$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa File: 323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa (raw, json) Hash identifier: 7zRPEvjcMpkV1dlCDmuprjX2Z44+IEPq2sMF24KA75M= Subject key identifier: 88:D8:F2:46:A0:FF:74:D2:C4:42:EE:F8:EE:79:E9:77:88:55:27:16 Certificate issuer: /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Certificate serial: 190EE4738F692B7E93FD9A4AF70D616EAB92DAFD Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa Signing time: Thu 21 May 2026 22:41:19 +0000 ROA not before: Thu 21 May 2026 22:36:19 +0000 ROA not after: Thu 20 May 2027 22:41:19 +0000 asID: 268770 IP address blocks: 2804:5a64:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0e:e4:73:8f:69:2b:7e:93:fd:9a:4a:f7:0d:61:6e:ab:92:da:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Validity Not Before: May 21 22:36:19 2026 GMT Not After : May 20 22:41:19 2027 GMT Subject: CN=88D8F246A0FF74D2C442EEF8EE79E97788552716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:e4:5f:65:62:ff:0c:9c:f4:e7:be:e9:f4: 87:19:31:1e:c3:58:c7:8e:f3:c1:66:d4:ff:fd:fc: 2e:41:b1:3b:39:51:f8:05:21:16:62:71:dc:c4:08: d5:fe:ae:8c:38:a1:14:75:6e:d4:18:19:da:e9:d2: c3:79:01:64:51:df:20:05:31:03:fd:d1:64:a8:3b: 29:b6:b9:98:15:af:b7:b0:16:e8:3b:8c:2d:ef:1e: 55:5f:26:49:2a:ce:9b:15:7e:1c:cc:4b:be:f8:39: 71:38:f2:e6:f4:2e:51:86:4d:96:a5:12:5d:46:f3: 2a:26:41:df:4a:dd:44:7f:5b:b5:8c:99:c9:49:1c: 55:1c:67:55:f3:ac:a3:48:db:69:34:e9:f8:21:9f: 3b:b5:2c:0f:5e:29:02:c3:b9:3f:0d:ca:a3:ba:9a: 02:29:74:d7:bb:86:10:65:3f:89:fc:f1:7d:e6:e3: 91:b5:5d:1f:96:ac:75:8a:f7:91:af:d4:24:f4:bd: 83:69:5e:bb:46:29:03:00:93:48:65:60:da:5c:3b: 61:a7:33:67:d0:b2:73:d0:af:2a:fa:77:b3:7e:09: e3:ca:1d:36:01:bd:b0:e9:22:93:31:bc:f0:6e:72: e3:cc:85:0a:f3:d1:8a:7f:19:5b:b5:f4:eb:d0:f9: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:F2:46:A0:FF:74:D2:C4:42:EE:F8:EE:79:E9:77:88:55:27:16 X509v3 Authority Key Identifier: keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a383030303a3a2f33342d3334203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:8000::/34 Signature Algorithm: sha256WithRSAEncryption 1e:d9:dd:d4:d9:7a:d5:5b:0d:e0:72:ef:2b:57:4e:ea:15:2a: d1:65:94:a2:56:ae:02:57:fa:31:83:c8:8d:cc:a6:08:96:b6: 0c:25:1f:9c:1e:cf:97:e6:2a:e8:bd:ae:ee:db:c6:24:eb:28: 3c:e3:c9:1e:4b:39:2c:d7:46:aa:15:93:f6:62:47:a6:27:a9: 62:7b:05:12:05:50:4b:72:c0:81:8c:5b:d6:3b:e5:5c:94:8d: 7b:f9:46:8b:15:b7:a2:33:e1:12:9c:4f:1d:2e:93:ca:f1:16: 26:79:21:a5:b5:c8:27:00:36:9d:38:5b:17:cf:bc:40:f4:1f: 28:e0:d6:96:58:64:2d:d7:06:1b:90:95:ab:11:bf:55:d9:c3: 6f:0a:0c:cc:38:9d:41:01:6a:7c:58:7d:05:a1:bd:cf:ef:92: df:f9:46:a1:e0:bc:78:d4:d6:13:53:f5:60:40:86:4d:9a:0e: c5:fd:e1:08:3a:09:55:65:9b:ac:0c:8e:da:c6:e2:2f:ed:2f: 51:aa:75:97:9b:db:84:08:d3:2d:9e:b3:a8:e1:44:16:4c:31: 60:00:f3:0d:6e:f9:67:90:42:9d:e8:5c:a9:fe:66:15:9b:06: 2f:67:b7:04:aa:5f:9d:09:7c:fc:c2:01:1a:33:fd:63:be:29: 6e:81:64:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGQ7kc49pK36T/ZpK9w1hbquS2v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjc0M0VDN0U0RjA4RUJBOEMyMDE2NjhEMjM3NEM3 MzdGOERBNzAeFw0yNjA1MjEyMjM2MTlaFw0yNzA1MjAyMjQxMTlaMDMxMTAvBgNV BAMTKDg4RDhGMjQ2QTBGRjc0RDJDNDQyRUVGOEVFNzlFOTc3ODg1NTI3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/+RfZWL/DJz0577p9IcZMR7D WMeO88Fm1P/9/C5BsTs5UfgFIRZicdzECNX+row4oRR1btQYGdrp0sN5AWRR3yAF MQP90WSoOym2uZgVr7ewFug7jC3vHlVfJkkqzpsVfhzMS774OXE48ub0LlGGTZal El1G8yomQd9K3UR/W7WMmclJHFUcZ1XzrKNI22k06fghnzu1LA9eKQLDuT8NyqO6 mgIpdNe7hhBlP4n88X3m45G1XR+WrHWK95Gv1CT0vYNpXrtGKQMAk0hlYNpcO2Gn M2fQsnPQryr6d7N+CePKHTYBvbDpIpMxvPBucuPMhQrz0Yp/GVu19OvQ+SUhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUiNjyRqD/dNLEQu747nnpd4hVJxYwHwYDVR0j BBgwFoAUqjt0Psfk8I66jCAWaNI3THN/jacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC9BQTNCNzQzRUM3RTRGMDhFQkE4QzIwMTY2OEQyMzc0QzczN0Y4REE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I3NDNFQzdFNEYwOEVC QThDMjAxNjY4RDIzNzRDNzM3RjhEQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWmSAMA0GCSqGSIb3DQEBCwUA A4IBAQAe2d3U2XrVWw3gcu8rV07qFSrRZZSiVq4CV/oxg8iNzKYIlrYMJR+cHs+X 5irova7u28Yk6yg848keSzks10aqFZP2YkemJ6liewUSBVBLcsCBjFvWO+VclI17 +UaLFbeiM+ESnE8dLpPK8RYmeSGltcgnADadOFsXz7xA9B8o4NaWWGQt1wYbkJWr Eb9V2cNvCgzMOJ1BAWp8WH0Fob3P75Lf+Uah4Lx41NYTU/VgQIZNmg7F/eEIOglV ZZusDI7axuIv7S9RqnWXm9uECNMtnrOo4UQWTDFgAPMNbvlnkEKd6Fyp/mYVmwYv Z7cEql+dCXz8wgEaM/1jvilugWRO -----END CERTIFICATE-----Generated at Sun May 24 20:16:10 2026 by rpki-client