$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa File: 323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa (raw, json) Hash identifier: hEgevvYtwGc5leLWd/cVrSTdJTjkCUGG58TSS+JZ2kc= Subject key identifier: 70:C2:4D:6D:B8:15:21:21:FB:AA:E8:F9:0B:67:D2:92:F2:EC:37:B0 Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 011543CB783E99514B08996D5EAACF996D3E7317 Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa Signing time: Thu 29 Jan 2026 16:18:14 +0000 ROA not before: Thu 29 Jan 2026 16:13:14 +0000 ROA not after: Thu 28 Jan 2027 16:18:14 +0000 asID: 263508 IP address blocks: 2804:12fc:3500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:15:43:cb:78:3e:99:51:4b:08:99:6d:5e:aa:cf:99:6d:3e:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Jan 29 16:13:14 2026 GMT Not After : Jan 28 16:18:14 2027 GMT Subject: CN=70C24D6DB8152121FBAAE8F90B67D292F2EC37B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:08:b1:c9:c6:7c:7a:c4:e0:dd:d5:3d:3c:1c: 69:6b:34:de:53:61:a0:e4:11:c1:fe:b7:2d:4a:95: bb:ae:d9:2b:bd:5c:6c:cd:0e:78:be:cd:5b:3d:7c: 6f:64:7b:0a:05:34:e7:b0:51:2f:73:a1:9a:aa:5b: ee:a8:67:1a:37:c3:87:d0:8b:87:36:0b:bc:39:4e: 9b:8b:95:24:97:ba:c8:1a:da:d2:7d:84:0f:5b:24: 32:bf:08:f1:91:6d:14:1d:95:ec:e6:7c:33:6b:73: 49:5d:6d:71:fb:cc:31:9c:a6:da:4a:5b:1b:04:eb: 97:e5:65:d4:96:b5:8a:8e:26:a8:24:97:26:ea:ac: 17:38:2f:e7:1d:bb:5d:14:1b:18:42:a6:8f:c7:c2: 0e:50:79:02:a4:70:70:26:23:c7:4c:8a:5c:02:3b: 26:a3:7f:77:28:17:14:95:08:98:eb:0c:61:c8:c1: c9:43:7e:e0:27:5d:40:5f:93:cb:c3:86:ad:06:4d: 16:5b:12:9b:90:e0:6d:ec:da:b2:ff:78:04:e5:0a: 6a:78:f7:50:ce:de:ef:b9:38:46:0b:aa:f6:83:78: 72:b7:59:ff:e2:9a:e1:18:2f:61:5f:1d:54:e6:79: 89:8a:7f:74:c3:88:3e:b4:e0:75:05:1e:a7:e4:63: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:4D:6D:B8:15:21:21:FB:AA:E8:F9:0B:67:D2:92:F2:EC:37:B0 X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:3500::/40 Signature Algorithm: sha256WithRSAEncryption 53:9c:dc:36:17:44:63:8e:63:97:f9:2b:66:e4:c0:61:d5:2f: 38:cf:51:86:5d:c5:c1:1c:1e:e5:79:82:d1:74:b3:62:90:67: 1b:16:ad:91:70:d9:60:26:41:4b:19:c9:fe:a5:1f:e1:11:3a: ba:89:68:fa:7f:27:4f:89:ec:59:00:56:90:d6:6f:18:b5:3f: 4a:b8:8d:3c:0c:b8:f8:35:57:12:ee:88:74:63:97:a0:34:f5: 83:f0:2d:9a:82:3c:1c:31:65:bd:41:ad:85:c2:78:ad:ec:95: 21:ee:23:82:6b:98:10:f7:9b:a0:4c:a0:3b:e9:b5:c0:50:e9: 28:67:9a:a9:79:8a:86:5c:df:c0:9e:8a:b7:b4:87:b7:d1:6f: 6a:10:40:6d:de:01:ae:45:3c:3c:cf:f1:4d:f0:f3:d2:60:a7: 70:d4:0e:5f:31:8d:e7:43:d7:ae:8c:cb:6f:7c:f5:31:4a:bc: da:1e:fa:bc:3b:63:2f:49:3b:88:19:10:b5:e4:0f:e4:8e:a9: de:76:0c:0b:cd:ae:c6:bc:0e:53:93:f9:e0:6a:95:e6:21:83: c3:d5:50:57:7d:29:21:43:82:17:7d:c1:aa:19:11:33:26:95: 28:81:ea:5a:12:34:8e:97:5e:4c:c8:37:6a:71:78:55:39:5e: 16:c8:77:ec -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUARVDy3g+mVFLCJltXqrPmW0+cxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNjAxMjkxNjEzMTRaFw0yNzAxMjgxNjE4MTRaMDMxMTAvBgNV BAMTKDcwQzI0RDZEQjgxNTIxMjFGQkFBRThGOTBCNjdEMjkyRjJFQzM3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCLHJxnx6xODd1T08HGlrNN5T YaDkEcH+ty1Klbuu2Su9XGzNDni+zVs9fG9kewoFNOewUS9zoZqqW+6oZxo3w4fQ i4c2C7w5TpuLlSSXusga2tJ9hA9bJDK/CPGRbRQdlezmfDNrc0ldbXH7zDGcptpK WxsE65flZdSWtYqOJqgklybqrBc4L+cdu10UGxhCpo/Hwg5QeQKkcHAmI8dMilwC Oyajf3coFxSVCJjrDGHIwclDfuAnXUBfk8vDhq0GTRZbEpuQ4G3s2rL/eATlCmp4 91DO3u+5OEYLqvaDeHK3Wf/imuEYL2FfHVTmeYmKf3TDiD604HUFHqfkYw0FAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcMJNbbgVISH7quj5C2fSkvLsN7AwHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzMzM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEvw1MA0GCSqGSIb3DQEBCwUA A4IBAQBTnNw2F0RjjmOX+Stm5MBh1S84z1GGXcXBHB7leYLRdLNikGcbFq2RcNlg JkFLGcn+pR/hETq6iWj6fydPiexZAFaQ1m8YtT9KuI08DLj4NVcS7oh0Y5egNPWD 8C2agjwcMWW9Qa2Fwnit7JUh7iOCa5gQ95ugTKA76bXAUOkoZ5qpeYqGXN/Anoq3 tIe30W9qEEBt3gGuRTw8z/FN8PPSYKdw1A5fMY3nQ9eujMtvfPUxSrzaHvq8O2Mv STuIGRC15A/kjqnedgwLza7GvA5Tk/ngapXmIYPD1VBXfSkhQ4IXfcGqGREzJpUo gepaEjSOl15MyDdqcXhVOV4WyHfs -----END CERTIFICATE-----Generated at Mon Feb 23 05:44:06 2026 by rpki-client