$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a666630303a3a2f34302d3430203d3e20323637313234.roa File: 323830343a343837633a666630303a3a2f34302d3430203d3e20323637313234.roa (raw, json) Hash identifier: GRqgSmHpDr4dHhvi6N+ueoSs2jRVPyudgnKxdXQGe7A= Subject key identifier: D4:BE:63:84:21:D9:61:70:21:E3:97:65:39:0E:A8:AA:4A:F4:61:1C Certificate issuer: /CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3 Certificate serial: 0ECAD3294F56CD3826F77299715227F9D79BE189 Authority key identifier: D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a666630303a3a2f34302d3430203d3e20323637313234.roa Signing time: Wed 22 Jul 2026 20:58:48 +0000 ROA not before: Wed 22 Jul 2026 20:53:48 +0000 ROA not after: Wed 21 Jul 2027 20:58:48 +0000 asID: 267124 IP address blocks: 2804:487c:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ca:d3:29:4f:56:cd:38:26:f7:72:99:71:52:27:f9:d7:9b:e1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3 Validity Not Before: Jul 22 20:53:48 2026 GMT Not After : Jul 21 20:58:48 2027 GMT Subject: CN=D4BE638421D9617021E39765390EA8AA4AF4611C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:39:83:0c:62:2d:56:ea:63:b2:6b:3e:d4: fa:a6:ee:fb:22:df:09:a4:de:95:ac:28:f9:47:46: 73:02:4c:ee:6c:e9:9e:1d:09:69:d6:ef:e5:e6:1d: 54:fb:39:36:da:c8:e1:2c:56:3b:b5:84:1f:d7:ce: 22:38:65:78:c7:4e:cd:11:05:66:d3:b4:bf:66:0d: 67:6b:8b:9e:f8:bb:8f:84:f7:6f:29:bc:25:b8:66: 07:a7:9b:d9:d4:03:d1:70:b8:40:77:ea:ec:93:48: a1:98:9a:43:01:e9:ca:50:35:4e:2d:c3:8e:79:c2: 07:8b:60:cc:ea:2f:08:82:73:e5:5d:1d:81:f1:f9: 0d:ff:6f:b5:a4:7a:d3:e9:c6:74:0e:a6:e9:00:8e: 2d:9f:f2:52:0c:94:9e:8a:89:fb:2b:67:77:a1:4a: e5:3b:f1:9d:0e:72:14:54:0c:bc:ec:83:33:e2:34: 93:92:b3:0a:3f:dc:7a:58:bd:e5:77:aa:b6:f8:ac: 09:03:8c:53:dc:20:31:5f:93:91:22:08:f0:97:b2: f1:57:e4:14:10:62:84:63:da:3b:9d:4a:cd:f2:47: bc:17:ca:f9:ce:26:ff:1e:b2:2a:47:23:c8:18:06: e1:9b:83:80:34:7f:02:1c:39:53:83:c9:90:34:83: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BE:63:84:21:D9:61:70:21:E3:97:65:39:0E:A8:AA:4A:F4:61:1C X509v3 Authority Key Identifier: keyid:D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a666630303a3a2f34302d3430203d3e20323637313234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:487c:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 06:d7:8d:bb:6a:64:b6:25:82:0e:07:7a:bc:c3:98:74:84:2e: 48:70:7c:15:e8:71:a6:47:76:e1:be:02:cc:ed:87:45:8c:9f: 59:22:4c:d4:c4:6a:26:98:8b:5d:5d:1b:22:73:cd:40:06:6a: