$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa File: 323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa (raw, json) Hash identifier: GdrP/JbKasisgTtneN+FTbm1jRjfJLh0Hb5Jz2sA/mo= Subject key identifier: 52:0F:5E:EE:80:4F:61:C1:7A:56:7B:34:E4:88:95:AE:5B:9F:6D:71 Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Certificate serial: 21176F2E7F93345D127AB385EEC79F31A0A06A49 Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa Signing time: Mon 18 May 2026 15:08:01 +0000 ROA not before: Mon 18 May 2026 15:03:01 +0000 ROA not after: Mon 17 May 2027 15:08:01 +0000 asID: 262729 IP address blocks: 2804:16d8:5000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:6f:2e:7f:93:34:5d:12:7a:b3:85:ee:c7:9f:31:a0:a0:6a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017 Validity Not Before: May 18 15:03:01 2026 GMT Not After : May 17 15:08:01 2027 GMT Subject: CN=520F5EEE804F61C17A567B34E48895AE5B9F6D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:2a:13:f4:c2:d8:a3:4b:c1:10:6b:df:1b: fa:2f:d7:d4:ee:e6:b9:62:8c:50:f1:d7:5b:23:b0: 9f:9c:30:51:d8:f4:ef:59:37:a8:90:af:82:14:97: 06:47:f9:e7:ee:08:75:c5:35:46:e8:5c:15:56:5c: e1:15:45:8b:03:b9:59:35:27:fa:cb:50:66:79:50: ca:35:6e:fb:b2:4f:98:b0:be:b4:ae:0e:82:81:80: c7:38:e5:79:ca:ea:e3:58:7b:86:db:c5:2a:c8:5a: 5e:0e:c8:f4:5b:26:77:17:bd:a2:c6:05:e2:e7:bb: d5:65:f1:4f:64:55:8b:65:7a:98:ce:fc:a6:09:dd: d4:5e:70:c5:8a:b8:b1:12:70:62:7d:93:84:3f:f9: 22:57:4e:ca:07:a9:bf:f3:63:7c:17:39:30:75:03: 70:1d:7f:41:c2:42:a4:73:89:be:23:22:3e:74:c8: f4:d3:8f:e2:fe:fe:db:51:7b:de:db:63:53:3c:7f: fa:02:8c:df:a7:44:46:aa:e0:d4:00:99:90:1a:17: c2:3f:a8:ff:98:38:40:47:10:be:6b:95:29:99:58: 32:58:97:68:43:e4:d6:da:a0:aa:f4:18:7a:e9:d9: 32:b8:03:ec:75:90:b7:5a:be:68:86:57:aa:cf:ad: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0F:5E:EE:80:4F:61:C1:7A:56:7B:34:E4:88:95:AE:5B:9F:6D:71 X509v3 Authority Key Identifier: keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a353030303a3a2f33372d3337203d3e20323632373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:16d8:5000::/37 Signature Algorithm: sha256WithRSAEncryption 9b:4b:1b:e6:63:12:62:d0:6a:bd:e3:9d:d5:8c:bb:3d:03:78: 9d:3d:5b:4b:cd:4a:5e:7e:b9:e1:53:18:9a:ed:53:55:b9:44: 0e:7f:4d:a7:a6:54:4d:97:9a:03:e1:a7:68:98:ed:70:30:c9: 49:b7:38:de:ae:e7:35:c0:1c:a9:3f:c0:86:c9:09:89:d4:e7: 2d:27:a4:19:cf:47:43:12:89:0a:fa:fd:24:e1:c1:b5:be:e6: fb:27:72:ed:f5:df:7d:3f:2e:50:6a:6a:39:3b:66:ef:f8:6c: ed:b4:30:d7:5e:05:90:94:66:0c:b7:21:73:39:98:a5:0d:48: ac:20:f9:2a:c3:2b:34:c9:91:ee:d3:ca:c0:ea:0f:ad:3e:3e: c0:23:5d:88:36:78:6b:da:53:5e:df:0d:6f:67:ab:12:32:31: f8:0d:1f:6c:9f:1f:2d:cc:e7:77:68:0f:02:0b:55:9c:bd:2f: 03:4e:b6:24:cf:25:70:1b:79:ec:e5:36:60:a5:08:ff:87:7a: 93:3f:09:87:91:5c:c4:44:a7:94:42:78:5c:07:f6:9f:7e:e6: 0f:dc:ab:c6:a7:50:50:37:74:a4:66:ae:8a:fd:7a:08:b4:8e: 91:b4:29:c6:40:16:34:98:58:4c:4d:94:0b:6a:a2:f4:9c:63: 7e:b4:75:97 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUIRdvLn+TNF0SerOF7sefMaCgakkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz MUREQjAxNzAeFw0yNjA1MTgxNTAzMDFaFw0yNzA1MTcxNTA4MDFaMDMxMTAvBgNV BAMTKDUyMEY1RUVFODA0RjYxQzE3QTU2N0IzNEU0ODg5NUFFNUI5RjZENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAyoT9MLYo0vBEGvfG/ov19Tu 5rlijFDx11sjsJ+cMFHY9O9ZN6iQr4IUlwZH+efuCHXFNUboXBVWXOEVRYsDuVk1 J/rLUGZ5UMo1bvuyT5iwvrSuDoKBgMc45XnK6uNYe4bbxSrIWl4OyPRbJncXvaLG BeLnu9Vl8U9kVYtlepjO/KYJ3dRecMWKuLEScGJ9k4Q/+SJXTsoHqb/zY3wXOTB1 A3Adf0HCQqRzib4jIj50yPTTj+L+/ttRe97bY1M8f/oCjN+nREaq4NQAmZAaF8I/ qP+YOEBHEL5rlSmZWDJYl2hD5NbaoKr0GHrp2TK4A+x1kLdavmiGV6rPrbPfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUUg9e7oBPYcF6Vns05IiVrlufbXEwHwYDVR0j BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3 NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv MzIzODMwMzQzYTMxMzY2NDM4M2EzNTMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEFthQMA0GCSqGSIb3DQEBCwUA A4IBAQCbSxvmYxJi0Gq9453VjLs9A3idPVtLzUpefrnhUxia7VNVuUQOf02nplRN l5oD4adomO1wMMlJtzjeruc1wBypP8CGyQmJ1OctJ6QZz0dDEokK+v0k4cG1vub7 J3Lt9d99Py5Qamo5O2bv+GzttDDXXgWQlGYMtyFzOZilDUisIPkqwys0yZHu08rA 6g+tPj7AI12INnhr2lNe3w1vZ6sSMjH4DR9snx8tzOd3aA8CC1WcvS8DTrYkzyVw G3ns5TZgpQj/h3qTPwmHkVzERKeUQnhcB/affuYP3KvGp1BQN3SkZq6K/XoItI6R tCnGQBY0mFhMTZQLaqL0nGN+tHWX -----END CERTIFICATE-----Generated at Sun May 24 17:11:23 2026 by rpki-client