$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33332d3333203d3e20323639363536.roa File: 323830343a363765303a383030303a3a2f33332d3333203d3e20323639363536.roa (raw, json) Hash identifier: +oPMaP6yHyytpa08M5GIvyzf9pXNQ6TBLUVqNiK+Z1Y= Subject key identifier: 2C:E4:55:C4:97:B9:23:A5:24:A1:75:29:C1:D4:3F:86:0A:B6:E8:3E Certificate issuer: /CN=49C708D013D5FE74999800FB265B16FDF89861D3 Certificate serial: 52475FA9EB8DB61D92449385F4E41DB4761DC1E1 Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33332d3333203d3e20323639363536.roa Signing time: Thu 08 Oct 2026 19:02:34 +0000 ROA not before: Thu 08 Oct 2026 18:57:34 +0000 ROA not after: Thu 07 Oct 2027 19:02:34 +0000 asID: 269656 IP address blocks: 2804:67e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 08:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:47:5f:a9:eb:8d:b6:1d:92:44:93:85:f4:e4:1d:b4:76:1d:c1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3 Validity Not Before: Oct 8 18:57:34 2026 GMT Not After : Oct 7 19:02:34 2027 GMT Subject: CN=2CE455C497B923A524A17529C1D43F860AB6E83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:53:c4:b4:50:4a:f3:9f:dc:53:3f:7d:48: 47:ae:5e:4c:5e:46:2e:97:9c:84:9e:03:1a:2b:c3: 67:9c:a0:bf:ae:0c:c7:af:07:7e:d6:c8:33:3e:76: b2:42:0b:8b:c0:b4:02:ab:67:c8:d4:d3:fd:c2:9e: b1:87:43:e3:3e:72:3d:82:68:e9:b1:ff:b4:e2:c2: f2:e7:99:f7:39:73:0d:fc:75:9a:5f:08:22:c7:5b: 21:e7:54:50:31:87:0c:91:b4:19:54:91:1d:cc:b2: d9:af:57:0f:93:61:be:ff:dc:f9:99:52:6c:5d:92: d0:64:fb:04:8a:6a:e7:90:bd:b1:4a:de:0c:1e:c4: 1d:f2:f2:12:68:65:c5:33:5b:9f:b8:2d:f4:b7:50: 7f:e4:ad:cd:d1:13:c9:71:d1:b5:be:f5:ef:47:0c: 73:b3:07:dd:04:a8:17:fc:fd:9d:0b:b0:65:c9:0e: 5d:c3:c4:81:4d:e9:1b:43:ae:d4:0c:ec:06:4b:7b: 6d:d1:ae:ac:0d:f8:9b:e5:cd:5b:bd:09:d3:41:04: 49:38:4f:c7:fd:74:e1:ee:99:29:c6:35:57:1b:d1: 91:d2:17:ca:fc:bb:0c:70:ee:6c:ba:fc:90:dd:ee: b2:be:d8:28:c0:38:b4:da:1f:dc:0c:15:52:56:bf: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:55:C4:97:B9:23:A5:24:A1:75:29:C1:D4:3F:86:0A:B6:E8:3E X509v3 Authority Key Identifier: keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33332d3333203d3e20323639363536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:67e0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 48:ec:e2:37:1e:8f:b2:66:69:d4:be:08:e4:77:f6:d9:93:c6: 79:aa:13:19:45:e4:35:94:dc:9f:5b:9a:a3:77:6e:b9:5d:9e: c8:81:eb:fa:dd:dd:d4:01:b9:f3:68:48:2c:ef:73:b5:e0:eb: 