$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa File: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (raw, json) Hash identifier: +1+oMBpgCkBNiZ2x7MPRwvfY/7eE5w6u6cRP93HFfe0= Subject key identifier: D1:4D:E1:D9:B5:04:CC:F4:D3:41:75:8D:85:28:11:70:2E:14:20:70 Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 34BEA2324F43FF8B4C561668D8097BA4EB26B0C5 Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa Signing time: Mon 16 Mar 2026 22:03:07 +0000 ROA not before: Mon 16 Mar 2026 21:58:07 +0000 ROA not after: Mon 15 Mar 2027 22:03:07 +0000 asID: 268533 IP address blocks: 2804:52ac:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 23:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:be:a2:32:4f:43:ff:8b:4c:56:16:68:d8:09:7b:a4:eb:26:b0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Mar 16 21:58:07 2026 GMT Not After : Mar 15 22:03:07 2027 GMT Subject: CN=D14DE1D9B504CCF4D341758D852811702E142070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:33:9a:38:19:82:34:af:fc:4b:4f:5c:14: c6:d5:ee:43:67:ad:3a:a4:a2:23:5f:49:54:90:20: 41:d0:e8:f0:05:dc:1c:47:f8:e2:79:d7:9b:6a:9c: 35:ac:1e:c9:56:b2:24:0e:5f:81:8b:fc:77:5a:94: c8:8e:d0:b1:72:c3:08:51:fe:69:82:c6:a4:fa:a3: ba:e7:60:54:65:b9:26:a5:8c:8a:35:c6:17:80:e0: f3:aa:f6:81:c3:ea:68:f7:e9:ec:49:0e:00:42:a9: 9a:8c:b7:fd:98:d1:07:5c:b7:08:cf:41:80:76:a1: f9:cf:a1:25:b0:e1:f9:10:10:23:8a:cc:14:83:3d: 3a:2d:59:49:45:06:ef:31:f2:28:44:bf:34:44:e5: ae:4e:50:2a:46:98:c1:95:09:e7:45:3e:5d:45:63: 19:fe:9b:36:a3:27:97:9b:70:a5:3b:6c:8d:35:dd: f0:cd:d9:a5:57:7f:1a:81:c3:8d:1a:7f:3a:10:6d: 69:1b:35:00:51:e5:11:ad:fd:f7:11:ff:ff:ba:34: 67:08:24:c8:30:f8:a3:bf:ca:b4:18:42:66:ce:e3: c6:4e:5a:e4:89:aa:7e:94:d0:fe:91:71:f4:42:8e: e8:a1:1d:5c:7c:ef:3f:7c:dd:38:85:df:5a:29:9b: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4D:E1:D9:B5:04:CC:F4:D3:41:75:8D:85:28:11:70:2E:14:20:70 X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:52ac:4000::/34 Signature Algorithm: sha256WithRSAEncryption 77:74:a7:82:5b:2f:eb:e7:2e:20:eb:c7:15:f2:ce:c6:0a:65: d2:57:cf:48:a0:cf:5b:e4:ef:f3:a6:28:ca:79:82:b9:0a:ca: 09:af:a9:46:c7:2d:45:b2:0f:51:02:1c:57:84:44:ed:2e:12: 18:0b:4a:a5:f8:fc:26:2d:cd:02:b2:c8:49:35:bf:d4:77:69: da:67:29:4c:ea:b8:b6:02:9f:42:3c:00:e2:03:da:85:9a:e5: 24:bf:10:82:67:82:79:f7:0f:c8:c8:27:06:e9:d5:34:06:bd: 02:cb:18:a7:2b:58:0e:21:32:a8:53:53:44:98:65:82:6a:c9: 10:aa:86:21:23:cf:19:93:e3:32:9e:fd:69:be:20:fe:7e:10: 3a:1c:6d:b8:75:a3:94:eb:55:5c:bf:42:f8:4c:6a:48:f5:3c: 51:cf:ff:9f:86:d5:fe:2e:74:fb:85:0d:48:51:85:29:c3:c1: df:df:db:eb:3f:c2:cd:6a:e8:71:d0:d4:7d:9b:27:4c:d8:ae: c2:f7:9d:08:dc:63:37:f7:13:70:2c:c4:39:41:ab:62:87:e3: a5:3d:4c:92:b1:25:b9:e4:75:76:31:e5:ee:9c:83:8d:7f:d1: c2:87:bc:7a:cd:b6:86:3c:1d:56:a8:54:0d:02:9b:05:83:c9: 31:b9:79:1e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNL6iMk9D/4tMVhZo2Al7pOsmsMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNjAzMTYyMTU4MDdaFw0yNzAzMTUyMjAzMDdaMDMxMTAvBgNV BAMTKEQxNERFMUQ5QjUwNENDRjREMzQxNzU4RDg1MjgxMTcwMkUxNDIwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVzOaOBmCNK/8S09cFMbV7kNn rTqkoiNfSVSQIEHQ6PAF3BxH+OJ515tqnDWsHslWsiQOX4GL/HdalMiO0LFywwhR /mmCxqT6o7rnYFRluSaljIo1xheA4POq9oHD6mj36exJDgBCqZqMt/2Y0QdctwjP QYB2ofnPoSWw4fkQECOKzBSDPTotWUlFBu8x8ihEvzRE5a5OUCpGmMGVCedFPl1F Yxn+mzajJ5ebcKU7bI013fDN2aVXfxqBw40afzoQbWkbNQBR5RGt/fcR//+6NGcI JMgw+KO/yrQYQmbO48ZOWuSJqn6U0P6RcfRCjuihHVx87z983TiF31opmy8tAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU0U3h2bUEzPTTQXWNhSgRcC4UIHAwHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dkZWhlNjhLMnVlUjRoV1E1VTVicENnWmNYMjdwUkpSSllQRkRuQTJkNEtSLzEv MzIzODMwMzQzYTM1MzI2MTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM1MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUqxAMA0GCSqGSIb3DQEBCwUA A4IBAQB3dKeCWy/r5y4g68cV8s7GCmXSV89IoM9b5O/zpijKeYK5CsoJr6lGxy1F sg9RAhxXhETtLhIYC0ql+PwmLc0CsshJNb/Ud2naZylM6ri2Ap9CPADiA9qFmuUk vxCCZ4J59w/IyCcG6dU0Br0CyxinK1gOITKoU1NEmGWCaskQqoYhI88Zk+Mynv1p viD+fhA6HG24daOU61Vcv0L4TGpI9TxRz/+fhtX+LnT7hQ1IUYUpw8Hf39vrP8LN auhx0NR9mydM2K7C950I3GM39xNwLMQ5Qatih+OlPUySsSW55HV2MeXunIONf9HC h7x6zbaGPB1WqFQNApsFg8kxuXke -----END CERTIFICATE-----Generated at Thu Mar 26 02:57:54 2026 by rpki-client