$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa File: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (raw, json) Hash identifier: Gei1DA7/7nENIjNvHyzkMODvFsSBBjdlpD9hv3F1unw= Subject key identifier: 3B:94:43:10:01:3B:4E:2B:6E:17:30:23:C8:4E:2C:30:67:9C:03:A6 Certificate issuer: /CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408 Certificate serial: 16EA568B6F320145FCB68DC4D88AA4416DBFFC4F Authority key identifier: 63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa Signing time: Thu 19 Mar 2026 01:42:30 +0000 ROA not before: Thu 19 Mar 2026 01:37:30 +0000 ROA not after: Thu 18 Mar 2027 01:42:30 +0000 asID: 272245 IP address blocks: 2804:8430:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:56:8b:6f:32:01:45:fc:b6:8d:c4:d8:8a:a4:41:6d:bf:fc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408 Validity Not Before: Mar 19 01:37:30 2026 GMT Not After : Mar 18 01:42:30 2027 GMT Subject: CN=3B944310013B4E2B6E173023C84E2C30679C03A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:1b:3e:a8:51:bb:02:c5:e1:ff:fb:4b:17: 4e:93:e0:ea:c5:36:ff:b1:2a:d4:7f:f5:df:b2:1a: 2a:43:bc:c5:53:af:95:a4:7c:ee:16:65:a8:18:2b: 07:08:c0:41:ac:90:00:de:31:88:5c:dd:92:e1:f5: 94:cb:1e:1c:66:05:20:d1:a7:d9:a3:f9:a5:02:72: 69:7b:ac:0d:5e:89:2d:cb:90:d3:d3:ec:05:50:5e: 5c:ce:36:b8:c1:7c:de:8a:b5:5a:f8:16:34:5e:5c: 64:49:ad:e1:4e:56:8d:8f:98:7e:75:d3:f8:4d:9d: 1b:51:3c:0d:03:2e:57:6d:78:38:9d:5b:d5:c7:50: ad:88:01:53:2f:6a:2c:63:7f:01:fa:30:e8:d3:06: d3:ab:32:5c:3e:5d:69:8a:0b:de:1e:5b:d0:cf:0d: c0:70:f4:c6:21:41:b4:1d:96:9c:31:12:19:a8:9f: 83:91:68:37:99:b3:58:c4:b3:6d:43:6b:eb:c8:44: 0b:db:c9:33:6b:84:10:b1:ba:58:46:e2:f4:9d:4e: 1d:d5:7a:fd:30:5b:10:7b:47:02:63:a8:9d:d9:48: 20:7b:4f:bf:26:46:fd:ff:ae:51:2f:0e:e5:08:34: 39:c7:90:94:03:d7:d3:b3:85:a9:8e:92:1c:d8:b4: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:94:43:10:01:3B:4E:2B:6E:17:30:23:C8:4E:2C:30:67:9C:03:A6 X509v3 Authority Key Identifier: keyid:63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8430:c000::/34 Signature Algorithm: sha256WithRSAEncryption 3c:4e:37:d2:f7:74:ef:6d:df:77:0c:b5:00:58:3b:01:8b:91: 0a:fc:fa:0b:ec:24:e4:f6:3d:6a:6f:69:a1:82:1c:b0:09:9d: 51:2e:a0:27:9b:b7:3f:ef:b9:ac:10:6e:0f:31:5e:2b:0b:f0: 67:30:b1:bb:1d:b1:82:ae:c2:4f:2f:0c:fc:d0:58:4e:2f:e2: 50:ee:fe:93:3d:36:1d:47:a8:b5:df:16:01:ae:0c:74:5b:0c: 59:16:5a:d4:04:ea:fd:e6:a1:97:80:69:d4:c0:17:54:0c:55: 64:07:5c:ac:62:90:5f:95:cf:42:8e:b5:79:96:46:bd:d3:50: 71:f2:e5:46:b9:05:97:fc:7e:73:b7:75:71:06:3e:ff:e5:69: a5:ba:bc:11:c1:19:1e:64:5f:62:f7:e8:a5:c9:f4:b7:53:96: 76:3b:9f:1d:b4:8b:8e:c9:60:85:78:52:1d:c5:7f:13:5a:f8: ab:5c:e0:4b:8a:ba:00:37:4c:2b:8c:5c:96:1f:05:f4:50:4b: 2c:a8:4b:84:6a:b2:10:e7:6a:d9:4a:37:a0:8e:10:4c:d8:63: 86:2b:b9:21:72:32:81:21:43:6d:59:d7:b5:22:4b:8c:ae:56: ec:5d:46:3e:bf:b4:b9:dc:b5:4a:8a:86:89:23:63:75:71:f3: fb:bf:c3:a7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUFupWi28yAUX8to3E2IqkQW2//E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyMTk1QjY3REYzQUM3RTNFMENDQzJCRjgzQUZBNTVE QjQyRDQwODAeFw0yNjAzMTkwMTM3MzBaFw0yNzAzMTgwMTQyMzBaMDMxMTAvBgNV BAMTKDNCOTQ0MzEwMDEzQjRFMkI2RTE3MzAyM0M4NEUyQzMwNjc5QzAzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLBs+qFG7AsXh//tLF06T4OrF Nv+xKtR/9d+yGipDvMVTr5WkfO4WZagYKwcIwEGskADeMYhc3ZLh9ZTLHhxmBSDR p9mj+aUCcml7rA1eiS3LkNPT7AVQXlzONrjBfN6KtVr4FjReXGRJreFOVo2PmH51 0/hNnRtRPA0DLldteDidW9XHUK2IAVMvaixjfwH6MOjTBtOrMlw+XWmKC94eW9DP DcBw9MYhQbQdlpwxEhmon4ORaDeZs1jEs21Da+vIRAvbyTNrhBCxulhG4vSdTh3V ev0wWxB7RwJjqJ3ZSCB7T78mRv3/rlEvDuUINDnHkJQD19OzhamOkhzYtMRpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUO5RDEAE7TituFzAjyE4sMGecA6YwHwYDVR0j BBgwFoAUYyGVtn3zrH4+DMwr+Dr6VdtC1AgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ ZnAvMC82MzIxOTVCNjdERjNBQzdFM0UwQ0NDMkJGODNBRkE1NURCNDJENDA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjE5NUI2N0RGM0FDN0Uz RTBDQ0MyQkY4M0FGQTU1REI0MkQ0MDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JkOGd3QWFuM0xmS1VoTEJOcGFBeERrR0ZHZVdyeFVkTGN0bkp3ZVZIUGZwLzAv MzIzODMwMzQzYTM4MzQzMzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMjMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhDDAMA0GCSqGSIb3DQEBCwUA A4IBAQA8TjfS93Tvbd93DLUAWDsBi5EK/PoL7CTk9j1qb2mhghywCZ1RLqAnm7c/ 77msEG4PMV4rC/BnMLG7HbGCrsJPLwz80FhOL+JQ7v6TPTYdR6i13xYBrgx0WwxZ FlrUBOr95qGXgGnUwBdUDFVkB1ysYpBflc9CjrV5lka901Bx8uVGuQWX/H5zt3Vx Bj7/5WmlurwRwRkeZF9i9+ilyfS3U5Z2O58dtIuOyWCFeFIdxX8TWvirXOBLiroA N0wrjFyWHwX0UEssqEuEarIQ52rZSjegjhBM2GOGK7khcjKBIUNtWde1IkuMrlbs XUY+v7S53LVKioaJI2N1cfP7v8On -----END CERTIFICATE-----Generated at Thu Mar 26 01:21:48 2026 by rpki-client