$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa File: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json) Hash identifier: bok/WWkclsXZFFzaDf1fpSnegBTjDF68Cvc/60oPBPk= Subject key identifier: 6D:FF:C5:97:E5:EA:21:30:39:C5:A6:E7:E7:2A:3E:F1:40:E0:5B:D4 Certificate issuer: /CN=9B5BEC02172353B1C6C4EC88F11DC07776DD3C58 Certificate serial: 728471B9316BACCCDEBEF2D9EE9D08B21A3314DA Authority key identifier: 9B:5B:EC:02:17:23:53:B1:C6:C4:EC:88:F1:1D:C0:77:76:DD:3C:58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa Signing time: Sun 03 May 2026 23:38:53 +0000 ROA not before: Sun 03 May 2026 23:33:53 +0000 ROA not after: Sun 02 May 2027 23:38:53 +0000 asID: 273728 IP address blocks: 2804:8b5c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.crl rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 07:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:71:b9:31:6b:ac:cc:de:be:f2:d9:ee:9d:08:b2:1a:33:14:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B5BEC02172353B1C6C4EC88F11DC07776DD3C58 Validity Not Before: May 3 23:33:53 2026 GMT Not After : May 2 23:38:53 2027 GMT Subject: CN=6DFFC597E5EA213039C5A6E7E72A3EF140E05BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:0a:6e:8d:94:68:15:9e:91:e4:c1:e0:2e: 7f:0b:1f:8e:13:b4:95:67:e6:e8:f0:fa:bc:c6:1b: b4:9d:31:9b:9f:9b:44:b8:2f:0b:10:cf:95:70:7a: c4:6b:3e:57:2f:f4:67:9b:68:fe:01:f6:fc:f4:f4: 5d:0f:db:4b:48:17:c1:ef:c1:5c:41:96:26:67:d3: bf:8a:29:78:18:ef:b9:2c:d7:4e:eb:38:c1:29:ca: eb:21:ce:d3:f2:f6:96:ee:7b:3c:74:7e:f1:b2:45: 3b:59:f9:aa:28:3d:18:51:5b:97:0b:d8:e3:13:90: 12:60:d1:91:41:94:a1:3e:ea:4e:e8:ee:67:13:87: 10:1f:59:06:62:3e:83:da:8b:61:57:dd:5b:44:4c: a2:14:26:ce:f5:8a:92:13:33:07:75:07:5f:52:06: 8b:0a:0f:e7:1e:ac:6d:c3:57:f0:00:5a:f1:17:2e: ac:ae:16:73:c1:4e:cb:9e:b6:f3:4a:3b:12:e8:4d: e2:a4:06:33:ab:be:ca:9b:cd:0c:0d:cc:36:0a:25: f9:96:59:64:98:3f:9d:c4:6f:48:16:c1:c8:41:44: 58:8b:98:5f:1e:d3:a1:8b:23:43:90:06:1e:78:e9: 05:53:5e:f5:c3:85:41:28:22:fe:d7:36:07:13:cc: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FF:C5:97:E5:EA:21:30:39:C5:A6:E7:E7:2A:3E:F1:40:E0:5B:D4 X509v3 Authority Key Identifier: keyid:9B:5B:EC:02:17:23:53:B1:C6:C4:EC:88:F1:1D:C0:77:76:DD:3C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B5BEC02172353B1C6C4EC88F11DC07776DD3C58.