$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa File: 323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa (raw, json) Hash identifier: D5suzjRVUodsvGkAZGf5vN0K+1TzRW+q4o0D+AroA/Y= Subject key identifier: AF:05:43:3B:C2:DE:36:A9:88:2A:0F:36:AD:8E:AA:87:7B:DF:86:CF Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 5171949C22EE150E2C18E49AE95ED1ADE4BDF1F5 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa Signing time: Mon 18 May 2026 15:08:00 +0000 ROA not before: Mon 18 May 2026 15:03:00 +0000 ROA not after: Mon 17 May 2027 15:08:00 +0000 asID: 262729 IP address blocks: 2804:16d8:1d06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:71:94:9c:22:ee:15:0e:2c:18:e4:9a:e9:5e:d1:ad:e4:bd:f1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: May 18 15:03:00 2026 GMT Not After : May 17 15:08:00 2027 GMT Subject: CN=AF05433BC2DE36A9882A0F36AD8EAA877BDF86CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:da:ce:32:7c:4c:a3:6a:61:cc:14:21:fb: cc:84:02:0d:f7:83:db:ff:e0:66:51:e7:09:59:06: bc:e6:5d:a3:2a:6d:7d:d7:93:06:8b:64:f5:f5:9a: 96:cd:73:09:96:6d:74:e7:dd:45:e4:08:af:c0:27: fa:cd:84:41:87:d0:33:a1:12:a5:1b:53:71:c5:66: b7:34:46:f4:68:3f:ac:d0:6a:4f:bb:10:f3:ff:a8: ef:5a:3c:50:33:d5:94:41:d4:38:cb:4d:0d:ea:52: a7:10:9c:0c:45:09:f6:9e:f2:5f:71:83:f9:9e:83: 97:ba:96:e7:55:3f:c6:0a:21:4e:5f:82:27:93:3b: 44:a1:3c:85:95:e8:d5:63:e1:0a:c0:f6:00:49:40: e9:68:c3:0f:3e:72:ce:53:f7:60:0e:4b:11:eb:70: 1e:f2:93:b6:72:e8:6e:b9:b8:80:fc:68:ab:cc:82: 19:d5:c0:7c:38:fb:2a:dd:38:49:ca:64:7a:1a:b7: 78:35:cd:55:6e:80:b2:75:8e:81:9e:93:95:35:5f: 7e:ed:7e:09:b8:a6:2d:f4:cd:30:f3:f6:ef:91:da: cb:24:e3:a8:37:af:c7:76:27:21:0d:68:3a:ad:b7: a1:d6:c5:b8:2f:b0:98:75:4f:db:ee:df:2a:6d:58: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:43:3B:C2:DE:36:A9:88:2A:0F:36:AD:8E:AA:87:7B:DF:86:CF X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a316430363a3a2f34382d3438203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:1d06::/48 Signature Algorithm: sha256WithRSAEncryption 64:8c:b0:e5:14:b2:9b:c9:9f:a5:15:bc:59:14:bd:2a:69:0d: 71:bf:00:23:7a:12:d7:47:84:b6:72:65:8e:28:7c:22:ca:e7: 7b:aa:a0:f2:6d:3c:46:cd:74:db:47:07:47:8c:5d:6b:86:6c: 9f:53:95:5e:ac:fb:a1:d7:26:c9:98:37:8e:1e:61:d5:65:f2: 5a:96:ae:9e:e7:d1:ed:af:00:0a:13:03:56:be:cc:af:c9:d7: f4:bc:06:8f:77:de:04:70:ba:e6:1c:d0:e8:b5:d2:bd:11:90: c9:ad:ca:fa:c9:73:0b:2f:a9:2e:0e:d6:48:35:7c:71:1b:a1: 94:1b:df:21:40:90:80:09:ac:35:2e:4e:8e:fc:0a:45:c9:ca: 7d:5f:10:31:f9:3b:8e:74:0b:b2:fe:82:33:23:67:d6:62:ef: f9:1d:af:32:9a:df:74:aa:63:6d:17:d2:2b:9c:75:06:3e:9f: 41:c6:b9:57:3e:b1:00:b3:a5:00:40:ff:62:cf:ec:af:75:66: b4:8a:ff:02:28:df:54:c8:be:01:ee:33:d1:67:4d:89:53:e3: bb:30:44:f0:2f:49:1b:f6:ea:e3:f8:80:ea:57:b2:e4:0f:2e: 1b:5b:37:9d:48:62:66:61:39:83:05:d1:85:5c:ca:81:78:c7: db:50:b9:b6 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUUXGUnCLuFQ4sGOSa6V7RreS98fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNjA1MTgxNTAzMDBaFw0yNzA1MTcxNTA4MDBaMDMxMTAvBgNV BAMTKEFGMDU0MzNCQzJERTM2QTk4ODJBMEYzNkFEOEVBQTg3N0JERjg2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi9rOMnxMo2phzBQh+8yEAg33 g9v/4GZR5wlZBrzmXaMqbX3XkwaLZPX1mpbNcwmWbXTn3UXkCK/AJ/rNhEGH0DOh EqUbU3HFZrc0RvRoP6zQak+7EPP/qO9aPFAz1ZRB1DjLTQ3qUqcQnAxFCfae8l9x g/meg5e6ludVP8YKIU5fgieTO0ShPIWV6NVj4QrA9gBJQOloww8+cs5T92AOSxHr cB7yk7Zy6G65uID8aKvMghnVwHw4+yrdOEnKZHoat3g1zVVugLJ1joGek5U1X37t fgm4pi30zTDz9u+R2ssk46g3r8d2JyENaDqtt6HWxbgvsJh1T9vu3yptWB3dAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUrwVDO8LeNqmIKg82rY6qh3vfhs8wHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzMTY0MzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEFtgdBjANBgkqhkiG9w0BAQsF AAOCAQEAZIyw5RSym8mfpRW8WRS9KmkNcb8AI3oS10eEtnJljih8Isrne6qg8m08 Rs1020cHR4xda4Zsn1OVXqz7odcmyZg3jh5h1WXyWpaunufR7a8AChMDVr7Mr8nX 9LwGj3feBHC65hzQ6LXSvRGQya3K+slzCy+pLg7WSDV8cRuhlBvfIUCQgAmsNS5O jvwKRcnKfV8QMfk7jnQLsv6CMyNn1mLv+R2vMprfdKpjbRfSK5x1Bj6fQca5Vz6x ALOlAED/Ys/sr3VmtIr/AijfVMi+Ae4z0WdNiVPjuzBE8C9JG/bq4/iA6ley5A8u G1s3nUhiZmE5gwXRhVzKgXjH21C5tg== -----END CERTIFICATE-----Generated at Sun May 24 17:11:47 2026 by rpki-client