$ rpki-client -vvf rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a653030303a3a2f33352d3335203d3e20323735363338.roa File: 323830343a393761633a653030303a3a2f33352d3335203d3e20323735363338.roa (raw, json) Hash identifier: MC4QW3fc5XORSEWf8qZVohtoR2CfWvzUeCEbCw0JA84= Subject key identifier: D3:DA:B0:C4:8A:FD:E4:9D:1D:DE:F2:DC:8D:FB:99:C9:84:B4:54:80 Certificate issuer: /CN=A496651C216BE38E28B8315F0C99D684687935E7 Certificate serial: 7D5CBDCDA4BCA2005E376CE009F84AAD85D300BA Authority key identifier: A4:96:65:1C:21:6B:E3:8E:28:B8:31:5F:0C:99:D6:84:68:79:35:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a653030303a3a2f33352d3335203d3e20323735363338.roa Signing time: Tue 07 Apr 2026 02:56:41 +0000 ROA not before: Tue 07 Apr 2026 02:51:41 +0000 ROA not after: Tue 06 Apr 2027 02:56:41 +0000 asID: 275638 IP address blocks: 2804:97ac:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.crl rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5c:bd:cd:a4:bc:a2:00:5e:37:6c:e0:09:f8:4a:ad:85:d3:00:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496651C216BE38E28B8315F0C99D684687935E7 Validity Not Before: Apr 7 02:51:41 2026 GMT Not After : Apr 6 02:56:41 2027 GMT Subject: CN=D3DAB0C48AFDE49D1DDEF2DC8DFB99C984B45480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:f4:7e:d3:90:14:8c:50:b1:8f:81:3f:bd: f3:b0:54:e9:bd:d3:a4:ca:1e:98:9c:b4:08:7f:b1: 7b:58:05:78:f5:52:f6:6a:26:42:1e:6b:cd:36:02: ab:59:82:08:84:06:de:3a:1c:2a:5e:eb:54:5a:bd: d3:d4:36:04:28:95:bc:54:6b:78:83:a2:1b:aa:ee: 53:79:0d:37:4e:4f:8a:14:3a:4d:0e:f8:69:2f:1f: a3:37:65:3e:bb:b6:79:3f:1d:07:c8:50:dd:38:58: 47:37:f0:e0:23:a2:e1:1a:fc:75:c4:e8:88:b8:a6: f2:42:1b:62:05:23:1e:c7:c4:19:4d:41:fa:18:1f: 26:c5:94:16:27:b6:30:1f:f7:79:6b:64:23:fd:24: b4:22:39:ff:1f:5c:71:c7:be:11:08:73:0e:3c:09: ba:2a:22:82:db:25:a0:79:4d:c1:eb:27:ab:21:09: 70:06:55:8e:ed:69:d9:54:bd:f3:31:2d:d0:36:6b: fd:00:e7:b9:3c:0c:d4:39:6e:7e:c7:d4:e0:0a:4e: d8:3a:19:d9:b8:ba:00:1c:b8:ac:93:70:05:fa:4c: e1:dd:11:81:b4:59:03:bb:de:83:8e:b1:65:df:bb: 52:28:cc:81:85:ba:88:74:30:c5:c5:ee:0a:85:be: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:B0:C4:8A:FD:E4:9D:1D:DE:F2:DC:8D:FB:99:C9:84:B4:54:80 X509v3 Authority Key Identifier: keyid:A4:96:65:1C:21:6B:E3:8E:28:B8:31:5F:0C:99:D6:84:68:79:35:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/A496651C216BE38E28B8315F0C99D684687935E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A496651C216BE38E28B8315F0C99D684687935E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKHt7C2jCb4uAUFaL1DLvdBGbjvWxGsP1w2b7Y7D6Pbg/0/323830343a393761633a653030303a3a2f33352d3335203d3e20323735363338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:97ac:e000::/35 