$ rpki-client -vvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/323830343a6261303a3a2f33322d313238203d3e203532383031.roa File: 323830343a6261303a3a2f33322d313238203d3e203532383031.roa (raw, json) Hash identifier: /CT4i5Dgkj/kOc21Ova2ordHmSl3GCcuEna1raYeE78= Subject key identifier: 2B:5E:EF:0E:97:A6:98:8E:D3:34:19:9E:98:A7:73:CA:9D:95:BC:36 Certificate issuer: /CN=3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1 Certificate serial: 52422211A164592F479C8E79C14FC88058B72918 Authority key identifier: 3A:BB:AF:C1:16:2A:8B:AE:A4:DE:6D:2D:83:24:BC:C6:D0:19:83:B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/323830343a6261303a3a2f33322d313238203d3e203532383031.roa Signing time: Wed 08 Apr 2026 13:42:31 +0000 ROA not before: Wed 08 Apr 2026 13:37:31 +0000 ROA not after: Wed 07 Apr 2027 13:42:31 +0000 asID: 52801 IP address blocks: 2804:ba0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.crl rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 09:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:22:11:a1:64:59:2f:47:9c:8e:79:c1:4f:c8:80:58:b7:29:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1 Validity Not Before: Apr 8 13:37:31 2026 GMT Not After : Apr 7 13:42:31 2027 GMT Subject: CN=2B5EEF0E97A6988ED334199E98A773CA9D95BC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:7a:d8:f0:dd:6f:4f:f3:1e:ed:84:1c:3f: 24:77:e0:03:09:2f:0d:ff:af:60:bc:41:1b:73:87: b3:32:44:be:36:19:69:db:a6:63:bb:4c:3c:6d:37: 86:9d:97:0c:8b:18:4e:97:f7:86:7e:0b:b7:ec:24: 0b:70:bc:17:8d:e8:7a:77:c4:38:3e:a5:db:a7:91: 87:0e:59:33:fe:6a:79:05:17:15:5b:7e:69:9a:09: b8:bf:94:ac:a7:1b:ff:42:2e:7c:60:ee:d0:e4:b4: 95:9e:8a:18:b2:00:05:3a:98:2b:2e:56:50:2d:a5: eb:88:6c:da:ed:e8:23:4b:9d:5f:cc:b9:bb:99:57: fc:42:a3:1e:a7:c1:20:d7:67:48:e6:0c:42:4d:1e: 0c:13:73:1f:c6:b9:7a:e2:b6:e7:e9:9a:22:63:9f: f5:a1:6e:11:d0:98:ce:e5:3b:64:46:dd:b5:fd:f7: c9:b1:96:24:30:48:c9:b3:8f:4e:67:bd:92:a6:b3: ca:bf:51:95:03:3a:d6:90:16:db:cb:b0:37:ac:f8: b1:13:26:3c:90:67:d2:2a:22:e2:d6:61:ce:14:ed: 9d:2d:d1:47:fe:9f:28:c3:91:46:db:f6:c9:37:62: a3:db:81:db:58:7a:25:bf:ec:13:a6:16:2c:1f:04: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:EF:0E:97:A6:98:8E:D3:34:19:9E:98:A7:73:CA:9D:95:BC:36 X509v3 Authority Key Identifier: keyid:3A:BB:AF:C1:16:2A:8B:AE:A4:DE:6D:2D:83:24:BC:C6:D0:19:83:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/323830343a6261303a3a2f33322d313238203d3e203532383031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:ba0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:a0:7a:aa:4f:92:11:ae:e7:16:57:0e:1a:2b:52:96:ed:1d: 