$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a623030303a3a2f34382d3438203d3e20323635303933.roa File: 323830343a333262303a623030303a3a2f34382d3438203d3e20323635303933.roa (raw, json) Hash identifier: nQzRPd+tBkcb1udIeJTE/AzWC7PT8AxGGlZv3tcj7Es= Subject key identifier: AA:25:08:3D:89:1A:08:D0:81:78:CA:39:53:67:DB:15:AC:F8:C0:C9 Certificate issuer: /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2 Certificate serial: 2A1D1C1C40B333B3A556708647FC732203C140A8 Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a623030303a3a2f34382d3438203d3e20323635303933.roa Signing time: Tue 21 Apr 2026 13:08:14 +0000 ROA not before: Tue 21 Apr 2026 13:03:14 +0000 ROA not after: Tue 20 Apr 2027 13:08:14 +0000 asID: 265093 IP address blocks: 2804:32b0:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 11:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1d:1c:1c:40:b3:33:b3:a5:56:70:86:47:fc:73:22:03:c1:40:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2 Validity Not Before: Apr 21 13:03:14 2026 GMT Not After : Apr 20 13:08:14 2027 GMT Subject: CN=AA25083D891A08D08178CA395367DB15ACF8C0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:94:8b:8d:0f:00:08:45:bb:1f:1b:4d:16: 2b:ee:03:d1:f4:76:af:ba:87:f1:55:cb:83:5a:a7: 0a:ac:0f:36:f2:13:55:ff:23:e7:fe:5e:69:3d:29: c7:e5:8c:00:ee:c8:5c:1b:6b:ff:3e:9d:d4:68:4d: 2f:ef:78:56:69:70:9e:ea:35:d7:35:f3:ac:83:d7: a9:7a:60:5b:18:84:ea:16:ef:d5:66:7d:d2:cb:d4: 83:56:ea:ae:5c:ec:7a:2b:30:80:e5:70:ca:48:34: ad:59:bd:2b:e3:00:a2:a5:0c:7d:bc:bb:2f:d5:5e: fd:1b:06:e6:2f:30:eb:91:8d:37:cb:bb:23:78:6c: ba:b6:43:70:ff:79:cc:78:32:50:b2:c4:62:35:c7: d4:00:8d:e2:3f:64:27:b9:60:63:14:56:4a:f4:04: a9:62:7d:d9:38:cc:6e:70:69:ee:52:24:c4:eb:01: 53:76:6b:8b:a8:2c:48:cc:05:2c:2c:d7:d5:c8:88: e5:98:50:1b:5f:52:ad:0a:7b:ba:d5:0e:41:bd:75: 87:e0:ae:23:f5:23:54:57:ee:7a:5a:9f:ed:2a:e9: 93:81:2f:af:a6:5d:8e:9f:ec:83:e3:fa:09:1b:20: 2c:88:13:63:4e:15:a4:00:0e:bd:f1:38:d9:16:8d: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:08:3D:89:1A:08:D0:81:78:CA:39:53:67:DB:15:AC:F8:C0:C9 X509v3 Authority Key Identifier: keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a623030303a3a2f34382d3438203d3e20323635303933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:32b0:b000::/48 Signature Algorithm: sha256WithRSAEncryption 0a:2e:c7:84:59:c1:8c:7b:02:90:da:5b:ea:55:27:0d:b1:aa: 1d:00:ea:5d:49:be:44:ad:25:b0:2f:0e:c7:05:09:81:bb:93: e8:63:b1:47:5c:0f:4a:ad:ce:51:f9:9c:e5:1d:49:f7:1f:87: