$ rpki-client -vvvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3230303a3a2f34302d3430203d3e20323636343533.roa File: 323830343a333831303a3230303a3a2f34302d3430203d3e20323636343533.roa (raw, json) Hash identifier: eFgOrxEqnPzY5FIBdul/26QiEilhI6ti5ZuCvjSlqXs= Subject key identifier: C2:9A:0B:D2:AF:FF:AF:AE:11:9C:2C:1F:D9:F2:0E:D9:B6:12:B7:3D Certificate issuer: /CN=DD86ADCC30F2916A776478CCA8F839939F66C37F Certificate serial: 1DA2CE7E1540657E514C802751BF999F2B2A8424 Authority key identifier: DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3230303a3a2f34302d3430203d3e20323636343533.roa Signing time: Tue 11 Aug 2026 14:50:44 +0000 ROA not before: Tue 11 Aug 2026 14:45:44 +0000 ROA not after: Tue 10 Aug 2027 14:50:44 +0000 asID: 266453 IP address blocks: 2804:3810:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 16:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a2:ce:7e:15:40:65:7e:51:4c:80:27:51:bf:99:9f:2b:2a:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD86ADCC30F2916A776478CCA8F839939F66C37F Validity Not Before: Aug 11 14:45:44 2026 GMT Not After : Aug 10 14:50:44 2027 GMT Subject: CN=C29A0BD2AFFFAFAE119C2C1FD9F20ED9B612B73D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:0e:5e:c5:99:77:3d:dc:76:98:fa:d4:e5: 84:b5:fc:d8:5e:3a:86:fc:f7:43:06:9b:9d:83:a6: c5:4e:a2:a6:26:a3:5d:db:00:59:67:8f:a6:d2:7d: b4:16:be:10:de:f8:2f:86:8d:9c:4b:01:aa:8c:7c: e5:35:96:ad:bc:6b:97:0b:a5:a8:ab:48:61:cc:3e: 4c:37:94:7e:f0:6a:2b:77:69:06:53:5c:11:fd:db: 31:25:05:3f:2f:e0:ed:4e:e7:c9:5d:b7:9a:3a:64: 6b:1d:e9:6e:5f:0d:2a:01:de:74:c1:d0:55:38:0b: d0:4f:56:38:92:63:60:20:cc:28:34:74:5e:cb:dc: 34:77:74:e5:d5:61:6c:bd:15:ed:3d:5c:ac:18:18: 7c:e4:24:0a:4d:31:9a:c9:3c:2e:91:66:54:e3:dd: 99:c4:e4:28:e1:fc:ee:5a:fb:26:71:9c:00:69:77: b7:68:a7:ba:59:53:e4:65:2b:ae:24:01:ef:0c:ce: 8f:da:54:68:16:06:28:c4:77:50:24:99:69:ab:08: 9a:81:17:77:a7:ca:61:5e:f6:a1:e2:c4:e7:cd:95: 67:ff:c6:74:1e:da:e7:4f:6a:ac:b1:c4:4e:2e:6a: da:d9:90:4b:86:12:ae:a2:f6:42:c9:ec:8f:bf:5d: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:0B:D2:AF:FF:AF:AE:11:9C:2C:1F:D9:F2:0E:D9:B6:12:B7:3D X509v3 Authority Key Identifier: keyid:DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3230303a3a2f34302d3430203d3e20323636343533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3810:200::/40 Signature Algorithm: sha256WithRSAEncryption 3f:49:1e:d6:be:08:a2:34:35:3d:1f:75:b1:59:c4:13:71:bc: d4:7a:43:05:ba:d9:7a:ff:52:cf:cd:25:bd:c5:23:15:9d:04: 