$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a633030303a3a2f33342d3334203d3e203532393437.roa File: 323830343a316466343a633030303a3a2f33342d3334203d3e203532393437.roa (raw, json) Hash identifier: jQUFl0Zoznm3VoZXL+dMy8eR8zCeAxDwjGIaVxdsQL0= Subject key identifier: 24:A8:AB:71:B7:CA:E0:19:D1:39:E6:04:91:2E:5F:C2:F8:9F:EB:35 Certificate issuer: /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75 Certificate serial: 48E224272C8CC0868BEA18845775A8B61C1CB3E8 Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a633030303a3a2f33342d3334203d3e203532393437.roa Signing time: Fri 17 Jul 2026 13:03:37 +0000 ROA not before: Fri 17 Jul 2026 12:58:37 +0000 ROA not after: Fri 16 Jul 2027 13:03:37 +0000 asID: 52947 IP address blocks: 2804:1df4:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:24:27:2c:8c:c0:86:8b:ea:18:84:57:75:a8:b6:1c:1c:b3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75 Validity Not Before: Jul 17 12:58:37 2026 GMT Not After : Jul 16 13:03:37 2027 GMT Subject: CN=24A8AB71B7CAE019D139E604912E5FC2F89FEB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:ee:1e:45:ea:21:2d:06:c9:64:ab:b8:69: 5f:c2:35:0c:0a:7b:6f:38:2f:7c:cd:93:08:4b:06: 6e:06:fa:0c:49:a0:eb:88:b0:23:bc:9b:b5:1a:22: 40:20:d9:a9:aa:8c:c2:80:38:93:a3:d1:cd:43:d1: 21:9d:50:0c:82:c5:c9:df:fc:0c:1f:ad:34:d7:cb: 17:3b:d3:aa:d3:03:9f:e5:2f:c7:17:43:b3:86:7d: e4:9d:53:28:74:4c:b3:2b:b8:88:39:8c:12:f9:07: cf:38:22:17:90:76:d8:20:0b:31:84:9c:78:cf:52: 57:bc:67:9d:e7:6f:83:58:f6:36:c9:14:85:5c:04: 11:c5:19:c4:b8:d7:e4:59:1f:3c:2f:9a:fb:2b:bb: 41:fc:c8:2c:66:86:9d:ba:b3:0f:34:89:dc:8d:0e: 9b:f0:4b:2d:56:a0:a0:f1:2d:ee:b6:12:81:d8:32: 92:0c:e5:d8:96:cc:a2:9d:e8:e4:a5:c3:64:73:bb: fe:24:88:e5:e3:56:78:ba:11:c1:e4:cb:e8:95:a8: 5c:62:ee:00:77:8f:3b:b4:e6:f0:cd:0b:00:c3:27: 71:42:30:7e:e4:97:02:2c:b1:a7:ce:64:cf:42:4b: 96:39:a7:cd:8f:a9:12:96:9c:d9:86:fd:f4:f0:66: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:AB:71:B7:CA:E0:19:D1:39:E6:04:91:2E:5F:C2:F8:9F:EB:35 X509v3 Authority Key Identifier: keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a633030303a3a2f33342d3334203d3e203532393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1df4:c000::/34 Signature Algorithm: sha256WithRSAEncryption 62:f9:06:a6:2f:c7:d7:0f:be:fd:c0:d7:44:d8:ec:6a:6e:4a: 0e:28:ab:3c:4d:0e:3e:6c:38:7b:fb:ed:e4:83:c4:b3:0e:4b: 91:21:ff:3d:3c:5f:57:af:ea:b5:1d:05:64:45:19:d3:1a:25: cb:83:92:7e:a1:07:3e:77:5a:0c:7f:c6:c3:15:a2:1b:93:c2: 1e:c0:04:89:e4:7a:4e:fb:ff:fa:10:29:50:9d:9a:8b:5a:03: 76:37:94:6f:5d:3b:38:7f:de:fc:3a:54:3d:ac:2a:63:9f:20: 26:c1:ff:5f:eb:9c:32:4f:06:88:9d:ce:64:d6:7f:8e:3d:f1: d2:74:b0:fa:74:65:9c:ce:91:cd:c8:06:19:86:52:99:c5:42: 25:4b:21:79:9f:d8:b1:d6:75:c9:ee:c2:6a:97:06:58:e7:7f: 6b:5f:72:c2:95:1e:fc:a0:f1:2e:2c:3e:6b:fd:b2:26:58:62: 7c:4b:94:72:ac:d2:c7:1d:d1:88:ca:a0:a4:28:b8:8e:94:bb: 77:58:7f:0c:57:9d:1c:44:37:54:07:6e:22:a5:35:e8:07:d3: d2:82:a7:df:90:1f:e9:8a:6f:57:23:76:41:ad:2c:c8:5e:10: 1f:39:10:24:33:16:a2:c1:05:9c:8d:99:ca:00:55:0e:8b:76: 04:ab:f9:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOIkJyyMwIaL6hiEV3Wothwcs+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzNTU3OENBMjFDNkM4RTgyQUJGOTBCNTVBMjFGREMw NEI0RkY3NTAeFw0yNjA3MTcxMjU4MzdaFw0yNzA3MTYxMzAzMzdaMDMxMTAvBgNV BAMTKDI0QThBQjcxQjdDQUUwMTlEMTM5RTYwNDkxMkU1RkMyRjg5RkVCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81+4eReohLQbJZKu4aV/CNQwK e284L3zNkwhLBm4G+gxJoOuIsCO8m7UaIkAg2amqjMKAOJOj0c1D0SGdUAyCxcnf /AwfrTTXyxc706rTA5/lL8cXQ7OGfeSdUyh0TLMruIg5jBL5B884IheQdtggCzGE nHjPUle8Z53nb4NY9jbJFIVcBBHFGcS41+RZHzwvmvsru0H8yCxmhp26sw80idyN DpvwSy1WoKDxLe62EoHYMpIM5diWzKKd6OSlw2Rzu/4kiOXjVni6EcHky+iVqFxi 7gB3jzu05vDNCwDDJ3FCMH7klwIssafOZM9CS5Y5p82PqRKWnNmG/fTwZrP7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJKircbfK4BnROeYEkS5fwvif6zUwHwYDVR0j BBgwFoAULTVXjKIcbI6Cq/kLVaIf3AS0/3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlNZMnpZWnY2QjVwSHJwN1U5d3ZxRmdmeFBxSzZ1NW1nekczWHhkZ2gx NUovMC8yRDM1NTc4Q0EyMUM2QzhFODJBQkY5MEI1NUEyMUZEQzA0QjRGRjc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMzU1NzhDQTIxQzZDOEU4 MkFCRjkwQjU1QTIxRkRDMDRCNEZGNzUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JTWTJ6WVp2NkI1cEhycDdVOXd2cUZnZnhQcUs2dTVtZ3pHM1h4ZGdoMTVKLzAv MzIzODMwMzQzYTMxNjQ2NjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDM1MzIzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBB30wDANBgkqhkiG9w0BAQsFAAOC AQEAYvkGpi/H1w++/cDXRNjsam5KDiirPE0OPmw4e/vt5IPEsw5LkSH/PTxfV6/q tR0FZEUZ0xoly4OSfqEHPndaDH/GwxWiG5PCHsAEieR6Tvv/+hApUJ2ai1oDdjeU b107OH/e/DpUPawqY58gJsH/X+ucMk8GiJ3OZNZ/jj3x0nSw+nRlnM6RzcgGGYZS mcVCJUsheZ/YsdZ1ye7CapcGWOd/a19ywpUe/KDxLiw+a/2yJlhifEuUcqzSxx3R iMqgpCi4jpS7d1h/DFedHEQ3VAduIqU16AfT0oKn35Af6YpvVyN2Qa0syF4QHzkQ JDMWosEFnI2ZygBVDot2BKv5Ew== -----END CERTIFICATE-----Generated at Fri Jul 24 17:49:41 2026 by rpki-client