Signature Algorithm: sha256WithRSAEncryption 69:67:04:b0:68:ce:fb:69:87:0a:0b:2d:3f:a0:93:a7:8e:aa: cd:28:91:cc:73:ba:aa:aa:58:d5:ea:8c:90:63:20:ca:a9:8d: ea:e8:ef:74:34:cc:cf:8a:dc:ac:7f:e6:7d:eb:c8:bb:88:e3: 75:24:00:b8:6a:55:15:36:b4:ba:18:38:31:b5:88:8e:05:87: 44:f1:df:e6:dc:fb:8c:18:26:be:a6:d7:08:5d:ba:87:64:94: 3b:4f:7c:8f:07:a3:e4:bc:87:18:16:2f:82:80:e1:75:93:d1: cf:84:19:ef:53:ea:14:a2:9d:a9:c2:62:67:19:4d:53:71:18: 93:96:0d:1a:de:29:51:7d:0a:1d:19:fa:c3:99:f8:b0:20:d1: 80:92:34:4a:49:4f:4b:ac:b7:80:56:9e:3f:df:88:b6:d2:66: a1:7d:5c:df:b2:0d:9b:cf:35:bb:54:a3:42:a0:4b:c7:99:1a: f1:8d:4b:52:3c:31:ba:a6:19:b0:91:7f:e5:86:49:1c:61:b1: 97:04:fd:ed:ef:ac:c8:c6:fd:f1:08:db:11:f6:33:07:a9:d4: 80:e2:81:a7:46:15:22:0e:a5:25:b9:35:e6:3f:2f:70:fe:48: 6e:5c:44:01:d3:f3:4c:1f:04:db:fb:92:2d:c7:e7:cd:d9:71: ad:4d:ce:db -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUfVy9zaS8ogBeN2zgCfhKrYXTALowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5NjY1MUMyMTZCRTM4RTI4QjgzMTVGMEM5OUQ2ODQ2 ODc5MzVFNzAeFw0yNjA0MDcwMjUxNDFaFw0yNzA0MDYwMjU2NDFaMDMxMTAvBgNV BAMTKEQzREFCMEM0OEFGREU0OUQxRERFRjJEQzhERkI5OUM5ODRCNDU0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r/R+05AUjFCxj4E/vfOwVOm9 06TKHpictAh/sXtYBXj1UvZqJkIea802AqtZggiEBt46HCpe61RavdPUNgQolbxU a3iDohuq7lN5DTdOT4oUOk0O+GkvH6M3ZT67tnk/HQfIUN04WEc38OAjouEa/HXE 6Ii4pvJCG2IFIx7HxBlNQfoYHybFlBYntjAf93lrZCP9JLQiOf8fXHHHvhEIcw48 CboqIoLbJaB5TcHrJ6shCXAGVY7tadlUvfMxLdA2a/0A57k8DNQ5bn7H1OAKTtg6 Gdm4ugAcuKyTcAX6TOHdEYG0WQO73oOOsWXfu1IozIGFuoh0MMXF7gqFvhSpAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU09qwxIr95J0d3vLcjfuZyYS0VIAwHwYDVR0j BBgwFoAUpJZlHCFr444ouDFfDJnWhGh5NecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tIdDdDMmpDYjR1QVVGYUwxREx2ZEJHYmp2V3hHc1AxdzJiN1k3RDZQ YmcvMC9BNDk2NjUxQzIxNkJFMzhFMjhCODMxNUYwQzk5RDY4NDY4NzkzNUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0OTY2NTFDMjE2QkUzOEUy OEI4MzE1RjBDOTlENjg0Njg3OTM1RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLSHQ3QzJqQ2I0dUFVRmFMMURMdmRCR2Jqdld4R3NQMXcyYjdZN0Q2UGJnLzAv MzIzODMwMzQzYTM5Mzc2MTYzM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzczNTM2MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEl6zgMA0GCSqGSIb3DQEBCwUA A4IBAQBpZwSwaM77aYcKCy0/oJOnjqrNKJHMc7qqqljV6oyQYyDKqY3q6O90NMzP itysf+Z968i7iON1JAC4alUVNrS6GDgxtYiOBYdE8d/m3PuMGCa+ptcIXbqHZJQ7 T3yPB6PkvIcYFi+CgOF1k9HPhBnvU+oUop2pwmJnGU1TcRiTlg0a3ilRfQodGfrD mfiwINGAkjRKSU9LrLeAVp4/34i20mahfVzfsg2bzzW7VKNCoEvHmRrxjUtSPDG6 phmwkX/lhkkcYbGXBP3t76zIxv3xCNsR9jMHqdSA4oGnRhUiDqUluTXmPy9w/khu XEQB0/NMHwTb+5Itx+fN2XGtTc7b -----END CERTIFICATE-----Generated at Thu Apr 9 16:14:06 2026 by rpki-client