$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a353030303a3a2f33362d3336203d3e20323638373730.roa File: 323830343a356136343a353030303a3a2f33362d3336203d3e20323638373730.roa (raw, json) Hash identifier: +nlha3ETbQNFUYUIrJ/hZdoz8+663ZcffxmeDll0C8U= Subject key identifier: F9:AD:1C:97:FE:90:E4:0E:BC:C7:C9:76:B5:9D:87:33:B6:0D:26:0E Certificate issuer: /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Certificate serial: 6EC31D3A0B35043F7BBB5812550EC54F513367E9 Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a353030303a3a2f33362d3336203d3e20323638373730.roa Signing time: Thu 21 May 2026 22:41:18 +0000 ROA not before: Thu 21 May 2026 22:36:18 +0000 ROA not after: Thu 20 May 2027 22:41:18 +0000 asID: 268770 IP address blocks: 2804:5a64:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c3:1d:3a:0b:35:04:3f:7b:bb:58:12:55:0e:c5:4f:51:33:67:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Validity Not Before: May 21 22:36:18 2026 GMT Not After : May 20 22:41:18 2027 GMT Subject: CN=F9AD1C97FE90E40EBCC7C976B59D8733B60D260E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:21:ae:14:33:f5:6b:e8:38:9c:bd:7f:93: 52:00:e8:3b:fc:bd:9e:00:b6:c9:ad:63:01:ca:64: a8:47:f8:9f:b9:d7:e2:24:ba:17:36:12:a6:81:78: 76:19:f1:54:9a:8e:e9:72:09:73:5e:16:b3:f5:94: c3:50:5e:aa:10:fb:74:87:d4:e6:79:b5:4a:4d:88: 46:22:7b:80:2a:40:a0:ce:e8:18:0a:37:13:11:a4: e0:9b:0d:cd:97:5c:02:18:b6:79:3e:5d:d9:23:9d: f3:03:44:ac:93:77:33:d0:60:ff:cc:b9:ef:d0:8a: 04:43:e4:2a:cb:e9:b5:ac:94:23:17:f6:dd:c7:64: b5:db:4a:1b:9a:57:9d:45:d2:84:3d:ef:09:84:44: 07:f1:24:4e:13:d2:92:16:b2:bd:b6:8b:19:f8:7a: 69:fa:0d:65:5b:27:55:19:f8:2f:f7:16:d5:2e:94: 85:19:aa:fe:52:af:ee:2f:3a:49:ce:65:53:82:ee: d1:b6:33:86:c6:ef:c6:8b:3a:a8:86:4a:83:62:f9: 9c:60:6b:eb:4c:dd:86:57:ea:29:f8:18:4d:5e:cb: 63:e9:c5:78:24:61:93:d1:45:fb:4f:fd:1d:13:16: 5d:a6:4d:c6:db:bb:da:9d:8c:38:d8:d5:9f:2a:10: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AD:1C:97:FE:90:E4:0E:BC:C7:C9:76:B5:9D:87:33:B6:0D:26:0E X509v3 Authority Key Identifier: keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a353030303a3a2f33362d3336203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:5000::/36 Signature Algorithm: sha256WithRSAEncryption 36:4a:1e:82:19:20:46:20:d4:46:0d:8d:d3:26:fa:69:2a:3d: a9:d2:0c:f5:29:72:d2:0d:c3:d3:d2:35:b7:b8:9c:ea:7f:4f: a7:6f:73:ce:9a:1b:74:4d:23:0e:8a:9c:73:ad:7d:02:36:1f: d4:93:43:e3:45:8c:fd:c1:fa:4e:bb:10:f8:6f:a4:20:d1:71: 42:71:ed:ab:36:50:1d:0b:75:95:d0:be:24:ac:f8:53:6a:bd: bc:35:71:14:b9:70:d0:90:9d:6a:30:3f:dc:d6:62:94:d4:9e: 87:5f:a3:6e:a0:c3:2b:02:e5:92:03:a6:2e:12:2f:93:e7:91: 7b:bf:43:99:f6:ef:23:c2:fa:07:bf:c2:bd:05:d3:44:06:c7: e9:b6:4e:a9:89:d0:23:5a:ba:fa:d1:2f:f2:10:23:03:39:63: 0b:2f:d4:3f:48:4a:98:af:c0:cf:98:9c:3a:7d:2f:3b:60:5d: 39:33:69:94:4e:75:b6:19:37:ef:a0:c1:95:cd:08:78:63:fd: 0b:98:4b:b2:46:06:c8:47:d3:92:2f:9f:e1:fc:41:a2:3f:a9: ca:e7:05:b6:a4:bf:26:2f:51:61:56:59:53:42:ed:d0:ad:c0: 5e:48:aa:e2:70:fc:f7:7f:60:e5:3e:c7:2b:3c:dd:b9:77:62: 69:3b:4d:92 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUbsMdOgs1BD97u1gSVQ7FT1EzZ+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjc0M0VDN0U0RjA4RUJBOEMyMDE2NjhEMjM3NEM3 MzdGOERBNzAeFw0yNjA1MjEyMjM2MThaFw0yNzA1MjAyMjQxMThaMDMxMTAvBgNV BAMTKEY5QUQxQzk3RkU5MEU0MEVCQ0M3Qzk3NkI1OUQ4NzMzQjYwRDI2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjyGuFDP1a+g4nL1/k1IA6Dv8 vZ4AtsmtYwHKZKhH+J+51+Ikuhc2EqaBeHYZ8VSajulyCXNeFrP1lMNQXqoQ+3SH 1OZ5tUpNiEYie4AqQKDO6BgKNxMRpOCbDc2XXAIYtnk+XdkjnfMDRKyTdzPQYP/M ue/QigRD5CrL6bWslCMX9t3HZLXbShuaV51F0oQ97wmERAfxJE4T0pIWsr22ixn4 emn6DWVbJ1UZ+C/3FtUulIUZqv5Sr+4vOknOZVOC7tG2M4bG78aLOqiGSoNi+Zxg a+tM3YZX6in4GE1ey2PpxXgkYZPRRftP/R0TFl2mTcbbu9qdjDjY1Z8qEJy7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU+a0cl/6Q5A68x8l2tZ2HM7YNJg4wHwYDVR0j BBgwFoAUqjt0Psfk8I66jCAWaNI3THN/jacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC9BQTNCNzQzRUM3RTRGMDhFQkE4QzIwMTY2OEQyMzc0QzczN0Y4REE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I3NDNFQzdFNEYwOEVC QThDMjAxNjY4RDIzNzRDNzM3RjhEQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWmRQMA0GCSqGSIb3DQEBCwUA A4IBAQA2Sh6CGSBGINRGDY3TJvppKj2p0gz1KXLSDcPT0jW3uJzqf0+nb3POmht0 TSMOipxzrX0CNh/Uk0PjRYz9wfpOuxD4b6Qg0XFCce2rNlAdC3WV0L4krPhTar28 NXEUuXDQkJ1qMD/c1mKU1J6HX6NuoMMrAuWSA6YuEi+T55F7v0OZ9u8jwvoHv8K9 BdNEBsfptk6pidAjWrr60S/yECMDOWMLL9Q/SEqYr8DPmJw6fS87YF05M2mUTnW2 GTfvoMGVzQh4Y/0LmEuyRgbIR9OSL5/h/EGiP6nK5wW2pL8mL1FhVllTQu3QrcBe SKricPz3f2DlPscrPN25d2JpO02S -----END CERTIFICATE-----Generated at Sun May 24 20:16:10 2026 by rpki-client