$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa File: 323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa (raw, json) Hash identifier: H3uOyd3cXxdB8DBhFjsQfUFNzvcpvReXRzqNs6Ok7Fs= Subject key identifier: 24:44:C4:D9:B1:38:F4:A9:7B:63:91:E1:85:EA:98:00:4F:7D:74:71 Certificate issuer: /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Certificate serial: 5A9D918B45B51DD400AD8A0AE0609793E7D2A3D2 Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa Signing time: Mon 07 Jul 2025 15:19:44 +0000 ROA not before: Mon 07 Jul 2025 15:14:44 +0000 ROA not after: Mon 06 Jul 2026 15:19:44 +0000 asID: 264425 IP address blocks: 2804:1e60:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 21:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9d:91:8b:45:b5:1d:d4:00:ad:8a:0a:e0:60:97:93:e7:d2:a3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Validity Not Before: Jul 7 15:14:44 2025 GMT Not After : Jul 6 15:19:44 2026 GMT Subject: CN=2444C4D9B138F4A97B6391E185EA98004F7D7471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:33:54:49:a8:e5:19:1b:5b:9f:07:1b:32: b8:13:e9:9d:a1:ff:4a:a5:0f:76:d3:9c:fd:44:46: 40:4d:ce:12:a1:81:70:47:69:ba:9f:e2:5f:14:e6: fd:b1:da:8e:0d:91:70:73:47:59:c6:0f:52:b7:ba: a8:83:04:d7:ee:b7:d1:d0:67:a7:12:51:97:c3:0e: f4:8b:d7:a8:c4:81:60:4e:67:28:50:14:a2:a1:a8: 21:2e:f3:25:56:89:b0:89:b0:05:80:30:78:8c:fe: 9f:fc:da:fb:e8:f5:1c:a2:d1:48:78:3d:87:0c:ec: d8:8c:5e:5e:6c:13:5b:23:84:ba:84:77:36:65:3f: fc:fe:e8:29:fd:6b:5b:cd:b2:6d:74:31:11:45:5f: 23:8c:1d:be:15:87:0c:fc:4a:6a:a5:d2:f3:7b:57: 3b:15:9d:39:05:be:b4:05:a5:8e:64:2e:cc:24:20: ed:13:21:30:99:87:41:90:63:33:be:58:ae:d6:f1: f6:e9:14:24:e8:a3:41:ca:4f:86:4a:e1:15:d8:d2: 02:46:c5:0b:b8:68:93:a1:ae:f0:e1:7b:1a:4f:9d: fd:67:b6:8f:54:6b:ea:5d:8e:e6:80:11:2d:42:a0: 87:38:30:3d:3a:d4:69:f6:ec:3a:6b:6a:89:ae:59: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:44:C4:D9:B1:38:F4:A9:7B:63:91:E1:85:EA:98:00:4F:7D:74:71 X509v3 Authority Key Identifier: keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1e60:a000::/36 Signature Algorithm: sha256WithRSAEncryption 5a:61:22:62:64:f9:8b:3a:91:32:27:0b:a5:52:26:fc:81:51: 00:a2:be:bb:b9:d8:9e:db:aa:44:c4:f3:aa:5f:fa:fa:f2:fe: 0a:a3:23:3d:50:49:4f:37:e6:d9:3c:81:89:b8:77:ba:51:5f: 9d:b4:a6:e6:db:02:d0:45:f9:e6:61:63:f0:c2:fa:5d:90:0a: 98:b5:0a:d7:93:3c:20:f8:7c:b5:97:e1:26:87:4f:ac:a6:78: a5:cd:86:d4:72:26:11:0d:35:1b:c7:fb:3c:63:a1:8a:f7:7d: b6:a5:0f:ce:38:f4:f0:ab:f2:20:c8:9f:ff:7e:9c:63:ee:fd: ae:a7:ab:47:a4:f7:8d:a3:22:e2:3f:7c:39:f0:31:2f:b6:88: 06:36:95:6b:46:56:70:1e:62:40:b3:8b:f6:5c:e1:65:53:d6: 2f:d9:04:b9:1f:d2:82:8a:58:e2:f2:b5:f9:da:64:e0:b3:58: f2:9e:9d:39:1d:1f:df:41:b7:15:f8:64:e6:7e:cb:c2:4b:98: a1:f6:f4:e7:ab:6a:30:6f:e8:cd:7b:ac:6d:63:76:70:36:13: 4c:a7:74:30:ec:4f:f2:7b:cf:57:f7:24:35:ca:f4:7a:55:d0: 82:10:e9:45:6b:81:1d:ab:7f:7f:2c:ca:3e:3d:3c:38:f5:0c: aa:b3:fb:2c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUWp2Ri0W1HdQArYoK4GCXk+fSo9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4 REM5NEE5RjAeFw0yNTA3MDcxNTE0NDRaFw0yNjA3MDYxNTE5NDRaMDMxMTAvBgNV BAMTKDI0NDRDNEQ5QjEzOEY0QTk3QjYzOTFFMTg1RUE5ODAwNEY3RDc0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0TNUSajlGRtbnwcbMrgT6Z2h /0qlD3bTnP1ERkBNzhKhgXBHabqf4l8U5v2x2o4NkXBzR1nGD1K3uqiDBNfut9HQ Z6cSUZfDDvSL16jEgWBOZyhQFKKhqCEu8yVWibCJsAWAMHiM/p/82vvo9Ryi0Uh4 PYcM7NiMXl5sE1sjhLqEdzZlP/z+6Cn9a1vNsm10MRFFXyOMHb4Vhwz8Smql0vN7 VzsVnTkFvrQFpY5kLswkIO0TITCZh0GQYzO+WK7W8fbpFCToo0HKT4ZK4RXY0gJG xQu4aJOhrvDhexpPnf1nto9Ua+pdjuaAES1CoIc4MD061Gn27DpraomuWa6hAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUJETE2bE49Kl7Y5HhheqYAE99dHEwHwYDVR0j BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1 NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzIzODMwMzQzYTMxNjUzNjMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmCgMA0GCSqGSIb3DQEBCwUA A4IBAQBaYSJiZPmLOpEyJwulUib8gVEAor67udie26pExPOqX/r68v4KoyM9UElP N+bZPIGJuHe6UV+dtKbm2wLQRfnmYWPwwvpdkAqYtQrXkzwg+Hy1l+Emh0+spnil zYbUciYRDTUbx/s8Y6GK9322pQ/OOPTwq/IgyJ//fpxj7v2up6tHpPeNoyLiP3w5 8DEvtogGNpVrRlZwHmJAs4v2XOFlU9Yv2QS5H9KCilji8rX52mTgs1jynp05HR/f QbcV+GTmfsvCS5ih9vTnq2owb+jNe6xtY3ZwNhNMp3Qw7E/ye89X9yQ1yvR6VdCC EOlFa4Edq39/LMo+PTw49Qyqs/ss -----END CERTIFICATE-----Generated at Fri Jul 25 00:34:11 2025 by rpki-client