$ rpki-client -vvf rsync.nex3.com.br/repo/AS265905/0/323830343a336661383a3a2f33322d3334203d3e20323635393035.roa File: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (raw, json) Hash identifier: 7fAYiwZbWQ6l6heoHTaubJeDKeQnFy6dqrmE9/IVnpM= Subject key identifier: 8A:CF:6E:B7:18:15:E0:EB:72:55:56:9F:4E:20:15:1D:93:87:52:81 Certificate issuer: /CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69 Certificate serial: 4C1769F8758F89F094CF3BE0CC332DCE2EFFCD6B Authority key identifier: 49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69 Authority info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer Subject info access: rsync://rsync.nex3.com.br/repo/AS265905/0/323830343a336661383a3a2f33322d3334203d3e20323635393035.roa Signing time: Wed 01 Apr 2026 12:36:17 +0000 ROA not before: Wed 01 Apr 2026 12:31:17 +0000 ROA not after: Wed 31 Mar 2027 12:36:17 +0000 asID: 265905 IP address blocks: 2804:3fa8::/32 maxlen: 34 Validation: OK Signature path: rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.mft rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 03:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:17:69:f8:75:8f:89:f0:94:cf:3b:e0:cc:33:2d:ce:2e:ff:cd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69 Validity Not Before: Apr 1 12:31:17 2026 GMT Not After : Mar 31 12:36:17 2027 GMT Subject: CN=8ACF6EB71815E0EB7255569F4E20151D93875281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:c0:49:69:d7:ba:dc:0c:1d:58:39:09:19: 17:5b:7d:a7:fc:51:cc:61:3b:5c:57:c8:d5:a9:9a: f2:36:f7:9d:ea:fb:a0:ab:5e:5f:d3:e1:76:ba:e1: fd:d5:8b:50:44:70:1a:3e:43:65:c1:ed:74:ab:5e: cc:4e:08:82:f2:b6:7f:54:cf:e0:12:d1:ff:1d:f0: 9a:f6:c3:08:bd:9f:be:36:bf:9b:10:7b:90:5b:7f: 69:8b:a5:39:83:ad:60:14:56:74:0f:b0:79:2f:53: d7:11:75:7e:da:79:52:f8:a3:9d:ec:4a:9e:79:57: 39:f5:ef:80:1e:91:c2:6e:11:0c:37:de:e2:86:c7: db:e9:fc:cf:fe:09:6a:71:c2:77:5a:e4:f5:17:f7: f8:a5:9b:0a:71:55:f7:cc:e1:9f:15:4a:6e:8b:d6: a3:d4:0f:2e:e9:b7:42:1e:a9:3a:3d:6a:27:1e:51: be:13:33:38:45:6e:94:58:51:c1:b4:0c:3f:27:b1: d6:16:2a:08:30:04:4c:3b:81:3a:ab:07:51:d2:63: 4d:a3:fb:1c:73:d8:85:20:22:4f:73:de:7f:38:96: 6b:73:ca:b5:ef:b8:fb:df:02:6f:b2:03:b2:92:a9: 28:ca:b8:94:af:3e:9b:b5:a8:9c:67:32:17:06:e0: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:6E:B7:18:15:E0:EB:72:55:56:9F:4E:20:15:1D:93:87:52:81 X509v3 Authority Key Identifier: keyid:49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer Subject Information Access: Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS265905/0/323830343a336661383a3a2f33322d3334203d3e20323635393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3fa8::/32 Signature Algorithm: sha256WithRSAEncryption