$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa File: 323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa (raw, json) Hash identifier: j0TcKYWQSEEO5kqTr6lj6Qg+qToEj1m1Im/cT4dRmYI= Subject key identifier: B4:5F:F4:F6:C2:AD:D1:38:B0:76:B1:14:65:D8:4F:86:47:A2:5B:A1 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 719F51293CCA846D66FEE4CF73D21CEB0B2D3FDD Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa Signing time: Thu 29 Jan 2026 16:18:13 +0000 ROA not before: Thu 29 Jan 2026 16:13:13 +0000 ROA not after: Thu 28 Jan 2027 16:18:13 +0000 asID: 263508 IP address blocks: 2804:12fc:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9f:51:29:3c:ca:84:6d:66:fe:e4:cf:73:d2:1c:eb:0b:2d:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Jan 29 16:13:13 2026 GMT Not After : Jan 28 16:18:13 2027 GMT Subject: CN=B45FF4F6C2ADD138B076B11465D84F8647A25BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:fd:65:98:7f:ac:22:9e:e1:2c:a6:8a:39: 8a:d2:60:ce:7a:78:57:a8:37:50:b5:4e:e3:f0:a7: ce:25:bc:01:ce:67:d2:8b:29:9c:9a:ad:02:ce:bd: 32:d6:59:ba:0a:ac:12:9d:b4:8e:fc:ca:73:9c:ea: 3f:85:89:1d:3d:dc:48:b5:f6:f2:fb:f5:c8:1b:f9: 6a:b3:66:76:cf:78:e9:a8:58:c7:d2:d7:84:21:ec: fe:f2:57:f6:c0:6c:a0:20:85:93:83:eb:ba:c9:38: 42:c5:ca:ae:09:8e:28:a1:76:4a:23:41:a0:d0:80: f5:1c:3f:9f:6c:8e:5f:69:ec:06:cb:77:1b:e6:1d: 77:82:b5:26:f6:ac:f3:3b:fc:2b:31:8e:41:7d:03: 88:5e:c4:4b:8e:1d:2b:6f:dc:2f:11:3f:c4:7c:ab: 91:98:03:8f:63:1b:4b:42:48:b8:65:60:aa:33:40: 42:f9:76:44:bb:b0:35:ac:a4:51:23:30:f5:43:b3: 8a:1c:f6:16:a4:4f:79:fc:fd:f1:98:24:20:b5:16: f7:c3:45:a1:3d:e6:3f:37:8c:f1:b0:66:c9:4e:16: 79:2d:d9:c8:b9:f4:e8:b2:64:cb:ba:a8:ee:13:8e: a4:5b:e8:85:7c:ec:4c:20:a2:4b:00:7e:b4:92:f1: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5F:F4:F6:C2:AD:D1:38:B0:76:B1:14:65:D8:4F:86:47:A2:5B:A1 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:3100::/40 Signature Algorithm: sha256WithRSAEncryption 51:5e:98:0c:6c:69:5f:fd:b0:50:fd:f1:10:9c:d1:44:9e:0c: 6e:dd:42:50:17:66:b2:42:90:5c:dd:b5:69:fc:58:88:be:3c: 86:9f:e7:99:35:b3:75:1b:41:d2:6d:c1:6b:4f:4c:78:7e:e5: 5e:2b:54:69:29:02:4b:e8:ea:d8:d2:86:75:1c:68:49:d7:b8: 00:66:80:c0:6a:cc:74:9d:52:71:00:ed:ba:40:a4:23:e4:dc: 2b:99:f9:52:86:19:1c:60:67:a9:ad:a2:91:f9:c1:d3:9a:2b: 5f:b9:40:d7:c5:7d:45:c6:26:e1:36:5e:41:83:80:b3:0e:df: 41:f1:44:a4:d7:61:db:5c:7e:99:a3:d6:24:d6:48:f1:f2:97: 2a:07:0a:86:a5:b2:db:df:83:e9:69:36:ec:1e:06:a3:aa:8e: 4a:8c:d2:20:de:73:80:3c:61:19:23:b3:c5:42:7e:bb:f3:ae: 13:e9:1a:65:77:4b:aa:b8:5d:86:75:07:c7:c6:c7:bd:76:cf: c3:0b:35:26:8a:3c:c6:57:76:11:c5:ba:98:8f:3b:e4:d0:3e: 73:5f:3a:aa:d5:35:b3:98:d5:c1:5b:87:32:aa:9f:78:b7:fc: 00:7b:7c:44:8e:b5:c4:b8:ea:1c:2e:58:d6:32:85:14:4b:78: 2f:42:46:b4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUcZ9RKTzKhG1m/uTPc9Ic6wstP90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNjAxMjkxNjEzMTNaFw0yNzAxMjgxNjE4MTNaMDMxMTAvBgNV BAMTKEI0NUZGNEY2QzJBREQxMzhCMDc2QjExNDY1RDg0Rjg2NDdBMjVCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3/1lmH+sIp7hLKaKOYrSYM56 eFeoN1C1TuPwp84lvAHOZ9KLKZyarQLOvTLWWboKrBKdtI78ynOc6j+FiR093Ei1 9vL79cgb+WqzZnbPeOmoWMfS14Qh7P7yV/bAbKAghZOD67rJOELFyq4Jjiihdkoj QaDQgPUcP59sjl9p7AbLdxvmHXeCtSb2rPM7/CsxjkF9A4hexEuOHStv3C8RP8R8 q5GYA49jG0tCSLhlYKozQEL5dkS7sDWspFEjMPVDs4oc9hakT3n8/fGYJCC1FvfD RaE95j83jPGwZslOFnkt2ci59OiyZMu6qO4TjqRb6IV87EwgoksAfrSS8VzpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUtF/09sKt0TiwdrEUZdhPhkeiW6EwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzMzMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEvwxMA0GCSqGSIb3DQEBCwUA A4IBAQBRXpgMbGlf/bBQ/fEQnNFEngxu3UJQF2ayQpBc3bVp/FiIvjyGn+eZNbN1 G0HSbcFrT0x4fuVeK1RpKQJL6OrY0oZ1HGhJ17gAZoDAasx0nVJxAO26QKQj5Nwr mflShhkcYGepraKR+cHTmitfuUDXxX1FxibhNl5Bg4CzDt9B8USk12HbXH6Zo9Yk 1kjx8pcqBwqGpbLb34PpaTbsHgajqo5KjNIg3nOAPGEZI7PFQn67864T6Rpld0uq uF2GdQfHxse9ds/DCzUmijzGV3YRxbqYjzvk0D5zXzqq1TWzmNXBW4cyqp94t/wA e3xEjrXEuOocLljWMoUUS3gvQka0 -----END CERTIFICATE-----Generated at Mon Feb 23 05:44:57 2026 by rpki-client