$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a633030303a3a2f33342d3334203d3e20323638373730.roa File: 323830343a356136343a633030303a3a2f33342d3334203d3e20323638373730.roa (raw, json) Hash identifier: FE4dJz2AApSSpXogJSG0YMc0zmCn8/f09IMuSCOEnOE= Subject key identifier: 65:E3:AF:A1:DA:A0:08:8C:DC:80:A4:DC:D3:2A:39:65:A3:82:7B:B0 Certificate issuer: /CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Certificate serial: 32A580F762E6DA0AC91B9ED89E9BAB40C6A37B6B Authority key identifier: AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a633030303a3a2f33342d3334203d3e20323638373730.roa Signing time: Thu 21 May 2026 22:41:17 +0000 ROA not before: Thu 21 May 2026 22:36:17 +0000 ROA not after: Thu 20 May 2027 22:41:17 +0000 asID: 268770 IP address blocks: 2804:5a64:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a5:80:f7:62:e6:da:0a:c9:1b:9e:d8:9e:9b:ab:40:c6:a3:7b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B743EC7E4F08EBA8C201668D2374C737F8DA7 Validity Not Before: May 21 22:36:17 2026 GMT Not After : May 20 22:41:17 2027 GMT Subject: CN=65E3AFA1DAA0088CDC80A4DCD32A3965A3827BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:a9:f5:17:80:65:cd:56:d2:8e:49:38:45: 52:c9:13:7f:c0:c5:50:04:44:b1:0b:f1:dd:9a:ea: a4:5f:56:0b:b9:e9:a2:8c:de:9b:d9:8e:f3:ea:42: 69:98:fe:d3:08:cb:b0:a6:be:85:75:c4:4d:6d:99: 3e:b4:49:cf:9d:5f:c7:75:00:ad:cb:0a:3c:a1:fe: 30:af:31:6e:11:ce:3b:60:ca:dc:6f:5c:fb:d3:02: b9:66:4a:2e:03:01:50:a4:d0:3d:19:0b:8f:35:cb: 66:b4:90:77:78:96:54:94:da:20:2b:35:e2:03:b8: cd:52:d4:73:f9:2f:c9:fe:f3:2a:58:f1:4b:d4:c1: 3c:09:54:84:66:06:17:43:de:74:0d:bb:57:5d:46: cd:5e:aa:19:66:5d:3c:9a:3f:72:ff:03:c1:30:4e: ca:8c:b9:7d:c4:51:88:b8:a0:d9:cb:d2:46:ad:31: fc:a3:df:1e:6a:b8:49:86:06:d4:5f:f9:ba:a1:91: a9:71:9a:49:af:5f:bd:57:98:9e:93:73:be:3a:da: b7:39:18:b8:35:3f:f4:8d:ad:d5:15:31:98:18:de: 3c:f1:4d:b5:fa:a7:c1:82:5d:ca:4b:19:8c:61:4c: 76:f4:18:8d:82:7f:3b:d9:b6:dc:7f:c6:82:eb:55: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:AF:A1:DA:A0:08:8C:DC:80:A4:DC:D3:2A:39:65:A3:82:7B:B0 X509v3 Authority Key Identifier: keyid:AA:3B:74:3E:C7:E4:F0:8E:BA:8C:20:16:68:D2:37:4C:73:7F:8D:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B743EC7E4F08EBA8C201668D2374C737F8DA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/323830343a356136343a633030303a3a2f33342d3334203d3e20323638373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5a64:c000::/34 Signature Algorithm: sha256WithRSAEncryption 