$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa File: 323830343a343632383a3a2f33322d313238203d3e20323636393732.roa (raw, json) Hash identifier: nlweuNlClnZQOFQmgCG2E+WERUglUork8/NpAl18uzw= Subject key identifier: 52:3F:C7:18:79:BC:B5:93:5E:E1:04:60:57:FF:0B:DD:16:EE:FC:0E Certificate issuer: /CN=3E1AA64F1F90D524070428F948C2D4929E70635C Certificate serial: 6D835FEFA77574BF42CED2502A8EEC489CD778AE Authority key identifier: 3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa Signing time: Mon 21 Jul 2025 18:50:46 +0000 ROA not before: Mon 21 Jul 2025 18:45:46 +0000 ROA not after: Mon 20 Jul 2026 18:50:46 +0000 asID: 266972 IP address blocks: 2804:4628::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.crl rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 20:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:83:5f:ef:a7:75:74:bf:42:ce:d2:50:2a:8e:ec:48:9c:d7:78:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E1AA64F1F90D524070428F948C2D4929E70635C Validity Not Before: Jul 21 18:45:46 2025 GMT Not After : Jul 20 18:50:46 2026 GMT Subject: CN=523FC71879BCB5935EE1046057FF0BDD16EEFC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:fe:5a:84:48:61:9b:ae:38:98:7d:8d:49: d1:32:26:07:e6:5f:e8:0f:65:63:cb:90:69:44:92: 6f:3d:a4:23:ac:4b:a5:dc:a5:fc:c5:30:ed:dd:b3: 63:2f:39:dd:f8:15:a0:32:15:9a:02:19:c5:6b:77: 06:f0:fa:da:58:d1:03:55:01:89:5d:dd:23:4f:64: 9a:e5:61:e4:73:a3:60:76:be:27:36:d3:8d:17:ba: 04:64:1f:68:f9:52:ef:ac:b8:3d:08:cf:b0:77:0e: 7b:45:da:89:8f:f6:56:8a:64:f2:9c:d3:e9:90:79: a0:56:ab:26:4e:7e:19:58:07:aa:58:f7:22:6c:a7: 3a:b1:7b:be:60:85:3e:4b:24:e1:d8:46:06:13:9b: a4:ef:0d:6a:11:ed:e3:46:fb:d9:db:ac:da:d7:68: 14:93:07:dc:cb:14:d6:ab:2e:44:a3:96:93:7d:97: d1:4b:77:03:64:f2:26:c1:1e:0e:ae:fb:46:46:6d: 55:ad:cc:59:ab:03:8a:d3:98:01:74:6f:bc:d7:2e: 1a:8a:b2:5c:00:88:a9:b5:16:36:cf:df:87:d4:bb: e6:98:a1:20:01:60:11:a0:6e:7d:8c:06:89:c7:5d: 02:d5:3c:9d:1c:60:2f:ea:81:78:7b:9a:80:1c:a4: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3F:C7:18:79:BC:B5:93:5E:E1:04:60:57:FF:0B:DD:16:EE:FC:0E X509v3 Authority Key Identifier: keyid:3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/323830343a343632383a3a2f33322d313238203d3e20323636393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4628::/32 Signature Algorithm: sha256WithRSAEncryption 36:bf:b2:1b:b0:df:53:21:38:f8:b7:ab:ad:eb:65:08:b6:62: 5d:d6:61:d8:e3:7c:ee:e7:bb:1e:fc:6f:56:5e:c6:f3:8b:7f: 