$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa File: 323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa (raw, json) Hash identifier: 87cH/zfVlYwo/lhL99VL56iNS+3f0irZ7ULeW4B23KA= Subject key identifier: 17:3D:67:2E:15:8D:12:62:02:86:1B:E6:3B:2A:65:4F:5E:7F:36:99 Certificate issuer: /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Certificate serial: 318AB18AA7F17769F8EBB39EB264B55C3FF48BB2 Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa Signing time: Thu 05 Mar 2026 22:32:02 +0000 ROA not before: Thu 05 Mar 2026 22:27:02 +0000 ROA not after: Thu 04 Mar 2027 22:32:02 +0000 asID: 263444 IP address blocks: 2804:11dc:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Mar 2026 08:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8a:b1:8a:a7:f1:77:69:f8:eb:b3:9e:b2:64:b5:5c:3f:f4:8b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D Validity Not Before: Mar 5 22:27:02 2026 GMT Not After : Mar 4 22:32:02 2027 GMT Subject: CN=173D672E158D126202861BE63B2A654F5E7F3699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:1f:c2:c8:06:19:ad:fe:1f:cc:b8:2f:59: b5:bf:5b:56:b6:e5:39:2a:00:03:eb:e4:04:6e:dd: 13:85:ec:36:0e:15:b4:20:d0:65:8d:f5:d8:87:bf: 7e:b1:14:ad:e2:58:83:04:af:a9:44:4d:6e:ad:e3: 37:21:7a:fe:16:13:6d:ae:fd:c0:1f:79:12:62:60: f4:e3:71:e9:ff:86:7d:fe:af:ef:b4:8f:2f:64:01: 30:a0:c1:d1:7f:cb:c4:1b:b1:ba:3e:3a:f1:a8:a5: 4a:66:d7:ab:ec:b7:0a:5a:81:f7:0f:5a:75:1e:c3: ba:92:88:95:9f:f3:0c:16:17:74:0d:01:47:a0:00: a0:58:20:67:4e:1a:2e:35:12:f7:0a:4d:2b:0a:dd: ed:e8:ac:79:e0:c1:7a:36:21:97:cd:5a:e9:c7:4b: f1:f9:46:1a:79:3f:85:49:e5:c2:38:93:9e:0e:b1: 92:31:af:4c:a3:cd:8d:4d:a7:16:fb:4c:60:7b:a6: 92:21:6e:5d:b2:43:8d:79:67:09:05:5e:64:16:83: 31:0f:bf:40:d2:44:92:1f:b7:b8:cb:10:08:ce:a7: fe:4b:a0:fa:52:b0:81:b1:78:27:37:6a:3a:49:9a: eb:9b:77:6c:65:4c:3f:07:96:eb:de:d1:7b:5e:26: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3D:67:2E:15:8D:12:62:02:86:1B:E6:3B:2A:65:4F:5E:7F:36:99 X509v3 Authority Key Identifier: keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:11dc:8000::/36 Signature Algorithm: sha256WithRSAEncryption c1:7a:f0:4b:1a:0e:17:e7:da:59:7b:b2:5a:16:6e:1c:7e:6e: 9d:38:4f:89:47:f0:57:1f:4c:98:cf:90:fa:2e:22:fa:07:b8: 52:e8:ac:b1:9b:3a:be:c4:e3:1b:79:64:b7:35:5d:74:10:2e: 34:e9:44:e9:d9:a4:4b:3b:ed:98:da:ec:ac:8f:0e:01:da:3d: b0:7a:99:cb:aa:29:88:56:9c:8e:dc:e2:75:81:ad:fe:4e:96: a7:f0:69:f8:27:54:ec:da:4f:bd:15:49:b5:d3:11:79:92:be: c4:19:28:90:0b:67:46:10:d7:25:e5:bc:57:36:dc:b9:bc:80: a2:ce:78:cc:44:83:4e:85:af:36:6a:0a:27:11:b9:10:7d:ff: 52:b4:d4:ba:3d:06:61:c8:b0:27:d5:99:1e:bf:74:08:5a:82: 19:8a:27:b4:e0:58:6c:05:86:3b:87:59:7c:0b:1b:bd:36:a9: 48:dd:20:b4:2d:ca:0c:1e:51:52:bf:9d:2c:f0:53:bc:b0:c4: f0:64:7c:6e:7f:a7:a4:95:b0:23:19:69:98:e0:c5:7a:0c:29: 60:c5:c3:ef:40:da:fe:c1:59:ef:79:62:93:6a:79:93:c9:62: e3:71:f4:21:2d:d5:ed:8e:00:00:f5:5a:ba:96:29:8d:62:ca: d5:15:12:64 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMYqxiqfxd2n467OesmS1XD/0i7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3 MDE4NDgwRDAeFw0yNjAzMDUyMjI3MDJaFw0yNzAzMDQyMjMyMDJaMDMxMTAvBgNV BAMTKDE3M0Q2NzJFMTU4RDEyNjIwMjg2MUJFNjNCMkE2NTRGNUU3RjM2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVh/CyAYZrf4fzLgvWbW/W1a2 5TkqAAPr5ARu3ROF7DYOFbQg0GWN9diHv36xFK3iWIMEr6lETW6t4zchev4WE22u /cAfeRJiYPTjcen/hn3+r++0jy9kATCgwdF/y8Qbsbo+OvGopUpm16vstwpagfcP WnUew7qSiJWf8wwWF3QNAUegAKBYIGdOGi41EvcKTSsK3e3orHngwXo2IZfNWunH S/H5Rhp5P4VJ5cI4k54OsZIxr0yjzY1Npxb7TGB7ppIhbl2yQ415ZwkFXmQWgzEP v0DSRJIft7jLEAjOp/5LoPpSsIGxeCc3ajpJmuubd2xlTD8Hluve0XteJoytAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUFz1nLhWNEmIChhvmOyplT15/NpkwHwYDVR0j BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv MzIzODMwMzQzYTMxMzE2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEdyAMA0GCSqGSIb3DQEBCwUA A4IBAQDBevBLGg4X59pZe7JaFm4cfm6dOE+JR/BXH0yYz5D6LiL6B7hS6Kyxmzq+ xOMbeWS3NV10EC406UTp2aRLO+2Y2uysjw4B2j2wepnLqimIVpyO3OJ1ga3+Tpan 8Gn4J1Ts2k+9FUm10xF5kr7EGSiQC2dGENcl5bxXNty5vICiznjMRINOha82agon EbkQff9StNS6PQZhyLAn1Zkev3QIWoIZiie04FhsBYY7h1l8Cxu9NqlI3SC0LcoM HlFSv50s8FO8sMTwZHxuf6eklbAjGWmY4MV6DClgxcPvQNr+wVnveWKTanmTyWLj cfQhLdXtjgAA9Vq6limNYsrVFRJk -----END CERTIFICATE-----Generated at Wed Mar 11 10:02:13 2026 by rpki-client