$ rpki-client -vvvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa File: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json) Hash identifier: r6DloDNo/5BhDKQy6hgwybKX5ZNK8FDcfIM9Xw/QRrM= Subject key identifier: 52:8D:5C:CF:B5:33:50:07:9B:E6:29:3D:D8:6B:E5:A9:C0:67:70:40 Certificate issuer: /CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Certificate serial: 3D5F0FD9033D28D97D18CAECEE58941735F8EFAA Authority key identifier: CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa Signing time: Sat 26 Sep 2026 14:34:20 +0000 ROA not before: Sat 26 Sep 2026 14:29:20 +0000 ROA not after: Sat 25 Sep 2027 14:34:20 +0000 asID: 263995 IP address blocks: 2804:2910:8000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 21:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5f:0f:d9:03:3d:28:d9:7d:18:ca:ec:ee:58:94:17:35:f8:ef:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E Validity Not Before: Sep 26 14:29:20 2026 GMT Not After : Sep 25 14:34:20 2027 GMT Subject: CN=528D5CCFB53350079BE6293DD86BE5A9C0677040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:5a:ad:57:fb:cd:29:23:48:04:3d:ff:e3: 27:58:84:a0:ed:50:d4:ee:71:de:dc:e9:3d:8d:08: 3a:1f:04:ac:fb:ff:19:3b:52:73:f2:79:ea:a4:54: fb:89:2f:bc:6a:b1:d7:60:5e:25:7d:9c:78:c3:6e: 3c:08:47:02:0c:ca:89:5e:9d:88:2f:5e:f2:11:c9: f3:26:10:d1:e7:00:d8:9e:94:49:b3:25:8e:65:03: 58:c3:5b:31:58:fc:88:40:11:4a:f2:83:d6:13:74: 88:64:d0:1b:36:f8:14:0b:8f:01:46:f8:02:03:75: 4e:bf:d4:94:50:0c:49:4b:b3:fe:cb:5a:97:ca:1d: cc:ea:d8:91:8d:6d:9c:5f:88:a8:48:b0:05:12:a7: 8f:5b:a3:ea:ac:16:7d:3b:45:66:94:e0:72:66:ab: 81:b5:0b:85:83:1b:8d:bb:e5:a1:51:42:67:64:06: a2:28:c4:42:c1:81:f6:ce:ad:e6:ca:71:d2:80:97: e4:a8:62:03:78:a1:33:4b:c1:ab:50:24:f6:23:3a: 52:e0:62:72:e2:5e:f1:b5:06:7c:a2:df:de:5e:02: ed:76:4e:f1:81:92:9c:db:4a:94:14:5a:ea:d0:30: d8:65:95:d0:10:c2:b9:2c:7c:f7:cf:9e:a5:e5:df: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8D:5C:CF:B5:33:50:07:9B:E6:29:3D:D8:6B:E5:A9:C0:67:70:40 X509v3 Authority Key Identifier: keyid:CD:30:FB:6C:A9:E6:6C:C7:3C:D7:C3:AC:F9:F0:1E:40:55:FC:36:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30FB6CA9E66CC73CD7C3ACF9F01E4055FC367E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:2910:8000::/44 Signature Algorithm: sha256WithRSAEncryption 9c:bf:10:3c:ff:9f:50:f1:00:7d:7d:bd:7f:2a:52:e2:9a:73: c5:4c:9e:9f:34:68:bd:bd:d1:bf:33:f7:0d:e7:97:4a:0d:80: 