$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a633030303a3a2f33342d3334203d3e20323636333736.roa File: 323830343a333664383a633030303a3a2f33342d3334203d3e20323636333736.roa (raw, json) Hash identifier: TZoAaLRBbtm2Z5WH4f9XQrcJRrCJgOcBlUFdR4iZfME= Subject key identifier: 5B:B0:71:27:C1:9E:31:16:E6:AB:47:FE:8C:B0:6D:80:09:97:FA:D7 Certificate issuer: /CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE Certificate serial: 5E5ABD664D39B8643FF72E00438BB73355834AEC Authority key identifier: 8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a633030303a3a2f33342d3334203d3e20323636333736.roa Signing time: Wed 11 Mar 2026 18:37:12 +0000 ROA not before: Wed 11 Mar 2026 18:32:12 +0000 ROA not after: Wed 10 Mar 2027 18:37:12 +0000 asID: 266376 IP address blocks: 2804:36d8:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 21:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5a:bd:66:4d:39:b8:64:3f:f7:2e:00:43:8b:b7:33:55:83:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE Validity Not Before: Mar 11 18:32:12 2026 GMT Not After : Mar 10 18:37:12 2027 GMT Subject: CN=5BB07127C19E3116E6AB47FE8CB06D800997FAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:be:22:2f:85:92:38:17:34:74:a6:2c:5b: 03:e8:33:1b:fc:7d:08:bc:08:ef:a0:ef:a6:b8:88: a6:85:62:dd:7d:1b:3b:96:c5:3e:fd:bd:c2:df:ad: 22:64:45:32:f5:5b:66:e5:84:4c:1b:68:20:cb:c0: 72:9e:a0:7c:26:d7:5c:f3:06:9b:32:44:23:6f:d9: 82:ef:09:96:14:9a:fb:f0:6e:75:98:cb:f2:16:91: ef:7a:9a:16:a0:b5:5a:22:06:3b:75:28:fb:6d:ac: 06:0d:47:ba:b8:b5:44:79:32:99:d4:5d:2e:61:6a: d5:0a:06:e3:96:80:e1:44:70:83:04:a8:6d:03:4c: 7a:1e:d8:c5:0b:52:2b:08:35:9f:4e:f1:f6:8b:b7: c8:83:ac:f9:fa:16:f4:08:ad:04:85:8e:3b:5c:bc: cd:6d:11:f9:55:b6:42:aa:2b:b1:6c:80:0e:30:79: a9:85:43:c5:33:d0:2e:83:bf:20:19:72:35:1c:d6: 96:75:a6:ad:c0:b4:37:ed:ab:0e:d0:5f:8d:c2:7f: 55:a7:d0:57:a4:e6:60:7e:68:6a:05:b7:8e:b2:37: 58:b6:fe:20:45:5b:a2:41:4d:df:21:2c:98:f7:80: 63:a1:92:fc:67:09:76:7e:62:22:bd:28:3b:a8:76: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:71:27:C1:9E:31:16:E6:AB:47:FE:8C:B0:6D:80:09:97:FA:D7 X509v3 Authority Key Identifier: keyid:8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/323830343a333664383a633030303a3a2f33342d3334203d3e20323636333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:36d8:c000::/34 Signature Algorithm: sha256WithRSAEncryption 97:9f:2f:c5:03:26:51:ec:5d:67:19:43:64:fb:a2:cb:6a:c5: 5e:70:2c:ac:55:15:f2:df:4c:42:06:de:b7:b0:35:91:1a:42: f6:27:29:7d:80:1a:c0:cc:5f:8e:d2:a2:4b:23:1c:61:0a:06: fa:4c:09:d3:46:43:7f:3a:27:1f:04:a8:85:ab:6b:f7:ae:c0: ca:4f:59:02:4c:3f:7a:e4:60:4a:a2:0b:8f:4b:8e:7f:c9:60: d3:84:7c:b1:57:54:a2:9f:3f:cd:6c:03:fa:94:77:16:d8:b9: 71:8d:68:33:ce:c9:14:43:15:2c:a3:cd:c2:f2:a7:83:87:f2: 07:44:93:99:08:9c:1c:ed:dd:96:d1:32:8d:61:a0:1c:03:07: 94:2e:0e:61:f8:0b:06:0e:e8:8b:1c:9d:6c:99:2e:ea:1f:4b: 3f:0c:19:97:a7:c2:59:d3:6b:a9:d2:ea:1c:b0:12:80:18:f9: 50:81:87:48:d0:02:b4:4c:0f:e0:b2:e7:13:56:c9:da:63:75: 91:dd:7d:24:08:c8:69:54:d6:cd:f6:41:2c:6b:a8:d8:4f:2f: 76:eb:73:76:4b:64:66:99:be:8a:cf:e4:c6:6a:03:2f:5e:9f: c5:57:bf:f0:25:cc:cf:8f:1a:42:cf:a5:32:8a:b5:6e:aa:69: d2:c2:10:92 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUXlq9Zk05uGQ/9y4AQ4u3M1WDSuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NzE2Q0U5QUFGMUY5NTFDNjJGNjVGOTA2MzE2RTlF NjA4MkNGRTAeFw0yNjAzMTExODMyMTJaFw0yNzAzMTAxODM3MTJaMDMxMTAvBgNV BAMTKDVCQjA3MTI3QzE5RTMxMTZFNkFCNDdGRThDQjA2RDgwMDk5N0ZBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37L4iL4WSOBc0dKYsWwPoMxv8 fQi8CO+g76a4iKaFYt19GzuWxT79vcLfrSJkRTL1W2blhEwbaCDLwHKeoHwm11zz BpsyRCNv2YLvCZYUmvvwbnWYy/IWke96mhagtVoiBjt1KPttrAYNR7q4tUR5MpnU XS5hatUKBuOWgOFEcIMEqG0DTHoe2MULUisINZ9O8faLt8iDrPn6FvQIrQSFjjtc vM1tEflVtkKqK7FsgA4weamFQ8Uz0C6DvyAZcjUc1pZ1pq3AtDftqw7QX43Cf1Wn 0Fek5mB+aGoFt46yN1i2/iBFW6JBTd8hLJj3gGOhkvxnCXZ+YiK9KDuodicTAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUW7BxJ8GeMRbmq0f+jLBtgAmX+tcwHwYDVR0j BBgwFoAUilcWzpqvH5UcYvZfkGMW6eYILP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5RTFBRFgxallQ ajgvMC84QTU3MTZDRTlBQUYxRjk1MUM2MkY2NUY5MDYzMTZFOUU2MDgyQ0ZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNTcxNkNFOUFBRjFGOTUx QzYyRjY1RjkwNjMxNkU5RTYwODJDRkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0d5Y2Z1OVlldExQTlh4YUhTZDZ3SnJKZER0NmQ4VU1hOUUxQURYMWpZUGo4LzAv MzIzODMwMzQzYTMzMzY2NDM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNjMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENtjAMA0GCSqGSIb3DQEBCwUA A4IBAQCXny/FAyZR7F1nGUNk+6LLasVecCysVRXy30xCBt63sDWRGkL2Jyl9gBrA zF+O0qJLIxxhCgb6TAnTRkN/OicfBKiFq2v3rsDKT1kCTD965GBKoguPS45/yWDT hHyxV1Sinz/NbAP6lHcW2LlxjWgzzskUQxUso83C8qeDh/IHRJOZCJwc7d2W0TKN YaAcAweULg5h+AsGDuiLHJ1smS7qH0s/DBmXp8JZ02up0uocsBKAGPlQgYdI0AK0 TA/gsucTVsnaY3WR3X0kCMhpVNbN9kEsa6jYTy9263N2S2Rmmb6Kz+TGagMvXp/F V7/wJczPjxpCz6UyirVuqmnSwhCS -----END CERTIFICATE-----Generated at Fri Mar 27 07:03:48 2026 by rpki-client