$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa File: 323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa (raw, json) Hash identifier: P/GmecSu3YAUA/suqyM5H3RyGz18jHug8VabX4F0a7A= Subject key identifier: D0:CC:68:D3:7F:EF:9A:98:D8:7D:A9:09:9F:6D:2C:EE:1A:FD:C0:CA Certificate issuer: /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD Certificate serial: 502B50B7131C778A771D4A5C014432F6E949007B Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa Signing time: Sat 04 Apr 2026 00:30:44 +0000 ROA not before: Sat 04 Apr 2026 00:25:44 +0000 ROA not after: Sat 03 Apr 2027 00:30:44 +0000 asID: 61573 IP address blocks: 2804:25e4:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 10:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:50:b7:13:1c:77:8a:77:1d:4a:5c:01:44:32:f6:e9:49:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD Validity Not Before: Apr 4 00:25:44 2026 GMT Not After : Apr 3 00:30:44 2027 GMT Subject: CN=D0CC68D37FEF9A98D87DA9099F6D2CEE1AFDC0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:e2:19:e0:12:1b:ef:7a:cb:1c:44:de:9b: 18:77:ba:a3:fb:50:49:da:ca:3c:4d:60:6c:e9:e2: 7a:66:8a:b2:96:51:f0:19:ec:5a:76:9d:92:a5:23: 6f:e9:94:05:af:2c:1e:b6:96:e6:1e:a3:bc:bd:a6: 80:3b:ef:05:b4:ad:c7:c8:60:21:fc:de:a8:c2:0d: e1:2e:79:b2:58:7b:03:7a:27:01:17:54:c5:a1:78: 20:d3:46:21:68:0c:1f:80:fe:2d:6c:f7:0b:aa:8b: 14:27:b4:ef:8b:3b:6a:aa:29:75:57:0c:00:7e:c9: fa:b4:35:25:2e:db:79:40:c0:b5:db:c2:bf:3b:3f: c1:86:ec:35:55:8d:8f:24:e4:09:d0:cc:0d:93:05: 9d:c5:7b:af:a8:3e:be:ab:57:11:ba:53:94:96:b1: ad:86:76:44:59:53:61:d6:55:6d:7b:ed:2c:54:28: 61:ca:e4:58:de:9c:d3:3c:01:05:87:b1:f7:3a:75: 8f:2d:d7:fd:bd:9d:fb:fa:3d:8e:3b:a5:4f:9b:1b: fa:1d:ce:d9:a2:8a:3c:c3:28:1f:1e:c3:14:f5:9d: eb:82:6b:fc:e4:d4:d6:21:cf:72:0f:b9:0b:dc:4d: 9a:a4:ba:db:43:2a:88:f1:80:25:d8:0a:52:f3:8b: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:68:D3:7F:EF:9A:98:D8:7D:A9:09:9F:6D:2C:EE:1A:FD:C0:CA X509v3 Authority Key Identifier: keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:25e4:700::/40 Signature Algorithm: sha256WithRSAEncryption 3a:ed:d9:a2:45:3e:e4:94:c3:d6:6c:f0:44:8b:25:ea:11:57: cf:5c:47:7a:55:91:a8:07:15:9a:a4:2f:16:48:6a:bd:48:f6: 02:c3:e4:25:5e:cb:52:a2:f6:d7:dc:d5:01:82:3d:61:ae:58: d7:2e:bf:cc:82:74:e3:f7:22:4d:db:ce:3a:ba:9f:a0:06:80: 0a:aa:f7:e8:83:33:28:ac:c5:84:2f:a6:a4:f3:e0:30:86:a1: 27:34:48:91:4f:03:93:8a:ea:9a:3f:5e:c9:51:e3:4c:eb:d8: 84:c4:d5:6a:af:3d:13:d1:86:b3:1c:c0:50:91:d3:cd:39:55: 58:2f:96:c5:1b:60:0a:75:66:65:9e:2e:26:25:e2:f0:c9:ff: 07:8e:61:4f:52:b6:b1:42:8a:62:d5:b6:b4:36:eb:f4:31:34: e3:7b:23:65:06:29:4b:5c:e1:27:fc:62:62:47:44:ed:7e:64: 9b:5e:51:91:b8:7e:80:57:84:18:1b:17:e9:f4:b9:02:7c:77: 6e:fc:de:e7:13:87:56:a0:af:cb:12:11:67:dc:d1:c1:b2:e3: de:eb:2c:ad:78:f3:16:a4:94:7f:1e:3b:6f:75:ba:42:48:7a: 0b:19:56:44:7a:c5:8d:ed:19:69:65:3c:92:10:4f:7c:05:25: 8d:09:6f:65 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUUCtQtxMcd4p3HUpcAUQy9ulJAHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF QUE4NjZCRDAeFw0yNjA0MDQwMDI1NDRaFw0yNzA0MDMwMDMwNDRaMDMxMTAvBgNV BAMTKEQwQ0M2OEQzN0ZFRjlBOThEODdEQTkwOTlGNkQyQ0VFMUFGREMwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7veIZ4BIb73rLHETemxh3uqP7 UEnayjxNYGzp4npmirKWUfAZ7Fp2nZKlI2/plAWvLB62luYeo7y9poA77wW0rcfI YCH83qjCDeEuebJYewN6JwEXVMWheCDTRiFoDB+A/i1s9wuqixQntO+LO2qqKXVX DAB+yfq0NSUu23lAwLXbwr87P8GG7DVVjY8k5AnQzA2TBZ3Fe6+oPr6rVxG6U5SW sa2GdkRZU2HWVW177SxUKGHK5FjenNM8AQWHsfc6dY8t1/29nfv6PY47pU+bG/od ztmiijzDKB8ewxT1neuCa/zk1NYhz3IPuQvcTZqkuttDKojxgCXYClLzizPFAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU0Mxo03/vmpjYfakJn20s7hr9wMowHwYDVR0j BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQl5AcwDQYJKoZIhvcNAQELBQADggEB ADrt2aJFPuSUw9Zs8ESLJeoRV89cR3pVkagHFZqkLxZIar1I9gLD5CVey1Ki9tfc 1QGCPWGuWNcuv8yCdOP3Ik3bzjq6n6AGgAqq9+iDMyisxYQvpqTz4DCGoSc0SJFP A5OK6po/XslR40zr2ITE1WqvPRPRhrMcwFCR0805VVgvlsUbYAp1ZmWeLiYl4vDJ /weOYU9StrFCimLVtrQ26/QxNON7I2UGKUtc4Sf8YmJHRO1+ZJteUZG4foBXhBgb F+n0uQJ8d2783ucTh1agr8sSEWfc0cGy497rLK148xaklH8eO291ukJIegsZVkR6 xY3tGWllPJIQT3wFJY0Jb2U= -----END CERTIFICATE-----Generated at Thu Apr 9 14:32:39 2026 by rpki-client