$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa File: 323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa (raw, json) Hash identifier: /AQIfvJPy5ZMsvSOhXqnKquaQ6k0Y1MC0FfjWfut1OY= Subject key identifier: 12:27:98:F3:45:F4:BC:AA:95:6D:D0:30:A0:B6:08:13:3B:03:B2:D4 Certificate issuer: /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F Certificate serial: 4C863FB864B164ADF580B4DBBB0A644DE073DA86 Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer Subject info access: rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa Signing time: Tue 11 Nov 2025 15:47:50 +0000 ROA not before: Tue 11 Nov 2025 15:42:50 +0000 ROA not after: Tue 10 Nov 2026 15:47:50 +0000 asID: 273444 IP address blocks: 2804:8eb8:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 12:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:3f:b8:64:b1:64:ad:f5:80:b4:db:bb:0a:64:4d:e0:73:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F Validity Not Before: Nov 11 15:42:50 2025 GMT Not After : Nov 10 15:47:50 2026 GMT Subject: CN=122798F345F4BCAA956DD030A0B608133B03B2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:9c:a1:20:74:91:21:ae:2c:cc:3f:01:92: d8:b3:c6:8d:05:bd:1e:dd:d3:4c:26:ac:31:56:c7: 2d:1f:f1:0a:e6:2c:91:01:e5:df:5e:23:f0:7b:7f: 54:64:9f:d0:40:25:42:28:66:a6:ac:ee:99:ca:d5: 54:d3:80:1c:59:41:82:e0:5f:5a:86:90:c2:23:a5: 1c:b5:6c:39:44:a7:9c:ed:b1:73:8f:f8:21:eb:fa: 40:21:46:b1:ce:c8:9a:47:be:04:17:25:9b:f2:10: e2:58:ea:4e:4e:52:b9:33:57:c4:36:12:47:28:7a: aa:0e:b5:58:a5:98:95:b6:ba:cc:96:8c:4a:1d:46: 2a:c6:5f:7f:0b:1a:61:11:a2:c5:66:80:fb:64:57: 8f:6e:f9:a4:38:72:ff:36:4f:45:8b:c8:53:8b:d8: 75:c9:f9:65:46:54:8e:6b:a1:e8:c7:03:aa:2d:68: cd:ab:82:f7:11:99:e9:65:31:6b:fd:19:2e:61:33: f1:50:33:fd:34:2b:d6:ea:94:07:4c:43:61:3b:ba: de:c5:8b:03:fe:d0:4f:f8:c4:f2:64:36:da:a1:3d: 16:12:2e:f3:21:eb:49:96:c2:02:88:9e:a0:a0:78: c0:7c:c8:03:ad:87:54:fc:54:5e:8c:fa:7b:30:8b: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:98:F3:45:F4:BC:AA:95:6D:D0:30:A0:B6:08:13:3B:03:B2:D4 X509v3 Authority Key Identifier: keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8eb8:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3f:7c:1d:36:46:a3:72:b3:33:f0:3f:79:74:24:cc:42:5b:87: b1:11:56:70:aa:0a:37:21:3f:b2:9c:6b:69:33:3c:e0:8b:f7: fb:0f:8e:7b:fd:8d:41:11:f0:5c:9d:9c:4c:d3:98:83:7d:4f: 25:f0:52:95:83:5f:ef:19:71:70:8a:58:d4:ff:e4:c5:80:0d: a4:b2:e1:1a:2c:2a:01:e8:8b:91:9b:85:12:8c:12:35:85:94: 5d:17:c9:c3:c3:fe:b4:06:45:bf:59:17:16:ea:ab:2c:f4:95: 8d:cf:2e:29:77:d4:72:e4:de:5a:e4:aa:dd:4a:b2:04:7f:0c: 85:b3:91:ce:d0:b7:30:6c:58:ff:3c:a1:21:9a:92:3d:0b:e8: 74:8a:ee:8b:d6:34:c9:1d:4f:92:e8:f3:ce:b2:9f:42:a8:6f: d7:48:48:39:8a:38:10:a8:4b:59:27:74:93:22:81:c7:fa:30: c3:9f:a9:cc:53:3d:59:e7:80:5b:d1:d0:db:ad:b1:e8:f4:72: 32:01:d6:72:7f:dd:c4:0c:b5:93:ed:4a:da:f4:6e:8f:8c:d1: b6:22:20:8b:10:97:07:04:ab:b3:dd:5c:a1:82:56:72:ed:a6: 64:19:ed:25:78:eb:ba:a9:f6:ac:64:70:e6:31:ae:9a:51:55: da:dd:9d:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUTIY/uGSxZK31gLTbuwpkTeBz2oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY5MkE3RTFDMzBBOTdFNDJEOUU4NENFMEZDNEU3RTkw NzE5MTMwRjAeFw0yNTExMTExNTQyNTBaFw0yNjExMTAxNTQ3NTBaMDMxMTAvBgNV BAMTKDEyMjc5OEYzNDVGNEJDQUE5NTZERDAzMEEwQjYwODEzM0IwM0IyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL65yhIHSRIa4szD8Bktizxo0F vR7d00wmrDFWxy0f8QrmLJEB5d9eI/B7f1Rkn9BAJUIoZqas7pnK1VTTgBxZQYLg X1qGkMIjpRy1bDlEp5ztsXOP+CHr+kAhRrHOyJpHvgQXJZvyEOJY6k5OUrkzV8Q2 EkcoeqoOtVilmJW2usyWjEodRirGX38LGmERosVmgPtkV49u+aQ4cv82T0WLyFOL 2HXJ+WVGVI5roejHA6otaM2rgvcRmellMWv9GS5hM/FQM/00K9bqlAdMQ2E7ut7F iwP+0E/4xPJkNtqhPRYSLvMh60mWwgKInqCgeMB8yAOth1T8VF6M+nswi6nfAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUEieY80X0vKqVbdAwoLYIEzsDstQwHwYDVR0j BBgwFoAUtpKn4cMKl+QtnoTOD8Tn6QcZEw8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9UenlOcWFEcVgzaFRmRlQ5a2RLVXRoUFFxTFFUVGVyZkJNQlB5cmhzeXFL LzAvQjY5MkE3RTFDMzBBOTdFNDJEOUU4NENFMEZDNEU3RTkwNzE5MTMwRi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjkyQTdFMUMzMEE5N0U0MkQ5 RTg0Q0UwRkM0RTdFOTA3MTkxMzBGLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9U enlOcWFEcVgzaFRmRlQ5a2RLVXRoUFFxTFFUVGVyZkJNQlB5cmhzeXFLLzAvMzIz ODMwMzQzYTM4NjU2MjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy MDMyMzczMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEjrhAMA0GCSqGSIb3DQEBCwUAA4IB AQA/fB02RqNyszPwP3l0JMxCW4exEVZwqgo3IT+ynGtpMzzgi/f7D457/Y1BEfBc nZxM05iDfU8l8FKVg1/vGXFwiljU/+TFgA2ksuEaLCoB6IuRm4USjBI1hZRdF8nD w/60BkW/WRcW6qss9JWNzy4pd9Ry5N5a5KrdSrIEfwyFs5HO0LcwbFj/PKEhmpI9 C+h0iu6L1jTJHU+S6PPOsp9CqG/XSEg5ijgQqEtZJ3STIoHH+jDDn6nMUz1Z54Bb 0dDbrbHo9HIyAdZyf93EDLWT7Ura9G6PjNG2IiCLEJcHBKuz3VyhglZy7aZkGe0l eOu6qfasZHDmMa6aUVXa3Z3b -----END CERTIFICATE-----Generated at Thu Mar 26 02:39:26 2026 by rpki-client