$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa File: 323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa (raw, json) Hash identifier: Kd66tkXICGL7QEptYYmQGlf1stzZwfXYJaFtp1Z79Y4= Subject key identifier: 61:FE:14:87:DC:A2:EF:D8:47:2E:84:3D:10:54:4C:AE:29:DA:3C:D0 Certificate issuer: /CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2 Certificate serial: 482851348948C885CCF3796FAE36019CE893A3E9 Authority key identifier: 5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa Signing time: Wed 01 Apr 2026 17:40:28 +0000 ROA not before: Wed 01 Apr 2026 17:35:28 +0000 ROA not after: Wed 31 Mar 2027 17:40:28 +0000 asID: 268296 IP address blocks: 2804:4efc:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 20:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:28:51:34:89:48:c8:85:cc:f3:79:6f:ae:36:01:9c:e8:93:a3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2 Validity Not Before: Apr 1 17:35:28 2026 GMT Not After : Mar 31 17:40:28 2027 GMT Subject: CN=61FE1487DCA2EFD8472E843D10544CAE29DA3CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:74:cc:dd:dc:51:c8:e5:21:cb:9c:5b:56:f0: bf:90:25:63:e4:c3:ea:fe:42:3d:08:66:70:5c:3f: 0a:b0:f6:50:7e:a0:6a:6d:f5:d7:36:cc:54:8c:03: cd:c8:20:d0:b3:d7:9e:67:09:b5:5b:cc:f7:20:8e: 61:b4:2d:4c:3d:4d:79:31:02:d9:5d:4d:1e:de:22: e4:65:28:1a:97:3f:e6:0b:a8:10:81:31:c4:21:4c: eb:c9:5c:0e:f3:82:0e:95:7b:68:3d:d0:bf:c9:21: 24:f6:96:fd:90:3c:8d:6d:31:7c:31:55:42:84:14: 6d:9f:33:b6:e5:86:dd:80:32:93:3f:3a:9e:41:48: 18:e3:2c:6d:06:62:c0:16:8d:c0:bb:91:fe:53:41: e6:22:13:92:ad:c3:33:8e:fb:a1:b3:31:0b:84:c7: e0:25:52:0e:3c:30:ac:f9:9b:64:9a:dd:80:07:82: e8:bf:83:76:1c:3b:bd:b1:19:21:68:df:43:51:09: c4:a5:5c:b2:d3:2b:9b:74:a1:f2:f3:2e:41:72:08: fb:7e:52:c7:35:8d:aa:1f:05:66:38:a9:d1:90:0b: b1:80:ba:a2:67:99:c9:c4:6a:de:c6:82:16:89:3c: 5d:46:fc:57:60:6d:cf:c5:10:d5:9f:ea:aa:e2:49: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:14:87:DC:A2:EF:D8:47:2E:84:3D:10:54:4C:AE:29:DA:3C:D0 X509v3 Authority Key Identifier: keyid:5F:0A:FA:8A:F3:FB:CB:95:22:11:4C:46:E2:AB:F0:26:20:0D:47:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F0AFA8AF3FBCB9522114C46E2ABF026200D47C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4efc:8000::/33 Signature Algorithm: sha256WithRSAEncryption 64:34:39:3e:25:71:f7:0e:14:28:ea:9e:98:64:56:2d:6c:57: ff:9e:90:f1:35:16:91:69:f0:a5:0f:41:2d:ac:57:df:51:c4: 33:a7:f3:90:89:4b:ec:d5:1f:a5:c2:77:53:1d:15:62:a9:e0: ca:63:89:31:b5:0e:8b:93:b7:c5:db:5e:0b:85:c0:9c:8b:cf: 0a:44:08:8e:95:67:10:d2:5e:05:b2:79:dc:0d:f6:1f:bc:24: 19:e1:87:ad:e7:42:8a:9d:0d:d4:6c:1c:d6:ae:97:dd:3b:8e: 33:6b:2d:7d:b2:4a:01:53:e0:1f:77:4a:87:d8:7a:b6:52:4e: ea:d8:15:ad:76:e9:51:66:b2:ad:9d:bf:3a:1b:f2:94:ba:9d: af:35:5f:1d:5c:da:2e:05:52:d5:1f:66:d6:d1:5b:e0:0e:57: 5c:90:d7:02:43:06:a4:d6:f3:a5:22:ef:17:f5:a2:94:a3:36: 36:d1:c8:a5:d8:1e:73:09:b5:63:6e:cf:4f:71:51:22:8b:ea: bc:33:91:03:f5:80:ac:d8:ba:7d:a5:d2:8b:d6:3e:57:ce:3f: 89:d4:8a:79:9b:bc:09:d1:5f:0f:6f:be:06:4c:6e:e8:06:3a: b0:b8:28:57:d1:a8:2a:27:0b:a2:1f:34:67:18:6f:7e:06:a8: 85:df:ce:ad -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSChRNIlIyIXM83lvrjYBnOiTo+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwQUZBOEFGM0ZCQ0I5NTIyMTE0QzQ2RTJBQkYwMjYy MDBENDdDMjAeFw0yNjA0MDExNzM1MjhaFw0yNzAzMzExNzQwMjhaMDMxMTAvBgNV BAMTKDYxRkUxNDg3RENBMkVGRDg0NzJFODQzRDEwNTQ0Q0FFMjlEQTNDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdMzd3FHI5SHLnFtW8L+QJWPk w+r+Qj0IZnBcPwqw9lB+oGpt9dc2zFSMA83IINCz155nCbVbzPcgjmG0LUw9TXkx AtldTR7eIuRlKBqXP+YLqBCBMcQhTOvJXA7zgg6Ve2g90L/JIST2lv2QPI1tMXwx VUKEFG2fM7blht2AMpM/Op5BSBjjLG0GYsAWjcC7kf5TQeYiE5KtwzOO+6GzMQuE x+AlUg48MKz5m2Sa3YAHgui/g3YcO72xGSFo30NRCcSlXLLTK5t0ofLzLkFyCPt+ Usc1jaofBWY4qdGQC7GAuqJnmcnEat7GghaJPF1G/Fdgbc/FENWf6qriSQIXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUYf4Uh9yi79hHLoQ9EFRMrinaPNAwHwYDVR0j BBgwFoAUXwr6ivP7y5UiEUxG4qvwJiANR8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ SnIvMC81RjBBRkE4QUYzRkJDQjk1MjIxMTRDNDZFMkFCRjAyNjIwMEQ0N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGMEFGQThBRjNGQkNCOTUy MjExNEM0NkUyQUJGMDI2MjAwRDQ3QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv MzIzODMwMzQzYTM0NjU2NjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETvyAMA0GCSqGSIb3DQEBCwUA A4IBAQBkNDk+JXH3DhQo6p6YZFYtbFf/npDxNRaRafClD0EtrFffUcQzp/OQiUvs 1R+lwndTHRViqeDKY4kxtQ6Lk7fF214LhcCci88KRAiOlWcQ0l4FsnncDfYfvCQZ 4Yet50KKnQ3UbBzWrpfdO44zay19skoBU+Afd0qH2Hq2Uk7q2BWtdulRZrKtnb86 G/KUup2vNV8dXNouBVLVH2bW0VvgDldckNcCQwak1vOlIu8X9aKUozY20cil2B5z CbVjbs9PcVEii+q8M5ED9YCs2Lp9pdKL1j5Xzj+J1Ip5m7wJ0V8Pb74GTG7oBjqw uChX0agqJwuiHzRnGG9+BqiF386t -----END CERTIFICATE-----Generated at Wed Apr 8 10:56:00 2026 by rpki-client