$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3438203d3e20323638373037.roa File: 323830343a353938343a383030303a3a2f33332d3438203d3e20323638373037.roa (raw, json) Hash identifier: D6GbpoygHa2RGeV/NRr1hL28IC6dLPXXnh7kM7v/2B8= Subject key identifier: 70:9C:60:9B:9A:9F:49:36:99:05:97:83:58:47:50:70:E6:70:00:97 Certificate issuer: /CN=C35549FD881F7AAE59D817159EC9B19049B93616 Certificate serial: 18B93A0B5D781451561CDCA88C844065039BA743 Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3438203d3e20323638373037.roa Signing time: Sun 06 Sep 2026 22:48:33 +0000 ROA not before: Sun 06 Sep 2026 22:43:33 +0000 ROA not after: Sun 05 Sep 2027 22:48:33 +0000 asID: 268707 IP address blocks: 2804:5984:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Sep 2026 20:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b9:3a:0b:5d:78:14:51:56:1c:dc:a8:8c:84:40:65:03:9b:a7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616 Validity Not Before: Sep 6 22:43:33 2026 GMT Not After : Sep 5 22:48:33 2027 GMT Subject: CN=709C609B9A9F49369905978358475070E6700097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:b2:15:8d:76:79:84:dd:40:94:5c:68:06: 2e:60:bc:4b:e0:88:97:49:83:a2:6d:0c:09:e7:4c: 3c:a0:12:fb:0a:0e:eb:34:d8:c4:f1:22:f5:8d:83: 0d:d7:bf:fe:d6:f6:3c:8a:4b:e5:be:7a:89:81:b1: 8a:3a:15:39:bb:f1:9f:c3:f5:58:e9:fc:c8:6b:3f: 49:53:b5:d9:79:03:79:cf:f7:7e:56:9a:1f:c2:90: ca:71:60:3e:0d:31:e6:e8:63:a2:ee:cf:e2:19:dc: 73:f2:97:a2:a8:b3:b5:4c:66:e9:ec:10:cf:fe:d9: 35:8e:ab:1b:0e:0e:83:d9:3f:88:1b:00:7e:ee:8f: fe:21:27:0c:9f:d5:9e:fb:56:fe:4c:d7:d7:0d:59: 50:5d:4c:8b:de:a8:e0:ad:1b:55:2a:56:30:e2:92: 95:cc:3a:3d:10:93:59:8b:32:09:ff:ea:e5:7c:2e: 6b:82:60:95:ff:e5:4c:08:13:6d:1e:fd:76:68:45: 4c:bd:be:36:d6:16:c5:07:bc:fe:d6:3f:5d:c9:c5: 9c:66:17:15:07:9c:1a:98:a0:2d:24:29:6a:9a:9a: 66:c4:ef:49:dd:d4:4a:db:64:74:dc:34:3c:a8:12: 7e:11:ad:fd:8e:61:e0:3c:69:4b:a5:ac:4c:55:cb: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:60:9B:9A:9F:49:36:99:05:97:83:58:47:50:70:E6:70:00:97 X509v3 Authority Key Identifier: keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3438203d3e20323638373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5984:8000::/33 Signature Algorithm: sha256WithRSAEncryption 84:c3:f9:86:ed:41:81:5a:2c:72:31:0b:95:90:a6:00:5c:4d: 9b:12:bb:b0:d0:f6:1c:66:94:b4:f1:97:c0:f2:60:ee:6d:ca: 