$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa File: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (raw, json) Hash identifier: CcTE9TRXJRLy2l+k9wsbAmybWWkAZA/woUc8od9VtrE= Subject key identifier: D9:56:9A:A3:D6:59:C2:E7:FE:79:55:34:8D:A2:F0:50:7E:52:1A:02 Certificate issuer: /CN=7421AA9C848BD1993F6F020940DA6CEAC288AED5 Certificate serial: 3A91608DB5C9E52DBCC9C06B98B96B78B4CAA040 Authority key identifier: 74:21:AA:9C:84:8B:D1:99:3F:6F:02:09:40:DA:6C:EA:C2:88:AE:D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7421AA9C848BD1993F6F020940DA6CEAC288AED5.cer Subject info access: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa Signing time: Thu 26 Mar 2026 13:09:36 +0000 ROA not before: Thu 26 Mar 2026 13:04:36 +0000 ROA not after: Thu 25 Mar 2027 13:09:36 +0000 asID: 268216 IP address blocks: 45.235.248.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/7421AA9C848BD1993F6F020940DA6CEAC288AED5.crl rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/7421AA9C848BD1993F6F020940DA6CEAC288AED5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7421AA9C848BD1993F6F020940DA6CEAC288AED5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 13:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:91:60:8d:b5:c9:e5:2d:bc:c9:c0:6b:98:b9:6b:78:b4:ca:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7421AA9C848BD1993F6F020940DA6CEAC288AED5 Validity Not Before: Mar 26 13:04:36 2026 GMT Not After : Mar 25 13:09:36 2027 GMT Subject: CN=D9569AA3D659C2E7FE7955348DA2F0507E521A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:0f:1f:0a:7d:5a:c3:3a:ed:25:13:0e:01: 3c:34:9e:7b:3c:81:2e:c0:f4:8e:b0:42:b1:ec:d0: 9e:08:6b:2f:3f:e3:ab:83:46:6c:48:91:26:78:c5: f5:40:3d:69:9b:27:dc:bd:37:e5:24:53:7c:5a:af: 21:b5:17:72:e6:2e:9c:c6:87:7e:be:b5:c9:08:33: f6:22:04:59:50:5b:4c:82:b5:5e:81:ac:d2:90:6b: 5d:9d:e7:9b:8c:74:3a:bd:90:d5:2f:1e:ae:83:a7: fe:2e:5b:b0:b4:a5:24:52:69:66:8d:b9:2c:3e:0a: 79:09:9d:36:fa:e1:b1:09:c5:39:52:e3:e6:ec:56: b4:57:45:00:bd:91:9e:6d:d2:c8:dc:19:1c:a4:5b: 09:4b:25:f9:41:c1:01:1f:c2:b7:0f:45:60:11:d6: cf:52:c2:e8:52:d1:af:d3:de:28:97:b7:dc:84:a1: e7:09:42:65:ce:9f:ec:a1:7f:a3:ae:21:7a:9c:6e: be:11:73:13:13:90:6d:80:29:98:e6:e9:f7:ee:6d: 8a:24:cc:76:a3:d8:84:48:e1:a8:2e:93:12:c9:68: 5d:ad:1c:65:0d:bf:05:d2:2a:1b:70:1c:2d:6c:b7: 2f:f3:cd:fe:d8:30:5c:73:12:60:8a:23:d9:ec:72: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:56:9A:A3:D6:59:C2:E7:FE:79:55:34:8D:A2:F0:50:7E:52:1A:02 X509v3 Authority Key Identifier: keyid:74:21:AA:9C:84:8B:D1:99:3F:6F:02:09:40:DA:6C:EA:C2:88:AE:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/7421AA9C848BD1993F6F020940DA6CEAC288AED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7421AA9C848BD1993F6F020940DA6CEAC288AED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.248.