$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33342d3334203d3e20323635303238.roa File: 323830343a333161343a383030303a3a2f33342d3334203d3e20323635303238.roa (raw, json) Hash identifier: s3zctrJkK+tDf61dUqgKnOvgtPo4JKgyUJKNA8jSf0U= Subject key identifier: A9:2E:75:4D:DE:10:36:AE:BB:24:D6:44:63:65:B6:5A:3E:FE:30:48 Certificate issuer: /CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4 Certificate serial: 5DD64B5F40FB32A1C206BEE4687ABCAE28549D53 Authority key identifier: 34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33342d3334203d3e20323635303238.roa Signing time: Fri 24 Apr 2026 22:19:07 +0000 ROA not before: Fri 24 Apr 2026 22:14:07 +0000 ROA not after: Fri 23 Apr 2027 22:19:07 +0000 asID: 265028 IP address blocks: 2804:31a4:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d6:4b:5f:40:fb:32:a1:c2:06:be:e4:68:7a:bc:ae:28:54:9d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4 Validity Not Before: Apr 24 22:14:07 2026 GMT Not After : Apr 23 22:19:07 2027 GMT Subject: CN=A92E754DDE1036AEBB24D6446365B65A3EFE3048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:fd:6f:30:e3:54:6c:c4:9c:74:07:5c:01: 5e:b8:88:e3:6d:03:d9:d0:d3:1b:dd:fe:27:5f:f6: 3a:19:c4:11:f6:80:95:2a:61:8c:b1:91:6d:93:d6: 62:0b:ad:f9:56:91:16:23:c7:83:43:ee:40:f8:01: 8f:32:40:16:c7:08:c2:99:33:f5:d3:e5:73:90:97: 8a:c0:d3:2d:6b:10:64:a7:f6:9f:dc:40:cd:a7:60: 34:08:fb:79:5d:ee:c8:18:11:68:a9:f1:ec:ee:3f: 68:be:5d:86:61:82:68:b0:84:f8:d0:c8:a8:75:79: cd:6d:4c:1f:18:df:8a:3a:64:29:b1:a4:d8:8e:d2: 2d:29:03:b5:ec:0f:fb:78:0e:e1:9b:11:c4:28:e2: 8e:35:a5:b4:43:48:b9:de:f2:8c:16:ce:7f:6b:4f: 1f:c4:81:a2:69:1f:86:d0:95:4a:3a:c6:b0:49:a4: 31:9e:bd:81:19:3f:f2:03:c5:f5:67:07:46:06:6d: ff:24:bc:dc:65:6b:5b:13:42:95:99:4e:06:77:1c: 71:9b:9b:78:d9:2e:86:d8:cb:e4:53:9f:60:ef:2b: 57:11:b2:e1:73:4d:e5:41:b0:0e:ed:24:06:b4:3d: 77:a9:33:47:71:1d:bd:36:bb:c6:8a:96:7f:7f:c6: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:75:4D:DE:10:36:AE:BB:24:D6:44:63:65:B6:5A:3E:FE:30:48 X509v3 Authority Key Identifier: keyid:34:2C:FA:1C:A2:D2:01:64:4C:FE:5D:2B:A6:1B:C3:59:8F:CA:D2:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/342CFA1CA2D201644CFE5D2BA61BC3598FCAD2B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a383030303a3a2f33342d3334203d3e20323635303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:31a4:8000::/34 Signature Algorithm: sha256WithRSAEncryption e9:22:63:4b:d3:42:bf:5e:1b:49:ec:f3:7a:a7:06:23:98:67: 37:cb:d2:5b:20:f3:3f:98:0a:c4:c4:a0:14:ff:13:24:5b:15: