$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa File: 323830343a6234343a3a2f33362d3336203d3e20323632343438.roa (raw, json) Hash identifier: 4XcAvke2LB/DIZOhgMIVAbiOqPgp6MrS8S1ODM2i8yk= Subject key identifier: 35:BE:69:BC:EE:D3:EF:5A:C1:1C:E7:71:75:B7:51:B9:92:16:15:49 Certificate issuer: /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Certificate serial: 50B6C981E636D7AA03E6FCCA02941910CCBCDDD8 Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa Signing time: Wed 24 Sep 2025 02:17:17 +0000 ROA not before: Wed 24 Sep 2025 02:12:17 +0000 ROA not after: Wed 23 Sep 2026 02:17:17 +0000 asID: 262448 IP address blocks: 2804:b44::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Oct 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b6:c9:81:e6:36:d7:aa:03:e6:fc:ca:02:94:19:10:cc:bc:dd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1 Validity Not Before: Sep 24 02:12:17 2025 GMT Not After : Sep 23 02:17:17 2026 GMT Subject: CN=35BE69BCEED3EF5AC11CE77175B751B992161549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:c9:90:26:5b:b6:2f:e6:3c:72:12:6b:4e: e0:f1:ba:9d:26:6e:db:80:d2:f4:69:a8:89:97:5b: 1a:d6:e3:06:42:ab:bf:90:05:0b:04:64:22:80:b0: 4e:6c:8c:c3:19:76:3c:8a:e0:fa:7c:a1:ac:ff:06: 5a:43:f6:f2:c1:09:69:65:04:ec:73:ee:89:6d:61: 58:fc:0d:80:6b:63:bc:f0:f2:f9:ca:39:29:14:4b: f2:aa:57:08:d0:c2:f6:a0:ec:7a:de:0a:74:d2:0b: 47:f3:51:54:90:3c:f4:b6:39:b0:b3:59:96:0d:a8: 82:dd:4d:ef:ee:42:25:79:3f:a7:2c:e3:5a:d9:00: 95:90:b1:1e:08:e3:b1:a1:50:7f:92:65:ab:8e:ce: e4:53:7b:79:12:58:43:d6:57:fc:44:d7:d2:b1:5c: e3:e9:1f:ec:f6:06:c1:c5:18:6d:35:85:f1:69:f6: 76:ed:b7:ca:9c:1d:12:93:16:c2:0d:d7:b5:42:eb: 87:ff:54:47:f4:03:01:3c:1c:bd:8e:12:62:e3:7c: c2:24:ed:64:79:ba:49:38:6c:42:09:9f:cc:44:df: 60:5f:c2:cd:be:64:08:96:77:27:fa:b3:44:59:0d: 52:1c:49:ec:96:51:fd:fa:63:e0:fd:40:ad:a9:2c: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:69:BC:EE:D3:EF:5A:C1:1C:E7:71:75:B7:51:B9:92:16:15:49 X509v3 Authority Key Identifier: keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a3a2f33362d3336203d3e20323632343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:b44::/36 Signature Algorithm: sha256WithRSAEncryption 67:b3:5c:b6:aa:d5:44:9d:fb:48:55:46:cc:e8:06:84:12:9c: bc:72:50:a1:ad:63:75:6f:25:2f:a0:4d:9f:80:57:a8:37:ad: 30:8c:f9:1c:87:a4:8d:42:eb:75:8b:13:59:60:7a:56:87:c6: bf:ae:e0:d1:77:d4:91:ab:fc:9b:54:0d:67:54:46:a8:70:71: 24:1f:e4:2c:d1:ba:61:9e:7a:72:bd:af:52:80:16:a3:82:d0: e8:43:8e:c3:0a:5d:26:41:50:a7:90:9f:81:d5:61:d6:1f:67: 16:89:b2:1a:b1:e2:e3:fb:fa:fb:25:f7:6b:5f:3f:76:d4:6a: c1:1d:a0:39:d4:a7:a0:dd:31:b2:b1:79:45:fa:d2:0e:d8:e4: 61:26:68:ac:c4:e0:a5:82:f2:3e:73:fe:f6:0c:8c:b9:8e:72: 84:6c:fd:ca:5a:2c:f2:fe:b7:f4:16:4b:21:74:81:1a:d9:ff: 2a:46:76:99:3b:db:f2:39:79:f0:70:b2:7d:b2:7e:6d:44:b0: 08:e5:46:dd:74:a6:3d:d1:cd:47:f1:49:ce:c4:8d:c3:91:73: 24:dc:ed:03:37:68:15:13:c0:f8:46:4a:f6:ac:93:2c:89:77: 2e:90:d5:c0:4f:b3:2e:f0:97:89:4d:1b:dd:4a:e8:29:52:02: 67:f6:6f:aa -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUULbJgeY216oD5vzKApQZEMy83dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBB OEU3MEJDMTAeFw0yNTA5MjQwMjEyMTdaFw0yNjA5MjMwMjE3MTdaMDMxMTAvBgNV BAMTKDM1QkU2OUJDRUVEM0VGNUFDMTFDRTc3MTc1Qjc1MUI5OTIxNjE1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaMmQJlu2L+Y8chJrTuDxup0m btuA0vRpqImXWxrW4wZCq7+QBQsEZCKAsE5sjMMZdjyK4Pp8oaz/BlpD9vLBCWll BOxz7oltYVj8DYBrY7zw8vnKOSkUS/KqVwjQwvag7HreCnTSC0fzUVSQPPS2ObCz WZYNqILdTe/uQiV5P6cs41rZAJWQsR4I47GhUH+SZauOzuRTe3kSWEPWV/xE19Kx XOPpH+z2BsHFGG01hfFp9nbtt8qcHRKTFsIN17VC64f/VEf0AwE8HL2OEmLjfMIk 7WR5ukk4bEIJn8xE32Bfws2+ZAiWdyf6s0RZDVIcSeyWUf36Y+D9QK2pLFH/AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUNb5pvO7T71rBHOdxdbdRuZIWFUkwHwYDVR0j BBgwFoAU5xPWUPHLS2M3etnnZij7IKjnC8EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hMVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5 LzAvRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBBOEU3MEJDMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNzEzRDY1MEYxQ0I0QjYzMzc3 QUQ5RTc2NjI4RkIyMEE4RTcwQkMxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h MVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5LzAvMzIz ODMwMzQzYTYyMzQzNDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzMjM0MzQz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGBCgEC0QAMA0GCSqGSIb3DQEBCwUAA4IBAQBns1y2qtVEnftI VUbM6AaEEpy8clChrWN1byUvoE2fgFeoN60wjPkch6SNQut1ixNZYHpWh8a/ruDR d9SRq/ybVA1nVEaocHEkH+Qs0bphnnpyva9SgBajgtDoQ47DCl0mQVCnkJ+B1WHW H2cWibIaseLj+/r7JfdrXz921GrBHaA51Keg3TGysXlF+tIO2ORhJmisxOClgvI+ c/72DIy5jnKEbP3KWizy/rf0FkshdIEa2f8qRnaZO9vyOXnwcLJ9sn5tRLAI5Ubd dKY90c1H8UnOxI3DkXMk3O0DN2gVE8D4Rkr2rJMsiXcukNXAT7Mu8JeJTRvdSugp UgJn9m+q -----END CERTIFICATE-----Generated at Thu Oct 9 14:42:46 2025 by rpki-client