d5:b9:c5:a6:9b:fc:2b:8a:79:24:d4:22:7c:51:65:75:7f:64: 08:b2:40:ed:9d:13:ab:30:ac:a2:6b:2e:56:fd:70:74:f6:45: b5:4c:30:6a:04:99:9f:f8:f1:bb:8b:e1:b0:03:b4:92:b9:7a: a9:fa:ee:0a:2a:0e:65:50:0a:9f:04:cd:d3:7b:20:6e:e1:1f: c1:95:3e:ce:df:ca:3d:ff:8c:f4:7f:fc:fd:19:ec:33:a3:e2: a2:90:bf:b3:97:96:17:39:bd:27:da:8a:c1:6a:80:6f:ba:b5: e2:f0:86:f2:54:8a:41:07:d7:7e:af:2f:b9:fc:ac:ec:de:5f: c3:eb:0b:04:6a:e6:5a:5d:9f:34:cc:5f:74:c3:07:47:6a:13: 59:d1:19:13:16:6f:7a:0d:04:ed:89:21:c3:e6:88:e6:e2:a9: d0:8b:a4:c4:37:61:46:da:85:6e:ad:2e:2e:07:c8:41:08:6c: fc:1e:99:01:c2:3c:ef:91:29:53:12:3b:2a:f8:f9:08:cb:64: 35:b7:13:38:03:f7:51:a6:b2:a6:a0:0d:2d:1d:a8:56:5e:45: 3d:b2:ef:59:03:e6:78:ca:52:dc:f5:62:f2:eb:95:73:2b:93: ca:e3:7d:7f:83:e9:0d:22:10:9b:03:fc:c6:b7:ec:65:38:fd: d0:f3:2c:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUTBdp+HWPifCUzzvgzDMtzi7/zWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk5MkVBQkM0QzhGRDA5QThBRDFCOTYyMERFRDNBNkU1 QzU1MUM2OTAeFw0yNjA0MDExMjMxMTdaFw0yNzAzMzExMjM2MTdaMDMxMTAvBgNV BAMTKDhBQ0Y2RUI3MTgxNUUwRUI3MjU1NTY5RjRFMjAxNTFEOTM4NzUyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER8BJade63AwdWDkJGRdbfaf8 UcxhO1xXyNWpmvI2953q+6CrXl/T4Xa64f3Vi1BEcBo+Q2XB7XSrXsxOCILytn9U z+AS0f8d8Jr2wwi9n742v5sQe5Bbf2mLpTmDrWAUVnQPsHkvU9cRdX7aeVL4o53s Sp55Vzn174AekcJuEQw33uKGx9vp/M/+CWpxwnda5PUX9/ilmwpxVffM4Z8VSm6L 1qPUDy7pt0IeqTo9aiceUb4TMzhFbpRYUcG0DD8nsdYWKggwBEw7gTqrB1HSY02j +xxz2IUgIk9z3n84lmtzyrXvuPvfAm+yA7KSqSjKuJSvPpu1qJxnMhcG4FOrAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUis9utxgV4OtyVVafTiAVHZOHUoEwHwYDVR0j BBgwFoAUSZLqvEyP0JqK0bliDe06blxVHGkwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnN5bmMubmV4My5jb20uYnIvcmVwby9BUzI2 NTkwNS8wLzQ5OTJFQUJDNEM4RkQwOUE4QUQxQjk2MjBERUQzQTZFNUM1NTFDNjku Y3JsMIGdBggrBgEFBQcBAQSBkDCBjTCBigYIKwYBBQUHMAKGfnJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3Bu dlgzNW5Ld0VTUGZEbXhTdUN1RkovMC80OTkyRUFCQzRDOEZEMDlBOEFEMUI5NjIw REVEM0E2RTVDNTUxQzY5LmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzAL hmRyc3luYzovL3JzeW5jLm5leDMuY29tLmJyL3JlcG8vQVMyNjU5MDUvMC8zMjM4 MzAzNDNhMzM2NjYxMzgzYTNhMmYzMzMyMmQzMzM0MjAzZDNlMjAzMjM2MzUzOTMw MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBD+oMA0GCSqGSIb3DQEBCwUAA4IBAQDVucWmm/wrinkk 1CJ8UWV1f2QIskDtnROrMKyiay5W/XB09kW1TDBqBJmf+PG7i+GwA7SSuXqp+u4K Kg5lUAqfBM3TeyBu4R/BlT7O38o9/4z0f/z9Gewzo+KikL+zl5YXOb0n2orBaoBv urXi8IbyVIpBB9d+ry+5/Kzs3l/D6wsEauZaXZ80zF90wwdHahNZ0RkTFm96DQTt iSHD5ojm4qnQi6TEN2FG2oVurS4uB8hBCGz8HpkBwjzvkSlTEjsq+PkIy2Q1txM4 A/dRprKmoA0tHahWXkU9su9ZA+Z4ylLc9WLy65VzK5PK431/g+kNIhCbA/zGt+xl OP3Q8yyz -----END CERTIFICATE-----Generated at Wed Apr 8 13:21:14 2026 by rpki-client