$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa File: 323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa (raw, json) Hash identifier: n57xZ5tjg4daVz2VSlD9G6VB1anSoccQmd5qNilkHTM= Subject key identifier: D5:7B:CB:04:B1:18:F7:8F:22:69:38:AA:29:C9:8C:BC:73:32:B2:9D Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Certificate serial: 70A4F4D8A5B44FC19DAF2BE617CCC6CAA8058464 Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa Signing time: Thu 29 Jan 2026 16:18:12 +0000 ROA not before: Thu 29 Jan 2026 16:13:12 +0000 ROA not after: Thu 28 Jan 2027 16:18:12 +0000 asID: 263508 IP address blocks: 2804:12fc:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a4:f4:d8:a5:b4:4f:c1:9d:af:2b:e6:17:cc:c6:ca:a8:05:84:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204 Validity Not Before: Jan 29 16:13:12 2026 GMT Not After : Jan 28 16:18:12 2027 GMT Subject: CN=D57BCB04B118F78F226938AA29C98CBC7332B29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:90:cb:a6:70:6e:49:e3:bc:c4:c3:1c:85: 5b:4f:d3:cd:b5:78:27:c6:3f:73:5b:2e:a2:17:26: bc:a2:02:64:ce:48:99:a5:89:6b:e4:9f:e7:7b:ab: b1:9f:fb:aa:73:27:c9:5d:7f:5a:97:58:fd:77:54: 17:5e:d8:04:dc:64:16:17:9e:c0:85:9f:ed:ed:39: f0:f5:48:f9:be:d7:a7:2c:89:ab:7e:b9:58:28:91: 25:a3:8c:fb:7c:1b:11:05:c4:c7:40:40:32:b7:fc: 91:8c:b4:69:28:c9:be:31:57:fe:ab:c2:1c:ff:ef: 48:64:af:dc:0b:4d:22:78:64:11:01:0c:d1:b2:52: 9d:2e:82:b0:24:8d:d3:05:94:ea:17:1d:f4:8b:54: 82:75:dc:0f:da:2c:69:45:77:dd:08:99:57:2e:8a: ea:f5:7a:f8:27:97:46:f9:34:6a:ab:fa:eb:68:63: 75:8a:ba:2f:d5:91:9f:00:55:99:d7:21:80:42:f4: eb:f1:18:05:54:5e:0b:f0:43:02:ea:59:7b:b3:1c: 31:81:d4:0f:25:a8:d6:3b:96:32:86:59:94:97:7f: 85:2d:1a:07:2f:d6:00:5a:f3:96:6d:ef:0f:5a:2a: 28:d2:16:6f:0d:8e:e3:02:f6:0e:bc:c1:ee:88:5f: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:CB:04:B1:18:F7:8F:22:69:38:AA:29:C9:8C:BC:73:32:B2:9D X509v3 Authority Key Identifier: keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:12fc:7000::/36 Signature Algorithm: sha256WithRSAEncryption 64:31:87:45:72:9a:84:06:be:13:dd:ae:65:e6:bd:d1:89:59: bd:24:95:3b:4b:3f:52:e7:fb:c4:05:6d:78:2c:e6:53:3d:8c: 93:fe:65:6a:26:65:8d:43:0a:b0:a2:40:1b:73:e0:27:8d:e4: 87:0a:f5:78:c9:38:5c:79:78:31:bb:c2:ad:30:25:2d:e4:08: 2a:46:b1:77:d8:bf:2b:2e:ac:00:02:32:48:37:d4:70:78:64: 60:4e:c1:c4:c2:8c:0f:8c:e2:c4:0f:e5:30:5b:d7:99:61:45: 31:86:2d:38:2d:dd:2e:dc:16:47:b8:32:e3:8c:ed:73:24:df: 48:03:07:ee:bd:c5:b3:8e:e8:06:2b:c8:13:51:88:29:38:db: d0:73:95:bd:37:54:7d:ed:91:3a:d5:fa:92:ea:f6:89:9d:46: 2e:52:8f:10:41:a4:4f:16:62:f0:61:3c:24:85:49:7e:8a:8b: 1a:cb:bc:27:d9:f7:3d:f0:49:a1:3b:5b:fb:66:02:5b:88:3f: 72:06:98:81:dc:3b:5d:44:76:bb:fc:e1:cb:06:c0:0d:d2:50: c9:cf:47:6d:8b:75:ac:28:e5:8f:99:e1:9b:05:06:ee:ca:ba: d3:60:c6:3f:0e:b0:8d:78:f6:70:5e:c4:ce:1e:82:64:b5:dd: 56:4a:cc:f2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUcKT02KW0T8GdryvmF8zGyqgFhGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3 MkI0RTIwNDAeFw0yNjAxMjkxNjEzMTJaFw0yNzAxMjgxNjE4MTJaMDMxMTAvBgNV BAMTKEQ1N0JDQjA0QjExOEY3OEYyMjY5MzhBQTI5Qzk4Q0JDNzMzMkIyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyZDLpnBuSeO8xMMchVtP0821 eCfGP3NbLqIXJryiAmTOSJmliWvkn+d7q7Gf+6pzJ8ldf1qXWP13VBde2ATcZBYX nsCFn+3tOfD1SPm+16csiat+uVgokSWjjPt8GxEFxMdAQDK3/JGMtGkoyb4xV/6r whz/70hkr9wLTSJ4ZBEBDNGyUp0ugrAkjdMFlOoXHfSLVIJ13A/aLGlFd90ImVcu iur1evgnl0b5NGqr+utoY3WKui/VkZ8AVZnXIYBC9OvxGAVUXgvwQwLqWXuzHDGB 1A8lqNY7ljKGWZSXf4UtGgcv1gBa85Zt7w9aKijSFm8NjuMC9g68we6IX+9rAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU1XvLBLEY948iaTiqKcmMvHMysp0wHwYDVR0j BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1 MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv MzIzODMwMzQzYTMxMzI2NjYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEvxwMA0GCSqGSIb3DQEBCwUA A4IBAQBkMYdFcpqEBr4T3a5l5r3RiVm9JJU7Sz9S5/vEBW14LOZTPYyT/mVqJmWN QwqwokAbc+AnjeSHCvV4yThceXgxu8KtMCUt5AgqRrF32L8rLqwAAjJIN9RweGRg TsHEwowPjOLED+UwW9eZYUUxhi04Ld0u3BZHuDLjjO1zJN9IAwfuvcWzjugGK8gT UYgpONvQc5W9N1R97ZE61fqS6vaJnUYuUo8QQaRPFmLwYTwkhUl+iosay7wn2fc9 8EmhO1v7ZgJbiD9yBpiB3DtdRHa7/OHLBsAN0lDJz0dti3WsKOWPmeGbBQbuyrrT YMY/DrCNePZwXsTOHoJktd1WSszy -----END CERTIFICATE-----Generated at Mon Feb 23 05:55:09 2026 by rpki-client