$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa File: 323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa (raw, json) Hash identifier: Z3c811pq6ejtKoHGL5FtMRJgC8ZUMyysB1dq5pYzFGk= Subject key identifier: EC:66:1E:2C:0D:C3:B1:D8:0A:AE:C4:E8:92:48:DE:A0:09:88:68:92 Certificate issuer: /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569 Certificate serial: 522355ECBE1ACA9BB3F7C72011289C8AB688B149 Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer Subject info access: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa Signing time: Tue 27 Oct 2026 01:33:33 +0000 ROA not before: Tue 27 Oct 2026 01:28:33 +0000 ROA not after: Tue 26 Oct 2027 01:33:33 +0000 asID: 271612 IP address blocks: 2804:7e40:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 23:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:23:55:ec:be:1a:ca:9b:b3:f7:c7:20:11:28:9c:8a:b6:88:b1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569 Validity Not Before: Oct 27 01:28:33 2026 GMT Not After : Oct 26 01:33:33 2027 GMT Subject: CN=EC661E2C0DC3B1D80AAEC4E89248DEA009886892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:f6:79:5e:73:06:2e:fb:d0:4b:94:66:ab: b2:23:fb:f8:a9:da:54:c6:13:e5:d3:f3:7e:e1:17: 5b:33:7f:2c:de:8f:5b:0b:d4:72:39:29:08:0d:4b: aa:7c:73:8f:bf:32:3a:a0:69:f0:4d:cd:85:9f:4d: e9:07:ec:2b:68:69:56:d2:a6:60:ef:aa:bd:18:c2: 1c:0f:2a:47:7f:d1:ca:b2:43:94:b9:d0:c4:6f:61: e5:ad:59:eb:ad:c6:b3:af:8c:c3:5e:f5:1b:88:08: 2d:6e:2b:e1:cd:42:6c:72:ab:cc:3b:38:b2:cf:9e: 98:53:3f:8e:cc:dd:bb:a6:63:ce:79:ea:d6:52:e5: 9e:30:b0:64:64:8a:ee:9c:e8:33:d3:e9:bc:52:49: dc:ad:3d:6d:d9:a5:29:98:28:a8:03:55:e8:0f:a5: 2b:22:86:7f:da:01:e8:2c:5d:19:a1:9b:9c:19:ca: 42:c9:50:f9:7c:4e:a2:16:16:83:cc:0a:da:48:6f: 6c:a3:9c:a0:fb:a2:37:29:e8:51:54:d2:d4:1c:e8: f2:2b:f0:d8:77:7a:37:0c:07:ab:be:d7:64:96:0d: bb:80:40:13:d5:76:5a:a0:6b:e0:84:c7:a3:79:15: 7b:a0:e1:e0:b5:f9:9b:87:d1:2b:b2:8a:c2:7c:f5: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:66:1E:2C:0D:C3:B1:D8:0A:AE:C4:E8:92:48:DE:A0:09:88:68:92 X509v3 Authority Key Identifier: keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3130303a3a2f34302d3430203d3e20323731363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7e40:100::/40 Signature Algorithm: sha256WithRSAEncryption 87:6a:30:7a:e1:68:20:46:4b:96:f1:b6:a5:f2:b7:96:d1:70: cb:18:b0:57:55:26:71:d2:77:50:eb:55:e0:3f:f4:ba:e7:e3: 66:6c:01:0d:7a:4f:e0:93:f7:b6:1e:9a:b2:e3:b1:40:aa:af: 73:c4:9e:03:35:08:c1:d3:7a:a7:a8:25:89:0a:6f:86:36:62: f5:f5:86:c1:b9:ac:fb:90:ac:50:e3:74:53:75:ea:7c:9d:bf: a7:f7:24:34:e6:71:f1:58:e1:51:90:01:11:9d:b4:79:e7:44: db:a2:fe:be:96:e6:37:0f:57:b5:a4:41:1c:7a:a1:7a:66:5c: 9b:ac:46:53:42:c9:af:b0:fe:65:66:b9:c9:96:d6:2f:f0:03: b0:87:1c:46:4c:6a:89:0d:0b:2f:20:be:73:64:8f:cd:15:d0: b8:0c:9a:11:9b:f6:a7:04:d2:e6:f8:ee:ab:e7:9e:b2:00:93: d5:a8:7b:26:42:f5:8c:25:27:e3:0d:40:cc:c5:cf:19:ea:95: 4a:c1:ef:ba:46:b5:d5:aa:97:32:26:aa:e7:a5:6c:c5:78:24: d0:85:df:2f:82:04:f2:0e:be:af:c7:df:41:b4:57:12:ad:c9: 17:95:e6:55:e6:1f:2b:53:bc:14:48:50:fd:68:5a:5f:9a:66: 9f:b5:78:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUiNV7L4aypuz98cgESiciraIsUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyRTNFOTlEMEJDRTc5M0EyQUM3QUU2OEFFQjQ0NkE3 OEY1QjU2OTAeFw0yNjEwMjcwMTI4MzNaFw0yNzEwMjYwMTMzMzNaMDMxMTAvBgNV BAMTKEVDNjYxRTJDMERDM0IxRDgwQUFFQzRFODkyNDhERUEwMDk4ODY4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1/Z5XnMGLvvQS5Rmq7Ij+/ip 2lTGE+XT837hF1szfyzej1sL1HI5KQgNS6p8c4+/MjqgafBNzYWfTekH7CtoaVbS pmDvqr0YwhwPKkd/0cqyQ5S50MRvYeWtWeutxrOvjMNe9RuICC1uK+HNQmxyq8w7 OLLPnphTP47M3bumY8556tZS5Z4wsGRkiu6c6DPT6bxSSdytPW3ZpSmYKKgDVegP pSsihn/aAegsXRmhm5wZykLJUPl8TqIWFoPMCtpIb2yjnKD7ojcp6FFU0tQc6PIr 8Nh3ejcMB6u+12SWDbuAQBPVdlqga+CEx6N5FXug4eC1+ZuH0SuyisJ89Q2DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7GYeLA3DsdgKrsTokkjeoAmIaJIwHwYDVR0j BBgwFoAUmi4+mdC855OirHrmiutEanj1tWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM bjUvMC85QTJFM0U5OUQwQkNFNzkzQTJBQzdBRTY4QUVCNDQ2QTc4RjVCNTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMkUzRTk5RDBCQ0U3OTNB MkFDN0FFNjhBRUI0NDZBNzhGNUI1NjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv MzIzODMwMzQzYTM3NjUzNDMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM3MzEzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBH5AATANBgkqhkiG9w0BAQsFAAOC AQEAh2oweuFoIEZLlvG2pfK3ltFwyxiwV1UmcdJ3UOtV4D/0uufjZmwBDXpP4JP3 th6asuOxQKqvc8SeAzUIwdN6p6gliQpvhjZi9fWGwbms+5CsUON0U3XqfJ2/p/ck NOZx8VjhUZABEZ20eedE26L+vpbmNw9XtaRBHHqhemZcm6xGU0LJr7D+ZWa5yZbW L/ADsIccRkxqiQ0LLyC+c2SPzRXQuAyaEZv2pwTS5vjuq+eesgCT1ah7JkL1jCUn 4w1AzMXPGeqVSsHvuka11aqXMiaq56VsxXgk0IXfL4IE8g6+r8ffQbRXEq3JF5Xm VeYfK1O8FEhQ/WhaX5pmn7V4Og== -----END CERTIFICATE-----Generated at Wed Oct 28 05:35:11 2026 by rpki-client