85:e7:cb:bd:11:7c:72:16:53:e6:02:84:2f:bc:b7:81:56:79: 80:81:31:0e:fa:ff:79:88:d4:4b:ab:65:f7:cc:db:65:8c:98: 92:ef:26:1c:7a:5e:17:a0:55:b9:1d:f0:e6:32:ce:d8:be:e0: 2d:8b:aa:c4:a9:dd:07:64:7b:74:5d:a0:32:a2:10:25:92:aa: 7e:24:97:d2:4e:b2:be:0b:f1:80:a1:2a:3c:12:6e:60:a0:60: ac:df:3e:76:79:42:ef:4d:50:ab:2e:fa:e6:3a:04:17:b8:0b: a1:63:d2:12:b6:66:12:d6:54:ec:42:9b:a4:36:d2:7a:9e:2b: 16:39:bd:25:18:7c:4b:b1:48:c1:b6:d2:e1:6e:3a:28:c0:7b: e9:d9:82:a8:7a:62:95:07:db:43:84:22:c3:e1:e1:97:6b:fd: 47:73:fc:86:6b:f5:7b:8b:82:92:10:60:49:88:d9:3f:31:d9: db:58:73:10:ad:b1:6c:50:b6:89:0e:0f:a1:17:c4:7f:27:f8: 53:6d:5e:c3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUkdfqeuNth2SRJOF9OQdtHYdweEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlDNzA4RDAxM0Q1RkU3NDk5OTgwMEZCMjY1QjE2RkRG ODk4NjFEMzAeFw0yNjEwMDgxODU3MzRaFw0yNzEwMDcxOTAyMzRaMDMxMTAvBgNV BAMTKDJDRTQ1NUM0OTdCOTIzQTUyNEExNzUyOUMxRDQzRjg2MEFCNkU4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssFPEtFBK85/cUz99SEeuXkxe Ri6XnISeAxorw2ecoL+uDMevB37WyDM+drJCC4vAtAKrZ8jU0/3CnrGHQ+M+cj2C aOmx/7TiwvLnmfc5cw38dZpfCCLHWyHnVFAxhwyRtBlUkR3MstmvVw+TYb7/3PmZ UmxdktBk+wSKaueQvbFK3gwexB3y8hJoZcUzW5+4LfS3UH/krc3RE8lx0bW+9e9H DHOzB90EqBf8/Z0LsGXJDl3DxIFN6RtDrtQM7AZLe23RrqwN+JvlzVu9CdNBBEk4 T8f9dOHumSnGNVcb0ZHSF8r8uwxw7my6/JDd7rK+2CjAOLTaH9wMFVJWv59fAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULORVxJe5I6UkoXUpwdQ/hgq26D4wHwYDVR0j BBgwFoAUSccI0BPV/nSZmAD7JlsW/fiYYdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkQ1S3FRamlyaWhZNkJURFJnb3F1MkpocjZYV3BFekd2cFhURGVmS0hG OHYvMC80OUM3MDhEMDEzRDVGRTc0OTk5ODAwRkIyNjVCMTZGREY4OTg2MUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzcwOEQwMTNENUZFNzQ5 OTk4MDBGQjI2NUIxNkZERjg5ODYxRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JENUtxUWppcmloWTZCVERSZ29xdTJKaHI2WFdwRXpHdnBYVERlZktIRjh2LzAv MzIzODMwMzQzYTM2Mzc2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzOTM2MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZ+CAMA0GCSqGSIb3DQEBCwUA A4IBAQBI7OI3Ho+yZmnUvgjkd/bZk8Z5qhMZReQ1lNyfW5qjd265XZ7Igev63d3U AbnzaEgs73O14OuF58u9EXxyFlPmAoQvvLeBVnmAgTEO+v95iNRLq2X3zNtljJiS 7yYcel4XoFW5HfDmMs7YvuAti6rEqd0HZHt0XaAyohAlkqp+JJfSTrK+C/GAoSo8 Em5goGCs3z52eULvTVCrLvrmOgQXuAuhY9IStmYS1lTsQpukNtJ6nisWOb0lGHxL sUjBttLhbjoowHvp2YKoemKVB9tDhCLD4eGXa/1Hc/yGa/V7i4KSEGBJiNk/Mdnb WHMQrbFsULaJDg+hF8R/J/hTbV7D -----END CERTIFICATE-----Generated at Tue Nov 3 13:54:38 2026 by rpki-client