$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa File: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (raw, json) Hash identifier: HNbTAp1vXqLTS1JFO+COwpVjcvRMcbY1+fUYAqg9t9g= Subject key identifier: 2E:D5:5B:09:DC:3B:50:AC:84:79:6F:51:AC:65:19:FF:BD:C7:B7:29 Certificate issuer: /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Certificate serial: 7F8A5CD38803BA15672F03C6C9F6DD2E81114DD1 Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa Signing time: Tue 05 May 2026 17:09:37 +0000 ROA not before: Tue 05 May 2026 17:04:37 +0000 ROA not after: Tue 04 May 2027 17:09:37 +0000 asID: 268131 IP address blocks: 2804:5878:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 03:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8a:5c:d3:88:03:ba:15:67:2f:03:c6:c9:f6:dd:2e:81:11:4d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Validity Not Before: May 5 17:04:37 2026 GMT Not After : May 4 17:09:37 2027 GMT Subject: CN=2ED55B09DC3B50AC84796F51AC6519FFBDC7B729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:91:45:4b:10:d5:1b:03:07:63:5b:a5:6c: 72:6c:14:8d:e1:4c:8a:b1:76:64:5f:d7:cb:8a:63: ee:80:17:35:e1:23:4a:03:80:39:a9:3e:1e:29:99: e8:b2:3d:20:f0:40:f0:ff:b3:0d:7a:f5:ef:f0:f0: 89:18:f6:9e:e3:ef:c0:cf:80:35:a9:ce:3c:31:71: cc:ad:aa:eb:b9:b1:f0:2a:e3:18:d1:33:3d:44:d0: 81:fb:49:7d:a0:95:f8:ee:0d:27:ad:2f:26:a3:56: 6b:89:7f:9d:95:09:79:79:98:33:aa:7d:e4:c4:4e: f1:aa:b9:72:e1:84:96:9c:4f:eb:c4:47:9f:be:13: 12:3a:5e:0c:ff:c2:0e:81:5d:65:6a:95:49:68:19: e0:a2:0c:1f:b4:65:0e:83:b6:d2:8f:62:46:f4:cf: 0e:35:40:7a:b8:a4:69:b1:0c:cd:0b:67:92:19:0a: b4:68:46:b1:ca:6e:c6:52:29:8e:58:8c:82:be:c8: 90:df:95:b0:ba:e5:cb:5d:54:31:3d:f9:c0:f3:cd: 36:20:41:2f:86:29:4e:8e:f9:c4:88:8e:ae:62:6f: cc:12:8d:eb:7a:4a:e3:1b:4c:0d:ff:f9:5c:3c:14: 5e:c9:15:a6:55:b2:cd:69:76:06:1e:81:b7:02:5d: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:5B:09:DC:3B:50:AC:84:79:6F:51:AC:65:19:FF:BD:C7:B7:29 X509v3 Authority Key Identifier: keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5878:2000::/36 Signature Algorithm: sha256WithRSAEncryption 6f:5d:06:17:9f:8e:28:a1:21:7e:ed:c2:b4:23:4e:46:52:f6: 84:a4:73:ec:6c:58:3c:76:31:ad:3f:a1:86:80:69:89:3c:ad: 6c:cf:85:74:22:ba:43:28:c3:d2:33:55:f1:3b:b3:8a:25:23: db:db:ab:88:f8:bd:cc:d7:03:54:96:07:53:63:69:0a:48:60: ae:86:3b:a4:0b:49:b3:21:a0:6d:28:db:98:f9:90:45:2f:ab: f1:8a:05:fd:89:45:65:99:a9:ee:12:74:7f:0f:7f:bb:a6:eb: 3b:f9:9d:dc:42:b0:9f:4e:3a:00:1b:5c:51:bb:05:3b:08:23: 66:d4:df:8b:79:38:4e:c8:89:e9:6a:09:7d:7e:74:b0:8d:59: 0b:31:44:48:10:94:1f:76:b0:62:98:11:ae:f6:53:35:dc:b3: d6:c7:1b:ad:69:55:36:e9:6d:94:62:f2:cc:a1:c5:89:68:b3: eb:6e:de:8b:22:39:df:85:72:43:0c:29:21:56:95:8a:3d:80: 59:e3:9c:88:2a:c1:1e:6c:30:4c:9a:37:24:62:f7:7b:19:d2: 87:7c:ea:61:1a:27:7e:c2:f1:11:51:7f:e8:f0:91:1c:14:08: 7e:67:bc:5e:74:6d:e2:3e:de:61:52:25:6c:15:a1:6f:18:29: e9:39:7d:d7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUf4pc04gDuhVnLwPGyfbdLoERTdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD M0JFNUIxMTAeFw0yNjA1MDUxNzA0MzdaFw0yNzA1MDQxNzA5MzdaMDMxMTAvBgNV BAMTKDJFRDU1QjA5REMzQjUwQUM4NDc5NkY1MUFDNjUxOUZGQkRDN0I3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68ZFFSxDVGwMHY1ulbHJsFI3h TIqxdmRf18uKY+6AFzXhI0oDgDmpPh4pmeiyPSDwQPD/sw169e/w8IkY9p7j78DP gDWpzjwxccytquu5sfAq4xjRMz1E0IH7SX2glfjuDSetLyajVmuJf52VCXl5mDOq feTETvGquXLhhJacT+vER5++ExI6Xgz/wg6BXWVqlUloGeCiDB+0ZQ6DttKPYkb0 zw41QHq4pGmxDM0LZ5IZCrRoRrHKbsZSKY5YjIK+yJDflbC65ctdVDE9+cDzzTYg QS+GKU6O+cSIjq5ib8wSjet6SuMbTA3/+Vw8FF7JFaZVss1pdgYegbcCXfVBAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULtVbCdw7UKyEeW9RrGUZ/73HtykwHwYDVR0j BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv MzIzODMwMzQzYTM1MzgzNzM4M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWHggMA0GCSqGSIb3DQEBCwUA A4IBAQBvXQYXn44ooSF+7cK0I05GUvaEpHPsbFg8djGtP6GGgGmJPK1sz4V0IrpD KMPSM1XxO7OKJSPb26uI+L3M1wNUlgdTY2kKSGCuhjukC0mzIaBtKNuY+ZBFL6vx igX9iUVlmanuEnR/D3+7pus7+Z3cQrCfTjoAG1xRuwU7CCNm1N+LeThOyInpagl9 fnSwjVkLMURIEJQfdrBimBGu9lM13LPWxxutaVU26W2UYvLMocWJaLPrbt6LIjnf hXJDDCkhVpWKPYBZ45yIKsEebDBMmjckYvd7GdKHfOphGid+wvERUX/o8JEcFAh+ Z7xedG3iPt5hUiVsFaFvGCnpOX3X -----END CERTIFICATE-----Generated at Wed May 13 18:06:22 2026 by rpki-client