c9:bd:fc:c4:81:f8:5b:b6:1f:b5:c2:24:d7:3a:cf:6e:5e:69: e5:97:0a:2f:57:76:e7:cf:a2:1e:b2:19:cf:bd:f4:d0:e7:07: a6:23:51:f9:8f:39:c4:63:19:be:40:0b:b1:1e:f2:0f:fe:37: db:14:b6:94:79:45:ff:95:b5:67:aa:4e:f5:a7:9d:83:48:3e: 59:08:e1:90:e8:03:4f:8a:c9:63:a2:1f:c0:01:08:fa:5a:42: 1e:f1:b2:01:6f:46:9e:1e:02:3a:85:6d:8a:0a:e1:3c:82:20: 98:fb:59:9c:4c:95:69:74:d1:c0:21:15:e3:f3:04:3d:2d:92: 38:f4:9f:1f:06:fa:0f:0b:32:a0:9f:55:79:ea:72:41:92:e7: cd:13:c3:24:30:c5:5e:d1:55:e1:ef:39:1e:0e:28:4f:ad:bd: 32:e9:f3:38:4a:ac:eb:dd:2c:9f:84:ec:94:c9:71:c2:ce:d8: a9:0b:d2:1a:5f:b6:46:59:47:79:43:64:4d:02:d6:bd:6a:80: cb:f1:16:db -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDsrTKU9WzTgm93KZcVIn+deb4YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQyNTdFM0JBOUE4MERBRkI2OUFEOUJGMTYwQTBGMTVE NjE5OTNCMzAeFw0yNjA3MjIyMDUzNDhaFw0yNzA3MjEyMDU4NDhaMDMxMTAvBgNV BAMTKEQ0QkU2Mzg0MjFEOTYxNzAyMUUzOTc2NTM5MEVBOEFBNEFGNDYxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9TmDDGItVupjsms+1Pqm7vsi 3wmk3pWsKPlHRnMCTO5s6Z4dCWnW7+XmHVT7OTbayOEsVju1hB/XziI4ZXjHTs0R BWbTtL9mDWdri574u4+E928pvCW4Zgenm9nUA9FwuEB36uyTSKGYmkMB6cpQNU4t w455wgeLYMzqLwiCc+VdHYHx+Q3/b7WketPpxnQOpukAji2f8lIMlJ6KifsrZ3eh SuU78Z0OchRUDLzsgzPiNJOSswo/3HpYveV3qrb4rAkDjFPcIDFfk5EiCPCXsvFX 5BQQYoRj2judSs3yR7wXyvnOJv8esipHI8gYBuGbg4A0fwIcOVODyZA0gxVPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU1L5jhCHZYXAh45dlOQ6oqkr0YRwwHwYDVR0j BBgwFoAU1CV+O6moDa+2mtm/FgoPFdYZk7MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNmWDF4amVoN1ZHUlpxU2FBWmN1N0hyaHBiblVkR1BLdzk4SDFiTldq VzEvMC9ENDI1N0UzQkE5QTgwREFGQjY5QUQ5QkYxNjBBMEYxNUQ2MTk5M0IzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MjU3RTNCQTlBODBEQUZC NjlBRDlCRjE2MEEwRjE1RDYxOTkzQjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ozZlgxeGplaDdWR1JacVNhQVpjdTdIcmhwYm5VZEdQS3c5OEgxYk5XalcxLzAv MzIzODMwMzQzYTM0MzgzNzYzM2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNzMxMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgESHz/MA0GCSqGSIb3DQEBCwUA A4IBAQAG1427amS2JYIOB3q8w5h0hC5IcHwV6HGmR3bhvgLM7YdFjJ9ZIkzUxGom mItdXRsic81ABmrJvfzEgfhbth+1wiTXOs9uXmnllwovV3bnz6IeshnPvfTQ5wem I1H5jznEYxm+QAuxHvIP/jfbFLaUeUX/lbVnqk71p52DSD5ZCOGQ6ANPisljoh/A AQj6WkIe8bIBb0aeHgI6hW2KCuE8giCY+1mcTJVpdNHAIRXj8wQ9LZI49J8fBvoP CzKgn1V56nJBkufNE8MkMMVe0VXh7zkeDihPrb0y6fM4Sqzr3SyfhOyUyXHCztip C9IaX7ZGWUd5Q2RNAta9aoDL8Rbb -----END CERTIFICATE-----Generated at Fri Jul 24 22:24:49 2026 by rpki-client