$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a663030303a3a2f33362d3336203d3e20323634343235.roa File: 323830343a316536303a663030303a3a2f33362d3336203d3e20323634343235.roa (raw, json) Hash identifier: yx2v81U6JovSAlMOP9lNHPvhukh4i8BnKBQHbjLCbVQ= Subject key identifier: 13:2D:63:D2:48:9A:FD:12:A1:C3:EA:7A:08:E0:06:DD:F5:7A:69:24 Certificate issuer: /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Certificate serial: 3E12E33B84D47E572507496B316D49B2188F7821 Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a663030303a3a2f33362d3336203d3e20323634343235.roa Signing time: Mon 07 Jul 2025 15:19:44 +0000 ROA not before: Mon 07 Jul 2025 15:14:44 +0000 ROA not after: Mon 06 Jul 2026 15:19:44 +0000 asID: 264425 IP address blocks: 2804:1e60:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 21:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:12:e3:3b:84:d4:7e:57:25:07:49:6b:31:6d:49:b2:18:8f:78:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Validity Not Before: Jul 7 15:14:44 2025 GMT Not After : Jul 6 15:19:44 2026 GMT Subject: CN=132D63D2489AFD12A1C3EA7A08E006DDF57A6924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:16:fd:34:5c:d1:58:71:2a:41:51:e6:88: b9:30:26:53:80:49:8c:51:43:ee:9e:20:73:d5:19: bf:16:29:d4:2e:21:97:70:34:3d:f2:dc:8d:e6:7d: a9:db:49:ec:0d:8c:da:5e:1a:6d:a8:75:b4:4b:cd: a5:e7:30:35:ac:a6:94:9d:96:80:34:d3:5d:50:00: 7c:74:2e:61:ad:27:5b:f4:cd:41:6f:23:b7:ff:7d: 8f:54:fa:4c:28:4d:17:93:6e:4c:74:d2:01:03:8a: ac:2c:12:77:44:bc:46:5b:9e:c8:7d:79:66:6b:33: d5:93:b8:b9:c8:41:69:c8:a7:ce:b4:f0:fe:98:9f: 5e:ec:a5:91:47:1d:e0:24:5b:5b:f9:53:fb:89:35: f7:f5:90:38:1d:6c:52:4e:f6:3f:c0:ff:c3:d1:1f: 9d:8b:7f:02:d3:0b:9e:70:f7:91:4d:22:64:fd:6c: ea:ab:27:03:20:75:a7:ce:4d:55:8c:57:94:85:49: da:42:81:1e:e9:12:29:3a:c4:cb:80:12:9b:fd:cf: e3:0b:ea:c4:e6:a7:df:be:95:98:f5:2b:54:c7:24: 9d:34:36:02:d0:4f:50:06:ed:dc:89:d4:a7:c8:9e: 27:c5:23:c1:49:31:bf:b0:70:9d:e9:c8:f9:a8:e8: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:63:D2:48:9A:FD:12:A1:C3:EA:7A:08:E0:06:DD:F5:7A:69:24 X509v3 Authority Key Identifier: keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a663030303a3a2f33362d3336203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1e60:f000::/36 Signature Algorithm: sha256WithRSAEncryption ac:09:7f:b4:6a:0d:6a:80:c6:b8:33:d6:e8:1f:53:5d:2f:ee: 1f:8a:58:be:65:bd:b7:eb:86:3c:cd:88:2a:9c:35:54:06:55: e6:72:2c:d6:4b:b2:b2:43:cd:99:40:0a:f4:60:01:4f:22:c0: 5f:70:94:2b:6e:65:71:7e:5e:bc:12:bf:dc:cb:3d:9a:15:b4: d9:27:b9:78:27:e9:9d:be:d1:d2:e0:61:23:25:c7:9a:82:24: 2d:ab:60:fa:33:a3:78:c0:48:01:81:14:08:21:dd:6a:9f:1f: 70:d3:7d:0b:ba:e7:ad:1f:a0:23:af:19:af:ac:bc:a0:32:90: b8:e8:51:7a:16:f6:52:6c:73:42:41:51:b3:bf:ce:04:d7:eb: 68:1f:98:0b:05:59:5d:67:e7:82:d7:21:70:06:56:46:a6:79: f4:c2:4c:71:56:b9:0b:a9:bd:75:d8:76:0b:83:34:f5:9f:6c: 9f:c8:ed:7d:02:20:0f:77:b1:f8:bf:7f:c6:76:d6:ad:aa:df: 6c:8d:0a:af:3e:c2:50:77:01:e7:e1:7a:df:c7:68:b3:41:42: cc:53:22:93:1b:43:95:d3:6a:f0:32:7e:2f:70:db:77:62:50: 1b:8c:f4:4e:a0:41:5d:96:22:ed:2b:c9:8a:76:a2:8e:d7:ca: c3:31:df:3f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUPhLjO4TUflclB0lrMW1JshiPeCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4 REM5NEE5RjAeFw0yNTA3MDcxNTE0NDRaFw0yNjA3MDYxNTE5NDRaMDMxMTAvBgNV BAMTKDEzMkQ2M0QyNDg5QUZEMTJBMUMzRUE3QTA4RTAwNkRERjU3QTY5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WRb9NFzRWHEqQVHmiLkwJlOA SYxRQ+6eIHPVGb8WKdQuIZdwND3y3I3mfanbSewNjNpeGm2odbRLzaXnMDWsppSd loA0011QAHx0LmGtJ1v0zUFvI7f/fY9U+kwoTReTbkx00gEDiqwsEndEvEZbnsh9 eWZrM9WTuLnIQWnIp8608P6Yn17spZFHHeAkW1v5U/uJNff1kDgdbFJO9j/A/8PR H52LfwLTC55w95FNImT9bOqrJwMgdafOTVWMV5SFSdpCgR7pEik6xMuAEpv9z+ML 6sTmp9++lZj1K1THJJ00NgLQT1AG7dyJ1KfInifFI8FJMb+wcJ3pyPmo6L6dAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUEy1j0kia/RKhw+p6COAG3fV6aSQwHwYDVR0j BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1 NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzIzODMwMzQzYTMxNjUzNjMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmDwMA0GCSqGSIb3DQEBCwUA A4IBAQCsCX+0ag1qgMa4M9boH1NdL+4fili+Zb2364Y8zYgqnDVUBlXmcizWS7Ky Q82ZQAr0YAFPIsBfcJQrbmVxfl68Er/cyz2aFbTZJ7l4J+mdvtHS4GEjJceagiQt q2D6M6N4wEgBgRQIId1qnx9w030LuuetH6AjrxmvrLygMpC46FF6FvZSbHNCQVGz v84E1+toH5gLBVldZ+eC1yFwBlZGpnn0wkxxVrkLqb112HYLgzT1n2yfyO19AiAP d7H4v3/Gdtatqt9sjQqvPsJQdwHn4Xrfx2izQULMUyKTG0OV02rwMn4vcNt3YlAb jPROoEFdliLtK8mKdqKO18rDMd8/ -----END CERTIFICATE-----Generated at Fri Jul 25 00:26:32 2025 by rpki-client