$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a37303a3a2f34342d3434203d3e20323730323835.roa File: 323830343a363962303a37303a3a2f34342d3434203d3e20323730323835.roa (raw, json) Hash identifier: tggWeH3yIPBg3DuUZyjVBYu/ZtUmlulDWa7+4Wp/DV8= Subject key identifier: BA:1C:18:A7:01:ED:55:7F:F0:2D:67:B5:4F:BC:B0:29:B7:6D:E4:49 Certificate issuer: /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2 Certificate serial: 4088B00EAD042130ADD9CF7FC1B3B70755A8732B Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a37303a3a2f34342d3434203d3e20323730323835.roa Signing time: Mon 10 Aug 2026 19:08:11 +0000 ROA not before: Mon 10 Aug 2026 19:03:11 +0000 ROA not after: Mon 09 Aug 2027 19:08:11 +0000 asID: 270285 IP address blocks: 2804:69b0:70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 11:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:88:b0:0e:ad:04:21:30:ad:d9:cf:7f:c1:b3:b7:07:55:a8:73:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2 Validity Not Before: Aug 10 19:03:11 2026 GMT Not After : Aug 9 19:08:11 2027 GMT Subject: CN=BA1C18A701ED557FF02D67B54FBCB029B76DE449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:53:e4:14:76:6c:3f:d4:0f:53:6a:07:ef: 64:fb:75:19:8f:11:9e:68:4b:8d:3d:92:ee:f8:bf: d1:ac:3a:4e:b4:88:6b:a9:64:7c:02:19:d6:8e:89: 78:cb:b7:e8:69:fa:ae:11:38:a5:98:9d:c4:34:59: 10:78:8a:c5:11:e6:3e:57:84:34:0a:56:24:ff:39: 65:33:7a:67:69:94:33:ea:07:44:6f:44:c6:bf:40: 7d:63:1a:f9:ac:2a:cd:c1:fc:78:af:a9:f9:d0:49: 8e:4a:2b:9f:2d:5c:1b:b3:2a:53:19:39:b4:a0:8a: aa:cd:ca:f2:ad:a7:83:78:1a:d4:e7:d2:44:8c:6e: 65:bd:06:3b:25:58:6e:19:90:fa:cb:3a:77:2e:05: e0:51:87:fb:3a:89:9b:6f:9f:b4:92:cb:af:01:e9: 64:4b:86:62:da:af:48:a4:9a:61:0c:f8:dc:8c:95: eb:9c:d2:26:f2:8e:34:a1:11:5b:89:a3:d8:f7:e2: 4a:63:7b:25:ff:3b:27:b7:cf:b0:8b:c3:27:ec:e9: 2b:f0:fe:7b:4c:5b:a9:7c:0d:be:ef:14:73:04:35: 77:a2:ad:31:70:dc:d0:e4:1c:48:3f:fe:42:63:9b: 47:e4:da:fe:c8:df:56:7a:e6:4f:28:10:a9:90:d4: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:18:A7:01:ED:55:7F:F0:2D:67:B5:4F:BC:B0:29:B7:6D:E4:49 X509v3 Authority Key Identifier: keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a37303a3a2f34342d3434203d3e20323730323835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:69b0:70::/44 Signature Algorithm: sha256WithRSAEncryption a0:62:63:68:39:3b:73:49:1c:b0:7d:de:5e:22:be:12:b5:24: ab:73:f2:89:1b:e3:50:8a:a5:00:b7:21:e2:82:1e:9f:9b:45: