$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa File: 323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json) Hash identifier: o3BBmcbIb40f1EDnTUH0E/g6CutaCo/z+p9uVpOnUfA= Subject key identifier: AA:01:11:68:EB:73:C7:C7:0C:1E:15:FB:AE:9D:90:A8:81:A4:A7:12 Certificate issuer: /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2 Certificate serial: 25B8AB203F67F31959D59F99042A46484B071A8D Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa Signing time: Wed 01 Apr 2026 17:40:29 +0000 ROA not before: Wed 01 Apr 2026 17:35:29 +0000 ROA not after: Wed 31 Mar 2027 17:40:29 +0000 asID: 268296 IP address blocks: 2804:4efc:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 20:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b8:ab:20:3f:67:f3:19:59:d5:9f:99:04:2a:46:48:4b:07:1a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2 Validity Not Before: Apr 1 17:35:29 2026 GMT Not After : Mar 31 17:40:29 2027 GMT Subject: CN=AA011168EB73C7C70C1E15FBAE9D90A881A4A712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:c5:b0:72:8c:26:b3:fd:ff:90:05:ef:1e: 12:08:57:55:1c:04:ee:0c:cc:ca:50:a5:64:be:42: f6:4a:bf:b7:f8:7e:38:ad:ab:08:d0:95:10:08:b9: 33:85:f1:87:53:78:7b:02:34:4d:70:94:e8:dc:41: a8:22:6b:75:f4:19:26:4c:d7:c3:21:2d:68:75:42: b0:ed:cf:db:65:b3:cd:b8:04:8d:a5:bc:64:c6:02: a9:d5:be:c9:29:dc:3d:ca:3e:d0:35:d4:7c:bf:9d: 36:94:9e:3e:cb:24:ba:51:23:4c:88:d9:e5:f2:63: 11:f2:dc:7f:ac:b3:36:07:89:27:f4:99:df:1b:29: 1c:c7:a1:ad:af:6e:d3:ac:26:75:6c:6a:50:83:ef: 57:0a:00:3d:ab:91:61:af:e9:b5:10:b6:68:04:b3: 33:4c:ec:e4:6f:17:1c:21:11:6b:46:0e:af:d0:57: 40:8f:d0:3a:3b:c1:89:24:fc:6c:f7:92:27:ed:3b: 9f:07:8a:f3:a2:5e:ba:7d:15:38:ec:c2:45:1a:b8: cf:88:20:3d:ec:44:a3:3c:ca:eb:0e:eb:d6:81:14: bf:5b:9b:d4:6c:42:70:23:5f:14:7f:d8:d9:f4:5b: 32:70:53:3c:08:d4:55:69:3b:db:f2:e9:4e:93:08: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:11:68:EB:73:C7:C7:0C:1E:15:FB:AE:9D:90:A8:81:A4:A7:12 X509v3 Authority Key Identifier: keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4efc:5000::/36 Signature Algorithm: sha256WithRSAEncryption 60:d9:6a:ad:86:be:5e:ce:18:32:84:2e:bd:86:29:51:3b:df: 70:6d:88:cb:99:7e:ec:92:4c:46:44:09:fd:72:84:20:79:44: a5:c5:c2:0d:3b:d2:ad:60:b0:cd:41:8b:6f:fa:71:8c:9c:c3: 87:c0:93:6d:a5:32:40:81:5b:a1:02:25:bc:f6:02:c6:7d:9e: fa:73:61:49:03:13:d4:6c:c0:36:c4:fe:64:30:a1:38:0f:c2: 19:13:17:1e:25:c1:db:cf:57:d4:d6:1f:4d:3a:36:31:fc:62: 2a:ca:45:77:8d:3c:0b:71:7c:66:02:95:62:8b:28:06:b5:c8: e0:7d:e6:fe:28:1c:22:4f:44:90:0d:fd:68:95:29:fb:0e:d4: b6:c2:35:cf:5e:12:39:8f:a5:20:65:ba:bb:bd:8c:77:28:28: 86:40:75:94:e4:51:1e:19:11:e2:36:99:06:d8:c9:59:1a:0b: 79:b7:04:8b:8d:09:98:e4:1a:bb:88:82:46:16:2a:54:51:ec: 91:4c:81:36:db:c1:51:3d:94:9d:94:fc:fa:e4:02:55:d6:be: de:df:97:cc:a7:80:a4:61:68:bd:ba:83:27:df:6a:5f:f2:19: 7d:74:1c:43:d3:67:a5:da:31:4e:56:6d:47:5c:42:5e:f3:90: a3:03:8d:fc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUJbirID9n8xlZ1Z+ZBCpGSEsHGo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwQUZBOEFGM0ZCQ0I5NTIyMTE0QzQ2RTJBQkYwMjYy MDBENDdDMjAeFw0yNjA0MDExNzM1MjlaFw0yNzAzMzExNzQwMjlaMDMxMTAvBgNV BAMTKEFBMDExMTY4RUI3M0M3QzcwQzFFMTVGQkFFOUQ5MEE4ODFBNEE3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrcWwcowms/3/kAXvHhIIV1Uc BO4MzMpQpWS+QvZKv7f4fjitqwjQlRAIuTOF8YdTeHsCNE1wlOjcQagia3X0GSZM 18MhLWh1QrDtz9tls824BI2lvGTGAqnVvskp3D3KPtA11Hy/nTaUnj7LJLpRI0yI 2eXyYxHy3H+sszYHiSf0md8bKRzHoa2vbtOsJnVsalCD71cKAD2rkWGv6bUQtmgE szNM7ORvFxwhEWtGDq/QV0CP0Do7wYkk/Gz3kiftO58HivOiXrp9FTjswkUauM+I ID3sRKM8yusO69aBFL9bm9RsQnAjXxR/2Nn0WzJwUzwI1FVpO9vy6U6TCOCVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUqgERaOtzx8cMHhX7rp2QqIGkpxIwHwYDVR0j BBgwFoAUXwr6ivP7y5UiEUxG4qvwJiANR8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ SnIvMC81RjBBRkE4QUYzRkJDQjk1MjIxMTRDNDZFMkFCRjAyNjIwMEQ0N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGMEFGQThBRjNGQkNCOTUy MjExNEM0NkUyQUJGMDI2MjAwRDQ3QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv MzIzODMwMzQzYTM0NjU2NjYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvxQMA0GCSqGSIb3DQEBCwUA A4IBAQBg2Wqthr5ezhgyhC69hilRO99wbYjLmX7skkxGRAn9coQgeUSlxcINO9Kt YLDNQYtv+nGMnMOHwJNtpTJAgVuhAiW89gLGfZ76c2FJAxPUbMA2xP5kMKE4D8IZ ExceJcHbz1fU1h9NOjYx/GIqykV3jTwLcXxmApViiygGtcjgfeb+KBwiT0SQDf1o lSn7DtS2wjXPXhI5j6UgZbq7vYx3KCiGQHWU5FEeGRHiNpkG2MlZGgt5twSLjQmY 5Bq7iIJGFipUUeyRTIE228FRPZSdlPz65AJV1r7e35fMp4CkYWi9uoMn32pf8hl9 dBxD02el2jFOVm1HXEJe85CjA438 -----END CERTIFICATE-----Generated at Wed Apr 8 07:40:51 2026 by rpki-client