$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa File: 323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa (raw, json) Hash identifier: XMt19OQs+KIsdrSVdkot4M0VNKvbfDuFMSNIOiKgGzw= Subject key identifier: 07:BB:F1:FE:6A:B4:62:3B:B9:EB:D3:2A:49:40:E4:A7:F1:6A:8E:C2 Certificate issuer: /CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Certificate serial: 2893FF5A3DF52211E832D0AF786EBA38F87F2C35 Authority key identifier: 2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa Signing time: Thu 19 Mar 2026 13:13:53 +0000 ROA not before: Thu 19 Mar 2026 13:08:53 +0000 ROA not after: Thu 18 Mar 2027 13:13:53 +0000 asID: 264971 IP address blocks: 2801:80:1920::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:93:ff:5a:3d:f5:22:11:e8:32:d0:af:78:6e:ba:38:f8:7f:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Validity Not Before: Mar 19 13:08:53 2026 GMT Not After : Mar 18 13:13:53 2027 GMT Subject: CN=07BBF1FE6AB4623BB9EBD32A4940E4A7F16A8EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:44:29:fb:c8:92:20:28:db:3d:ea:22:c0: 6d:0b:51:e4:63:f6:2c:35:14:59:64:19:1a:25:40: fc:31:4b:f5:6e:60:f1:35:90:79:45:a4:15:34:b2: e7:54:9f:27:a6:68:12:40:ba:b0:de:e2:c4:cf:f4: 80:94:ee:53:87:c4:6d:bb:be:f9:ad:34:8c:9e:9e: e0:2c:10:4d:a8:e8:a9:6d:53:84:ec:10:2b:2c:b4: 46:85:65:e8:d5:18:cf:1c:bd:4d:a6:58:d3:ce:8c: d4:9a:59:70:e8:8c:a1:04:08:0a:78:a9:c8:19:1e: d8:37:87:81:1f:06:ea:91:b3:7c:8f:6c:2d:dd:b4: 52:b4:20:e2:d9:dc:93:03:76:57:d3:44:5e:99:a6: d6:a6:5a:88:cd:94:3e:98:5d:fc:23:e5:aa:f4:0f: 92:db:9a:c8:95:e6:98:29:21:f4:3d:ab:92:cc:46: 98:25:ca:87:d1:c4:d2:67:c5:9f:65:2f:15:24:cb: 8a:02:e9:98:9c:2e:dd:63:58:89:84:6a:bf:9a:bf: 42:28:ef:c8:cf:ce:cb:c9:d4:52:a9:f4:c9:da:90: 76:10:c8:7a:50:74:73:73:d7:ac:f2:20:47:42:1d: 93:b1:68:14:4c:61:fd:77:2a:d4:a6:09:c1:0b:4d: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:F1:FE:6A:B4:62:3B:B9:EB:D3:2A:49:40:E4:A7:F1:6A:8E:C2 X509v3 Authority Key Identifier: keyid:2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:80:1920::/48 Signature Algorithm: sha256WithRSAEncryption 93:a2:c0:c8:19:ae:78:da:38:9e:b3:b7:9b:07:17:2c:7a:9e: bb:0f:af:e1:43:1d:6c:cd:74:5c:3b:81:01:6a:28:f9:78:f6: df:ab:a6:56:95:70:ad:2b:f0:16:f4:29:c9:b8:25:f7:86:53: 83:2f:5c:a7:01:fc:b7:cb:d9:84:51:d7:66:35:ef:98:bf:64: 10:58:ac:86:1b:e5:98:79:c5:be:0b:a8:d7:e8:70:5b:b0:63: ce:f3:86:b2:47:ab:fd:67:04:0d:06:c9:6c:5f:e7:86:96:ac: dd:b2:cb:5c:eb:e4:b1:3b:03:85:fe:3c:b5:0c:b4:b2:be:2e: 79:b8:3f:cc:64:45:61:0a:0a:e4:d3:2e:dc:b3:57:ea:18:36: eb:a0:8c:96:2f:eb:da:4c:b9:9f:7e:54:30:57:bd:fe:8a:a6: 87:2b:d8:21:5b:c7:23:69:4d:3a:7e:e8:4d:3b:d4:cb:d1:b2: 11:d8:23:f8:04:24:bb:59:1e:80:af:9d:a6:7e:6a:8c:cb:47: 4c:0b:57:ff:66:6f:ca:3d:17:06:8a:36:05:c4:69:fa:83:cf: 70:b5:dc:44:10:37:b5:69:f0:83:5d:41:90:af:c5:ba:0e:b3: 4b:9b:2e:eb:e7:3f:a9:b1:c2:2e:e4:e2:57:c7:6e:b2:ae:59: d1:ac:d9:c1 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUKJP/Wj31IhHoMtCveG66OPh/LDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGRTQzQjZGRjYyQzhBOEUyRjM2NkY1NTA0QUFDNkQx ODJEMkI4QjAeFw0yNjAzMTkxMzA4NTNaFw0yNzAzMTgxMzEzNTNaMDMxMTAvBgNV BAMTKDA3QkJGMUZFNkFCNDYyM0JCOUVCRDMyQTQ5NDBFNEE3RjE2QThFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWkQp+8iSICjbPeoiwG0LUeRj 9iw1FFlkGRolQPwxS/VuYPE1kHlFpBU0sudUnyemaBJAurDe4sTP9ICU7lOHxG27 vvmtNIyenuAsEE2o6KltU4TsECsstEaFZejVGM8cvU2mWNPOjNSaWXDojKEECAp4 qcgZHtg3h4EfBuqRs3yPbC3dtFK0IOLZ3JMDdlfTRF6ZptamWojNlD6YXfwj5ar0 D5LbmsiV5pgpIfQ9q5LMRpglyofRxNJnxZ9lLxUky4oC6ZicLt1jWImEar+av0Io 78jPzsvJ1FKp9MnakHYQyHpQdHNz16zyIEdCHZOxaBRMYf13KtSmCcELTd4PAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUB7vx/mq0Yju569MqSUDkp/FqjsIwHwYDVR0j BBgwFoAUK/5Dtv9iyKji82b1UEqsbRgtK4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8yQkZFNDNCNkZGNjJDOEE4RTJGMzY2RjU1MDRBQUM2RDE4MkQyQjhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRkU0M0I2RkY2MkM4QThF MkYzNjZGNTUwNEFBQzZEMTgyRDJCOEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhhaUJhTFBjUGpyejlOSFZobUV0eVVhOE1tem5GNDFXRlJ4ZFd1NFNZTVlDLzAv MzIzODMwMzEzYTM4MzAzYTMxMzkzMjMwM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNl MjAzMjM2MzQzOTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoAQCAGSAwDQYJKoZIhvcNAQELBQAD ggEBAJOiwMgZrnjaOJ6zt5sHFyx6nrsPr+FDHWzNdFw7gQFqKPl49t+rplaVcK0r 8Bb0Kcm4JfeGU4MvXKcB/LfL2YRR12Y175i/ZBBYrIYb5Zh5xb4LqNfocFuwY87z hrJHq/1nBA0GyWxf54aWrN2yy1zr5LE7A4X+PLUMtLK+Lnm4P8xkRWEKCuTTLtyz V+oYNuugjJYv69pMuZ9+VDBXvf6Kpocr2CFbxyNpTTp+6E071MvRshHYI/gEJLtZ HoCvnaZ+aozLR0wLV/9mb8o9FwaKNgXEafqDz3C13EQQN7Vp8INdQZCvxboOs0ub LuvnP6mxwi7k4lfHbrKuWdGs2cE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:31 2026 by rpki-client