25:94:fe:d4:ab:bb:21:dd:89:10:f8:93:5b:8b:be:4d:6e:9b: 4f:9f:0f:43:90:e3:89:d2:2a:58:7d:7a:3f:ca:4b:b1:10:cc: e7:01:f6:5e:4b:c1:92:b2:9d:c1:e7:99:31:bb:e6:54:66:14: df:fe:30:af:77:95:60:37:a5:36:fb:76:ff:c2:65:23:99:2e: 16:bd:6a:58:e9:bf:27:c5:a1:d8:70:bd:2b:e0:12:b9:09:21: d6:43:fa:2b:50:21:f9:29:b7:c6:35:d7:54:65:82:ab:aa:79: 52:2b:b6:2c:8b:0d:2d:6d:dd:5c:27:e4:9d:e5:c4:1b:dd:cf: 94:36:dd:df:9a:ab:ff:e9:8c:1c:0d:cb:89:b0:8c:4d:11:dd: a9:ac:04:c2:c2:12:3a:3d:1d:f3:6a:fe:f8:54:40:75:36:9b: 41:28:13:7d:f9:67:ae:f8:12:01:d9:3d:3a:e8:19:41:f5:c0: 19:6f:10:6c:dc:ed:f6:d6:3f:2a:40:a5:c9:04:78:d7:60:3c: 31:52:59:10:71:8b:30:c9:a4:fc:af:89:86:e5:55:45:2f:0e: 38:0e:fb:c8:01:ed:ab:33:a3:0a:28:1e:53:12:21:6d:02:8d: 66:e6:f8:80 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUUkIiEaFkWS9HnI55wU/IgFi3KRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCQkFGQzExNjJBOEJBRUE0REU2RDJEODMyNEJDQzZE MDE5ODNCMTAeFw0yNjA0MDgxMzM3MzFaFw0yNzA0MDcxMzQyMzFaMDMxMTAvBgNV BAMTKDJCNUVFRjBFOTdBNjk4OEVEMzM0MTk5RTk4QTc3M0NBOUQ5NUJDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWf3rY8N1vT/Me7YQcPyR34AMJ Lw3/r2C8QRtzh7MyRL42GWnbpmO7TDxtN4adlwyLGE6X94Z+C7fsJAtwvBeN6Hp3 xDg+pdunkYcOWTP+ankFFxVbfmmaCbi/lKynG/9CLnxg7tDktJWeihiyAAU6mCsu VlAtpeuIbNrt6CNLnV/MubuZV/xCox6nwSDXZ0jmDEJNHgwTcx/GuXritufpmiJj n/WhbhHQmM7lO2RG3bX998mxliQwSMmzj05nvZKms8q/UZUDOtaQFtvLsDes+LET JjyQZ9IqIuLWYc4U7Z0t0Uf+nyjDkUbb9sk3YqPbgdtYeiW/7BOmFiwfBJjXAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUK17vDpemmI7TNBmemKdzyp2VvDYwHwYDVR0j BBgwFoAUOruvwRYqi66k3m0tgyS8xtAZg7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldCTUtla1IyaDM5S0RHeDZjdllhQmhSVzlUeG1QdDRtZTJWTDY4M0NV YVcvMC8zQUJCQUZDMTE2MkE4QkFFQTRERTZEMkQ4MzI0QkNDNkQwMTk4M0IxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkJBRkMxMTYyQThCQUVB NERFNkQyRDgzMjRCQ0M2RDAxOTgzQjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJXQk1LZWtSMmgzOUtER3g2Y3ZZYUJoUlc5VHhtUHQ0bWUyVkw2ODNDVWFXLzAv MzIzODMwMzQzYTYyNjEzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM4 MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEC6AwDQYJKoZIhvcNAQELBQADggEBABygeqpPkhGu 5xZXDhorUpbtHSWU/tSruyHdiRD4k1uLvk1um0+fD0OQ44nSKlh9ej/KS7EQzOcB 9l5LwZKyncHnmTG75lRmFN/+MK93lWA3pTb7dv/CZSOZLha9aljpvyfFodhwvSvg ErkJIdZD+itQIfkpt8Y111RlgquqeVIrtiyLDS1t3Vwn5J3lxBvdz5Q23d+aq//p jBwNy4mwjE0R3amsBMLCEjo9HfNq/vhUQHU2m0EoE335Z674EgHZPTroGUH1wBlv EGzc7fbWPypApckEeNdgPDFSWRBxizDJpPyviYblVUUvDjgO+8gB7aszowooHlMS IW0CjWbm+IA= -----END CERTIFICATE-----Generated at Thu Apr 9 16:41:23 2026 by rpki-client