$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a343030303a3a2f33362d3336203d3e20323638373730.roa File: 323830343a356136343a343030303a3a2f33362d3336203d3e20323638373730.roa (raw, json) Hash identifier: IHa/xVKDV/lxJB6rcPzEyoevmIGTRZUlTJvFidSDsxw= Subject key identifier: C8:7D:6F:13:8F:DB:7D:EB:2C:EC:57:59:54:E7:75:57:6D:A1:BD:05 Certificate issuer: /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Certificate serial: 0FBD39843789831C3989BE477E4FD2F5BC78E39D Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a343030303a3a2f33362d3336203d3e20323638373730.roa Signing time: Thu 21 May 2026 22:41:16 +0000 ROA not before: Thu 21 May 2026 22:36:16 +0000 ROA not after: Thu 20 May 2027 22:41:16 +0000 asID: 268770 IP address blocks: 2804:5a64:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bd:39:84:37:89:83:1c:39:89:be:47:7e:4f:d2:f5:bc:78:e3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Validity Not Before: May 21 22:36:16 2026 GMT Not After : May 20 22:41:16 2027 GMT Subject: CN=C87D6F138FDB7DEB2CEC575954E775576DA1BD05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:8f:3e:20:d3:6d:a0:8c:0a:98:7d:63:39: 5f:f6:c5:f5:0b:9a:23:ae:38:ff:67:e7:11:42:4a: 23:0c:82:fa:9b:6c:0b:10:db:b1:59:c0:2c:4b:71: 26:5c:e3:d8:a6:37:63:d8:9a:05:3c:a0:54:b0:1f: f8:14:0f:32:65:b1:41:4e:b2:5a:d4:cf:e8:51:a5: 6c:f1:d5:73:dd:8c:6c:fb:39:50:0b:16:a6:cb:b9: 43:8c:4d:d8:2c:0e:11:8f:d9:06:ce:e0:fe:6c:60: 9f:a9:9b:f8:5c:db:b9:1f:99:0f:ad:d4:8b:ce:4a: c9:ab:0b:36:ed:0c:84:1c:d8:2c:eb:3c:f4:89:27: 0d:6d:88:3f:bd:e8:d4:c0:70:60:05:d0:19:4e:c3: c6:48:d4:09:28:5b:22:6b:fa:f1:b2:a2:c6:ef:8c: db:b6:b1:5c:3a:91:44:64:d8:34:80:ad:f9:c3:ea: 6b:89:d0:a0:88:a8:09:2f:aa:fe:f6:6e:0e:16:9f: fa:06:46:5b:88:72:ae:1e:e2:12:27:57:55:6a:2b: a4:c9:e5:af:c3:a9:4d:81:13:4e:02:e1:26:4e:38: eb:96:32:c5:b4:0b:ef:2a:f2:0e:7b:8c:99:65:c2: 7e:88:02:55:83:ae:44:f0:bb:3c:4d:7a:8f:79:f5: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:6F:13:8F:DB:7D:EB:2C:EC:57:59:54:E7:75:57:6D:A1:BD:05 X509v3 Authority Key Identifier: keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a343030303a3a2f33362d3336203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:4000::/36 Signature Algorithm: sha256WithRSAEncryption 3e:55:12:e0:b1:de:b7:fd:41:da:40:dc:6c:b7:de:22:bf:aa: 51:d5:fa:a2:a8:33:0b:d3:4b:fc:b1:1c:72:2f:45:1f:ee:b4: 24:30:de:d1:39:51:a2:8c:d6:6f:de:35:27:91:19:bf:69:40: 3d:ed:a1:9c:cf:b8:f7:78:fd:91:e8:6e:c2:3b:27:2e:b8:61: ff:91:44:02:b2:b9:0f:90:07:07:6a:48:d8:72:e9:6e:e4:2f: 2c:82:6d:ca:09:48:f4:7e:3f:a3:cb:ce:65:6f:a6:a6:01:e6: ef:37:00:77:21:88:52:7a:13:80:ce:ae:22:9e:7f:fe:f2:ab: 49:78:3b:58:43:82:fc:0c:5b:b3:4a:5c:a8:42:e8:a1:d3:5c: e8:5b:cf:ab:5a:1b:6a:12:e2:5a:02:b4:5f:0d:c1:5e:fd:cb: d9:12:71:4e:07:f8:8e:6b:f6:5f:49:d4:50:01:21:8d:de:2c: ed:3a:9a:9c:83:78:3a:17:1c:5b:98:fe:fe:b9:f9:36:bb:2a: 52:ef:bb:91:87:72:62:40:32:c7:40:1a:01:38:9f:65:e5:7a: 29:b6:20:98:3b:fb:7f:6a:98:ac:91:5c:e2:54:15:dd:c8:5a: 3d:c5:2d:06:46:cf:83:b2:6a:6f:8e:46:62:e6:2b:b2:16:e0: 0e:79:5a:75 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUD705hDeJgxw5ib5Hfk/S9bx4450wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjc0M0VDN0U0RjA4RUJBOEMyMDE2NjhEMjM3NEM3 MzdGOERBNzAeFw0yNjA1MjEyMjM2MTZaFw0yNzA1MjAyMjQxMTZaMDMxMTAvBgNV BAMTKEM4N0Q2RjEzOEZEQjdERUIyQ0VDNTc1OTU0RTc3NTU3NkRBMUJEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d48+INNtoIwKmH1jOV/2xfUL miOuOP9n5xFCSiMMgvqbbAsQ27FZwCxLcSZc49imN2PYmgU8oFSwH/gUDzJlsUFO slrUz+hRpWzx1XPdjGz7OVALFqbLuUOMTdgsDhGP2QbO4P5sYJ+pm/hc27kfmQ+t 1IvOSsmrCzbtDIQc2CzrPPSJJw1tiD+96NTAcGAF0BlOw8ZI1AkoWyJr+vGyosbv jNu2sVw6kURk2DSArfnD6muJ0KCIqAkvqv72bg4Wn/oGRluIcq4e4hInV1VqK6TJ 5a/DqU2BE04C4SZOOOuWMsW0C+8q8g57jJllwn6IAlWDrkTwuzxNeo959cEzAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUyH1vE4/bfess7FdZVOd1V22hvQUwHwYDVR0j BBgwFoAUqjt0Psfk8I66jCAWaNI3THN/jacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC9BQTNCNzQzRUM3RTRGMDhFQkE4QzIwMTY2OEQyMzc0QzczN0Y4REE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I3NDNFQzdFNEYwOEVC QThDMjAxNjY4RDIzNzRDNzM3RjhEQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWmRAMA0GCSqGSIb3DQEBCwUA A4IBAQA+VRLgsd63/UHaQNxst94iv6pR1fqiqDML00v8sRxyL0Uf7rQkMN7ROVGi jNZv3jUnkRm/aUA97aGcz7j3eP2R6G7COycuuGH/kUQCsrkPkAcHakjYculu5C8s gm3KCUj0fj+jy85lb6amAebvNwB3IYhSehOAzq4inn/+8qtJeDtYQ4L8DFuzSlyo Quih01zoW8+rWhtqEuJaArRfDcFe/cvZEnFOB/iOa/ZfSdRQASGN3iztOpqcg3g6 FxxbmP7+ufk2uypS77uRh3JiQDLHQBoBOJ9l5XoptiCYO/t/apiskVziVBXdyFo9 xS0GRs+DsmpvjkZi5iuyFuAOeVp1 -----END CERTIFICATE-----Generated at Sun May 24 20:16:09 2026 by rpki-client