$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a333030303a3a2f33362d3336203d3e20323638373730.roa File: 323830343a356136343a333030303a3a2f33362d3336203d3e20323638373730.roa (raw, json) Hash identifier: CUpm5WByIzlhEdLCxzbLstJLIfXIshjkk/vT6OYyonM= Subject key identifier: 96:56:C2:24:6F:1D:D5:54:B7:92:F6:8D:4C:2D:CE:E0:DC:A1:FE:DA Certificate issuer: /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Certificate serial: 48D7B81D819B40E52CD30DC496F6D051E8EC359F Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a333030303a3a2f33362d3336203d3e20323638373730.roa Signing time: Thu 21 May 2026 22:41:21 +0000 ROA not before: Thu 21 May 2026 22:36:21 +0000 ROA not after: Thu 20 May 2027 22:41:21 +0000 asID: 268770 IP address blocks: 2804:5a64:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d7:b8:1d:81:9b:40:e5:2c:d3:0d:c4:96:f6:d0:51:e8:ec:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Validity Not Before: May 21 22:36:21 2026 GMT Not After : May 20 22:41:21 2027 GMT Subject: CN=9656C2246F1DD554B792F68D4C2DCEE0DCA1FEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:63:b7:5d:7a:dd:71:26:d0:ab:a2:38:c1: 25:d3:58:df:cf:35:99:8c:e4:9c:f0:48:1a:66:c3: 0a:b4:69:43:ee:5e:58:95:e6:ef:78:21:da:a0:7a: 88:02:03:dc:4a:52:49:95:4a:39:2d:15:ba:ac:63: 4c:d3:d9:ba:ce:7a:cc:e2:a1:da:48:2e:1c:90:ee: 91:7c:c6:4d:ad:c9:cd:86:2c:b6:6b:d5:7b:b6:d4: f8:85:6e:2e:c0:e2:4e:06:7a:5f:7a:27:b2:c6:c9: df:7d:40:a8:2a:30:be:aa:fa:bf:21:2f:70:d5:98: 4a:a7:1d:5e:33:ad:50:ef:e5:f4:68:d5:9c:eb:e9: d3:9a:6c:17:16:08:da:85:d8:fb:2f:d3:4b:e2:2e: d4:cd:e5:11:6c:de:18:40:e9:05:e3:f3:dd:62:9d: b8:35:a1:66:53:d3:4a:64:cb:53:c6:8e:ed:d9:68: 02:c5:b8:64:42:4f:7d:14:d2:3b:2f:a6:3b:ad:db: ea:ce:44:7f:2b:0e:04:10:f0:26:eb:57:e4:b3:b8: b9:38:28:3d:23:86:a6:33:ee:e3:ef:f5:d6:12:ee: b8:c3:66:83:ab:b7:c8:16:e1:3c:68:cd:06:74:75: 22:09:5e:00:09:ee:ee:95:14:25:07:c2:2e:e5:43: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:56:C2:24:6F:1D:D5:54:B7:92:F6:8D:4C:2D:CE:E0:DC:A1:FE:DA X509v3 Authority Key Identifier: keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a333030303a3a2f33362d3336203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:3000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:e5:a5:f2:37:47:e4:b5:94:4e:f9:68:1d:ab:6e:9b:6f:cb: 5a:bb:1b:ef:6e:fe:9a:1a:76:ef:fb:ce:5f:6d:02:63:cd:1f: 7e:dc:ea:5f:36:c5:2e:77:c9:93:48:1a:db:3b:76:c4:72:72: bf:00:a7:99:a6:38:cf:c4:b0:59:be:5f:b9:a0:44:db:27:e3: ad:7c:59:da:86:57:d4:05:1e:dc:03:15:a4:a9:7e:89:92:dc: a6:4b:ec:59:3f:5d:ae:8f:61:a4:88:32:71:e5:4d:b3:34:bf: 25:d9:dc:93:d4:48:0e:ed:aa:5a:dd:61:f1:98:2f:6b:30:ab: d8:92:ed:86:bc:15:54:04:81:f5:71:b2:7e:4b:e0:52:23:af: 09:33:3d:9a:26:4e:40:5b:f9:32:55:c7:e3:09:38:f8:f7:2e: f8:2d:10:cc:2d:c2:47:6f:03:85:5b:2a:35:7e:1b:f7:79:e9: 2d:bb:a9:ad:99:d2:64:b3:e9:c9:ab:78:98:6b:ab:dc:c0:57: 80:c5:57:f5:87:b2:87:a3:e6:fe:ad:6c:47:c4:b1:03:0f:88: 59:e6:81:34:08:42:ad:dd:64:c6:4b:80:32:fa:dc:18:7c:10: 27:08:76:43:c6:7b:dd:9b:47:3c:42:18:d5:4f:1e:8f:b4:be: 81:b3:17:02 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUSNe4HYGbQOUs0w3ElvbQUejsNZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjc0M0VDN0U0RjA4RUJBOEMyMDE2NjhEMjM3NEM3 MzdGOERBNzAeFw0yNjA1MjEyMjM2MjFaFw0yNzA1MjAyMjQxMjFaMDMxMTAvBgNV BAMTKDk2NTZDMjI0NkYxREQ1NTRCNzkyRjY4RDRDMkRDRUUwRENBMUZFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1mO3XXrdcSbQq6I4wSXTWN/P NZmM5JzwSBpmwwq0aUPuXliV5u94IdqgeogCA9xKUkmVSjktFbqsY0zT2brOeszi odpILhyQ7pF8xk2tyc2GLLZr1Xu21PiFbi7A4k4Gel96J7LGyd99QKgqML6q+r8h L3DVmEqnHV4zrVDv5fRo1Zzr6dOabBcWCNqF2Psv00viLtTN5RFs3hhA6QXj891i nbg1oWZT00pky1PGju3ZaALFuGRCT30U0jsvpjut2+rORH8rDgQQ8CbrV+SzuLk4 KD0jhqYz7uPv9dYS7rjDZoOrt8gW4TxozQZ0dSIJXgAJ7u6VFCUHwi7lQ55bAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUllbCJG8d1VS3kvaNTC3O4Nyh/towHwYDVR0j BBgwFoAUqjt0Psfk8I66jCAWaNI3THN/jacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC9BQTNCNzQzRUM3RTRGMDhFQkE4QzIwMTY2OEQyMzc0QzczN0Y4REE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I3NDNFQzdFNEYwOEVC QThDMjAxNjY4RDIzNzRDNzM3RjhEQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWmQwMA0GCSqGSIb3DQEBCwUA A4IBAQAf5aXyN0fktZRO+Wgdq26bb8tauxvvbv6aGnbv+85fbQJjzR9+3OpfNsUu d8mTSBrbO3bEcnK/AKeZpjjPxLBZvl+5oETbJ+OtfFnahlfUBR7cAxWkqX6Jktym S+xZP12uj2GkiDJx5U2zNL8l2dyT1EgO7apa3WHxmC9rMKvYku2GvBVUBIH1cbJ+ S+BSI68JMz2aJk5AW/kyVcfjCTj49y74LRDMLcJHbwOFWyo1fhv3eektu6mtmdJk s+nJq3iYa6vcwFeAxVf1h7KHo+b+rWxHxLEDD4hZ5oE0CEKt3WTGS4Ay+twYfBAn CHZDxnvdm0c8QhjVTx6PtL6BsxcC -----END CERTIFICATE-----Generated at Sun May 24 20:16:08 2026 by rpki-client