$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa File: 323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa (raw, json) Hash identifier: opEw8Ds1rSXQDtQtzJ3ta2GnYH9fFslGeFEUtpjL0Wg= Subject key identifier: 41:6C:BB:7C:1F:1D:98:68:F6:79:BE:56:28:08:28:80:21:76:67:33 Certificate issuer: /CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864 Certificate serial: 7CAAC8D9F8A23B2D6C503E6ECEF34BFD91FBF4F1 Authority key identifier: 4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa Signing time: Fri 20 Mar 2026 13:54:06 +0000 ROA not before: Fri 20 Mar 2026 13:49:06 +0000 ROA not after: Fri 19 Mar 2027 13:54:06 +0000 asID: 269261 IP address blocks: 2804:61dc:d000::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 17:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:aa:c8:d9:f8:a2:3b:2d:6c:50:3e:6e:ce:f3:4b:fd:91:fb:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864 Validity Not Before: Mar 20 13:49:06 2026 GMT Not After : Mar 19 13:54:06 2027 GMT Subject: CN=416CBB7C1F1D9868F679BE562808288021766733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:84:65:b4:00:ce:eb:72:a5:59:05:55:f1: 14:f1:14:c1:2c:70:93:fe:87:04:6b:02:c9:1f:3b: d9:f6:e9:66:0b:8c:e5:54:70:ed:00:25:1d:1a:b9: 3c:53:7c:11:c5:95:b3:8a:c6:96:3c:4c:82:37:95: 35:c8:ac:30:c6:23:ec:00:b9:9e:e0:93:d9:f4:e4: 04:a3:83:1d:f8:ef:a1:79:37:b5:15:66:81:86:9a: d5:05:8b:5f:c8:51:94:67:fb:a8:2b:3d:08:07:79: bf:8a:87:41:10:31:0a:4d:35:93:f7:d0:ae:d6:4a: ea:1d:22:67:d6:3e:b7:be:09:01:32:9b:e2:46:1e: 28:7b:fb:e6:7c:a3:98:a5:b6:ab:6c:1b:ff:29:4f: b1:f2:51:60:6a:1e:cc:80:de:5f:a2:80:6c:01:87: 27:4e:61:f3:f0:15:f0:1a:9f:56:c9:43:40:fe:d2: 5a:81:0b:ed:eb:e0:04:ea:a4:8b:66:4d:b6:84:63: 7c:bc:26:26:5f:c2:a6:58:47:6b:75:2a:35:ea:d5: ea:70:9e:06:33:95:69:ac:cc:2d:15:cf:aa:a0:56: 4f:95:0a:eb:ac:b9:82:f1:c0:f6:55:25:c8:9c:00: 60:1f:7d:a2:f3:df:0c:e5:a7:d2:64:2b:8b:15:02: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6C:BB:7C:1F:1D:98:68:F6:79:BE:56:28:08:28:80:21:76:67:33 X509v3 Authority Key Identifier: keyid:4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:61dc:d000::/36 Signature Algorithm: sha256WithRSAEncryption 64:58:00:f8:5a:b3:c1:ab:a0:6f:6d:75:37:40:f4:36:0a:72: 05:01:55:d6:02:6e:26:82:f3:22:d6:6a:f1:13:d3:fa:30:7d: c9:64:f9:e7:e9:ce:13:c8:51:c5:8c:33:09:55:70:f7:8c:de: 42:ad:d9:e2:a5:23:84:24:81:23:4c:e5:6b:14:a6:9e:61:f1: ea:b9:35:67:88:21:53:73:95:3c:ac:80:20:90:82:04:ce:cf: d5:7b:67:03:26:fb:fa:2e:0f:ff:a8:ff:a1:3b:31:46:d4:a0: ec:4d:73:6c:00:c0:31:54:a3:df:3f:94:34:6f:34:52:00:d2: db:10:fc:8f:6a:1c:d1:86:7b:a9:0c:49:39:dc:2d:60:4e:4a: ba:8e:86:85:67:6f:bb:52:06:84:96:a0:f3:7f:ef:29:21:22: 79:5b:73:d4:2b:1e:61:02:0d:07:02:3d:55:bd:95:b2:12:89: 0f:45:f7:cc:9b:6b:5d:7d:20:db:e6:18:cc:fe:e7:df:ae:8a: 4f:61:4c:54:76:ee:e5:23:4f:52:c6:ca:6c:91:5c:32:5f:b3: 14:4b:18:9c:26:ff:b9:77:3e:18:49:f2:28:67:6d:81:1b:8d: 57:51:0c:8c:d7:20:40:03:4c:85:6d:17:19:de:e1:91:52:d4: b1:d2:98:78 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUfKrI2fiiOy1sUD5uzvNL/ZH79PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQzMxQjEyMDEwQzlEMEM3NjAzM0Y2NDQyNkM2QTRF NURCRDg2NDAeFw0yNjAzMjAxMzQ5MDZaFw0yNzAzMTkxMzU0MDZaMDMxMTAvBgNV BAMTKDQxNkNCQjdDMUYxRDk4NjhGNjc5QkU1NjI4MDgyODgwMjE3NjY3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe24RltADO63KlWQVV8RTxFMEs cJP+hwRrAskfO9n26WYLjOVUcO0AJR0auTxTfBHFlbOKxpY8TII3lTXIrDDGI+wA uZ7gk9n05ASjgx3476F5N7UVZoGGmtUFi1/IUZRn+6grPQgHeb+Kh0EQMQpNNZP3 0K7WSuodImfWPre+CQEym+JGHih7++Z8o5iltqtsG/8pT7HyUWBqHsyA3l+igGwB hydOYfPwFfAan1bJQ0D+0lqBC+3r4ATqpItmTbaEY3y8JiZfwqZYR2t1KjXq1epw ngYzlWmszC0Vz6qgVk+VCuusuYLxwPZVJcicAGAffaLz3wzlp9JkK4sVAsi9AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUQWy7fB8dmGj2eb5WKAgogCF2ZzMwHwYDVR0j BBgwFoAUTiwxsSAQydDHYDP2RCbGpOXb2GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM250YnM1OWtGSGkzdFJoU1pOVzRMODVKeDhwZGNNeXNGQ1ZveDgzYkRH M0UvMC80RTJDMzFCMTIwMTBDOUQwQzc2MDMzRjY0NDI2QzZBNEU1REJEODY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMkMzMUIxMjAxMEM5RDBD NzYwMzNGNjQ0MjZDNkE0RTVEQkQ4NjQuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNudGJzNTlrRkhpM3RSaFNaTlc0TDg1Sng4cGRjTXlzRkNWb3g4M2JERzNFLzAv MzIzODMwMzQzYTM2MzE2NDYzM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMxMzIzODIw M2QzZTIwMzIzNjM5MzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKARh3NAwDQYJKoZIhvcNAQEL BQADggEBAGRYAPhas8GroG9tdTdA9DYKcgUBVdYCbiaC8yLWavET0/owfclk+efp zhPIUcWMMwlVcPeM3kKt2eKlI4QkgSNM5WsUpp5h8eq5NWeIIVNzlTysgCCQggTO z9V7ZwMm+/ouD/+o/6E7MUbUoOxNc2wAwDFUo98/lDRvNFIA0tsQ/I9qHNGGe6kM STncLWBOSrqOhoVnb7tSBoSWoPN/7ykhInlbc9QrHmECDQcCPVW9lbISiQ9F98yb a119INvmGMz+59+uik9hTFR27uUjT1LGymyRXDJfsxRLGJwm/7l3PhhJ8ihnbYEb jVdRDIzXIEADTIVtFxne4ZFS1LHSmHg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:39:23 2026 by rpki-client