$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa File: 323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa (raw, json) Hash identifier: fq3s3jUcB8C8/w6rDFjl5aoCxyDW4uNMzlW5f1A9ib4= Subject key identifier: 9C:A0:F1:54:E6:BD:0D:BE:B6:6E:00:3B:FB:F7:AB:4B:74:56:33:86 Certificate issuer: /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44 Certificate serial: 543E1481A13694D266CA98F038A9507DEF9CBEAB Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer Subject info access: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa Signing time: Sun 13 Sep 2026 17:57:49 +0000 ROA not before: Sun 13 Sep 2026 17:52:49 +0000 ROA not after: Sun 12 Sep 2027 17:57:49 +0000 asID: 28571 IP address blocks: 2001:12d0:8068::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 15:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3e:14:81:a1:36:94:d2:66:ca:98:f0:38:a9:50:7d:ef:9c:be:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44 Validity Not Before: Sep 13 17:52:49 2026 GMT Not After : Sep 12 17:57:49 2027 GMT Subject: CN=9CA0F154E6BD0DBEB66E003BFBF7AB4B74563386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:db:90:f1:d2:7b:4c:ae:8a:d5:0d:d8:3d: 2e:bb:a5:6e:89:17:93:36:c8:75:4a:2a:06:f6:41: 73:b3:55:30:f1:f3:c0:c5:c7:e1:81:43:d3:e7:88: 37:a6:14:db:f9:32:a5:18:5b:36:ec:c5:45:99:b3: d9:95:a1:08:10:48:b1:06:3c:fd:9a:30:93:a9:98: 00:de:01:3a:fc:43:f2:11:72:cc:e7:7a:c9:8f:bc: d6:35:4c:c4:36:a2:ab:a0:9d:1c:05:16:91:b6:c2: 18:bc:2c:c8:49:eb:0d:ac:3f:52:69:30:48:9c:57: 25:7d:e0:02:08:b2:36:c0:f6:7c:43:67:d4:8e:7d: e6:5c:f8:da:17:ba:b6:82:ef:62:a5:23:ff:fc:eb: 5c:76:d3:3a:4e:fb:96:2d:c1:c6:7f:06:6c:f3:42: 42:1a:fc:4e:16:19:65:37:75:e6:f2:08:d1:81:35: b2:bf:a9:64:3e:9d:b9:32:b9:7b:89:11:c0:89:f2: f2:55:dc:5a:09:86:85:cb:58:b9:ff:64:2f:bd:01: 33:4e:4b:6d:7a:90:ba:96:03:d7:e6:ca:c9:c4:b0: fe:16:65:55:26:32:ac:da:d2:fa:73:f9:a1:9f:50: 22:20:df:2d:fb:5e:21:9b:ff:bb:22:41:e7:b1:0d: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:F1:54:E6:BD:0D:BE:B6:6E:00:3B:FB:F7:AB:4B:74:56:33:86 X509v3 Authority Key Identifier: keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:12d0:8068::/48 Signature Algorithm: sha256WithRSAEncryption 68:c2:23:99:1f:62:16:ec:86:a8:1b:03:c9:cd:c0:48:9d:ec: 70:ec:db:70:86:1d:f2:12:26:5a:e1:51:ad:12:60:a1:d7:42: 75:0a:f3:25:15:44:77:25:56:db:11:4a:b6:49:90:e6:24:93: 0c:75:44:ef:42:6b:96:2c:f5:50:06:64:1d:36:b8:b0:37:79: 15:af:e4:18:92:50:0d:ae:33:64:dc:08:fe:d0:16:14:79:89: 4c:13:aa:d6:e8:f6:30:d0:79:74:7b:f1:b6:c4:f0:aa:18:7b: 8f:dc:81:48:65:1b:47:e5:69:22:4c:57:29:89:97:a4:97:6d: 78:71:51:fc:de:c3:6f:82:08:5f:27:c1:b1:85:59:98:20:f3: da:c4:ab:3e:76:42:36:03:f6:f2:ab:77:33:a8:1f:12:07:fb: c0:d2:f1:db:3e:ae:f3:95:46:77:c2:64:50:8c:29:a5:43:a2: 85:0e:d2:bd:ff:68:39:6e:09:06:55:d1:19:0e:08:4a:8f:80: ca:1d:3f:bb:93:a7:ea:b7:5f:72:92:79:14:eb:45:b3:e2:f6: c6:99:37:58:a9:92:88:8d:88:92:ff:b1:b2:5a:dc:53:2e:22: b9:ec:05:00:a5:28:db:31:55:f2:fe:bb:8f:54:cc:c9:14:d8: a8:fd:fd:49 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUVD4UgaE2lNJmypjwOKlQfe+cvqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5 REVGOUE0NDAeFw0yNjA5MTMxNzUyNDlaFw0yNzA5MTIxNzU3NDlaMDMxMTAvBgNV BAMTKDlDQTBGMTU0RTZCRDBEQkVCNjZFMDAzQkZCRjdBQjRCNzQ1NjMzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGiNuQ8dJ7TK6K1Q3YPS67pW6J F5M2yHVKKgb2QXOzVTDx88DFx+GBQ9PniDemFNv5MqUYWzbsxUWZs9mVoQgQSLEG PP2aMJOpmADeATr8Q/IRcsznesmPvNY1TMQ2oqugnRwFFpG2whi8LMhJ6w2sP1Jp MEicVyV94AIIsjbA9nxDZ9SOfeZc+NoXuraC72KlI//861x20zpO+5YtwcZ/Bmzz QkIa/E4WGWU3debyCNGBNbK/qWQ+nbkyuXuJEcCJ8vJV3FoJhoXLWLn/ZC+9ATNO S216kLqWA9fmysnEsP4WZVUmMqza0vpz+aGfUCIg3y37XiGb/7siQeexDatpAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUnKDxVOa9Db62bgA7+/erS3RWM4YwHwYDVR0j BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3 RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv MzIzMDMwMzEzYTMxMzI2NDMwM2EzODMwMzYzODNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgARLQgGgwDQYJKoZIhvcNAQELBQAD ggEBAGjCI5kfYhbshqgbA8nNwEid7HDs23CGHfISJlrhUa0SYKHXQnUK8yUVRHcl VtsRSrZJkOYkkwx1RO9Ca5Ys9VAGZB02uLA3eRWv5BiSUA2uM2TcCP7QFhR5iUwT qtbo9jDQeXR78bbE8KoYe4/cgUhlG0flaSJMVymJl6SXbXhxUfzew2+CCF8nwbGF WZgg89rEqz52QjYD9vKrdzOoHxIH+8DS8ds+rvOVRnfCZFCMKaVDooUO0r3/aDlu CQZV0RkOCEqPgModP7uTp+q3X3KSeRTrRbPi9saZN1ipkoiNiJL/sbJa3FMuIrns BQClKNsxVfL+u49UzMkU2Kj9/Uk= -----END CERTIFICATE-----Generated at Thu Oct 15 10:21:26 2026 by rpki-client