$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa File: 323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa (raw, json) Hash identifier: 9taMWgkJiDGHDBUroYHZyICArtCdSzh1h17mR+OXR9o= Subject key identifier: CA:FA:F7:18:CA:6D:C7:D2:BC:2F:8D:86:C6:9D:E0:37:CA:12:42:DF Certificate issuer: /CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB Certificate serial: 4580EF7DD85B5F2F9C7D099930252A17008788A0 Authority key identifier: 2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa Signing time: Mon 30 Mar 2026 13:33:18 +0000 ROA not before: Mon 30 Mar 2026 13:28:18 +0000 ROA not after: Mon 29 Mar 2027 13:33:18 +0000 asID: 264229 IP address blocks: 2804:248c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:80:ef:7d:d8:5b:5f:2f:9c:7d:09:99:30:25:2a:17:00:87:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB Validity Not Before: Mar 30 13:28:18 2026 GMT Not After : Mar 29 13:33:18 2027 GMT Subject: CN=CAFAF718CA6DC7D2BC2F8D86C69DE037CA1242DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:a8:bd:91:c9:e5:51:9c:f1:73:39:df:85: b0:ac:06:04:db:dc:27:62:d0:36:0e:3b:0c:3d:e7: fc:f9:97:55:9c:06:0d:13:be:9d:9b:0b:20:90:cd: b5:df:65:7d:c9:be:eb:2a:54:04:f8:57:8d:a1:cd: 41:e5:ce:96:b8:44:ef:d6:d9:83:c3:60:23:25:4b: 52:06:49:a3:4a:84:c4:4e:ea:b5:f3:33:15:5b:9e: 5b:df:9a:f2:86:7f:cf:d1:73:a5:6f:d1:eb:69:5f: 25:70:9f:7d:bd:9f:f8:69:8d:8e:90:59:9b:43:91: ee:2f:56:30:48:5a:a9:2f:e5:db:c0:1e:02:8d:0f: b7:45:c8:89:e7:5f:f3:cb:cf:d2:e3:72:f8:15:30: 7f:07:bd:5d:2d:b6:b7:c7:54:09:c3:d7:d8:02:c1: 31:45:d8:6d:bf:8a:11:9c:6d:ce:fe:1d:91:72:8c: 2d:70:db:56:4f:4e:3e:1f:35:c0:83:66:c9:15:5c: 22:ff:d0:68:1d:8b:33:50:62:e8:01:6b:be:40:de: 55:72:60:06:66:83:30:68:e5:fa:e6:56:8d:bb:c8: b0:d5:40:cf:66:65:da:4d:cc:65:af:9a:6e:c2:48: 78:60:6f:9c:ea:37:66:7b:8a:12:aa:89:a2:71:4c: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FA:F7:18:CA:6D:C7:D2:BC:2F:8D:86:C6:9D:E0:37:CA:12:42:DF X509v3 Authority Key Identifier: keyid:2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:248c:8000::/34 Signature Algorithm: sha256WithRSAEncryption 89:a7:ed:f2:0c:63:0c:9b:34:b4:17:58:a5:43:f4:42:ef:1a: 3f:c4:7d:2f:c2:6c:0b:f9:e3:7f:4a:58:2e:9f:0b:42:ae:fc: f4:ed:c7:ea:9a:c3:da:24:f8:ad:79:97:70:7e:5d:fd:a7:1c: 4d:e4:50:03:af:96:e9:a0:77:3a:5f:32:b1:5c:0d:da:cd:4a: 7a:3b:e8:77:a8:05:4e:27:6d:f3:d5:5e:5d:38:ac:be:fc:bc: 