68:79:8c:ae:f4:32:2c:2b:47:45:57:b9:9f:bc:0b:4f:b9:e6: 3a:9f:2f:da:82:05:be:31:36:cd:81:f9:9d:92:f8:99:cf:34: 28:8f:d2:3c:27:f5:bf:82:97:f2:7e:79:f7:bc:13:64:05:d0: 22:f9:9b:69:8f:e1:b6:ba:64:4a:12:c8:8d:33:fd:38:2b:79: 88:a8:17:87:ed:31:6b:ab:cf:c4:40:c6:75:5c:7a:f1:f6:20: 6f:c3:62:37:34:ad:b6:b4:e4:3c:c6:fe:a4:2d:e3:f2:1f:30: 01:0e:14:77:bc:17:08:18:bd:1b:7a:b0:d2:e1:c3:1e:6a:59: a1:5b:38:86:31:29:00:b1:ca:3e:60:6e:15:d0:57:7d:4d:77: 3f:28:f9:3c:cf:74:b7:fa:60:d1:e0:b0:2e:d5:65:90:24:98: ad:63:e4:de:0d:c6:ab:e0:ef:28:7d:ba:0a:4c:a7:76:66:ae: a8:0b:e7:0e:cf:8e:3f:17:90:f2:7a:a9:f6:2f:3d:8f:8f:bd: 8c:f7:a6:5d:02:50:66:f1:c2:5b:31:0d:fc:6e:4e:a9:50:ab: 1c:97:43:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHaLOfhVAZX5RTIAnUb+ZnysqhCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4NkFEQ0MzMEYyOTE2QTc3NjQ3OENDQThGODM5OTM5 RjY2QzM3RjAeFw0yNjA4MTExNDQ1NDRaFw0yNzA4MTAxNDUwNDRaMDMxMTAvBgNV BAMTKEMyOUEwQkQyQUZGRkFGQUUxMTlDMkMxRkQ5RjIwRUQ5QjYxMkI3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTw5exZl3Pdx2mPrU5YS1/Nhe Oob890MGm52DpsVOoqYmo13bAFlnj6bSfbQWvhDe+C+GjZxLAaqMfOU1lq28a5cL pairSGHMPkw3lH7wait3aQZTXBH92zElBT8v4O1O58ldt5o6ZGsd6W5fDSoB3nTB 0FU4C9BPVjiSY2AgzCg0dF7L3DR3dOXVYWy9Fe09XKwYGHzkJApNMZrJPC6RZlTj 3ZnE5Cjh/O5a+yZxnABpd7dop7pZU+RlK64kAe8Mzo/aVGgWBijEd1AkmWmrCJqB F3enymFe9qHixOfNlWf/xnQe2udPaqyxxE4uatrZkEuGEq6i9kLJ7I+/XSgxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwpoL0q//r64RnCwf2fIO2bYStz0wHwYDVR0j BBgwFoAU3YatzDDykWp3ZHjMqPg5k59mw38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05GN2FIdlZlYVpvM0M1THRmWVFweEFzWFhDTkUyeThZSEx1WnU3SkxZ cWIvMC9ERDg2QURDQzMwRjI5MTZBNzc2NDc4Q0NBOEY4Mzk5MzlGNjZDMzdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REODZBRENDMzBGMjkxNkE3 NzY0NzhDQ0E4RjgzOTkzOUY2NkMzN0YuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNORjdhSHZWZWFabzNDNUx0ZllRcHhBc1hYQ05FMnk4WUhMdVp1N0pMWXFiLzAv MzIzODMwMzQzYTMzMzgzMTMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM2MzYzNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDgQAjANBgkqhkiG9w0BAQsFAAOC AQEAP0ke1r4IojQ1PR91sVnEE3G81HpDBbrZev9Sz80lvcUjFZ0EaHmMrvQyLCtH RVe5n7wLT7nmOp8v2oIFvjE2zYH5nZL4mc80KI/SPCf1v4KX8n5597wTZAXQIvmb aY/htrpkShLIjTP9OCt5iKgXh+0xa6vPxEDGdVx68fYgb8NiNzSttrTkPMb+pC3j 8h8wAQ4Ud7wXCBi9G3qw0uHDHmpZoVs4hjEpALHKPmBuFdBXfU13Pyj5PM90t/pg 0eCwLtVlkCSYrWPk3g3Gq+DvKH26CkyndmauqAvnDs+OPxeQ8nqp9i89j4+9jPem XQJQZvHCWzEN/G5OqVCrHJdDOw== -----END CERTIFICATE-----Generated at Sun Aug 23 18:13:27 2026 by rpki-client