30:90:ef:36:38:8b:84:12:5f:fb:35:f4:73:e5:c0:d9:c0:51: 81:e8:2c:9b:8a:20:3c:33:92:53:74:02:d2:e3:b7:6a:86:a3: c7:01:d7:10:b8:44:12:5e:37:87:ac:a3:6f:cc:c3:f0:15:b4: 1c:fa:43:0d:b5:0a:93:47:49:cf:df:10:74:bd:ff:a5:f8:c1: 23:27:f9:f5:55:d8:ae:d9:92:3d:43:2d:11:c0:c6:12:eb:65: 48:c2:48:6f:36:b8:06:06:41:84:60:2a:e9:74:b1:dc:c3:1d: 6d:7a:05:97:7b:1b:85:aa:a3:76:7d:06:b6:da:99:d6:0d:b4: bc:8f:25:6d:93:2a:5b:7e:8c:7f:9f:85:eb:c4:b9:63:bf:1d: ad:75:9c:25:41:06:a2:20:3b:31:16:93:a5:28:41:83:97:93: bf:0e:7c:fb:89:d1:6c:66:49:de:34:ca:73:a2:e6:33:f1:34: b3:10:07:92:2c:34:4a:9d:49:5a:17:ec:1f:5c:db:1b:26:0b: c5:a5:b0:45:34:f5:a0:67:89:0a:7e:07:bf:b3:a4:6a:3d:80: e0:2f:7e:69 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUPV8P2QM9KNl9GMrs7liUFzX476owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMEZCNkNBOUU2NkNDNzNDRDdDM0FDRjlGMDFFNDA1 NUZDMzY3RTAeFw0yNjA5MjYxNDI5MjBaFw0yNzA5MjUxNDM0MjBaMDMxMTAvBgNV BAMTKDUyOEQ1Q0NGQjUzMzUwMDc5QkU2MjkzREQ4NkJFNUE5QzA2NzcwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwlqtV/vNKSNIBD3/4ydYhKDt UNTucd7c6T2NCDofBKz7/xk7UnPyeeqkVPuJL7xqsddgXiV9nHjDbjwIRwIMyole nYgvXvIRyfMmENHnANielEmzJY5lA1jDWzFY/IhAEUryg9YTdIhk0Bs2+BQLjwFG +AIDdU6/1JRQDElLs/7LWpfKHczq2JGNbZxfiKhIsAUSp49bo+qsFn07RWaU4HJm q4G1C4WDG4275aFRQmdkBqIoxELBgfbOrebKcdKAl+SoYgN4oTNLwatQJPYjOlLg YnLiXvG1Bnyi395eAu12TvGBkpzbSpQUWurQMNhlldAQwrksfPfPnqXl3+eBAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUUo1cz7UzUAeb5ik92GvlqcBncEAwHwYDVR0j BBgwFoAUzTD7bKnmbMc818Os+fAeQFX8Nn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV SFMvMC9DRDMwRkI2Q0E5RTY2Q0M3M0NEN0MzQUNGOUYwMUU0MDU1RkMzNjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMzBGQjZDQTlFNjZDQzcz Q0Q3QzNBQ0Y5RjAxRTQwNTVGQzM2N0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv MzIzODMwMzQzYTMyMzkzMTMwM2EzODMwMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNk M2UyMDMyMzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEKRCAADANBgkqhkiG9w0BAQsF AAOCAQEAnL8QPP+fUPEAfX29fypS4ppzxUyenzRovb3RvzP3DeeXSg2AMJDvNjiL hBJf+zX0c+XA2cBRgegsm4ogPDOSU3QC0uO3aoajxwHXELhEEl43h6yjb8zD8BW0 HPpDDbUKk0dJz98QdL3/pfjBIyf59VXYrtmSPUMtEcDGEutlSMJIbza4BgZBhGAq 6XSx3MMdbXoFl3sbhaqjdn0GttqZ1g20vI8lbZMqW36Mf5+F68S5Y78drXWcJUEG oiA7MRaTpShBg5eTvw58+4nRbGZJ3jTKc6LmM/E0sxAHkiw0Sp1JWhfsH1zbGyYL xaWwRTT1oGeJCn4Hv7Okaj2A4C9+aQ== -----END CERTIFICATE-----Generated at Sun Nov 1 06:07:27 2026 by rpki-client