$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa File: 323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa (raw, json) Hash identifier: xWf7IbwUmDR6y2jeIevkycJwa4GfY3zzk3vjLTVeyjw= Subject key identifier: F8:F4:89:B2:25:2E:9A:D4:25:A2:F6:03:9A:57:17:E7:FB:48:D8:3E Certificate issuer: /CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA Certificate serial: 60262349A97D6733A0ADB2F0E7D65524F7693F48 Authority key identifier: DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa Signing time: Wed 08 Apr 2026 13:22:01 +0000 ROA not before: Wed 08 Apr 2026 13:17:01 +0000 ROA not after: Wed 07 Apr 2027 13:22:01 +0000 asID: 268444 IP address blocks: 2804:514c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 15:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:26:23:49:a9:7d:67:33:a0:ad:b2:f0:e7:d6:55:24:f7:69:3f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA Validity Not Before: Apr 8 13:17:01 2026 GMT Not After : Apr 7 13:22:01 2027 GMT Subject: CN=F8F489B2252E9AD425A2F6039A5717E7FB48D83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:64:2a:57:d6:2e:5d:f9:23:29:09:00:a8: 54:ba:f0:49:0e:93:6e:bf:cf:ab:da:a5:ef:6a:75: 7a:53:be:b8:d8:b2:d9:6e:57:4b:76:29:49:75:f2: 6c:7a:37:4a:9d:e9:c8:e7:1b:2a:d1:d9:f8:3e:de: cb:e8:79:c2:b4:54:00:2d:5e:f8:20:c1:b1:c9:40: e8:a5:10:7a:87:47:12:c6:0c:47:0b:99:a7:54:54: c6:73:4e:09:67:c5:8b:6d:35:6d:fe:1a:07:ff:b4: a5:70:cc:56:28:b2:12:93:e4:0d:1c:63:83:31:b2: 7a:1b:2b:f4:be:36:6b:f4:42:33:1b:59:45:04:68: 05:da:80:fe:1b:7d:3e:e4:85:d5:5f:bb:95:21:4a: fe:b5:c2:3a:b6:40:c8:d5:09:b8:f2:0b:d0:87:9b: c3:77:a9:e2:50:d5:6c:e3:56:03:e9:ba:6d:4a:8f: 51:ad:06:48:d2:ee:b0:46:2a:44:59:ad:3f:55:66: 04:9e:89:9c:33:12:aa:f8:be:ec:1c:40:4f:39:55: 25:65:17:c1:33:82:99:8f:1f:cd:b8:29:5e:c8:f8: 95:b2:38:66:d2:97:29:c2:aa:61:74:e3:96:e5:f5: 6a:95:23:27:14:52:66:5d:36:94:00:20:e9:d3:98: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:89:B2:25:2E:9A:D4:25:A2:F6:03:9A:57:17:E7:FB:48:D8:3E X509v3 Authority Key Identifier: keyid:DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:514c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 1e:37:8b:b7:e9:7f:68:5a:47:56:bc:c3:4a:a8:5a:ff:04:d7: 2b:0d:a0:02:9f:c3:0d:60:12:ea:3b:32:72:ff:02:d3:9f:ae: 53:2d:8e:b2:00:75:c4:48:34:c2:59:f5:8a:91:f2:1a:f2:83: c3:f4:81:16:7e:f8:56:20:58:61:a8:b3:a2:0d:12:1c:38:6f: 10:cc:59:71:2f:70:e9:d5:ca:29:ae:ca:6b:cf:0b:b7:df:d0: aa:0b:04:cb:8b:53:fd:e3:4e:81:70:3f:a1:33:dc:f3:e2:ee: aa:2b:e9:7a:ce:91:cb:00:21:78:10:1f:2d:b9:b6:6b:96:bf: 3a:53:f5:90:f9:8f:45:54:c1:77:07:ab:a0:a4:ae:c6:b8:48: d7:d4:0f:d5:1f:fe:11:b7:1b:39:c0:cf:d2:7f:c5:fd:e6:fe: af:e8:69:b1:c4:7c:da:56:23:a6:26:98:1d:f1:41:16:47:fe: 30:e1:2c:86:ac:3b:f5:fb:db:c9:05:17:71:f9:22:b6:5a:21: 11:02:28:ff:77:7f:bd:f1:64:1f:6b:8b:3e:8d:cf:09:c9:cc: 4f:b0:ba:3f:03:17:8e:78:49:af:f6:14:b0:e4:6c:aa:07:3e: 7a:78:9d:f9:94:71:42:d7:0a:bd:f0:c8:44:3d:69:f1:f2:2c: 0d:ad:8f:08 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYCYjSal9ZzOgrbLw59ZVJPdpP0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM0RjY0NUY3OTdEMkQxNkRBQUM3OTlDRTc2RThGNTMw QjdFRkNFQTAeFw0yNjA0MDgxMzE3MDFaFw0yNzA0MDcxMzIyMDFaMDMxMTAvBgNV BAMTKEY4RjQ4OUIyMjUyRTlBRDQyNUEyRjYwMzlBNTcxN0U3RkI0OEQ4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpGQqV9YuXfkjKQkAqFS68EkO k26/z6vape9qdXpTvrjYstluV0t2KUl18mx6N0qd6cjnGyrR2fg+3svoecK0VAAt XvggwbHJQOilEHqHRxLGDEcLmadUVMZzTglnxYttNW3+Ggf/tKVwzFYoshKT5A0c Y4MxsnobK/S+Nmv0QjMbWUUEaAXagP4bfT7khdVfu5UhSv61wjq2QMjVCbjyC9CH m8N3qeJQ1WzjVgPpum1Kj1GtBkjS7rBGKkRZrT9VZgSeiZwzEqr4vuwcQE85VSVl F8EzgpmPH824KV7I+JWyOGbSlynCqmF045bl9WqVIycUUmZdNpQAIOnTmCm7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU+PSJsiUumtQlovYDmlcX5/tI2D4wHwYDVR0j BBgwFoAU3E9kX3l9LRbarHmc526PUwt+/OowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw NW4vMC9EQzRGNjQ1Rjc5N0QyRDE2REFBQzc5OUNFNzZFOEY1MzBCN0VGQ0VBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNEY2NDVGNzk3RDJEMTZE QUFDNzk5Q0U3NkU4RjUzMEI3RUZDRUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAv MzIzODMwMzQzYTM1MzEzNDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUUxAMA0GCSqGSIb3DQEBCwUA A4IBAQAeN4u36X9oWkdWvMNKqFr/BNcrDaACn8MNYBLqOzJy/wLTn65TLY6yAHXE SDTCWfWKkfIa8oPD9IEWfvhWIFhhqLOiDRIcOG8QzFlxL3Dp1coprsprzwu339Cq CwTLi1P9406BcD+hM9zz4u6qK+l6zpHLACF4EB8tubZrlr86U/WQ+Y9FVMF3B6ug pK7GuEjX1A/VH/4Rtxs5wM/Sf8X95v6v6GmxxHzaViOmJpgd8UEWR/4w4SyGrDv1 +9vJBRdx+SK2WiERAij/d3+98WQfa4s+jc8JycxPsLo/AxeOeEmv9hSw5GyqBz56 eJ35lHFC1wq98MhEPWnx8iwNrY8I -----END CERTIFICATE-----Generated at Wed Apr 8 17:12:03 2026 by rpki-client