$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa File: 323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa (raw, json) Hash identifier: SaaJ9poDcG4ZuSGJdfaUdP/ED10a0TdmR960d2eqKko= Subject key identifier: BA:86:DF:A5:40:D0:78:7D:D1:F6:AE:66:0E:AB:86:27:74:17:1E:64 Certificate issuer: /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6 Certificate serial: 2DD1F908E0CCF0B18D25C0E00F9E5E66187EB962 Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa Signing time: Tue 19 May 2026 12:38:09 +0000 ROA not before: Tue 19 May 2026 12:33:09 +0000 ROA not after: Tue 18 May 2027 12:38:09 +0000 asID: 263641 IP address blocks: 2804:1094:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 23:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d1:f9:08:e0:cc:f0:b1:8d:25:c0:e0:0f:9e:5e:66:18:7e:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6 Validity Not Before: May 19 12:33:09 2026 GMT Not After : May 18 12:38:09 2027 GMT Subject: CN=BA86DFA540D0787DD1F6AE660EAB862774171E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:25:3b:35:e4:09:b2:e7:67:47:1c:4a:00: aa:6a:e1:cb:aa:76:94:1f:97:96:ef:c3:3b:c7:7f: 93:1a:a4:2d:6b:c5:d4:b0:f9:c5:ff:0c:f9:a9:16: bb:00:21:a7:78:bc:31:04:92:9e:2c:f8:f2:fa:ea: 6e:46:86:e6:2c:3b:fd:cd:4f:62:99:a3:76:80:cc: 64:de:10:47:e0:c4:b1:1a:e9:13:c1:53:be:68:d7: cd:18:17:7e:f8:f6:13:7c:f7:b4:57:97:b9:47:57: 86:0f:b1:3e:f5:72:f8:a2:2e:f2:d5:d5:af:3e:49: 11:12:66:77:7c:af:4d:18:92:b4:de:5b:ef:44:50: 85:ae:4a:1e:62:52:c3:d5:d6:a7:71:11:57:07:3a: 6c:6a:81:f0:28:f2:e4:dd:d7:17:85:f9:88:eb:f0: b6:2e:33:fd:4c:c0:fd:dd:30:4f:46:81:24:51:94: e9:74:4e:1d:e1:d7:79:9c:81:4d:05:ca:f3:88:0b: af:89:85:15:d6:95:9c:3a:c4:1d:1c:e5:d7:29:f5: 4a:2c:5c:98:0d:5a:13:5a:5e:89:48:37:76:89:43: 1e:30:c3:20:09:ea:31:c1:32:cf:88:bd:0a:d5:4b: ff:4d:22:9d:7a:c9:be:2a:a1:db:c2:46:77:bb:88: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:86:DF:A5:40:D0:78:7D:D1:F6:AE:66:0E:AB:86:27:74:17:1E:64 X509v3 Authority Key Identifier: keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a323030303a3a2f34302d3430203d3e20323633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1094:2000::/40 Signature Algorithm: sha256WithRSAEncryption 12:41:a1:d4:c3:58:c2:53:c4:0f:58:e7:cb:be:44:34:ed:7b: 52:30:8d:fc:6a:74:bc:88:17:cd:e6:55:7f:d6:d8:ed:56:37: 8c:ea:3e:6b:56:51:7d:e0:90:aa:1f:58:69:78:0b:af:81:20: 5c:34:ac:3f:c9:9b:0b:4e:b5:ec:58:59:cb:64:17:66:da:d8: e9:65:26:09:6f:61:04:33:e2:b4:4e:7c:4d:d6:fc:25:f6:47: c2:18:82:69:31:d2:91:ab:43:11:7a:1f:b0:3e:ad:89:0a:ab: 39:ae:44:b4:a9:39:0f:af:45:71:15:7a:d3:c1:75:31:55:94: 35:29:32:90:55:16:a4:6a:23:c8:97:53:61:54:d6:4d:5b:50: b2:c0:e2:0c:64:c1:79:bb:5e:41:16:a0:60:cd:8c:92:7b:34: d5:4e:cb:b2:9e:7a:e4:01:71:56:76:f7:00:17:f4:4d:68:15: 53:31:37:1d:8d:00:a7:e3:ab:cd:9e:ba:48:e6:ec:21:cf:9d: 6e:aa:0e:3d:3a:f2:64:e7:72:0c:b5:5f:2e:04:92:a2:93:70: 70:37:0c:07:1b:ec:cc:4f:98:9e:a4:ce:f0:e5:11:fd:a2:09: 08:0f:57:21:69:65:29:45:9a:4c:17:00:a7:32:44:0d:0f:d9: 94:ff:52:69 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULdH5CODM8LGNJcDgD55eZhh+uWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4RTc4MERDRkU3QjlGMEFCNUE4NzcyOUQ0NENDQUQz RDczQjNBNjAeFw0yNjA1MTkxMjMzMDlaFw0yNzA1MTgxMjM4MDlaMDMxMTAvBgNV BAMTKEJBODZERkE1NDBEMDc4N0REMUY2QUU2NjBFQUI4NjI3NzQxNzFFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWniU7NeQJsudnRxxKAKpq4cuq dpQfl5bvwzvHf5MapC1rxdSw+cX/DPmpFrsAIad4vDEEkp4s+PL66m5GhuYsO/3N T2KZo3aAzGTeEEfgxLEa6RPBU75o180YF3749hN897RXl7lHV4YPsT71cviiLvLV 1a8+SRESZnd8r00YkrTeW+9EUIWuSh5iUsPV1qdxEVcHOmxqgfAo8uTd1xeF+Yjr 8LYuM/1MwP3dME9GgSRRlOl0Th3h13mcgU0FyvOIC6+JhRXWlZw6xB0c5dcp9Uos XJgNWhNaXolIN3aJQx4wwyAJ6jHBMs+IvQrVS/9NIp16yb4qodvCRne7iDa1AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUuobfpUDQeH3R9q5mDquGJ3QXHmQwHwYDVR0j BBgwFoAUMo54Dc/nufCrWodynUTMrT1zs6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm a2EvMC8zMjhFNzgwRENGRTdCOUYwQUI1QTg3NzI5RDQ0Q0NBRDNENzNCM0E2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyOEU3ODBEQ0ZFN0I5RjBB QjVBODc3MjlENDRDQ0FEM0Q3M0IzQTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv MzIzODMwMzQzYTMxMzAzOTM0M2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEJQgMA0GCSqGSIb3DQEBCwUA A4IBAQASQaHUw1jCU8QPWOfLvkQ07XtSMI38anS8iBfN5lV/1tjtVjeM6j5rVlF9 4JCqH1hpeAuvgSBcNKw/yZsLTrXsWFnLZBdm2tjpZSYJb2EEM+K0TnxN1vwl9kfC GIJpMdKRq0MReh+wPq2JCqs5rkS0qTkPr0VxFXrTwXUxVZQ1KTKQVRakaiPIl1Nh VNZNW1CywOIMZMF5u15BFqBgzYySezTVTsuynnrkAXFWdvcAF/RNaBVTMTcdjQCn 46vNnrpI5uwhz51uqg49OvJk53IMtV8uBJKik3BwNwwHG+zMT5iepM7w5RH9ogkI D1chaWUpRZpMFwCnMkQND9mU/1Jp -----END CERTIFICATE-----Generated at Sun May 24 14:45:21 2026 by rpki-client