$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa File: 323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa (raw, json) Hash identifier: aXL1Vj4aQo+1+8EvxLbquCwPiNEmhmMxaa9PZkTYOuw= Subject key identifier: 0C:39:4F:EC:97:A2:D0:80:C8:30:21:8A:5C:AF:DB:B4:1E:09:A3:38 Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46 Certificate serial: 492163FFB3F67B2F6B80BCB12898D4F221884511 Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa Signing time: Tue 27 Jan 2026 19:23:08 +0000 ROA not before: Tue 27 Jan 2026 19:18:08 +0000 ROA not after: Tue 26 Jan 2027 19:23:08 +0000 asID: 265491 IP address blocks: 2804:34f4:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 02:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:21:63:ff:b3:f6:7b:2f:6b:80:bc:b1:28:98:d4:f2:21:88:45:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46 Validity Not Before: Jan 27 19:18:08 2026 GMT Not After : Jan 26 19:23:08 2027 GMT Subject: CN=0C394FEC97A2D080C830218A5CAFDBB41E09A338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:99:5c:6b:85:32:1e:16:32:f6:c6:1c:fe: 6f:55:c5:4e:52:b9:8e:eb:ed:f0:d4:3e:f0:bc:f4: ca:8d:36:2f:36:5c:8c:e2:c9:4a:a5:32:43:c5:ed: 7b:0c:02:9e:06:67:c8:f6:d0:93:b8:4c:5c:17:84: cb:8c:8d:f1:43:d7:11:2a:3a:98:f5:c4:31:2b:ae: 05:74:f8:b3:5a:3f:97:d5:1b:ed:a7:17:1a:d1:d8: 0b:b3:df:0b:ef:44:d8:2d:37:d3:9e:27:5c:40:ea: 54:5a:5a:48:eb:66:fb:5e:b6:b7:20:47:ef:32:85: 69:b8:6e:b0:d6:f8:81:7f:b2:67:69:98:ef:f7:88: ef:90:c4:43:c0:27:54:85:ff:c4:aa:5b:aa:3a:56: 66:a0:66:61:24:4e:e7:a8:af:dd:c6:57:93:8c:26: 30:0c:27:bc:68:2f:58:d4:f8:da:ac:26:5d:d7:d0: 09:96:ea:85:57:4d:fe:95:14:fa:9d:88:f6:fa:a2: c8:9d:11:c0:96:85:a2:c5:bf:c4:61:ce:f1:97:73: b7:c2:f8:a4:82:38:dc:78:52:c0:19:e8:3b:d1:95: eb:14:7b:12:27:cd:b8:1e:6e:51:ed:74:e6:65:bc: 0c:53:32:87:45:24:d2:4c:1e:58:09:f7:e8:c5:d9: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:4F:EC:97:A2:D0:80:C8:30:21:8A:5C:AF:DB:B4:1E:09:A3:38 X509v3 Authority Key Identifier: keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:34f4:4000::/34 Signature Algorithm: sha256WithRSAEncryption 12:d4:74:52:f6:42:15:13:ac:04:fe:aa:83:97:f2:b9:d8:60: 99:bd:d7:ae:e2:0a:0d:04:5c:0a:37:f2:4c:e0:d6:0c:14:83: 94:0c:34:9a:19:49:fa:8d:50:98:44:89:cf:b1:6c:0d:10:89: 59:9b:ee:e1:fc:11:7b:83:b9:e1:49:5a:fb:2d:7e:7b:19:5c: 48:a2:c7:68:c3:20:cb:9a:3f:55:5a:ce:55:04:c8:a6:10:b7: 83:8a:fe:17:d7:e8:2e:a8:59:f9:38:8a:86:f5:b2:7f:05:de: f0:29:1e:19:db:61:83:bf:11:3b:00:40:cb:92:30:c1:e1:40: 09:d6:95:e2:b5:e0:3e:d3:95:da:8f:f2:22:48:9e:cd:5d:61: 71:e8:c0:2e:15:fa:58:b4:6d:8c:2e:5b:59:64:19:7c:a0:d4: 57:79:aa:c4:3a:5d:04:3f:4b:29:62:c0:b3:b1:75:a8:ba:35: 8e:dd:f5:67:25:8e:a1:55:8c:4a:d6:57:e4:c0:93:7e:b0:e1: da:31:5c:29:bf:1c:01:0c:84:ff:09:28:96:7e:72:0f:01:fc: 25:5f:f0:86:17:20:e8:9c:9d:81:b9:cf:34:b7:f4:b6:bd:54: a4:5a:b2:c3:6c:0e:1b:72:14:73:31:eb:cb:f9:27:3c:77:71: c1:af:53:a2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSSFj/7P2ey9rgLyxKJjU8iGIRREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzQTU2NEE0MENEOEM4NEU1RDExQjk5NzBCNTNCQTNB NDQxQ0Y0NjAeFw0yNjAxMjcxOTE4MDhaFw0yNzAxMjYxOTIzMDhaMDMxMTAvBgNV BAMTKDBDMzk0RkVDOTdBMkQwODBDODMwMjE4QTVDQUZEQkI0MUUwOUEzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7plca4UyHhYy9sYc/m9VxU5S uY7r7fDUPvC89MqNNi82XIziyUqlMkPF7XsMAp4GZ8j20JO4TFwXhMuMjfFD1xEq Opj1xDErrgV0+LNaP5fVG+2nFxrR2Auz3wvvRNgtN9OeJ1xA6lRaWkjrZvtetrcg R+8yhWm4brDW+IF/smdpmO/3iO+QxEPAJ1SF/8SqW6o6VmagZmEkTueor93GV5OM JjAMJ7xoL1jU+NqsJl3X0AmW6oVXTf6VFPqdiPb6osidEcCWhaLFv8RhzvGXc7fC +KSCONx4UsAZ6DvRlesUexInzbgeblHtdOZlvAxTModFJNJMHlgJ9+jF2bIxAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUDDlP7Jei0IDIMCGKXK/btB4JozgwHwYDVR0j BBgwFoAUljpWSkDNjITl0RuZcLU7o6RBz0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl dUQvMC85NjNBNTY0QTQwQ0Q4Qzg0RTVEMTFCOTk3MEI1M0JBM0E0NDFDRjQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2M0E1NjRBNDBDRDhDODRF NUQxMUI5OTcwQjUzQkEzQTQ0MUNGNDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv MzIzODMwMzQzYTMzMzQ2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENPRAMA0GCSqGSIb3DQEBCwUA A4IBAQAS1HRS9kIVE6wE/qqDl/K52GCZvdeu4goNBFwKN/JM4NYMFIOUDDSaGUn6 jVCYRInPsWwNEIlZm+7h/BF7g7nhSVr7LX57GVxIosdowyDLmj9VWs5VBMimELeD iv4X1+guqFn5OIqG9bJ/Bd7wKR4Z22GDvxE7AEDLkjDB4UAJ1pXiteA+05Xaj/Ii SJ7NXWFx6MAuFfpYtG2MLltZZBl8oNRXearEOl0EP0spYsCzsXWoujWO3fVnJY6h VYxK1lfkwJN+sOHaMVwpvxwBDIT/CSiWfnIPAfwlX/CGFyDonJ2Buc80t/S2vVSk WrLDbA4bchRzMevL+Sc8d3HBr1Oi -----END CERTIFICATE-----Generated at Mon Feb 23 05:44:55 2026 by rpki-client