$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa File: 323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa (raw, json) Hash identifier: sXgbVhTGIPfNWdbPxHa9U/vYbBxE3rMmvhfLEpq5Z3s= Subject key identifier: E2:51:99:0C:BA:B0:14:C4:9B:DE:11:EB:82:2F:0E:82:B0:75:0D:FC Certificate issuer: /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Certificate serial: 7FEB66EB1D4B3BBC7990A5A709C3A17F2B7AA247 Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer Subject info access: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa Signing time: Wed 11 Mar 2026 19:13:22 +0000 ROA not before: Wed 11 Mar 2026 19:08:22 +0000 ROA not after: Wed 10 Mar 2027 19:13:22 +0000 asID: 28252 IP address blocks: 2804:1544:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 03:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:eb:66:eb:1d:4b:3b:bc:79:90:a5:a7:09:c3:a1:7f:2b:7a:a2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34 Validity Not Before: Mar 11 19:08:22 2026 GMT Not After : Mar 10 19:13:22 2027 GMT Subject: CN=E251990CBAB014C49BDE11EB822F0E82B0750DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:1d:6b:03:b3:05:a6:7b:4c:1f:cb:cf:68: c6:00:6a:ef:43:7d:e2:39:b9:57:64:72:18:bb:e0: 1a:38:a8:4b:48:6d:47:5c:71:54:f8:16:6c:d2:23: f1:a3:ee:e5:bf:6a:38:6f:66:30:48:e3:8f:21:2d: 83:40:cd:7a:02:8e:a8:1b:bc:02:1b:4c:5b:0b:94: c2:e1:b2:dd:bc:a1:53:48:44:a4:c8:3e:a7:95:22: 5d:f6:51:49:25:62:44:14:fe:d8:af:51:9b:f5:2d: dc:03:9b:43:74:f0:48:3a:24:c8:7b:b2:39:8b:13: 11:ca:52:a3:3c:c6:b0:0a:60:e8:d9:af:f5:f3:25: 28:88:fe:2e:13:97:27:0f:2f:de:11:90:2a:d8:2e: 6f:d0:e1:fc:19:7c:f4:07:f0:ed:48:df:72:b1:42: 62:31:4a:e6:4f:44:0a:84:75:e3:af:06:6e:4f:9b: d6:3f:cf:b0:9e:9b:44:6f:c5:97:c2:ec:ad:57:58: b2:31:4c:d7:72:26:6b:c3:6f:cf:1a:8a:01:2a:84: e6:3b:32:f6:97:76:4a:1c:03:0f:dc:62:07:cd:de: c0:00:83:7c:da:91:a2:56:f8:5c:e6:97:1e:fc:47: 6b:63:23:44:9b:88:1c:fa:bb:6e:be:0c:11:a6:f5: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:51:99:0C:BA:B0:14:C4:9B:DE:11:EB:82:2F:0E:82:B0:75:0D:FC X509v3 Authority Key Identifier: keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1544:2002::/48 Signature Algorithm: sha256WithRSAEncryption 7c:04:cb:60:ef:b8:dd:78:77:5e:da:3a:18:34:36:1a:1a:fd: 98:8e:1b:45:1f:99:59:3e:7c:71:7f:06:49:01:f3:4e:69:8c: 77:1e:6f:49:3d:b7:7a:d3:62:d8:12:28:69:6e:6b:7b:bf:3e: 68:e4:3b:7a:1c:8f:87:cd:a9:eb:36:80:c8:09:5e:21:1b:e6: a1:db:f6:01:21:7e:1a:c1:42:ee:c5:a2:e2:b2:28:48:fe:81: 34:9c:df:c9:bc:83:39:b0:f2:cd:52:18:fb:9c:e8:70:35:ba: 72:80:52:81:a6:c8:d0:b4:f3:c4:0d:9d:e9:4d:79:d2:7a:1e: 66:85:6c:2e:8d:c5:c0:78:65:70:e9:24:ea:a3:0f:84:56:06: bd:23:3d:3d:38:d3:8a:cd:17:a1:51:0f:b5:67:33:00:61:ee: 70:c2:94:1e:b6:d4:63:49:45:e9:89:88:e8:58:5a:aa:96:d1: 8d:24:8f:ba:b5:9f:1d:8a:65:12:11:ea:67:fa:e5:95:cf:03: e2:68:5e:79:4b:ea:32:36:ea:e7:99:91:8e:09:bf:45:06:b4: 98:f2:d6:6f:ab:7f:82:f6:59:47:7f:9d:1a:20:fd:d5:bf:f1: a2:57:2b:2f:b0:56:c0:d2:10:c7:bf:34:fb:46:ff:73:68:3f: 59:65:e3:7b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUf+tm6x1LO7x5kKWnCcOhfyt6okcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD M0RDQUIzNDAeFw0yNjAzMTExOTA4MjJaFw0yNzAzMTAxOTEzMjJaMDMxMTAvBgNV BAMTKEUyNTE5OTBDQkFCMDE0QzQ5QkRFMTFFQjgyMkYwRTgyQjA3NTBERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Kx1rA7MFpntMH8vPaMYAau9D feI5uVdkchi74Bo4qEtIbUdccVT4FmzSI/Gj7uW/ajhvZjBI448hLYNAzXoCjqgb vAIbTFsLlMLhst28oVNIRKTIPqeVIl32UUklYkQU/tivUZv1LdwDm0N08Eg6JMh7 sjmLExHKUqM8xrAKYOjZr/XzJSiI/i4TlycPL94RkCrYLm/Q4fwZfPQH8O1I33Kx QmIxSuZPRAqEdeOvBm5Pm9Y/z7Cem0RvxZfC7K1XWLIxTNdyJmvDb88aigEqhOY7 MvaXdkocAw/cYgfN3sAAg3zakaJW+Fzmlx78R2tjI0SbiBz6u26+DBGm9TMRAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQU4lGZDLqwFMSb3hHrgi8OgrB1DfwwHwYDVR0j BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1 bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv MzIzODMwMzQzYTMxMzUzNDM0M2EzMjMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBVEIAIwDQYJKoZIhvcNAQELBQAD ggEBAHwEy2DvuN14d17aOhg0Nhoa/ZiOG0UfmVk+fHF/BkkB805pjHceb0k9t3rT YtgSKGlua3u/PmjkO3ocj4fNqes2gMgJXiEb5qHb9gEhfhrBQu7FouKyKEj+gTSc 38m8gzmw8s1SGPuc6HA1unKAUoGmyNC088QNnelNedJ6HmaFbC6NxcB4ZXDpJOqj D4RWBr0jPT0404rNF6FRD7VnMwBh7nDClB621GNJRemJiOhYWqqW0Y0kj7q1nx2K ZRIR6mf65ZXPA+JoXnlL6jI26ueZkY4Jv0UGtJjy1m+rf4L2WUd/nRog/dW/8aJX Ky+wVsDSEMe/NPtG/3NoP1ll43s= -----END CERTIFICATE-----Generated at Thu Mar 26 20:32:27 2026 by rpki-client