34:f9:1d:c6:1b:f9:f3:5c:e1:62:a9:b2:a0:26:58:7a:6c:3b: 8b:ab:0b:be:d6:3f:f0:8a:3d:43:6b:5a:06:ba:f4:18:f7:d2: be:41:61:b5:ee:3a:82:d6:7a:ac:47:bd:53:1b:c9:76:bd:1c: 19:e9:1e:eb:b4:98:d1:cb:8d:ae:2d:49:d1:59:9b:c5:3c:b3: bf:14:5b:51:98:5f:46:48:8f:54:99:5c:af:3f:95:e9:4a:3e: 5c:d7:a4:40:1c:20:1b:f2:1a:5c:8a:d5:7e:5f:55:6f:ca:b5: ff:3f:41:36:2a:ad:22:fb:ef:82:0a:3c:74:c5:22:62:38:f1: 65:79:90:72:1d:7c:21:8a:65:76:c0:ac:15:a4:be:a8:28:35: 02:88:4b:d8:bc:f0:fc:99:85:f1:a7:97:a5:4d:3e:3d:e2:e2: aa:84:a3:6a -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIURYDvfdhbXy+cfQmZMCUqFwCHiKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0OEVBMDcwQTlCREFFMDlBODUwQjNBNEYwQzc5NzE5 QTFGMDhEQjAeFw0yNjAzMzAxMzI4MThaFw0yNzAzMjkxMzMzMThaMDMxMTAvBgNV BAMTKENBRkFGNzE4Q0E2REM3RDJCQzJGOEQ4NkM2OURFMDM3Q0ExMjQyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09qi9kcnlUZzxcznfhbCsBgTb 3Cdi0DYOOww95/z5l1WcBg0Tvp2bCyCQzbXfZX3JvusqVAT4V42hzUHlzpa4RO/W 2YPDYCMlS1IGSaNKhMRO6rXzMxVbnlvfmvKGf8/Rc6Vv0etpXyVwn329n/hpjY6Q WZtDke4vVjBIWqkv5dvAHgKND7dFyInnX/PLz9LjcvgVMH8HvV0ttrfHVAnD19gC wTFF2G2/ihGcbc7+HZFyjC1w21ZPTj4fNcCDZskVXCL/0GgdizNQYugBa75A3lVy YAZmgzBo5frmVo27yLDVQM9mZdpNzGWvmm7CSHhgb5zqN2Z7ihKqiaJxTBUtAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUyvr3GMptx9K8L42Gxp3gN8oSQt8wHwYDVR0j BBgwFoAULUjqBwqb2uCahQs6Twx5cZofCNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ZVeWp4YlM2TTE4c0NjM3IyU0gzRDVzQkxHWGRISEY1dEF4Q2lCR0o1 NW8vMC8yRDQ4RUEwNzBBOUJEQUUwOUE4NTBCM0E0RjBDNzk3MTlBMUYwOERCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENDhFQTA3MEE5QkRBRTA5 QTg1MEIzQTRGMEM3OTcxOUExRjA4REIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NGVXlqeGJTNk0xOHNDYzNyMlNIM0Q1c0JMR1hkSEhGNXRBeENpQkdKNTVvLzAv MzIzODMwMzQzYTMyMzQzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNDMyMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJIyAMA0GCSqGSIb3DQEBCwUA A4IBAQCJp+3yDGMMmzS0F1ilQ/RC7xo/xH0vwmwL+eN/SlgunwtCrvz07cfqmsPa JPiteZdwfl39pxxN5FADr5bpoHc6XzKxXA3azUp6O+h3qAVOJ23z1V5dOKy+/Lw0 +R3GG/nzXOFiqbKgJlh6bDuLqwu+1j/wij1Da1oGuvQY99K+QWG17jqC1nqsR71T G8l2vRwZ6R7rtJjRy42uLUnRWZvFPLO/FFtRmF9GSI9UmVyvP5XpSj5c16RAHCAb 8hpcitV+X1VvyrX/P0E2Kq0i+++CCjx0xSJiOPFleZByHXwhimV2wKwVpL6oKDUC iEvYvPD8mYXxp5elTT494uKqhKNq -----END CERTIFICATE-----Generated at Thu Apr 9 14:31:19 2026 by rpki-client