$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa File: 323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa (raw, json) Hash identifier: STGseG3H+8/dxBg4/EQyPb4ab5aac6Wb44nBogqCSmM= Subject key identifier: AF:7F:B4:DE:60:2E:52:02:93:B9:EC:A7:97:F8:20:24:CC:32:85:8C Certificate issuer: /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569 Certificate serial: 730DCFC785B408FA18299332722D6D3C1F7C4016 Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer Subject info access: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa Signing time: Tue 27 Oct 2026 01:33:43 +0000 ROA not before: Tue 27 Oct 2026 01:28:43 +0000 ROA not after: Tue 26 Oct 2027 01:33:43 +0000 asID: 271612 IP address blocks: 2804:7e40:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 23:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0d:cf:c7:85:b4:08:fa:18:29:93:32:72:2d:6d:3c:1f:7c:40:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569 Validity Not Before: Oct 27 01:28:43 2026 GMT Not After : Oct 26 01:33:43 2027 GMT Subject: CN=AF7FB4DE602E520293B9ECA797F82024CC32858C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:f4:e7:aa:9d:8f:e5:91:23:65:8a:38:ce: 88:a4:44:cf:55:cd:0a:fc:79:0e:cd:7e:d4:44:d4: 95:97:6f:7f:2e:1d:f3:29:e6:c6:0f:d4:7b:2d:d1: 57:3f:49:c4:42:09:4b:ea:21:de:b6:20:c1:51:9a: 42:92:81:7b:3e:df:6f:2d:a4:06:7c:f7:c5:33:5f: d5:f4:1d:7c:f9:d3:a2:22:83:d8:23:f0:12:bb:1a: 19:74:2b:97:0e:58:8c:01:90:f4:5c:c1:57:49:e2: a8:47:cf:79:05:14:be:e5:54:fa:e3:ff:a2:3f:a9: aa:ec:6d:8c:ca:77:ba:f4:07:c6:7c:17:8d:af:80: ea:ac:3d:0e:8e:f5:40:06:56:6c:75:80:a7:30:f0: 9d:e8:3a:a1:a7:51:58:b2:27:cc:b2:6c:24:2c:cd: 27:e9:aa:5c:aa:2a:10:10:48:ae:7b:b6:0b:e4:90: 0a:16:bd:73:c6:89:78:66:66:14:09:34:43:75:8b: 45:f9:21:80:8f:64:b5:9f:37:b3:fe:e8:e9:99:a1: 61:26:b1:1c:7f:1a:1d:6a:c7:78:86:4a:c8:e1:c3: ef:04:c6:71:64:08:ce:09:50:a4:95:c3:97:0a:18: 1c:af:d2:b3:26:8e:07:02:82:ae:a9:f8:6d:28:21: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:B4:DE:60:2E:52:02:93:B9:EC:A7:97:F8:20:24:CC:32:85:8C X509v3 Authority Key Identifier: keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a313030303a3a2f34302d3430203d3e20323731363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e40:1000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:b4:f3:0f:62:b0:47:75:5e:ce:9d:2b:f3:0e:84:10:3b:5d: 65:9a:25:75:c9:3a:79:ec:81:96:d4:51:30:73:e4:47:16:03: 06:6a:1e:eb:37:ea:c3:d5:b0:48:d5:03:c5:e0:3b:43:a2:e1: 73:b3:34:18:4e:93:68:25:5a:20:1a:ed:5f:01:70:9f:86:d2: 34:94:46:37:7b:f8:82:06:5a:45:7b:be:ca:06:96:d8:ea:6f: ea:1b:bd:53:8f:ca:51:ca:ae:82:cf:0f:42:bb:34:d8:70:c6: 70:5b:2e:b2:16:c6:45:b9:ad:55:fe:fb:90:e8:d0:7f:96:da: 5e:56:10:bd:c7:45:0c:ab:8b:a3:e6:9f:ec:53:86:a7:8a:f5: e0:56:3a:d3:93:d7:8b:fa:54:61:8b:7d:1b:bf:18:3d:70:fe: 28:ee:e5:a5:62:eb:8c:20:bc:c3:15:f6:0b:e0:46:c7:fb:db: da:9d:5f:e3:c3:a7:7d:65:db:a5:09:1c:3f:26:3e:54:dd:6e: 4c:bf:3c:41:58:25:22:81:9c:11:d0:0a:a6:ae:92:7d:d3:18: 91:bc:03:85:81:4a:97:4c:da:75:5d:51:c5:68:05:b5:7c:82: 55:fd:be:f7:41:2b:25:b0:df:4d:e6:7a:ad:d9:14:cb:e5:f3: 84:a3:b5:be -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUcw3Px4W0CPoYKZMyci1tPB98QBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTNFOTlEMEJDRTc5M0EyQUM3QUU2OEFFQjQ0NkE3 OEY1QjU2OTAeFw0yNjEwMjcwMTI4NDNaFw0yNzEwMjYwMTMzNDNaMDMxMTAvBgNV BAMTKEFGN0ZCNERFNjAyRTUyMDI5M0I5RUNBNzk3RjgyMDI0Q0MzMjg1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nvTnqp2P5ZEjZYo4zoikRM9V zQr8eQ7NftRE1JWXb38uHfMp5sYP1Hst0Vc/ScRCCUvqId62IMFRmkKSgXs+328t pAZ898UzX9X0HXz506Iig9gj8BK7Ghl0K5cOWIwBkPRcwVdJ4qhHz3kFFL7lVPrj /6I/qarsbYzKd7r0B8Z8F42vgOqsPQ6O9UAGVmx1gKcw8J3oOqGnUViyJ8yybCQs zSfpqlyqKhAQSK57tgvkkAoWvXPGiXhmZhQJNEN1i0X5IYCPZLWfN7P+6OmZoWEm sRx/Gh1qx3iGSsjhw+8ExnFkCM4JUKSVw5cKGByv0rMmjgcCgq6p+G0oIXx5AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUr3+03mAuUgKTueynl/ggJMwyhYwwHwYDVR0j BBgwFoAUmi4+mdC855OirHrmiutEanj1tWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM bjUvMC85QTJFM0U5OUQwQkNFNzkzQTJBQzdBRTY4QUVCNDQ2QTc4RjVCNTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMkUzRTk5RDBCQ0U3OTNB MkFDN0FFNjhBRUI0NDZBNzhGNUI1NjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv MzIzODMwMzQzYTM3NjUzNDMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMTM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfkAQMA0GCSqGSIb3DQEBCwUA A4IBAQANtPMPYrBHdV7OnSvzDoQQO11lmiV1yTp57IGW1FEwc+RHFgMGah7rN+rD 1bBI1QPF4DtDouFzszQYTpNoJVogGu1fAXCfhtI0lEY3e/iCBlpFe77KBpbY6m/q G71Tj8pRyq6Czw9CuzTYcMZwWy6yFsZFua1V/vuQ6NB/ltpeVhC9x0UMq4uj5p/s U4anivXgVjrTk9eL+lRhi30bvxg9cP4o7uWlYuuMILzDFfYL4EbH+9vanV/jw6d9 ZdulCRw/Jj5U3W5MvzxBWCUigZwR0AqmrpJ90xiRvAOFgUqXTNp1XVHFaAW1fIJV /b73QSslsN9N5nqt2RTL5fOEo7W+ -----END CERTIFICATE-----Generated at Wed Oct 28 12:58:55 2026 by rpki-client