16:15:ac:0a:bd:bc:29:42:5e:bd:be:b8:bf:ca:ba:d4:49:96: 78:b7:25:62:7f:fa:71:2c:86:72:6d:d0:9a:a5:62:b7:1b:db: db:3f:35:63:b7:7f:e9:ab:c9:51:21:25:6c:6e:d0:cc:48:fa: 0f:7a:ef:8b:bf:24:cb:29:cd:28:d3:46:04:d1:01:e5:de:62: c0:5b:ec:8d:d5:00:9e:98:25:61:e3:69:13:38:77:29:87:9f: 73:69:43:7d:db:e9:bd:13:07:c2:f7:dc:cd:3e:33:aa:5f:79: 0c:11:08:86:27:c7:9a:fb:6d:2b:40:85:b7:c3:62:80:8e:6f: aa:27:42:cc:b6:8c:5c:21:34:96:cf:28:bc:74:24:5d:c2:5b: 6c:c2:bd:cc:14:69:c3:5c:3f:7a:28:40:f2:ca:b8:85:61:53: f6:1c:36:f1:d6:9a:69:f4:8c:6f:f8:09:88:52:96:25:af:cf: 7e:20:41:3b:ac:8c:6d:24:9e:03:fd:eb:58:17:7d:64:26:a5: 02:e7:dd:ae:80:9b:df:fc:a9:30:68:0a:1e:32:ac:25:5a:ab: 50:74:c2:dc:7c:a8:c6:9e:4c:66:4e:51:d0:f7:b1:8d:4d:9b: 8b:b0:6e:aa:db:62:88:57:32:7f:a3:52:aa:74:91:84:f2:58: ec:4a:4f:70 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUMqWA92Lm2grJG57YnpurQMaje2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjc0M0VDN0U0RjA4RUJBOEMyMDE2NjhEMjM3NEM3 MzdGOERBNzAeFw0yNjA1MjEyMjM2MTdaFw0yNzA1MjAyMjQxMTdaMDMxMTAvBgNV BAMTKDY1RTNBRkExREFBMDA4OENEQzgwQTREQ0QzMkEzOTY1QTM4MjdCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYKn1F4BlzVbSjkk4RVLJE3/A xVAERLEL8d2a6qRfVgu56aKM3pvZjvPqQmmY/tMIy7CmvoV1xE1tmT60Sc+dX8d1 AK3LCjyh/jCvMW4RzjtgytxvXPvTArlmSi4DAVCk0D0ZC481y2a0kHd4llSU2iAr NeIDuM1S1HP5L8n+8ypY8UvUwTwJVIRmBhdD3nQNu1ddRs1eqhlmXTyaP3L/A8Ew TsqMuX3EUYi4oNnL0katMfyj3x5quEmGBtRf+bqhkalxmkmvX71XmJ6Tc7462rc5 GLg1P/SNrdUVMZgY3jzxTbX6p8GCXcpLGYxhTHb0GI2CfzvZttx/xoLrVbjJAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUZeOvodqgCIzcgKTc0yo5ZaOCe7AwHwYDVR0j BBgwFoAUqjt0Psfk8I66jCAWaNI3THN/jacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3 UmEvMC9BQTNCNzQzRUM3RTRGMDhFQkE4QzIwMTY2OEQyMzc0QzczN0Y4REE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I3NDNFQzdFNEYwOEVC QThDMjAxNjY4RDIzNzRDNzM3RjhEQTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzAv MzIzODMwMzQzYTM1NjEzNjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM3MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWmTAMA0GCSqGSIb3DQEBCwUA A4IBAQAWFawKvbwpQl69vri/yrrUSZZ4tyVif/pxLIZybdCapWK3G9vbPzVjt3/p q8lRISVsbtDMSPoPeu+LvyTLKc0o00YE0QHl3mLAW+yN1QCemCVh42kTOHcph59z aUN92+m9EwfC99zNPjOqX3kMEQiGJ8ea+20rQIW3w2KAjm+qJ0LMtoxcITSWzyi8 dCRdwltswr3MFGnDXD96KEDyyriFYVP2HDbx1ppp9Ixv+AmIUpYlr89+IEE7rIxt JJ4D/etYF31kJqUC592ugJvf/KkwaAoeMqwlWqtQdMLcfKjGnkxmTlHQ97GNTZuL sG6q22KIVzJ/o1KqdJGE8ljsSk9w -----END CERTIFICATE-----Generated at Sun May 24 20:16:08 2026 by rpki-client