$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa File: 323830343a61343a3a2f33322d313238203d3e203238363439.roa (raw, json) Hash identifier: jO8BYtmm1tZXD7YSs6jWvXb39Q2rN8rwwjqxw3fYd1g= Subject key identifier: E3:71:4B:03:8D:8D:D0:A0:BB:DA:0E:51:1A:D5:14:67:43:08:A1:18 Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Certificate serial: 37314F060F7DA9515E9BEB8315424E67BD2A5CA7 Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa Signing time: Fri 17 Jul 2026 21:01:09 +0000 ROA not before: Fri 17 Jul 2026 20:56:09 +0000 ROA not after: Fri 16 Jul 2027 21:01:09 +0000 asID: 28649 IP address blocks: 2804:a4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:31:4f:06:0f:7d:a9:51:5e:9b:eb:83:15:42:4e:67:bd:2a:5c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Validity Not Before: Jul 17 20:56:09 2026 GMT Not After : Jul 16 21:01:09 2027 GMT Subject: CN=E3714B038D8DD0A0BBDA0E511AD514674308A118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:e7:76:38:43:ef:ef:5a:de:da:e1:d3:0d: 93:0f:99:6e:47:a8:20:ac:80:8c:49:96:94:0e:91: 40:70:94:d8:0a:2c:58:a9:d2:98:43:59:31:84:8c: c4:a1:69:28:95:f5:67:83:c7:34:c1:f2:45:0d:2a: de:0b:09:ff:db:b0:13:a6:a0:43:8f:46:da:4b:a4: 2f:4d:3c:cb:1a:83:62:54:d0:f6:5a:62:30:61:dd: 40:43:ef:6e:4e:43:25:07:4b:79:19:65:02:72:ce: bc:de:e2:7c:40:9f:fd:c9:6c:c9:b9:a3:62:a0:a4: 5a:d9:7e:1a:4a:09:1d:11:36:58:58:dc:c9:06:cf: 29:56:b7:48:ac:e1:3b:b3:44:15:91:6b:38:d2:5d: 73:b1:4c:2f:12:5d:cb:5b:a7:5f:e7:7c:1f:77:83: 98:b2:78:f2:ac:06:de:3d:97:47:64:3d:f9:a3:b1: cf:16:c0:11:4d:eb:e5:c6:ad:a3:7c:ce:f7:bb:d9: 66:15:dc:a5:d3:87:95:99:36:4a:bd:2d:88:41:65: 39:a6:10:8e:6f:01:6e:23:b8:1f:5a:16:46:cd:e4: 10:4f:d8:1f:33:aa:72:e1:2c:53:5e:e2:26:ea:fd: f1:b1:da:15:19:e1:1e:a3:f4:c9:09:bc:d9:fb:a9: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:4B:03:8D:8D:D0:A0:BB:DA:0E:51:1A:D5:14:67:43:08:A1:18 X509v3 Authority Key Identifier: keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a4::/32 Signature Algorithm: sha256WithRSAEncryption e1:a1:47:4e:26:8d:e3:d9:50:f1:a8:66:fd:3c:c5:d8:4a:f6: 07:43:88:03:28:77:90:79:04:5b:f7:a1:45:ff:f0:30:6c:ec: 75:1c:86:c2:6b:5a:e6:ac:5d:60:c9:d8:90:36:0b:a0:8f:8b: e5:b9:14:6f:95:40:b1:51:d8:be:31:06:5b:32:31:d1:c0:9b: a9:af:53:78:6b:73:04:2f:9f:dc:d7:a4:81:56:45:5e:e7:f3: eb:7d:b3:b4:e1:cd:cb:3a:33:2f:43:b1:1c:28:8b:c6:6b:07: 1c:9e:3c:e0:48:e6:8f:b7:24:7d:64:e1:35:4a:44:92:78:58: d5:d0:bb:25:5a:33:4c:cf:83:98:72:86:c6:01:fd:02:9a:8a: 27:11:2f:d6:fa:6e:0b:fb:7a:fa:05:b0:af:c9:6b:fe:2b:1e: 26:cd:2c:65:a0:5c:dd:b6:7a:c2:1a:96:f6:5d:5a:9d:c5:c1: d7:80:90:fb:fc:80:15:7d:ec:94:13:55:83:5a:2d:3e:bf:bb: 80:fc:c1:36:77:f8:20:0b:d0:be:3b:cc:4b:e8:fc:d8:4c:49: 61:c6:b4:f9:07:ff:78:bf:81:9b:b7:7d:49:ce:64:3d:d4:1a: 61:cc:02:15:db:95:e8:0d:d1:2c:26:26:cb:ff:97:c3:27:b9: df:61:97:a1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUNzFPBg99qVFem+uDFUJOZ70qXKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG RjBDNTY1MjAeFw0yNjA3MTcyMDU2MDlaFw0yNzA3MTYyMTAxMDlaMDMxMTAvBgNV BAMTKEUzNzE0QjAzOEQ4REQwQTBCQkRBMEU1MTFBRDUxNDY3NDMwOEExMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznOd2OEPv71re2uHTDZMPmW5H qCCsgIxJlpQOkUBwlNgKLFip0phDWTGEjMShaSiV9WeDxzTB8kUNKt4LCf/bsBOm oEOPRtpLpC9NPMsag2JU0PZaYjBh3UBD725OQyUHS3kZZQJyzrze4nxAn/3JbMm5 o2KgpFrZfhpKCR0RNlhY3MkGzylWt0is4TuzRBWRazjSXXOxTC8SXctbp1/nfB93 g5iyePKsBt49l0dkPfmjsc8WwBFN6+XGraN8zve72WYV3KXTh5WZNkq9LYhBZTmm EI5vAW4juB9aFkbN5BBP2B8zqnLhLFNe4ibq/fGx2hUZ4R6j9MkJvNn7qRO/AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU43FLA42N0KC72g5RGtUUZ0MIoRgwHwYDVR0j BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv MzIzODMwMzQzYTYxMzQzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzgzNjM0 Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBACkMA0GCSqGSIb3DQEBCwUAA4IBAQDhoUdOJo3j2VDx qGb9PMXYSvYHQ4gDKHeQeQRb96FF//AwbOx1HIbCa1rmrF1gydiQNgugj4vluRRv lUCxUdi+MQZbMjHRwJupr1N4a3MEL5/c16SBVkVe5/PrfbO04c3LOjMvQ7EcKIvG awccnjzgSOaPtyR9ZOE1SkSSeFjV0LslWjNMz4OYcobGAf0CmoonES/W+m4L+3r6 BbCvyWv+Kx4mzSxloFzdtnrCGpb2XVqdxcHXgJD7/IAVfeyUE1WDWi0+v7uA/ME2 d/ggC9C+O8xL6PzYTElhxrT5B/94v4Gbt31JzmQ91BphzAIV25XoDdEsJibL/5fD J7nfYZeh -----END CERTIFICATE-----Generated at Fri Jul 24 17:55:42 2026 by rpki-client