e7:33:d3:3f:84:77:c9:b9:00:df:eb:ea:b6:e8:e4:78:b0:79: 74:9e:56:72:09:11:8c:10:95:b3:a9:31:47:19:7e:15:16:d5: 3b:98:f2:d7:00:28:9f:b5:11:80:e0:a6:90:0d:0f:75:34:b1: c2:2a:64:81:44:3d:42:7c:6d:6c:3c:08:c5:d6:57:8f:3b:78: a2:33:4a:66:2c:cf:d8:fd:30:dd:54:f5:16:28:f9:70:ed:1c: dd:91:a8:92:e3:2b:ee:55:0b:8e:fa:8e:55:da:ff:0e:5e:d2: 8f:17:56:0e:ee:24:0d:05:91:49:79:59:9a:2a:63:56:c4:6d: de:a9:a1:22:da:ff:30:49:82:56:c1:79:e9:f6:78:9c:69:cc: d9:b3:ce:17:52:96:f4:b6:7f:0c:f5:15:bf:46:a8:bb:49:4d: 95:da:fd:49:73:e3:d0:eb:f2:ab:83:0d:8c:aa:e7:23:3e:db: 7e:33:71:1f:15:a4:55:12:93:3d:06:b8:4c:0e:4d:6a:85:4a: 2e:da:ab:72:4a:ff:ba:f2:de:14:40:a2:b9:7c:84:a5:b5:27: f4:6a:b3:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUQIiwDq0EITCt2c9/wbO3B1WocyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQTNBMzZDOEVCMDRCMzY3QjYzMzIxRkU1RURFODdG M0M4RDNDMjAeFw0yNjA4MTAxOTAzMTFaFw0yNzA4MDkxOTA4MTFaMDMxMTAvBgNV BAMTKEJBMUMxOEE3MDFFRDU1N0ZGMDJENjdCNTRGQkNCMDI5Qjc2REU0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUG1PkFHZsP9QPU2oH72T7dRmP EZ5oS409ku74v9GsOk60iGupZHwCGdaOiXjLt+hp+q4ROKWYncQ0WRB4isUR5j5X hDQKViT/OWUzemdplDPqB0RvRMa/QH1jGvmsKs3B/HivqfnQSY5KK58tXBuzKlMZ ObSgiqrNyvKtp4N4GtTn0kSMbmW9BjslWG4ZkPrLOncuBeBRh/s6iZtvn7SSy68B 6WRLhmLar0ikmmEM+NyMleuc0ibyjjShEVuJo9j34kpjeyX/Oye3z7CLwyfs6Svw /ntMW6l8Db7vFHMENXeirTFw3NDkHEg//kJjm0fk2v7I31Z65k8oEKmQ1EfXAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUuhwYpwHtVX/wLWe1T7ywKbdt5EkwHwYDVR0j BBgwFoAUaMo6NsjrBLNntjMh/l7eh/PI08IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3 V1UvMC82OENBM0EzNkM4RUIwNEIzNjdCNjMzMjFGRTVFREU4N0YzQzhEM0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4Q0EzQTM2QzhFQjA0QjM2 N0I2MzMyMUZFNUVERTg3RjNDOEQzQzIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhpRkUza2dGTTU3NzlHdjdWa2pmODRKVHh2UVZQa3FOWWtMb0JuTEI4d1dVLzAv MzIzODMwMzQzYTM2Mzk2MjMwM2EzNzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw MzIzNzMwMzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKARpsABwMA0GCSqGSIb3DQEBCwUAA4IB AQCgYmNoOTtzSRywfd5eIr4StSSrc/KJG+NQiqUAtyHigh6fm0XnM9M/hHfJuQDf 6+q26OR4sHl0nlZyCRGMEJWzqTFHGX4VFtU7mPLXACiftRGA4KaQDQ91NLHCKmSB RD1CfG1sPAjF1lePO3iiM0pmLM/Y/TDdVPUWKPlw7RzdkaiS4yvuVQuO+o5V2v8O XtKPF1YO7iQNBZFJeVmaKmNWxG3eqaEi2v8wSYJWwXnp9nicaczZs84XUpb0tn8M 9RW/Rqi7SU2V2v1Jc+PQ6/Krgw2MqucjPtt+M3EfFaRVEpM9BrhMDk1qhUou2qty Sv+68t4UQKK5fISltSf0arML -----END CERTIFICATE-----Generated at Sun Aug 23 21:26:36 2026 by rpki-client