84:8f:53:0a:9c:c8:f0:f6:41:bd:a8:62:e7:e1:89:55:04:16: 8f:00:c2:b9:5b:14:30:a5:a0:3b:65:68:23:81:e8:41:51:7f: c4:bd:5c:ca:ed:52:42:5f:c9:b7:d2:8e:7b:fc:c3:69:6b:d6: 96:7f:91:9d:2d:b9:7d:c6:c9:24:11:e9:00:9c:e5:a7:5e:30: 6e:80:b5:8b:1b:7b:06:00:92:a6:f7:9c:c8:c2:8f:9a:cb:7c: fc:97:24:9a:b0:fb:24:4f:dc:2d:8c:3a:fc:50:03:6e:e6:8d: 1f:2b:16:19:80:3c:8a:24:79:b8:5b:ce:9d:3f:b0:39:6d:5a: f6:0f:de:4e:60:77:d9:09:86:a1:ef:94:fb:4f:9c:0d:2a:04: d2:fc:c0:bc:f5:dc:6b:c4:c2:8d:21:52:74:6e:57:f3:a8:72: fc:34:1d:83:82:66:87:27:4d:b3:fc:c7:e8:bf:00:db:fc:f3: f4:07:af:3d:ac:55:bc:86:3f:6a:f5:3f:6e:8d:15:32:0a:1f: 3d:f2:5e:0c:2f:18:e6:b5:48:05:a0:73:db:2e:4a:75:ab:af: f7:ec:b3:a3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUbYNf76d1dL9CztJQKo7sSJzXeK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UxQUE2NEYxRjkwRDUyNDA3MDQyOEY5NDhDMkQ0OTI5 RTcwNjM1QzAeFw0yNTA3MjExODQ1NDZaFw0yNjA3MjAxODUwNDZaMDMxMTAvBgNV BAMTKDUyM0ZDNzE4NzlCQ0I1OTM1RUUxMDQ2MDU3RkYwQkREMTZFRUZDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSbP5ahEhhm644mH2NSdEyJgfm X+gPZWPLkGlEkm89pCOsS6XcpfzFMO3ds2MvOd34FaAyFZoCGcVrdwbw+tpY0QNV AYld3SNPZJrlYeRzo2B2vic2040XugRkH2j5Uu+suD0Iz7B3DntF2omP9laKZPKc 0+mQeaBWqyZOfhlYB6pY9yJspzqxe75ghT5LJOHYRgYTm6TvDWoR7eNG+9nbrNrX aBSTB9zLFNarLkSjlpN9l9FLdwNk8ibBHg6u+0ZGbVWtzFmrA4rTmAF0b7zXLhqK slwAiKm1FjbP34fUu+aYoSABYBGgbn2MBonHXQLVPJ0cYC/qgXh7moAcpM9LAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUUj/HGHm8tZNe4QRgV/8L3Rbu/A4wHwYDVR0j BBgwFoAUPhqmTx+Q1SQHBCj5SMLUkp5wY1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENSWTk0N25RaUNYVkJUUTJ3RXF6b3dXeXhtUGp1TW50cEZlSFZYYUdK VXgvMC8zRTFBQTY0RjFGOTBENTI0MDcwNDI4Rjk0OEMyRDQ5MjlFNzA2MzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMUFBNjRGMUY5MEQ1MjQw NzA0MjhGOTQ4QzJENDkyOUU3MDYzNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRDUlk5NDduUWlDWFZCVFEyd0Vxem93V3l4bVBqdU1udHBGZUhWWGFHSlV4LzAv MzIzODMwMzQzYTM0MzYzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzYzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBEYoMA0GCSqGSIb3DQEBCwUAA4IBAQA2v7Ib sN9TITj4t6ut62UItmJd1mHY43zu57se/G9WXsbzi3+Ej1MKnMjw9kG9qGLn4YlV BBaPAMK5WxQwpaA7ZWgjgehBUX/EvVzK7VJCX8m30o57/MNpa9aWf5GdLbl9xskk EekAnOWnXjBugLWLG3sGAJKm95zIwo+ay3z8lySasPskT9wtjDr8UANu5o0fKxYZ gDyKJHm4W86dP7A5bVr2D95OYHfZCYah75T7T5wNKgTS/MC89dxrxMKNIVJ0blfz qHL8NB2DgmaHJ02z/MfovwDb/PP0B689rFW8hj9q9T9ujRUyCh898l4MLxjmtUgF oHPbLkp1q6/37LOj -----END CERTIFICATE-----Generated at Fri Jul 25 13:13:16 2025 by rpki-client