66:10:87:29:f6:24:1f:31:47:a5:67:0d:a0:23:e0:bf:b0:81: 57:a4:f5:37:06:d7:a6:51:ca:64:52:5a:f8:90:f8:ce:bb:b4: 18:44:d5:a9:bc:7c:db:cb:85:1f:fe:13:9d:b8:03:1a:32:32: 9a:64:f1:c8:25:4f:d1:d8:50:82:b6:d4:99:03:e7:37:65:8c: 22:e9:12:22:0e:43:bb:61:fd:29:71:87:3b:a4:c0:f6:7e:7f: f1:e5:8e:7f:b3:5b:2c:53:36:d0:9a:ba:3d:b5:7e:a0:4e:9b: 8e:31:ca:bf:bf:c0:9d:5e:6a:da:55:d4:b2:fc:38:2b:23:92: c8:bf:ee:09:6a:00:b6:bb:6b:de:ec:24:d3:51:f4:83:88:25: 4b:67:93:2a:9a:97:bc:be:13:92:95:07:27:f8:03:df:e9:dd: e1:9b:ba:d9:8d:6a:cb:1b:9b:ec:71:a8:e7:76:01:87:50:f7: 3e:c9:2f:28:ca:0f:71:c9:71:93:eb:52:3f:81:a3:59:63:3f: 30:72:ec:b9:3d:dc:b4:8d:85:7b:59:92:6f:9a:f6:96:23:a3: 7e:90:70:09 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGLk6C114FFFWHNyojIRAZQObp0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1NTQ5RkQ4ODFGN0FBRTU5RDgxNzE1OUVDOUIxOTA0 OUI5MzYxNjAeFw0yNjA5MDYyMjQzMzNaFw0yNzA5MDUyMjQ4MzNaMDMxMTAvBgNV BAMTKDcwOUM2MDlCOUE5RjQ5MzY5OTA1OTc4MzU4NDc1MDcwRTY3MDAwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWbIVjXZ5hN1AlFxoBi5gvEvg iJdJg6JtDAnnTDygEvsKDus02MTxIvWNgw3Xv/7W9jyKS+W+eomBsYo6FTm78Z/D 9Vjp/MhrP0lTtdl5A3nP935Wmh/CkMpxYD4NMeboY6Luz+IZ3HPyl6Kos7VMZuns EM/+2TWOqxsODoPZP4gbAH7uj/4hJwyf1Z77Vv5M19cNWVBdTIveqOCtG1UqVjDi kpXMOj0Qk1mLMgn/6uV8LmuCYJX/5UwIE20e/XZoRUy9vjbWFsUHvP7WP13JxZxm FxUHnBqYoC0kKWqammbE70nd1ErbZHTcNDyoEn4Rrf2OYeA8aUulrExVy4OdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcJxgm5qfSTaZBZeDWEdQcOZwAJcwHwYDVR0j BBgwFoAUw1VJ/Ygfeq5Z2BcVnsmxkEm5NhYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5 RVYvMC9DMzU1NDlGRDg4MUY3QUFFNTlEODE3MTU5RUM5QjE5MDQ5QjkzNjE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNTU0OUZEODgxRjdBQUU1 OUQ4MTcxNTlFQzlCMTkwNDlCOTM2MTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv MzIzODMwMzQzYTM1MzkzODM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDM0MzgyMDNk M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWYSAMA0GCSqGSIb3DQEBCwUA A4IBAQCEw/mG7UGBWixyMQuVkKYAXE2bEruw0PYcZpS08ZfA8mDubcpmEIcp9iQf MUelZw2gI+C/sIFXpPU3BtemUcpkUlr4kPjOu7QYRNWpvHzby4Uf/hOduAMaMjKa ZPHIJU/R2FCCttSZA+c3ZYwi6RIiDkO7Yf0pcYc7pMD2fn/x5Y5/s1ssUzbQmro9 tX6gTpuOMcq/v8CdXmraVdSy/DgrI5LIv+4JagC2u2ve7CTTUfSDiCVLZ5Mqmpe8 vhOSlQcn+APf6d3hm7rZjWrLG5vscajndgGHUPc+yS8oyg9xyXGT61I/gaNZYz8w cuy5Pdy0jYV7WZJvmvaWI6N+kHAJ -----END CERTIFICATE-----Generated at Fri Sep 11 14:24:56 2026 by rpki-client