$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa File: 323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa (raw, json) Hash identifier: iCB/78efR5LJRFWa17o+TKrVdSvHmXYw80fxqYErPlU= Subject key identifier: 42:1C:8A:4C:39:D2:8C:77:54:3F:59:1B:58:9A:4C:9B:73:0F:A3:6C Certificate issuer: /CN=97353985EB7F9E5F1C08E715E408D9E7190540DF Certificate serial: 35C3745CBE472FD0246B044CEA82BD20331962B9 Authority key identifier: 97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa Signing time: Fri 27 Mar 2026 13:14:04 +0000 ROA not before: Fri 27 Mar 2026 13:09:04 +0000 ROA not after: Fri 26 Mar 2027 13:14:04 +0000 asID: 265491 IP address blocks: 2804:34f4:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 21:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c3:74:5c:be:47:2f:d0:24:6b:04:4c:ea:82:bd:20:33:19:62:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97353985EB7F9E5F1C08E715E408D9E7190540DF Validity Not Before: Mar 27 13:09:04 2026 GMT Not After : Mar 26 13:14:04 2027 GMT Subject: CN=421C8A4C39D28C77543F591B589A4C9B730FA36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:08:f2:7f:74:e6:ff:55:7c:13:bb:f1:50: 55:f4:99:a3:17:a6:92:b9:43:1e:bb:ec:eb:47:fd: b4:a2:52:ef:d6:81:a2:35:f9:f9:92:0a:a7:d9:eb: 73:0a:78:03:96:98:a8:e8:a9:45:1d:79:33:8c:33: bd:f4:16:24:3d:62:24:c6:2e:0d:34:30:82:91:05: 4b:ea:a8:c4:df:cb:59:db:5d:da:92:25:9e:28:e0: b6:4f:0b:14:32:a8:8b:f0:ce:c1:52:57:c4:2e:3d: e0:a0:16:ac:69:48:35:e7:27:5f:cd:04:a7:c7:ef: 09:f9:44:29:55:d5:3f:a8:4e:7a:4c:a4:d4:34:15: 4e:54:a8:9c:b0:4a:f0:35:b6:2a:0d:85:d3:ad:68: e5:c6:cd:6a:4e:c0:6d:23:ba:3d:f6:93:13:cf:8a: 0d:d4:30:c1:ec:6d:a6:69:9d:48:33:a1:7c:31:95: ce:96:fa:ee:b7:b5:ef:de:71:71:c3:9d:15:5f:fa: 14:7a:85:28:a9:8c:ce:4a:89:76:a4:c4:7b:4c:77: 09:14:b2:98:9a:6a:79:83:3b:03:b3:93:aa:c3:bc: c6:85:b6:e9:7d:06:83:d0:48:0f:88:ab:09:fc:9d: 31:16:28:dd:df:21:65:70:57:79:15:01:40:49:5e: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:8A:4C:39:D2:8C:77:54:3F:59:1B:58:9A:4C:9B:73:0F:A3:6C X509v3 Authority Key Identifier: keyid:97:35:39:85:EB:7F:9E:5F:1C:08:E7:15:E4:08:D9:E7:19:05:40:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/97353985EB7F9E5F1C08E715E408D9E7190540DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97353985EB7F9E5F1C08E715E408D9E7190540DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:34f4:8000::/33 Signature Algorithm: sha256WithRSAEncryption 0f:ea:b7:cc:5e:38:cd:65:e7:b5:19:5c:e6:af:05:d0:17:e5: 