$ rpki-client -vvvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3139393a3a2f34382d3438203d3e20323730373635.roa File: 323830343a373131343a3139393a3a2f34382d3438203d3e20323730373635.roa (raw, json) Hash identifier: fkhVAk5GC0L/L1ceH60yREp55e+mL8WGvUNjd+S0qgg= Subject key identifier: 1E:3B:B7:61:65:7C:0C:B8:99:B2:9F:CB:3D:73:A9:5F:A0:47:84:94 Certificate issuer: /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A Certificate serial: 589183C5294449321F90C6D6F47B71B0A5343656 Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3139393a3a2f34382d3438203d3e20323730373635.roa Signing time: Sun 01 Nov 2026 16:49:05 +0000 ROA not before: Sun 01 Nov 2026 16:44:05 +0000 ROA not after: Sun 31 Oct 2027 16:49:05 +0000 asID: 270765 IP address blocks: 2804:7114:199::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 19:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:91:83:c5:29:44:49:32:1f:90:c6:d6:f4:7b:71:b0:a5:34:36:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A Validity Not Before: Nov 1 16:44:05 2026 GMT Not After : Oct 31 16:49:05 2027 GMT Subject: CN=1E3BB761657C0CB899B29FCB3D73A95FA0478494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:46:61:3c:5c:61:87:46:28:0f:bd:25:8c: 75:fd:8f:e8:91:8b:34:66:1a:2a:98:43:ca:aa:4c: 5c:21:7b:55:e9:b1:6d:56:cc:12:8c:84:21:6b:08: c9:01:26:95:27:6e:74:f7:65:7a:17:e4:36:90:cc: d8:86:4a:fd:c3:b6:ff:1f:95:ff:57:91:d8:89:9a: 9b:b8:d6:32:f4:8b:70:e5:2d:24:26:c5:05:9b:e4: 78:f5:e6:8f:92:ca:74:ff:e7:b4:5d:d1:17:6a:05: 82:7e:6b:0f:ea:13:95:7a:8d:5f:54:ec:57:31:6f: fb:9c:aa:4f:bd:5b:88:4b:30:e0:aa:b3:50:45:c2: db:18:4d:ce:92:ad:3b:d4:7d:41:fe:eb:17:35:62: e2:09:d7:dc:02:64:bd:37:68:96:8f:4e:b0:bd:d1: cf:c7:fa:fd:c7:4b:2d:6c:4b:9f:e8:6d:3a:9a:a2: 20:73:41:e5:70:07:f4:58:82:8a:5c:d7:49:2c:2c: 09:52:0c:3c:fd:28:f0:13:ae:aa:aa:46:3e:c3:48: 8f:59:81:a5:be:d1:a7:6b:c0:03:1b:3f:5a:46:70: 9a:41:e9:50:82:3a:e4:54:e3:44:1d:b6:0a:6a:cb: 79:2f:dc:4f:16:ad:a2:bc:d7:33:f2:d1:75:06:d7: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:B7:61:65:7C:0C:B8:99:B2:9F:CB:3D:73:A9:5F:A0:47:84:94 X509v3 Authority Key Identifier: keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3139393a3a2f34382d3438203d3e20323730373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7114:199::/48 Signature Algorithm: sha256WithRSAEncryption 87:64:88:2e:7f:bb:90:ec:3f:b7:52:d7:77:88:ce:e4:c4:b0: 91:9a:7b:71:5e:90:2d:a3:0c:a1:23:65:fd:85:00:e9:60:2b: 97:e4:12:fa:d3:66:e6:fa:9e:35:57:0e:53:16:4b:3c:84:5f: 