$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa File: 323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa (raw, json) Hash identifier: 67VYbEAIG4bxAKSKtDiy4D1FalGWXct3q2T1J5QPLm8= Subject key identifier: E5:A2:EE:C4:80:22:05:65:FC:13:EE:7E:74:7D:CA:88:9F:58:D2:04 Certificate issuer: /CN=C9FEAA3502E80979EEEA85C8EBB252880843E762 Certificate serial: 2AE5EB544CD6AB65CBEB89FB52269199E1DC306D Authority key identifier: C9:FE:AA:35:02:E8:09:79:EE:EA:85:C8:EB:B2:52:88:08:43:E7:62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa Signing time: Tue 07 Apr 2026 19:08:57 +0000 ROA not before: Tue 07 Apr 2026 19:03:57 +0000 ROA not after: Tue 06 Apr 2027 19:08:57 +0000 asID: 265384 IP address blocks: 2804:3340:bb00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 05:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e5:eb:54:4c:d6:ab:65:cb:eb:89:fb:52:26:91:99:e1:dc:30:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9FEAA3502E80979EEEA85C8EBB252880843E762 Validity Not Before: Apr 7 19:03:57 2026 GMT Not After : Apr 6 19:08:57 2027 GMT Subject: CN=E5A2EEC480220565FC13EE7E747DCA889F58D204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:a0:25:27:da:b0:e8:e8:28:6f:06:f0:3c: 7e:f5:dd:6c:d3:d1:d4:bc:19:28:53:8f:ff:3e:9a: 32:36:2b:fb:0a:b0:19:7f:f2:44:5d:07:05:96:f7: 87:3d:83:b3:f1:c7:fa:bc:20:86:b5:c6:f2:4d:c5: b1:54:80:29:9f:8e:f8:26:27:a9:44:21:42:d1:f0: 9a:a1:df:8b:3e:d5:21:fc:da:0a:84:26:98:bf:4c: a6:ec:05:f8:f7:43:34:ef:7f:93:de:c0:83:96:27: 1c:64:86:e2:17:a7:1c:09:a0:03:04:97:28:0f:f1: d5:37:b9:b3:ca:6c:13:97:38:4a:00:f7:9a:6d:2b: 59:49:5e:24:a5:7f:ad:3f:b0:41:e2:bb:b6:39:17: 24:d9:37:57:a3:84:f7:bd:c2:77:62:81:03:3b:a5: bb:37:61:23:57:1c:fd:1c:4b:31:40:2c:ce:bf:67: a5:2d:df:a2:16:b3:b4:da:54:6e:73:f0:d1:77:b7: bb:3f:c2:87:ab:6d:73:a7:1d:a0:ac:fa:57:4f:c7: a5:11:6a:33:34:c9:cd:e7:57:fe:c7:dc:b8:6f:ac: a8:c8:c3:76:5a:a4:5a:cf:9f:36:5b:81:5c:ff:d9: 25:1d:c8:9b:5f:2a:9d:fb:57:65:42:cb:7b:6d:01: b4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:EE:C4:80:22:05:65:FC:13:EE:7E:74:7D:CA:88:9F:58:D2:04 X509v3 Authority Key Identifier: keyid:C9:FE:AA:35:02:E8:09:79:EE:EA:85:C8:EB:B2:52:88:08:43:E7:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/C9FEAA3502E80979EEEA85C8EBB252880843E762.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FEAA3502E80979EEEA85C8EBB252880843E762.