$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa File: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (raw, json) Hash identifier: Wr+68vW2l217FZ1wpAwL5Xi+E+yRsJbzjxamA1r4AB0= Subject key identifier: EE:3F:CE:C9:18:78:4E:BB:AD:06:94:D5:9F:0D:75:C9:6A:E8:10:39 Certificate issuer: /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76 Certificate serial: 4999A514EA8D9E690CDDADCFB4C8888E30A0EA11 Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer Subject info access: rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa Signing time: Fri 01 May 2026 18:18:37 +0000 ROA not before: Fri 01 May 2026 18:13:37 +0000 ROA not after: Fri 30 Apr 2027 18:18:37 +0000 asID: 262578 IP address blocks: 2804:658:a000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:99:a5:14:ea:8d:9e:69:0c:dd:ad:cf:b4:c8:88:8e:30:a0:ea:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76 Validity Not Before: May 1 18:13:37 2026 GMT Not After : Apr 30 18:18:37 2027 GMT Subject: CN=EE3FCEC918784EBBAD0694D59F0D75C96AE81039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:c2:93:3f:c8:8f:6c:e4:d7:2c:ba:e2:53: c4:fb:b4:7a:93:ac:be:3f:2e:95:97:ea:2a:07:b0: a7:87:75:29:50:40:89:e7:03:01:a9:08:48:6e:25: d7:0e:34:35:ff:cc:c4:94:13:1a:11:c5:50:65:f3: 32:99:d5:43:14:b9:d6:d7:f4:6c:67:9b:43:74:bf: 73:de:d9:10:dc:c7:df:ee:e4:58:36:8c:dc:fd:d3: 13:f6:58:63:46:05:86:93:70:ea:dd:79:6b:e2:d0: d1:d4:6e:b3:97:e7:06:71:81:af:ca:30:61:7c:67: 38:b0:36:d1:ae:4e:98:3b:aa:af:23:4e:a6:de:5a: bd:8b:12:3f:e6:d0:01:bc:da:01:29:e1:66:04:ba: e6:53:8d:8f:a1:78:56:27:19:a1:b0:66:f1:11:db: 32:49:86:5d:e6:f8:4d:05:62:01:46:bb:81:f4:5f: db:07:fc:b1:3b:56:dd:57:8b:3d:70:9b:2e:34:c1: 0d:13:de:84:cb:1f:3b:97:92:29:40:86:72:77:c6: 5d:c6:bb:ec:dc:30:49:3d:72:39:01:ba:02:2f:a0: 68:5e:b4:12:64:85:a8:56:e5:62:d5:ce:b9:51:16: 0b:e5:aa:a4:dc:26:ac:c9:a7:00:da:dc:96:f4:99: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3F:CE:C9:18:78:4E:BB:AD:06:94:D5:9F:0D:75:C9:6A:E8:10:39 X509v3 Authority Key Identifier: keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:658:a000::/35 Signature Algorithm: sha256WithRSAEncryption 9d:ed:d5:30:88:57:1c:30:bc:53:6a:4f:66:46:84:13:ae:93: 82:68:0f:84:68:e0:c5:c6:f2:56:d9:b3:a5:6c:ed:89:8d:0a: 4c:ed:44:bd:cb:33:8f:ea:22:82:69:df:b2:3a:bc:75:56:39: 6d:ac:3b:91:c5:e7:82:44:82:c8:82:e7:63:39:10:f9:3e:81: fb:d0:f4:85:56:f0:97:f4:55:a1:11:eb:7b:a7:f1:fa:e8:a3: 73:d5:b2:45:fd:f4:64:34:02:93:b1:c7:3d:0c:19:26:50:c8: 0e:21:bb:36:e5:ef:c3:72:32:cc:9b:4a:fa:2c:8d:19:57:2e: a9:ae:e6:74:8c:46:3e:fb:8e:4e:1e:a7:92:5e:28:05:13:6e: 55:3b:04:d3:f2:65:0f:61:f8:3a:3f:23:2a:d8:e5:a5:b5:d9: 89:3d:fb:1f:f9:85:bd:d0:03:1a:57:f1:c1:55:74:e4:b7:52: ed:58:e2:8b:9a:84:fc:a1:74:26:f5:02:c4:4c:c4:72:f2:7f: aa:00:83:4f:d2:95:88:3a:a8:5e:0e:12:51:4d:74:ad:bf:7a: ff:bb:68:6c:87:50:cd:68:ba:87:1e:97:51:4b:f3:52:8e:7d: 2a:a0:24:e8:80:9c:c6:19:61:89:b0:3c:54:63:1a:c0:de:ad: c1:b8:56:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSZmlFOqNnmkM3a3PtMiIjjCg6hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgwNDlEMDZDOUMzREQwOURCQjFBNDhBRjlEQTk0NkU5 RjU3QUU3NjAeFw0yNjA1MDExODEzMzdaFw0yNzA0MzAxODE4MzdaMDMxMTAvBgNV BAMTKEVFM0ZDRUM5MTg3ODRFQkJBRDA2OTRENTlGMEQ3NUM5NkFFODEwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/MKTP8iPbOTXLLriU8T7tHqT rL4/LpWX6ioHsKeHdSlQQInnAwGpCEhuJdcONDX/zMSUExoRxVBl8zKZ1UMUudbX 9Gxnm0N0v3Pe2RDcx9/u5Fg2jNz90xP2WGNGBYaTcOrdeWvi0NHUbrOX5wZxga/K MGF8ZziwNtGuTpg7qq8jTqbeWr2LEj/m0AG82gEp4WYEuuZTjY+heFYnGaGwZvER 2zJJhl3m+E0FYgFGu4H0X9sH/LE7Vt1Xiz1wmy40wQ0T3oTLHzuXkilAhnJ3xl3G u+zcMEk9cjkBugIvoGhetBJkhahW5WLVzrlRFgvlqqTcJqzJpwDa3Jb0md9LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7j/OyRh4TrutBpTVnw11yWroEDkwHwYDVR0j BBgwFoAUqASdBsnD3QnbsaSK+dqUbp9XrnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmNndlQ5SkU0WndkeE1EWlE4NVNFZm1MSmFzMjVLeUFSVHRCemJNNEw0 QkEvMC9BODA0OUQwNkM5QzNERDA5REJCMUE0OEFGOURBOTQ2RTlGNTdBRTc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MDQ5RDA2QzlDM0REMDlE QkIxQTQ4QUY5REE5NDZFOUY1N0FFNzYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JjZ3ZUOUpFNFp3ZHhNRFpRODVTRWZtTEphczI1S3lBUlR0QnpiTTRMNEJBLzAv MzIzODMwMzQzYTM2MzUzODNhNjEzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl MjAzMjM2MzIzNTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBAZYoDANBgkqhkiG9w0BAQsFAAOC AQEAne3VMIhXHDC8U2pPZkaEE66TgmgPhGjgxcbyVtmzpWztiY0KTO1Evcszj+oi gmnfsjq8dVY5baw7kcXngkSCyILnYzkQ+T6B+9D0hVbwl/RVoRHre6fx+uijc9Wy Rf30ZDQCk7HHPQwZJlDIDiG7NuXvw3IyzJtK+iyNGVcuqa7mdIxGPvuOTh6nkl4o BRNuVTsE0/JlD2H4Oj8jKtjlpbXZiT37H/mFvdADGlfxwVV05LdS7Vjii5qE/KF0 JvUCxEzEcvJ/qgCDT9KViDqoXg4SUU10rb96/7tobIdQzWi6hx6XUUvzUo59KqAk 6ICcxhlhibA8VGMawN6twbhW3g== -----END CERTIFICATE-----Generated at Wed May 13 16:41:48 2026 by rpki-client