$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa File: 323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa (raw, json) Hash identifier: 7/GkhFPFga6eSNEGWPf48bnfOxtD+TjVD74tqu8gyfg= Subject key identifier: 1E:5A:5E:27:CA:9C:C7:0B:A3:A4:B7:2D:D5:B2:B2:77:90:5E:88:A0 Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 60AA02A22D05D0B64DBAAB7959EA1D22D4866C0C Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa Signing time: Mon 16 Mar 2026 14:07:47 +0000 ROA not before: Mon 16 Mar 2026 14:02:47 +0000 ROA not after: Mon 15 Mar 2027 14:07:47 +0000 asID: 269471 IP address blocks: 2804:6524:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 09:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:aa:02:a2:2d:05:d0:b6:4d:ba:ab:79:59:ea:1d:22:d4:86:6c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Mar 16 14:02:47 2026 GMT Not After : Mar 15 14:07:47 2027 GMT Subject: CN=1E5A5E27CA9CC70BA3A4B72DD5B2B277905E88A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:d1:bb:67:a4:36:39:17:49:73:e9:17:d2: 28:b0:7b:85:d5:0d:73:98:1a:d4:4c:59:36:fa:7e: 30:ee:ed:e4:70:7e:97:91:21:31:11:d5:a9:68:8d: 4e:c8:ee:ce:0e:35:f3:d8:eb:bb:a5:d1:97:06:a8: b0:2a:de:96:f8:7c:83:ab:75:8c:9e:64:fa:54:48: fb:ed:f3:cc:1f:53:d2:5d:d0:23:b4:6c:5b:7c:ef: 37:5f:bc:1c:03:5e:3c:80:df:7d:a5:4d:f9:8d:9c: d7:b9:f1:8e:05:91:8c:fd:0d:dc:6c:e5:12:e3:97: 03:d7:fd:d2:76:29:48:06:bf:84:b4:c4:44:f9:49: fb:00:df:cc:2f:29:2a:b2:56:8a:91:a4:2a:c0:e9: c2:52:30:7d:38:23:7e:9c:6b:ec:bd:ba:b4:e8:9e: 28:1c:2c:5d:5b:1d:9a:0a:a7:b6:75:35:98:a6:bf: 47:d5:01:7c:b4:f0:6f:84:20:61:45:6e:3b:00:99: e0:8d:4b:26:96:03:ad:dc:74:d8:fd:cf:2d:25:4a: a0:6c:0b:f4:18:8c:7b:41:76:a5:e1:83:cd:6a:0b: 7a:cc:8f:19:c9:49:9b:99:56:94:50:ee:d2:55:20: 51:82:eb:98:b4:17:01:98:ac:b1:24:b8:e4:33:e2: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:5E:27:CA:9C:C7:0B:A3:A4:B7:2D:D5:B2:B2:77:90:5E:88:A0 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6524:4000::/34 Signature Algorithm: sha256WithRSAEncryption 9d:dc:e5:6b:20:93:61:64:f5:47:e4:46:2c:c8:d7:22:57:17: 5d:6f:83:8e:d2:04:5f:b9:68:80:5f:40:9c:0a:33:f1:73:fc: b2:8a:8f:ab:38:39:99:5c:be:dc:e9:7c:cd:f8:bd:e5:58:51: 4f:18:a6:85:b3:80:7e:a2:e1:31:f7:68:f5:0a:8d:ac:31:19: bb:1e:ca:88:cc:83:d6:6e:83:00:d0:7f:68:bc:1f:e9:54:92: d3:f0:e2:d7:04:08:5c:84:82:87:10:74:8b:cb:76:a7:d4:a1: fc:59:de:6b:86:59:21:28:c7:fa:a0:ee:4b:9c:ab:7a:7c:8c: 5b:e8:37:a1:d4:c1:cc:7d:0f:f0:c7:ba:8c:b1:6a:05:3c:60: 33:ae:a2:dc:78:ff:08:ae:ec:7b:14:d2:3e:30:96:cc:56:8a: 50:52:67:cf:d1:5d:14:51:07:f5:ed:bc:59:1a:94:57:d7:69: d0:7d:9c:ff:cf:9f:e7:1d:ab:76:d4:f1:44:90:29:a8:73:69: 65:e9:22:f7:e2:a7:0a:e1:64:43:3a:62:a9:c0:00:dd:52:1b: e3:6c:94:6d:df:b7:e9:ad:01:14:ff:75:87:13:3d:a9:82:08: 1d:c6:3a:f1:b1:76:05:3a:e9:45:7a:90:fe:25:07:fd:20:f0: f9:38:3a:11 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYKoCoi0F0LZNuqt5WeodItSGbAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNjAzMTYxNDAyNDdaFw0yNzAzMTUxNDA3NDdaMDMxMTAvBgNV BAMTKDFFNUE1RTI3Q0E5Q0M3MEJBM0E0QjcyREQ1QjJCMjc3OTA1RTg4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0dG7Z6Q2ORdJc+kX0iiwe4XV DXOYGtRMWTb6fjDu7eRwfpeRITER1alojU7I7s4ONfPY67ul0ZcGqLAq3pb4fIOr dYyeZPpUSPvt88wfU9Jd0CO0bFt87zdfvBwDXjyA332lTfmNnNe58Y4FkYz9Ddxs 5RLjlwPX/dJ2KUgGv4S0xET5SfsA38wvKSqyVoqRpCrA6cJSMH04I36ca+y9urTo nigcLF1bHZoKp7Z1NZimv0fVAXy08G+EIGFFbjsAmeCNSyaWA63cdNj9zy0lSqBs C/QYjHtBdqXhg81qC3rMjxnJSZuZVpRQ7tJVIFGC65i0FwGYrLEkuOQz4iD7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUHlpeJ8qcxwujpLct1bKyd5BeiKAwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdoQlpkb1AyOHhGcmFVRnFQQ1VUdjVUTFdGQ0FBUXlhOWN4UEZLcEUyOXc4LzEv MzIzODMwMzQzYTM2MzUzMjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzOTM0MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZSRAMA0GCSqGSIb3DQEBCwUA A4IBAQCd3OVrIJNhZPVH5EYsyNciVxddb4OO0gRfuWiAX0CcCjPxc/yyio+rODmZ XL7c6XzN+L3lWFFPGKaFs4B+ouEx92j1Co2sMRm7HsqIzIPWboMA0H9ovB/pVJLT 8OLXBAhchIKHEHSLy3an1KH8Wd5rhlkhKMf6oO5LnKt6fIxb6Deh1MHMfQ/wx7qM sWoFPGAzrqLceP8Irux7FNI+MJbMVopQUmfP0V0UUQf17bxZGpRX12nQfZz/z5/n Hat21PFEkCmoc2ll6SL34qcK4WRDOmKpwADdUhvjbJRt37fprQEU/3WHEz2pgggd xjrxsXYFOulFepD+JQf9IPD5ODoR -----END CERTIFICATE-----Generated at Thu Mar 26 23:20:09 2026 by rpki-client