c4:e9:7f:9c:73:07:c3:c2:05:64:80:40:17:72:9c:a0:d3:13: 90:05:b7:ce:ff:40:4c:12:f4:54:76:38:af:b1:2f:40:af:23: 96:ee:3d:24:75:3a:01:e4:b8:ca:4e:0f:08:bb:61:ab:40:29: f2:b2:ec:a8:27:e9:ba:f4:ed:a1:bc:0f:24:e4:68:22:23:55: 71:a6:3e:ac:bd:62:a0:60:5f:0e:68:72:5c:2e:cc:b7:a4:48: c4:c6:71:3c:cd:90:68:3f:15:99:7c:ca:55:ea:b3:f9:12:55: 02:92:17:3c:00:2a:d8:d8:6b:d6:0a:dd:94:ed:23:84:89:21: b2:46:73:ef:ac:d1:27:80:a8:b6:ea:6a:28:56:be:24:de:8e: b7:31:5f:68:e9:21:fb:c6:52:72:18:20:87:e3:b0:a6:0e:fa: 74:d2:a5:84:e6:39:e7:f7:00:da:30:24:29:1c:b0:05:76:83: 0a:42:19:91:04:8d:84:76:1b:2a:61:e9:ed:54:62:13:d1:7e: e6:23:d5:07:db:38:43:aa:a6:df:5d:d8:be:5d:82:9d:34:17: 9f:63:34:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUXdZLX0D7MqHCBr7kaHq8rihUnVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQ0ZBMUNBMkQyMDE2NDRDRkU1RDJCQTYxQkMzNTk4 RkNBRDJCNDAeFw0yNjA0MjQyMjE0MDdaFw0yNzA0MjMyMjE5MDdaMDMxMTAvBgNV BAMTKEE5MkU3NTREREUxMDM2QUVCQjI0RDY0NDYzNjVCNjVBM0VGRTMwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn/1vMONUbMScdAdcAV64iONt A9nQ0xvd/idf9joZxBH2gJUqYYyxkW2T1mILrflWkRYjx4ND7kD4AY8yQBbHCMKZ M/XT5XOQl4rA0y1rEGSn9p/cQM2nYDQI+3ld7sgYEWip8ezuP2i+XYZhgmiwhPjQ yKh1ec1tTB8Y34o6ZCmxpNiO0i0pA7XsD/t4DuGbEcQo4o41pbRDSLne8owWzn9r Tx/EgaJpH4bQlUo6xrBJpDGevYEZP/IDxfVnB0YGbf8kvNxla1sTQpWZTgZ3HHGb m3jZLobYy+RTn2DvK1cRsuFzTeVBsA7tJAa0PXepM0dxHb02u8aKln9/xvWTAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUqS51Td4QNq67JNZEY2W2Wj7+MEgwHwYDVR0j BBgwFoAUNCz6HKLSAWRM/l0rphvDWY/K0rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUF1cW5QWWN1aWt6RHNGSlYxU3o2Y0pXZlhuekNVZ2R4MWRkZGY4NFlj cUsvMC8zNDJDRkExQ0EyRDIwMTY0NENGRTVEMkJBNjFCQzM1OThGQ0FEMkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0MkNGQTFDQTJEMjAxNjQ0 Q0ZFNUQyQkE2MUJDMzU5OEZDQUQyQjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FBdXFuUFljdWlrekRzRkpWMVN6NmNKV2ZYbnpDVWdkeDFkZGRmODRZY3FLLzAv MzIzODMwMzQzYTMzMzE2MTM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTMwMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMaSAMA0GCSqGSIb3DQEBCwUA A4IBAQDpImNL00K/XhtJ7PN6pwYjmGc3y9JbIPM/mArExKAU/xMkWxXE6X+ccwfD wgVkgEAXcpyg0xOQBbfO/0BMEvRUdjivsS9AryOW7j0kdToB5LjKTg8Iu2GrQCny suyoJ+m69O2hvA8k5GgiI1Vxpj6svWKgYF8OaHJcLsy3pEjExnE8zZBoPxWZfMpV 6rP5ElUCkhc8ACrY2GvWCt2U7SOEiSGyRnPvrNEngKi26mooVr4k3o63MV9o6SH7 xlJyGCCH47CmDvp00qWE5jnn9wDaMCQpHLAFdoMKQhmRBI2EdhsqYentVGIT0X7m I9UH2zhDqqbfXdi+XYKdNBefYzTN -----END CERTIFICATE-----Generated at Wed May 13 16:41:21 2026 by rpki-client