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a626230303a3a2f34302d3430203d3e20323635333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3340:bb00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:6a:bc:29:d7:74:7b:b7:3a:60:ff:8c:14:10:76:ca:64:ad: b7:c9:e7:42:2e:03:74:07:5a:94:27:72:ea:9a:4a:7d:07:f5: ce:d5:e8:14:7e:14:f5:b5:b8:25:5a:2d:a1:ba:53:f3:4e:71: bd:e3:83:b5:84:2e:d6:57:46:5e:c5:76:eb:cf:11:26:49:ca: fb:c8:f7:dc:36:6a:39:67:c7:d2:85:0f:16:18:3b:04:64:45: 29:15:f0:d6:c8:07:ac:f2:10:c4:ab:fb:19:50:f3:37:f4:7d: 94:b6:5d:80:17:2d:3f:4e:b0:be:59:0a:be:e7:3d:3e:b6:17: e7:e0:a2:30:a4:3e:b0:02:1c:cb:8e:02:00:18:8b:36:99:79: c5:51:e1:93:59:cc:e5:6d:71:73:f9:fa:e5:cb:1d:ae:e1:61: ff:09:3d:45:89:09:bb:49:56:e2:61:ab:da:8d:6a:91:d0:b5: 4e:2c:2e:b3:a8:03:d9:6a:7d:50:67:30:da:cd:98:d5:c8:0d: e1:2f:ba:54:33:83:19:a2:4d:ad:a9:24:0f:21:c3:6e:ed:36: cd:f5:aa:a9:ce:23:7d:53:2e:90:f8:d8:f4:c0:9d:92:94:54: ef:52:91:95:8b:bd:d2:e5:2d:76:83:ba:bf:46:9c:8a:cd:ef: 3d:e1:33:be -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKuXrVEzWq2XL64n7UiaRmeHcMG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGRUFBMzUwMkU4MDk3OUVFRUE4NUM4RUJCMjUyODgw ODQzRTc2MjAeFw0yNjA0MDcxOTAzNTdaFw0yNzA0MDYxOTA4NTdaMDMxMTAvBgNV BAMTKEU1QTJFRUM0ODAyMjA1NjVGQzEzRUU3RTc0N0RDQTg4OUY1OEQyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIf6AlJ9qw6OgobwbwPH713WzT 0dS8GShTj/8+mjI2K/sKsBl/8kRdBwWW94c9g7Pxx/q8IIa1xvJNxbFUgCmfjvgm J6lEIULR8Jqh34s+1SH82gqEJpi/TKbsBfj3QzTvf5PewIOWJxxkhuIXpxwJoAME lygP8dU3ubPKbBOXOEoA95ptK1lJXiSlf60/sEHiu7Y5FyTZN1ejhPe9wndigQM7 pbs3YSNXHP0cSzFALM6/Z6Ut36IWs7TaVG5z8NF3t7s/woerbXOnHaCs+ldPx6UR ajM0yc3nV/7H3LhvrKjIw3ZapFrPnzZbgVz/2SUdyJtfKp37V2VCy3ttAbRBAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU5aLuxIAiBWX8E+5+dH3KiJ9Y0gQwHwYDVR0j BBgwFoAUyf6qNQLoCXnu6oXI67JSiAhD52IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC9DOUZFQUEzNTAyRTgwOTc5RUVFQTg1QzhFQkIyNTI4ODA4NDNFNzYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RkVBQTM1MDJFODA5NzlF RUVBODVDOEVCQjI1Mjg4MDg0M0U3NjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv MzIzODMwMzQzYTMzMzMzNDMwM2E2MjYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEM0C7MA0GCSqGSIb3DQEBCwUA A4IBAQAtarwp13R7tzpg/4wUEHbKZK23yedCLgN0B1qUJ3Lqmkp9B/XO1egUfhT1 tbglWi2hulPzTnG944O1hC7WV0ZexXbrzxEmScr7yPfcNmo5Z8fShQ8WGDsEZEUp FfDWyAes8hDEq/sZUPM39H2Utl2AFy0/TrC+WQq+5z0+thfn4KIwpD6wAhzLjgIA GIs2mXnFUeGTWczlbXFz+frlyx2u4WH/CT1FiQm7SVbiYavajWqR0LVOLC6zqAPZ an1QZzDazZjVyA3hL7pUM4MZok2tqSQPIcNu7TbN9aqpziN9Uy6Q+Nj0wJ2SlFTv UpGVi73S5S12g7q/RpyKze894TO+ -----END CERTIFICATE-----Generated at Thu Apr 9 16:44:58 2026 by rpki-client