e9:ae:0a:99:7a:cd:1d:f0:47:f8:a0:3b:e0: 46:61:87:89:d2:40:e7:f7:3c:23:98:f4:b2:f9:60:2b:dd:e1: 2c:fb:96:a5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUT5jl6Tl6LNRIXZtbBw9rAICt8/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3QTBFRTk3NkFBODg5QkQ4OTFFNUI1QTgyNjM1RTE3 OTI1RkI1QTAeFw0yNjAzMjMxMzQ5MTZaFw0yNzAzMjIxMzU0MTZaMDMxMTAvBgNV BAMTKDA0REJDMUI2Mzg3QTI5Mzc3ODQxNzZDMjcxN0RFQ0IwNzNDRjdGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIwwz5178yP5oqlwfmpaf9cSpj sXRnVhV0RmZsRGQgNCGJ1m/gHFB6Xfm8UBfKLqQm64Qpc7flr33AzD4Nni03By8m C017Wc4U775/6iKd8i8fDDalh/welAqquIPIc1R2wJ4yi68D/sThHnZlfr6FGl6o tM1+aC7eBWB9GJcDMfNoMB3qyGTqXIQ14AvctbRNBEsHoFNCJNJ7/5nEr73mfpfB +vEJbTrbV1nHd38eI0VqD3joQeKN07L+r/7lgKujWpDPhJhXD6LBaCxYF0m2AgsS 4Zqi+KRf0/AHxjBeG2YlBOOM2MdDan/gWur2Cl+f5SDCJqrGvy4ae+OVhCpJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUBNvBtjh6KTd4QXbCcX3ssHPPf0YwHwYDVR0j BBgwFoAUWXoO6XaqiJvYkeW1qCY14Xkl+1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1Nmd0pYMUtZeTEyVmdKWUVQTlI4ZFJZSmVaZzNya2I3VnRLNkxXWFpp UVMvMC81OTdBMEVFOTc2QUE4ODlCRDg5MUU1QjVBODI2MzVFMTc5MjVGQjVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5N0EwRUU5NzZBQTg4OUJE ODkxRTVCNUE4MjYzNUUxNzkyNUZCNUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNTZndKWDFLWXkxMlZnSllFUE5SOGRSWUplWmczcmtiN1Z0SzZMV1haaVFTLzAv MzIzODMwMzQzYTM2NjY2MzM4M2E2NTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNk M2UyMDMyMzczMDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEb8jgMA0GCSqGSIb3DQEBCwUA A4IBAQBlORBiKW1EjEvR899XkP4qL517H2fzHVVE/tR/BiF/hlzOs4C925locMHg EmlNE1LfG/gz1yWZBB03JsvyLnglnYbSeY0yoJaMhzMTNQPtk9dbEwyYqd6lO/cC FeH5R3JhKfJKm7Rm7ec3eEDwPP31+hATjk++BCNQ22Jt3QNsI9Z3oYKWYY0qsrqe dR7ArTgheo18StA47A8C8PDlW/8o+wdheIBuG1uKDdwD9SRPecsJIO11Ri+Y7S+V thv3t/6kreFeoKiQAuNh5nuzRK0XC6rO+AB2RmAJlmpIY+muCpl6zR3wR/igO+BG YYeJ0kDn9zwjmPSy+WAr3eEs+5al -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:39 2026 by rpki-client