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b5c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 74:55:47:3a:60:6a:82:71:e8:9d:c7:f2:4a:cf:15:04:6d:4b: f2:af:f4:8a:f9:73:36:71:78:ff:14:8d:3b:96:9e:6b:0f:e9: f4:0b:a2:5c:b3:87:c0:0e:48:90:30:74:5f:20:39:5e:c4:c9: b6:8d:6f:22:2d:33:30:21:81:2a:48:c5:34:59:d4:77:31:0d: 48:62:18:75:6c:12:dd:be:8d:ff:d5:6c:c3:2c:c1:eb:71:f0: 2e:1c:8b:bf:1e:01:fb:72:3f:fe:ab:f7:a8:fc:b4:29:3f:ec: c2:13:52:c5:1f:84:e9:55:bf:de:1e:78:99:d5:3d:ec:e7:e8: d8:18:2f:6e:ac:98:dc:10:95:72:89:fc:dd:ad:bb:4a:73:8d: 74:fc:86:1a:e0:34:f6:6b:ca:23:e3:3d:f1:3a:17:47:3f:67: 41:60:84:f2:44:13:d4:26:5c:e2:f3:25:87:94:89:87:f0:1c: f5:c6:78:98:a1:bd:b9:65:5a:72:da:1f:9b:28:4b:49:d9:ac: 05:96:0a:b1:47:47:60:19:5e:b6:56:d3:1f:46:e7:d0:c7:a8: b1:8b:95:6a:ca:89:30:ee:ed:b5:dd:2a:db:0a:01:ad:5d:3e: 3b:cb:c5:5a:4d:84:a9:b9:a7:f0:64:29:37:02:98:ff:2e:84: 81:44:3f:49 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUcoRxuTFrrMzevvLZ7p0IshozFNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1QkVDMDIxNzIzNTNCMUM2QzRFQzg4RjExREMwNzc3 NkREM0M1ODAeFw0yNjA1MDMyMzMzNTNaFw0yNzA1MDIyMzM4NTNaMDMxMTAvBgNV BAMTKDZERkZDNTk3RTVFQTIxMzAzOUM1QTZFN0U3MkEzRUYxNDBFMDVCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fwpujZRoFZ6R5MHgLn8LH44T tJVn5ujw+rzGG7SdMZufm0S4LwsQz5VwesRrPlcv9GebaP4B9vz09F0P20tIF8Hv wVxBliZn07+KKXgY77ks107rOMEpyushztPy9pbuezx0fvGyRTtZ+aooPRhRW5cL 2OMTkBJg0ZFBlKE+6k7o7mcThxAfWQZiPoPai2FX3VtETKIUJs71ipITMwd1B19S BosKD+cerG3DV/AAWvEXLqyuFnPBTsuetvNKOxLoTeKkBjOrvsqbzQwNzDYKJfmW WWSYP53Eb0gWwchBRFiLmF8e06GLI0OQBh546QVTXvXDhUEoIv7XNgcTzCehAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUbf/Fl+XqITA5xabn5yo+8UDgW9QwHwYDVR0j BBgwFoAUm1vsAhcjU7HGxOyI8R3Ad3bdPFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR Wm8vMC85QjVCRUMwMjE3MjM1M0IxQzZDNEVDODhGMTFEQzA3Nzc2REQzQzU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNUJFQzAyMTcyMzUzQjFD NkM0RUM4OEYxMURDMDc3NzZERDNDNTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv MzIzODMwMzQzYTM4NjIzNTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1zAMA0GCSqGSIb3DQEBCwUA A4IBAQB0VUc6YGqCceidx/JKzxUEbUvyr/SK+XM2cXj/FI07lp5rD+n0C6Jcs4fA DkiQMHRfIDlexMm2jW8iLTMwIYEqSMU0WdR3MQ1IYhh1bBLdvo3/1WzDLMHrcfAu HIu/HgH7cj/+q/eo/LQpP+zCE1LFH4TpVb/eHniZ1T3s5+jYGC9urJjcEJVyifzd rbtKc410/IYa4DT2a8oj4z3xOhdHP2dBYITyRBPUJlzi8yWHlImH8Bz1xniYob25 ZVpy2h+bKEtJ2awFlgqxR0dgGV62VtMfRufQx6ixi5Vqyokw7u213SrbCgGtXT47 y8VaTYSpuafwZCk3Apj/LoSBRD9J -----END CERTIFICATE-----Generated at Wed May 13 17:40:43 2026 by rpki-client