95:be:2e:74:8c:23:ec:53:c8:d3:b5:64:42:dc:37:08:ed:2c: b9:61:81:25:e2:0c:19:f5:2c:c8:d5:6d:99:53:7c:78:cb:33: da:a6:80:10:61:e8:ce:64:85:51:9e:e0:5c:fc:cd:f3:19:3f: 7e:08:42:8e:59:81:1c:75:e4:c5:44:b9:29:ee:3f:c7:31:8d: 9f:af:3c:7c:cd:db:20:cf:07:ca:08:0d:9b:18:50:c2:cd:7e: dc:c9:8d:0f:d4:26:9c:5f:b6:85:a8:74:de:eb:a5:d1:a5:73: be:61:e2:f7:9c:70:5f:31:05:d2:1c:a8:81:5d:35:5b:69:08: 7c:91:7f:e2:49:70:19:74:49:91:34:7c:f9:5b:a3:21:08:b7: fb:a6:5a:39:67:b6:34:d2:46:b0:73:cf:a5:34:5f:69:cb:71: 52:f9:50:ac:fc:28:04:1d:2b:24:1d:2d:53:f2:cc:0c:5b:0e: 7a:74:f7:26:1e:c5:e6:db:15:1c:88:6b:2e:2f:d5:bb:ae:53: d9:31:bb:0c:22:57:3b:61:71:ff:fc:d7:6e:75:5d:53:b7:c8: 2a:ac:46:7a:18:b4:c7:f0:05:6b:2c:12:24:be:80:03:77:7a: 1f:04:99:e5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUNcN0XL5HL9AkawRM6oK9IDMZYrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczNTM5ODVFQjdGOUU1RjFDMDhFNzE1RTQwOEQ5RTcx OTA1NDBERjAeFw0yNjAzMjcxMzA5MDRaFw0yNzAzMjYxMzE0MDRaMDMxMTAvBgNV BAMTKDQyMUM4QTRDMzlEMjhDNzc1NDNGNTkxQjU4OUE0QzlCNzMwRkEzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFQjyf3Tm/1V8E7vxUFX0maMX ppK5Qx677OtH/bSiUu/WgaI1+fmSCqfZ63MKeAOWmKjoqUUdeTOMM730FiQ9YiTG Lg00MIKRBUvqqMTfy1nbXdqSJZ4o4LZPCxQyqIvwzsFSV8QuPeCgFqxpSDXnJ1/N BKfH7wn5RClV1T+oTnpMpNQ0FU5UqJywSvA1tioNhdOtaOXGzWpOwG0juj32kxPP ig3UMMHsbaZpnUgzoXwxlc6W+u63te/ecXHDnRVf+hR6hSipjM5KiXakxHtMdwkU spiaanmDOwOzk6rDvMaFtul9BoPQSA+Iqwn8nTEWKN3fIWVwV3kVAUBJXgDzAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUQhyKTDnSjHdUP1kbWJpMm3MPo2wwHwYDVR0j BBgwFoAUlzU5het/nl8cCOcV5AjZ5xkFQN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl dUQvMC85NzM1Mzk4NUVCN0Y5RTVGMUMwOEU3MTVFNDA4RDlFNzE5MDU0MERGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MzUzOTg1RUI3RjlFNUYx QzA4RTcxNUU0MDhEOUU3MTkwNTQwREYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv MzIzODMwMzQzYTMzMzQ2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzNTM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENPSAMA0GCSqGSIb3DQEBCwUA A4IBAQAP6rfMXjjNZee1GVzmrwXQF+WVvi50jCPsU8jTtWRC3DcI7Sy5YYEl4gwZ 9SzI1W2ZU3x4yzPapoAQYejOZIVRnuBc/M3zGT9+CEKOWYEcdeTFRLkp7j/HMY2f rzx8zdsgzwfKCA2bGFDCzX7cyY0P1CacX7aFqHTe66XRpXO+YeL3nHBfMQXSHKiB XTVbaQh8kX/iSXAZdEmRNHz5W6MhCLf7plo5Z7Y00kawc8+lNF9py3FS+VCs/CgE HSskHS1T8swMWw56dPcmHsXm2xUciGsuL9W7rlPZMbsMIlc7YXH//NdudV1Tt8gq rEZ6GLTH8AVrLBIkvoADd3ofBJnl -----END CERTIFICATE-----Generated at Thu Apr 9 21:42:53 2026 by rpki-client