$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa File: 323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa (raw, json) Hash identifier: kt3vww6gACmokfP5nAGFUUw6pTvhYBEl3BtjMOydrI0= Subject key identifier: 28:E2:61:48:79:A3:77:03:D8:3B:BB:17:58:58:D0:DC:39:AD:7B:B5 Certificate issuer: /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF Certificate serial: 1BAEAA426C06919D229AF5B60FB343177705C468 Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa Signing time: Fri 27 Mar 2026 13:14:05 +0000 ROA not before: Fri 27 Mar 2026 13:09:05 +0000 ROA not after: Fri 26 Mar 2027 13:14:05 +0000 asID: 265491 IP address blocks: 2804:34f4:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 02:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ae:aa:42:6c:06:91:9d:22:9a:f5:b6:0f:b3:43:17:77:05:c4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF Validity Not Before: Mar 27 13:09:05 2026 GMT Not After : Mar 26 13:14:05 2027 GMT Subject: CN=28E2614879A37703D83BBB175858D0DC39AD7BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:10:f4:f3:a5:a2:d6:bb:21:1d:5f:9e:44: 12:8f:06:c9:3b:34:c8:95:ba:eb:5c:6d:92:44:e7: f3:4e:86:0f:46:19:08:bb:96:b8:56:c2:a2:7c:4c: 71:24:61:4e:64:7a:09:99:d7:12:81:c5:42:77:9f: f4:c7:ab:8d:c0:f0:ac:f3:a3:7c:81:df:af:e1:17: 5a:4a:e8:93:e8:04:76:74:e1:97:86:21:6c:11:2b: 11:cf:2b:82:6f:bf:d8:1b:91:3b:14:3b:4c:5b:41: da:4d:a5:e4:12:b8:1e:a6:58:ad:4e:57:45:f3:a6: ea:18:ad:9a:60:ca:1f:73:52:1a:12:43:15:b6:e8: 1a:3f:a3:5b:e0:10:e1:9a:23:a7:c3:94:e1:7f:a5: 20:65:af:b1:e5:d5:38:fb:5e:40:c1:af:b8:57:24: 43:54:88:c0:0b:38:42:65:5b:2d:e5:08:e1:c9:c4: 7c:c8:77:dd:42:f8:8b:ea:1e:47:06:4c:62:d6:be: 9c:10:88:d1:85:4f:b9:df:84:6d:1f:d0:ad:e0:54: a3:41:d0:3b:8a:85:f4:6c:0b:7f:4f:92:e6:03:ed: ff:c6:f2:65:b9:33:6f:d9:71:a7:db:f5:c2:ac:72: 19:3f:d4:c8:46:a5:b1:79:37:b7:ae:77:a2:84:3b: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E2:61:48:79:A3:77:03:D8:3B:BB:17:58:58:D0:DC:39:AD:7B:B5 X509v3 Authority Key Identifier: keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a343030303a3a2f33342d3334203d3e20323635343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:34f4:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3a:36:5b:ea:46:db:d9:81:a3:b1:30:21:6e:46:ae:88:a6:ba: f5:5d:c8:6a:b4:0b:98:0d:b1:7e:3f:4b:aa:19:04:33:3b:20: a8:de:2f:14:a8:49:3c:bd:1d:09:dc:cd:7b:77:7a:1c:f0:5b: 1f:cb:06:13:a8:44:2a:39:aa:2e:30:36:16:df:75:27:5e:e2: 64:01:b2:8e:c6:a8:60:e8:7c:c5:05:b6:05:57:ad:52:4f:92: 7b:f5:5b:05:9f:49:25:82:0a:a7:62:7f:56:9a:7a:aa:09:76: 97:d1:21:02:5c:31:a6:60:4b:4b:44:36:f9:ba:7c:f3:a5:6d: ef:87:ad:cc:91:32:86:8d:a8:75:fa:60:6d:52:b6:e0:b3:fe: 33:49:cb:c0:b9:e2:71:b4:bf:ab:27:6f:1f:90:0d:e3:c1:52: ae:0f:af:bc:a2:d2:e5:38:ba:ed:f9:44:0d:36:ff:94:f6:58: f7:62:a9:d0:34:ed:e8:29:fe:b0:90:b0:98:c6:fa:80:df:0a: 3c:47:60:38:a0:31:45:54:b3:97:92:90:41:da:17:a8:bc:3d: a6:1c:13:29:d8:df:d1:38:23:83:ff:fe:cc:76:e1:e1:ab:1f: bd:f7:dd:30:65:1d:49:f9:75:87:34:fe:4c:35:99:9b:ee:92: 1f:d6:46:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUG66qQmwGkZ0imvW2D7NDF3cFxGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczNTM5ODVFQjdGOUU1RjFDMDhFNzE1RTQwOEQ5RTcx OTA1NDBERjAeFw0yNjAzMjcxMzA5MDVaFw0yNzAzMjYxMzE0MDVaMDMxMTAvBgNV BAMTKDI4RTI2MTQ4NzlBMzc3MDNEODNCQkIxNzU4NThEMERDMzlBRDdCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EBD086Wi1rshHV+eRBKPBsk7 NMiVuutcbZJE5/NOhg9GGQi7lrhWwqJ8THEkYU5kegmZ1xKBxUJ3n/THq43A8Kzz o3yB36/hF1pK6JPoBHZ04ZeGIWwRKxHPK4Jvv9gbkTsUO0xbQdpNpeQSuB6mWK1O V0XzpuoYrZpgyh9zUhoSQxW26Bo/o1vgEOGaI6fDlOF/pSBlr7Hl1Tj7XkDBr7hX JENUiMALOEJlWy3lCOHJxHzId91C+IvqHkcGTGLWvpwQiNGFT7nfhG0f0K3gVKNB 0DuKhfRsC39PkuYD7f/G8mW5M2/Zcafb9cKschk/1MhGpbF5N7eud6KEOzy3AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUKOJhSHmjdwPYO7sXWFjQ3Dmte7UwHwYDVR0j BBgwFoAUlzU5het/nl8cCOcV5AjZ5xkFQN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl dUQvMC85NzM1Mzk4NUVCN0Y5RTVGMUMwOEU3MTVFNDA4RDlFNzE5MDU0MERGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MzUzOTg1RUI3RjlFNUYx QzA4RTcxNUU0MDhEOUU3MTkwNTQwREYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv MzIzODMwMzQzYTMzMzQ2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENPRAMA0GCSqGSIb3DQEBCwUA A4IBAQA6NlvqRtvZgaOxMCFuRq6Iprr1XchqtAuYDbF+P0uqGQQzOyCo3i8UqEk8 vR0J3M17d3oc8FsfywYTqEQqOaouMDYW33UnXuJkAbKOxqhg6HzFBbYFV61ST5J7 9VsFn0klggqnYn9WmnqqCXaX0SECXDGmYEtLRDb5unzzpW3vh63MkTKGjah1+mBt Urbgs/4zScvAueJxtL+rJ28fkA3jwVKuD6+8otLlOLrt+UQNNv+U9lj3YqnQNO3o Kf6wkLCYxvqA3wo8R2A4oDFFVLOXkpBB2heovD2mHBMp2N/ROCOD//7MduHhqx+9 990wZR1J+XWHNP5MNZmb7pIf1kZO -----END CERTIFICATE-----Generated at Thu Apr 9 18:02:52 2026 by rpki-client