d5:3f:45:0a:3c:f2:32:f2:c4:94:8e:6a:4e:42:cf:c9:23:b4: cd:81:24:f1:db:e6:b4:e9:65:cb:65:8a:26:9f:6b:62:d2:63: 73:f3:09:db:e8:27:49:62:e6:ff:b3:f4:50:2b:9f:95:0e:69: 92:27:fa:4e:33:ed:34:92:82:de:13:e2:01:c8:d4:af:0a:1a: 0e:8b:79:dd:15:ce:4f:e0:ac:e5:52:7d:99:18:a2:9c:f1:02: dc:5f:2a:85:49:83:ce:8e:8e:e4:cf:a6:4e:37:9d:29:57:0c: a4:28:99:2a:7f:3d:60:7e:e2:cb:b8:af:5a:a0:b6:00:1f:32: fa:fc:f9:ac:ca:e9:6c:64:ff:b5:25:f6:db:39:bb:b2:2f:bd: 3f:ca:e9:74:c6:97:56:54:55:71:df:05:52:e1:ed:fd:c5:a6: c8:57:7c:89:08:60:cb:c3:66:ef:99:42:1d:e8:a0:2d:77:ca: f5:78:1f:d3:78:0f:89:89:a3:58:3d:a4:d3:b6:c1:9b:be:38: 10:f0:a8:78 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUKh0cHECzM7OlVnCGR/xzIgPBQKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1RkMyQzY3RkU3MzhFQ0FDQkZFRjk0QjhEQjVENUQ1 MjI4QzdDMjAeFw0yNjA0MjExMzAzMTRaFw0yNzA0MjAxMzA4MTRaMDMxMTAvBgNV BAMTKEFBMjUwODNEODkxQTA4RDA4MTc4Q0EzOTUzNjdEQjE1QUNGOEMwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOpSLjQ8ACEW7HxtNFivuA9H0 dq+6h/FVy4NapwqsDzbyE1X/I+f+Xmk9KcfljADuyFwba/8+ndRoTS/veFZpcJ7q Ndc186yD16l6YFsYhOoW79VmfdLL1INW6q5c7HorMIDlcMpINK1ZvSvjAKKlDH28 uy/VXv0bBuYvMOuRjTfLuyN4bLq2Q3D/ecx4MlCyxGI1x9QAjeI/ZCe5YGMUVkr0 BKlifdk4zG5wae5SJMTrAVN2a4uoLEjMBSws19XIiOWYUBtfUq0Ke7rVDkG9dYfg riP1I1RX7npan+0q6ZOBL6+mXY6f7IPj+gkbICyIE2NOFaQADr3xONkWjSiPAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUqiUIPYkaCNCBeMo5U2fbFaz4wMkwHwYDVR0j BBgwFoAUNV/Cxn/nOOysv++UuNtdXVIox8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEVUVzRDNllNa2VwNFpGblNYd0NueFF5dXdrd3JzQXZndlF2SmZ0dXln OWgvMC8zNTVGQzJDNjdGRTczOEVDQUNCRkVGOTRCOERCNUQ1RDUyMjhDN0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NUZDMkM2N0ZFNzM4RUNB Q0JGRUY5NEI4REI1RDVENTIyOEM3QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhFVFc0QzZZTWtlcDRaRm5TWHdDbnhReXV3a3dyc0F2Z3ZRdkpmdHV5ZzloLzAv MzIzODMwMzQzYTMzMzI2MjMwM2E2MjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzNTMwMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMrCwADANBgkqhkiG9w0BAQsF AAOCAQEACi7HhFnBjHsCkNpb6lUnDbGqHQDqXUm+RK0lsC8OxwUJgbuT6GOxR1wP Sq3OUfmc5R1J9x+H1T9FCjzyMvLElI5qTkLPySO0zYEk8dvmtOlly2WKJp9rYtJj c/MJ2+gnSWLm/7P0UCuflQ5pkif6TjPtNJKC3hPiAcjUrwoaDot53RXOT+Cs5VJ9 mRiinPEC3F8qhUmDzo6O5M+mTjedKVcMpCiZKn89YH7iy7ivWqC2AB8y+vz5rMrp bGT/tSX22zm7si+9P8rpdMaXVlRVcd8FUuHt/cWmyFd8iQhgy8Nm75lCHeigLXfK 9Xgf03gPiYmjWD2k07bBm744EPCoeA== -----END CERTIFICATE-----Generated at Wed May 13 17:17:25 2026 by rpki-client