98:e3:3f:ca:9a:12:92:4e:1a:76:fb:9d:fe:29:70:4b:0b:e1: d7:b6:85:0c:34:49:af:22:a8:62:c8:ef:62:ed:e8:f9:43:c3: a6:87:cf:f6:77:28:9b:d0:96:9d:b1:d6:af:3f:55:70:ba:ac: 6e:35:8a:40:9c:98:84:31:dd:04:9c:34:2f:50:b1:bc:03:71: cd:cf:62:ee:ad:dd:94:03:a6:32:3c:95:57:e0:62:6c:2c:5e: fc:a5:34:21:fd:29:ee:5b:aa:9a:c9:27:56:9c:f5:58:19:c7: 37:1c:6d:30:dd:b3:cd:0a:bc:6a:a0:eb:ed:4e:f9:1e:c5:86: ac:98:1d:a8:eb:98:9d:3d:50:71:14:36:3b:cd:a3:fa:42:9a: d0:37:ac:a8:0c:8b:9a:6b:0e:86:a9:9c:09:e1:b0:ef:ec:74: aa:19:57:0d:15:a9:d4:1f:35:4d:ab:f5:cd:9a:2a:85:a1:05: 5d:ff:e4:44:7d:8a:23:89:21:cf:f9:ba:b8:b1:a7:57:16:1e: dc:ca:54:2d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUWJGDxSlESTIfkMbW9HtxsKU0NlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBMjdFQjgzNEEyQjgzRjBCMkFDOEMwNERGRkFFOTY4 MzgxOTczQTAeFw0yNjExMDExNjQ0MDVaFw0yNzEwMzExNjQ5MDVaMDMxMTAvBgNV BAMTKDFFM0JCNzYxNjU3QzBDQjg5OUIyOUZDQjNENzNBOTVGQTA0Nzg0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42EZhPFxhh0YoD70ljHX9j+iR izRmGiqYQ8qqTFwhe1XpsW1WzBKMhCFrCMkBJpUnbnT3ZXoX5DaQzNiGSv3Dtv8f lf9XkdiJmpu41jL0i3DlLSQmxQWb5Hj15o+SynT/57Rd0RdqBYJ+aw/qE5V6jV9U 7Fcxb/ucqk+9W4hLMOCqs1BFwtsYTc6SrTvUfUH+6xc1YuIJ19wCZL03aJaPTrC9 0c/H+v3HSy1sS5/obTqaoiBzQeVwB/RYgopc10ksLAlSDDz9KPATrqqqRj7DSI9Z gaW+0adrwAMbP1pGcJpB6VCCOuRU40Qdtgpqy3kv3E8WraK81zPy0XUG18grAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUHju3YWV8DLiZsp/LPXOpX6BHhJQwHwYDVR0j BBgwFoAUTaJ+uDSiuD8LKsjATf+uloOBlzowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnhrOXZjZ3gxYjRkREh1UlY4TXI1Ykw3UU5UajVva1ZnZVFRUzVSd1lr R2svMS80REEyN0VCODM0QTJCODNGMEIyQUM4QzA0REZGQUU5NjgzODE5NzNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQTI3RUI4MzRBMkI4M0Yw QjJBQzhDMDRERkZBRTk2ODM4MTk3M0EuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Z4azl2Y2d4MWI0ZERIdVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEv MzIzODMwMzQzYTM3MzEzMTM0M2EzMTM5MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNl MjAzMjM3MzAzNzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBHEUAZkwDQYJKoZIhvcNAQELBQAD ggEBAIdkiC5/u5DsP7dS13eIzuTEsJGae3FekC2jDKEjZf2FAOlgK5fkEvrTZub6 njVXDlMWSzyEX5jjP8qaEpJOGnb7nf4pcEsL4de2hQw0Sa8iqGLI72Lt6PlDw6aH z/Z3KJvQlp2x1q8/VXC6rG41ikCcmIQx3QScNC9QsbwDcc3PYu6t3ZQDpjI8lVfg YmwsXvylNCH9Ke5bqprJJ1ac9VgZxzccbTDds80KvGqg6+1O+R7FhqyYHajrmJ09 UHEUNjvNo/pCmtA3rKgMi5prDoapnAnhsO/sdKoZVw0VqdQfNU2r9c2aKoWhBV3/ 5ER9iiOJIc/5urixp1cWHtzKVC0= -----END CERTIFICATE-----Generated at Tue Nov 3 06:56:27 2026 by rpki-client