$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa File: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (raw, json) Hash identifier: e5HNCSOIZPgIe0wUhNUXZjd47albPxHJIpdJHPAW6b8= Subject key identifier: 46:BA:5B:82:B1:D4:E1:FF:28:BD:DA:B3:19:B1:C7:25:84:C3:BA:61 Certificate issuer: /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Certificate serial: 3DF5C46BD1D92EBF1A30F04CD9182189049E67DF Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa Signing time: Tue 05 May 2026 17:09:34 +0000 ROA not before: Tue 05 May 2026 17:04:34 +0000 ROA not after: Tue 04 May 2027 17:09:34 +0000 asID: 268131 IP address blocks: 2804:5878:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 03:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f5:c4:6b:d1:d9:2e:bf:1a:30:f0:4c:d9:18:21:89:04:9e:67:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11 Validity Not Before: May 5 17:04:34 2026 GMT Not After : May 4 17:09:34 2027 GMT Subject: CN=46BA5B82B1D4E1FF28BDDAB319B1C72584C3BA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:4b:85:91:db:c0:67:f8:26:f5:dc:af:32: 3f:ab:05:7b:e7:68:e0:bf:f5:48:76:3b:40:a9:5a: 1d:b7:3e:32:dc:c3:42:d6:3c:fd:bf:c5:21:6c:0e: 56:8b:84:92:08:f9:fd:10:c8:8d:9f:2e:85:cf:23: a3:c6:01:3c:e6:c3:61:ad:d3:c9:2e:6b:fb:1b:d4: 89:d5:4a:35:80:c6:10:cd:9c:42:69:4f:97:76:55: 72:2c:a1:2c:99:d5:7c:c4:b5:ce:f9:ca:c2:d3:50: 67:6d:bd:e4:70:95:36:4b:9d:71:f6:57:ac:06:a7: 12:9d:06:ce:3e:b2:05:74:bb:66:93:5d:20:d8:54: a8:68:7c:06:3c:da:13:37:14:7e:1f:81:bd:70:80: e9:d7:9c:30:0a:8b:92:72:72:77:c2:8b:16:1b:30: 02:5f:a7:77:79:8a:71:bf:fc:1f:d2:1f:77:14:60: f6:3f:ac:cd:68:22:49:7d:9e:cc:1f:a6:46:24:6a: 5d:e7:4f:c2:05:af:77:94:21:84:39:ef:ed:e5:3b: e2:94:7a:3d:7e:49:2a:54:21:36:ee:af:f6:bb:e6: 98:eb:dc:44:31:83:6c:05:b5:76:85:ce:76:64:5a: 4d:60:92:a6:5b:b0:20:9e:68:81:72:3f:5e:35:65: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:5B:82:B1:D4:E1:FF:28:BD:DA:B3:19:B1:C7:25:84:C3:BA:61 X509v3 Authority Key Identifier: keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5878:4000::/48 Signature Algorithm: sha256WithRSAEncryption 69:7e:d1:73:3a:04:eb:5a:c9:8f:3a:ec:ef:44:29:4f:65:ca: 96:ac:dc:86:9c:53:dc:0c:14:ea:91:89:e4:9f:5e:9d:07:bc: 56:7b:19:5c:f5:19:b4:c9:ca:79:24:e1:1a:1f:0e:03:c3:2c: cc:56:14:f8:ac:61:99:88:69:27:46:56:5b:b8:e1:d6:72:6f: b9:b8:41:57:85:39:2a:6a:ba:44:da:0e:69:4e:f1:61:d0:6e: 76:e0:bd:24:a0:4c:0b:31:d0:8b:26:17:21:dc:ae:d5:cb:5f: 8e:7d:f0:90:df:29:dd:26:72:5c:28:7f:46:4e:9d:7a:5a:bb: cf:23:07:0b:6c:9c:ff:a5:65:4d:4b:59:61:dc:fb:4b:c5:35: f5:1a:a3:3f:5d:ca:37:1d:89:8b:67:54:73:4c:99:e2:47:39: 37:48:83:17:6c:47:e9:b3:22:b2:5f:97:4b:03:a5:18:7a:14: ff:6f:b4:55:89:ee:69:fa:f9:61:9d:e6:63:34:70:5c:90:8a: 30:31:1c:11:bf:b2:c5:94:61:7f:47:b9:d4:f7:77:45:00:0e: 9a:be:63:ec:07:cc:53:7e:a7:c6:bc:6d:63:b2:17:ae:e7:99: 91:7d:3c:c4:ac:c8:26:7c:16:a4:b3:7c:d0:15:de:24:6b:2b: f5:32:e3:c9 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUPfXEa9HZLr8aMPBM2RghiQSeZ98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD M0JFNUIxMTAeFw0yNjA1MDUxNzA0MzRaFw0yNzA1MDQxNzA5MzRaMDMxMTAvBgNV BAMTKDQ2QkE1QjgyQjFENEUxRkYyOEJEREFCMzE5QjFDNzI1ODRDM0JBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUUuFkdvAZ/gm9dyvMj+rBXvn aOC/9Uh2O0CpWh23PjLcw0LWPP2/xSFsDlaLhJII+f0QyI2fLoXPI6PGATzmw2Gt 08kua/sb1InVSjWAxhDNnEJpT5d2VXIsoSyZ1XzEtc75ysLTUGdtveRwlTZLnXH2 V6wGpxKdBs4+sgV0u2aTXSDYVKhofAY82hM3FH4fgb1wgOnXnDAKi5JycnfCixYb MAJfp3d5inG//B/SH3cUYPY/rM1oIkl9nswfpkYkal3nT8IFr3eUIYQ57+3lO+KU ej1+SSpUITbur/a75pjr3EQxg2wFtXaFznZkWk1gkqZbsCCeaIFyP141ZR8xAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQURrpbgrHU4f8ovdqzGbHHJYTDumEwHwYDVR0j BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv MzIzODMwMzQzYTM1MzgzNzM4M2EzNDMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEWHhAADANBgkqhkiG9w0BAQsF AAOCAQEAaX7RczoE61rJjzrs70QpT2XKlqzchpxT3AwU6pGJ5J9enQe8VnsZXPUZ tMnKeSThGh8OA8MszFYU+KxhmYhpJ0ZWW7jh1nJvubhBV4U5Kmq6RNoOaU7xYdBu duC9JKBMCzHQiyYXIdyu1ctfjn3wkN8p3SZyXCh/Rk6delq7zyMHC2yc/6VlTUtZ Ydz7S8U19RqjP13KNx2Ji2dUc0yZ4kc5N0iDF2xH6bMisl+XSwOlGHoU/2+0VYnu afr5YZ3mYzRwXJCKMDEcEb+yxZRhf0e51Pd3RQAOmr5j7AfMU36nxrxtY7IXrueZ kX08xKzIJnwWpLN80BXeJGsr9TLjyQ== -----END CERTIFICATE-----Generated at Wed May 13 17:38:54 2026 by rpki-client