$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa File: 323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa (raw, json) Hash identifier: 4mt7dYfRonQTs8kzD6Da1koeoE+EpGvEsW9spYMZ1H4= Subject key identifier: 6A:EF:CC:70:2F:6D:67:C7:89:3D:75:CE:A5:3D:7A:F7:83:13:C1:55 Certificate issuer: /CN=86B2810A6C4EB421987C3396698910082BEA85F9 Certificate serial: 1DD47F5CD227F6C29A5D3A3634C6273935B80E6F Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa Signing time: Mon 25 Aug 2025 11:49:27 +0000 ROA not before: Mon 25 Aug 2025 11:44:27 +0000 ROA not after: Mon 24 Aug 2026 11:49:27 +0000 asID: 268444 IP address blocks: 2804:514c:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d4:7f:5c:d2:27:f6:c2:9a:5d:3a:36:34:c6:27:39:35:b8:0e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9 Validity Not Before: Aug 25 11:44:27 2025 GMT Not After : Aug 24 11:49:27 2026 GMT Subject: CN=6AEFCC702F6D67C7893D75CEA53D7AF78313C155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:89:6b:8e:3e:9e:0f:22:39:6f:a5:36:fd: 40:6d:7e:be:17:cb:a7:54:e9:5e:16:19:0f:f4:dc: d6:5f:fb:be:10:1e:07:c2:ec:e7:49:b3:5f:46:1d: 93:02:27:32:3a:aa:34:a3:28:01:f2:fd:c9:7b:1e: 9a:ca:38:60:9e:eb:72:5e:56:b3:49:a5:c0:43:95: 79:05:8b:77:19:6b:4b:1b:a7:1e:07:4a:09:c2:e9: 66:df:d2:0f:3c:29:36:9f:21:e2:6e:69:00:46:9e: cd:f1:a3:de:7f:cc:6b:fb:d9:c0:0a:6e:ba:c7:05: f6:a5:1a:e5:d0:d9:fb:c1:61:c1:6c:fd:38:d5:71: 03:cd:10:e4:c8:ad:8b:72:cc:de:a3:85:79:b7:8d: b1:e7:6e:37:1c:8f:10:2e:64:b9:42:3b:9e:28:7a: d0:c9:b1:92:75:09:c1:7c:7d:1e:50:86:ea:6c:99: dd:a3:5b:90:50:18:b8:af:0d:a6:0c:26:f1:89:d2: 5f:29:39:d4:6b:d8:fe:7c:18:1e:6a:4a:db:21:d5: 60:e9:17:a8:57:45:70:42:27:dd:8f:83:eb:16:05: a5:69:e2:4c:ca:5c:52:4f:63:39:0f:4b:01:84:ab: fa:e6:0d:da:d5:42:1d:ef:7a:91:d7:fb:f9:f7:3f: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EF:CC:70:2F:6D:67:C7:89:3D:75:CE:A5:3D:7A:F7:83:13:C1:55 X509v3 Authority Key Identifier: keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:514c:8000::/33 Signature Algorithm: sha256WithRSAEncryption d3:de:65:54:47:c3:bb:8f:df:0c:a2:c0:d5:ed:5b:7b:e4:de: 15:4b:e4:ac:83:e3:1b:17:d7:88:dc:5f:4d:98:bf:41:73:ea: ae:d6:8e:71:d5:e9:04:4f:0c:5b:87:40:73:b2:26:a3:0f:d9: 26:7e:a8:aa:1c:9d:2c:42:fb:7d:5e:45:ce:14:23:f4:ae:78: 2f:44:bb:71:c6:28:da:fc:a7:99:b5:12:f6:7f:d8:ce:9d:b5: 7e:18:f0:c0:11:95:ee:78:a2:96:a7:75:1d:ce:9f:eb:64:f9: 5b:d0:af:0b:30:a7:51:3d:ad:1d:cc:b4:48:32:7b:77:c9:31: 01:93:6e:dd:9e:90:b8:cf:a7:c8:2e:e7:c2:a9:b4:bf:b3:f3: fc:dd:ed:d2:1e:e0:aa:c6:c7:7e:be:0f:0b:6e:dc:bf:c5:6a: 9c:bd:77:ba:99:05:39:bb:bf:42:33:bd:2b:89:0c:7d:27:b9: 8b:8a:6c:e0:90:fd:42:89:2b:63:2a:33:28:07:ee:eb:21:da: ad:e4:5f:2e:bd:5d:a5:bd:9a:09:b4:29:63:4b:b3:4a:cb:36: 95:21:a8:20:17:ec:73:f4:eb:4a:1d:fa:4e:ad:45:af:b8:b6: 98:c8:42:00:b4:5c:bd:c5:4f:22:dc:49:a4:0e:10:41:95:b1: f4:46:ca:d8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHdR/XNIn9sKaXTo2NMYnOTW4Dm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCMjgxMEE2QzRFQjQyMTk4N0MzMzk2Njk4OTEwMDgy QkVBODVGOTAeFw0yNTA4MjUxMTQ0MjdaFw0yNjA4MjQxMTQ5MjdaMDMxMTAvBgNV BAMTKDZBRUZDQzcwMkY2RDY3Qzc4OTNENzVDRUE1M0Q3QUY3ODMxM0MxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Nolrjj6eDyI5b6U2/UBtfr4X y6dU6V4WGQ/03NZf+74QHgfC7OdJs19GHZMCJzI6qjSjKAHy/cl7HprKOGCe63Je VrNJpcBDlXkFi3cZa0sbpx4HSgnC6Wbf0g88KTafIeJuaQBGns3xo95/zGv72cAK brrHBfalGuXQ2fvBYcFs/TjVcQPNEOTIrYtyzN6jhXm3jbHnbjccjxAuZLlCO54o etDJsZJ1CcF8fR5Qhupsmd2jW5BQGLivDaYMJvGJ0l8pOdRr2P58GB5qStsh1WDp F6hXRXBCJ92Pg+sWBaVp4kzKXFJPYzkPSwGEq/rmDdrVQh3vepHX+/n3P/j5AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUau/McC9tZ8eJPXXOpT1694MTwVUwHwYDVR0j BBgwFoAUhrKBCmxOtCGYfDOWaYkQCCvqhfkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw NW4vMC84NkIyODEwQTZDNEVCNDIxOTg3QzMzOTY2OTg5MTAwODJCRUE4NUY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2QjI4MTBBNkM0RUI0MjE5 ODdDMzM5NjY5ODkxMDA4MkJFQTg1RjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAv MzIzODMwMzQzYTM1MzEzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzODM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEUUyAMA0GCSqGSIb3DQEBCwUA A4IBAQDT3mVUR8O7j98MosDV7Vt75N4VS+Ssg+MbF9eI3F9NmL9Bc+qu1o5x1ekE Twxbh0BzsiajD9kmfqiqHJ0sQvt9XkXOFCP0rngvRLtxxija/KeZtRL2f9jOnbV+ GPDAEZXueKKWp3Udzp/rZPlb0K8LMKdRPa0dzLRIMnt3yTEBk27dnpC4z6fILufC qbS/s/P83e3SHuCqxsd+vg8Lbty/xWqcvXe6mQU5u79CM70riQx9J7mLimzgkP1C iStjKjMoB+7rIdqt5F8uvV2lvZoJtCljS7NKyzaVIaggF+xz9OtKHfpOrUWvuLaY yEIAtFy9xU8i3EmkDhBBlbH0RsrY -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:39 2025 by rpki-client