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:01:8f:37:c2:f2:76:5d:b1:b8:99:73:aa:c8:76:f5:5d:97: a4:ed:fb:17:ab:e5:b0:c2:66:7b:e8:31:fa:db:c1:aa:78:12: af:e2:99:ca:74:72:f3:b9:37:35:72:fa:98:d5:02:53:56:2b: 27:8f:20:fd:9e:ed:27:35:28:51:04:32:5b:84:78:15:d9:42: 37:ec:41:7d:d4:d4:3a:d7:ef:ea:ca:f9:d7:6d:8e:18:ce:1c: fb:67:52:71:66:9a:17:23:81:75:a8:65:72:69:94:2e:a0:f5: 4a:04:7d:bf:7c:e9:87:4f:6c:ba:ec:9c:8f:61:97:f3:69:d4: 50:af:ac:77:1c:fd:b8:fe:66:86:cc:34:f2:0e:a9:85:6d:24: 05:87:ea:61:fa:c9:9f:bd:93:c6:ad:1d:27:8d:2d:af:ed:9e: 97:84:fd:d3:1c:21:38:c2:3a:72:77:1d:f4:10:09:d6:4f:3b: 7a:5c:b7:0d:00:c2:97:36:e7:44:70:78:fc:91:ad:f2:69:70: 81:21:7e:3e:97:ac:d3:9a:04:a3:9b:0b:81:74:ca:cf:80:1c: 11:68:60:21:be:48:49:50:0a:65:06:6e:f8:84:16:15:b9:23: 48:41:ed:33:26:97:57:d0:d7:3a:60:d3:d8:ea:85:cd:8b:a7: df:97:bd:d0 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUOpFgjbXJ5S28ycBrmLlreLTKoEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyMUFBOUM4NDhCRDE5OTNGNkYwMjA5NDBEQTZDRUFD Mjg4QUVENTAeFw0yNjAzMjYxMzA0MzZaFw0yNzAzMjUxMzA5MzZaMDMxMTAvBgNV BAMTKEQ5NTY5QUEzRDY1OUMyRTdGRTc5NTUzNDhEQTJGMDUwN0U1MjFBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSg8fCn1awzrtJRMOATw0nns8 gS7A9I6wQrHs0J4Iay8/46uDRmxIkSZ4xfVAPWmbJ9y9N+UkU3xaryG1F3LmLpzG h36+tckIM/YiBFlQW0yCtV6BrNKQa12d55uMdDq9kNUvHq6Dp/4uW7C0pSRSaWaN uSw+CnkJnTb64bEJxTlS4+bsVrRXRQC9kZ5t0sjcGRykWwlLJflBwQEfwrcPRWAR 1s9SwuhS0a/T3iiXt9yEoecJQmXOn+yhf6OuIXqcbr4RcxMTkG2AKZjm6ffubYok zHaj2IRI4agukxLJaF2tHGUNvwXSKhtwHC1sty/zzf7YMFxzEmCKI9nscvhrAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU2Vaao9ZZwuf+eVU0jaLwUH5SGgIwHwYDVR0j BBgwFoAUdCGqnISL0Zk/bwIJQNps6sKIrtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJD aXkvMC83NDIxQUE5Qzg0OEJEMTk5M0Y2RjAyMDk0MERBNkNFQUMyODhBRUQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0MjFBQTlDODQ4QkQxOTkz RjZGMDIwOTQwREE2Q0VBQzI4OEFFRDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzZhcm41UmdDR1lYM0hBMVZUNmN0bTYxNmpoNDc2cGdpcmduTlM0bVJyQ2l5LzAv MzQzNTJlMzIzMzM1MmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2 MzgzMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIt6/gwDQYJKoZIhvcNAQELBQADggEBAEwBjzfC 8nZdsbiZc6rIdvVdl6Tt+xer5bDCZnvoMfrbwap4Eq/imcp0cvO5NzVy+pjVAlNW KyePIP2e7Sc1KFEEMluEeBXZQjfsQX3U1DrX7+rK+ddtjhjOHPtnUnFmmhcjgXWo ZXJplC6g9UoEfb986YdPbLrsnI9hl/Np1FCvrHcc/bj+ZobMNPIOqYVtJAWH6mH6 yZ+9k8atHSeNLa/tnpeE/dMcITjCOnJ3HfQQCdZPO3pctw0Awpc250RwePyRrfJp cIEhfj6XrNOaBKObC4F0ys+AHBFoYCG+SElQCmUGbviEFhW5I0hB7TMml1fQ1zpg 09jqhc2Lp9+XvdA= -----END CERTIFICATE-----Generated at Thu Apr 9 16:47:41 2026 by rpki-client