$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa File: 323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa (raw, json) Hash identifier: v9Jkc1xn9Yp747NKI7TVxCHljQkv9Ev5zDp0+LyG4eI= Subject key identifier: D1:E6:69:4E:1C:5C:F6:6A:EE:78:FC:16:A2:6D:A7:74:96:82:4B:FB Certificate issuer: /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD Certificate serial: 27D440BA3C5D3033BB4424709767BCB6D4FC93E2 Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa Signing time: Sat 04 Apr 2026 00:30:35 +0000 ROA not before: Sat 04 Apr 2026 00:25:35 +0000 ROA not after: Sat 03 Apr 2027 00:30:35 +0000 asID: 61573 IP address blocks: 2804:25e4:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 10:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d4:40:ba:3c:5d:30:33:bb:44:24:70:97:67:bc:b6:d4:fc:93:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD Validity Not Before: Apr 4 00:25:35 2026 GMT Not After : Apr 3 00:30:35 2027 GMT Subject: CN=D1E6694E1C5CF66AEE78FC16A26DA77496824BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:08:a6:68:c1:bd:e0:7e:8b:9e:af:c5:42: 68:6e:4e:a7:ce:a7:5a:41:c6:b3:e3:35:cf:4e:83: 22:d6:06:d1:25:bf:60:85:67:49:6a:78:5f:5a:76: 7d:b1:aa:c6:f9:cc:df:ef:fb:17:84:cd:ef:ef:32: 51:db:60:52:13:72:86:41:32:03:dc:8b:6c:2f:da: 38:cd:de:17:b5:cc:bb:c9:4e:30:6b:49:72:1c:c7: 23:5c:14:56:bf:23:f3:fc:b3:17:d6:b4:31:9b:20: ee:56:ca:f1:55:0c:97:f0:72:b0:47:01:c5:a5:5e: bb:06:0f:f2:2c:85:f3:e2:4c:31:3c:0b:3c:d3:25: bd:f1:b5:7b:61:e1:b6:25:ad:50:46:35:0a:2b:bd: 0c:12:f3:bc:1d:44:a3:81:fe:ba:93:0b:5c:a7:d9: a4:dd:33:31:dd:35:ca:a8:27:79:94:d3:ac:1a:68: 43:64:fd:62:b6:6d:37:3f:9b:20:46:bd:b0:20:9f: c8:b3:eb:03:a7:7d:7c:c4:bf:7f:dc:d7:ce:ed:0d: cc:83:2d:8e:7f:b2:d6:f4:c6:c4:5d:ab:52:33:ae: ed:1c:61:4c:34:86:e5:3b:3a:c4:9d:75:af:a8:f4: a3:4d:4c:e9:65:eb:42:19:9e:e5:2c:60:bc:34:f1: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:69:4E:1C:5C:F6:6A:EE:78:FC:16:A2:6D:A7:74:96:82:4B:FB X509v3 Authority Key Identifier: keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:25e4:1000::/40 Signature Algorithm: sha256WithRSAEncryption 71:2f:3f:0d:bd:b5:09:4d:83:31:d5:8b:5d:da:98:da:30:53: 5f:72:a1:72:a6:63:5c:8c:ed:30:6e:6d:df:6d:29:bf:c2:88: 23:4e:c0:3b:27:73:5e:0d:2d:67:86:9e:34:9c:14:fe:54:e0: 61:ee:5c:23:1a:cb:22:99:ec:aa:12:44:15:60:86:1b:e5:63: 1d:82:0f:ff:3e:d5:9c:04:d4:25:79:e0:31:27:bb:d1:94:77: 24:e5:9d:fd:0a:32:c7:61:56:93:ae:e1:1b:7f:50:40:ae:32: 86:01:df:3e:d8:4a:c5:f1:5d:41:93:7d:c1:ec:31:97:8e:a4: 6d:cc:dd:14:dd:64:c6:76:5e:9e:1b:ed:78:6e:e7:d9:e2:83: c6:f4:fd:ad:b4:19:1e:6e:58:7a:7d:5b:a0:8e:b1:d5:af:23: 71:ec:dd:56:65:3b:ff:bc:0a:98:07:d6:f8:d5:b6:bc:6e:67: 1d:ad:06:e2:3f:55:17:68:f9:b1:90:d2:09:b1:a6:47:bf:46: a1:8c:d1:c1:66:a7:fa:b6:0d:54:b1:0a:0e:86:b4:c9:14:ea: 0c:21:15:f0:d3:77:6a:41:85:22:37:61:cc:6c:8d:6f:71:c0: c5:4a:96:b3:4e:ee:d8:4f:3a:d2:e8:03:86:04:76:26:9a:54: 23:56:51:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ9RAujxdMDO7RCRwl2e8ttT8k+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF QUE4NjZCRDAeFw0yNjA0MDQwMDI1MzVaFw0yNzA0MDMwMDMwMzVaMDMxMTAvBgNV BAMTKEQxRTY2OTRFMUM1Q0Y2NkFFRTc4RkMxNkEyNkRBNzc0OTY4MjRCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCwimaMG94H6Lnq/FQmhuTqfO p1pBxrPjNc9OgyLWBtElv2CFZ0lqeF9adn2xqsb5zN/v+xeEze/vMlHbYFITcoZB MgPci2wv2jjN3he1zLvJTjBrSXIcxyNcFFa/I/P8sxfWtDGbIO5WyvFVDJfwcrBH AcWlXrsGD/IshfPiTDE8CzzTJb3xtXth4bYlrVBGNQorvQwS87wdRKOB/rqTC1yn 2aTdMzHdNcqoJ3mU06waaENk/WK2bTc/myBGvbAgn8iz6wOnfXzEv3/c187tDcyD LY5/stb0xsRdq1Izru0cYUw0huU7OsSdda+o9KNNTOll60IZnuUsYLw08Qo3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0eZpThxc9mruePwWom2ndJaCS/swHwYDVR0j BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv MzIzODMwMzQzYTMyMzU2NTM0M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDM2MzEzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCXkEDANBgkqhkiG9w0BAQsFAAOC AQEAcS8/Db21CU2DMdWLXdqY2jBTX3KhcqZjXIztMG5t320pv8KII07AOydzXg0t Z4aeNJwU/lTgYe5cIxrLIpnsqhJEFWCGG+VjHYIP/z7VnATUJXngMSe70ZR3JOWd /Qoyx2FWk67hG39QQK4yhgHfPthKxfFdQZN9wewxl46kbczdFN1kxnZenhvteG7n 2eKDxvT9rbQZHm5Yen1boI6x1a8jcezdVmU7/7wKmAfW+NW2vG5nHa0G4j9VF2j5 sZDSCbGmR79GoYzRwWan+rYNVLEKDoa0yRTqDCEV8NN3akGFIjdhzGyNb3HAxUqW s07u2E860ugDhgR2JppUI1ZRUw== -----END CERTIFICATE-----Generated at Thu Apr 9 14:32:50 2026 by rpki-client