$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa File: 323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (raw, json) Hash identifier: AEKRQ/5XfHq7feFa23x6BNuywuCE4831EZnSnQ1ej9g= Subject key identifier: B9:64:88:40:02:BB:73:A6:C9:91:42:6C:40:80:E7:95:C0:B9:B3:BC Certificate issuer: /CN=86B2810A6C4EB421987C3396698910082BEA85F9 Certificate serial: 1DE0C3905A3A110A2227CC33F5691D16AE7574DB Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa Signing time: Mon 25 Aug 2025 11:49:27 +0000 ROA not before: Mon 25 Aug 2025 11:44:27 +0000 ROA not after: Mon 24 Aug 2026 11:49:27 +0000 asID: 268444 IP address blocks: 2804:514c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 11:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e0:c3:90:5a:3a:11:0a:22:27:cc:33:f5:69:1d:16:ae:75:74:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9 Validity Not Before: Aug 25 11:44:27 2025 GMT Not After : Aug 24 11:49:27 2026 GMT Subject: CN=B964884002BB73A6C991426C4080E795C0B9B3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:74:9c:e1:15:e1:ac:54:bb:b8:b5:fa:8a: aa:04:2b:a4:37:b3:66:60:04:47:b2:d4:c1:1f:1a: 35:2a:50:8b:b9:96:1c:27:2a:5a:99:7b:5d:4f:ea: 59:1a:21:aa:65:bf:80:4d:7b:6b:75:26:9d:9b:5c: 84:fa:ef:5f:da:e8:1f:82:d5:4b:8b:93:ba:81:22: 07:64:2a:b9:26:7c:c3:0d:c8:9b:7e:04:8d:50:0b: 07:d1:9f:86:80:6d:4b:f9:bc:50:76:29:43:bf:07: a0:7f:a7:e8:b3:27:83:14:8a:a6:bd:d9:fd:45:07: f9:a4:75:4e:c4:8f:92:d5:5d:f0:51:71:ce:c1:92: b4:63:1c:c8:98:21:d0:bd:52:cf:69:8e:81:9f:ca: 87:1d:c9:29:e2:6a:ba:1a:c6:11:f0:41:55:4b:6e: 37:0d:20:16:6c:09:9e:03:99:8d:df:2b:d2:0e:ce: 90:ca:a3:dd:a7:10:2a:26:2c:03:f0:d8:92:c1:8a: b2:51:8e:a4:bd:a3:c3:f2:83:70:b3:9c:c9:c9:9f: 4e:0f:4e:db:2f:e0:22:02:1f:93:84:4f:e8:ee:5d: 66:98:44:b3:b8:b4:45:34:b8:e7:c5:4a:2a:30:73: b1:e5:e2:b8:2b:96:79:08:89:7a:3d:6b:37:b9:17: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:64:88:40:02:BB:73:A6:C9:91:42:6C:40:80:E7:95:C0:B9:B3:BC X509v3 Authority Key Identifier: keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:514c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 37:c5:ef:e0:1e:4f:74:3b:3e:86:1c:4c:57:40:0f:aa:1f:f4: 65:ad:e1:a2:13:f9:fe:74:8b:75:e2:4c:0b:f6:7b:10:45:30: c0:eb:cb:2d:72:a4:59:1f:dd:00:e1:7f:b3:24:76:fd:48:37: c2:34:44:b3:0c:d0:a7:15:b5:33:cd:3e:22:f0:d2:0c:7a:42: fb:87:12:89:51:ce:c9:eb:33:41:5f:7f:f0:85:ef:50:3f:05: 9a:fa:fa:db:cd:16:76:d2:6c:e5:5b:30:07:3d:f7:3f:69:ff: c8:a8:93:d8:96:f9:48:c8:ec:19:19:16:7b:72:f0:3e:28:9e: 22:12:78:8a:02:e5:30:d3:15:89:45:8d:58:cd:64:cb:83:0f: 5a:99:24:56:0f:e7:10:b9:44:9c:fc:b9:4a:f3:65:4a:32:42: f1:d5:f4:8a:d5:aa:72:7f:bb:23:16:66:37:e0:24:d2:9f:ea: 2e:d0:e7:a3:7a:77:37:27:15:2f:89:7a:dd:94:d7:2b:ee:7f: 2c:a0:f1:e5:fd:98:9d:d0:77:ab:c1:85:3c:44:4e:ad:67:b0: 9d:0c:b4:37:29:3c:f2:1b:11:57:03:7e:be:91:0d:61:55:15: 68:49:3f:8a:ad:eb:8d:15:ee:38:cb:ab:42:96:b4:65:b9:95: 09:15:f7:bb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUHeDDkFo6EQoiJ8wz9WkdFq51dNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCMjgxMEE2QzRFQjQyMTk4N0MzMzk2Njk4OTEwMDgy QkVBODVGOTAeFw0yNTA4MjUxMTQ0MjdaFw0yNjA4MjQxMTQ5MjdaMDMxMTAvBgNV BAMTKEI5NjQ4ODQwMDJCQjczQTZDOTkxNDI2QzQwODBFNzk1QzBCOUIzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWc3Sc4RXhrFS7uLX6iqoEK6Q3 s2ZgBEey1MEfGjUqUIu5lhwnKlqZe11P6lkaIaplv4BNe2t1Jp2bXIT671/a6B+C 1UuLk7qBIgdkKrkmfMMNyJt+BI1QCwfRn4aAbUv5vFB2KUO/B6B/p+izJ4MUiqa9 2f1FB/mkdU7Ej5LVXfBRcc7BkrRjHMiYIdC9Us9pjoGfyocdySniaroaxhHwQVVL bjcNIBZsCZ4DmY3fK9IOzpDKo92nEComLAPw2JLBirJRjqS9o8Pyg3CznMnJn04P Ttsv4CICH5OET+juXWaYRLO4tEU0uOfFSiowc7Hl4rgrlnkIiXo9aze5F1wLAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUuWSIQAK7c6bJkUJsQIDnlcC5s7wwHwYDVR0j BBgwFoAUhrKBCmxOtCGYfDOWaYkQCCvqhfkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw NW4vMC84NkIyODEwQTZDNEVCNDIxOTg3QzMzOTY2OTg5MTAwODJCRUE4NUY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2QjI4MTBBNkM0RUI0MjE5 ODdDMzM5NjY5ODkxMDA4MkJFQTg1RjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAv MzIzODMwMzQzYTM1MzEzNDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODM0MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUUzAMA0GCSqGSIb3DQEBCwUA A4IBAQA3xe/gHk90Oz6GHExXQA+qH/RlreGiE/n+dIt14kwL9nsQRTDA68stcqRZ H90A4X+zJHb9SDfCNESzDNCnFbUzzT4i8NIMekL7hxKJUc7J6zNBX3/whe9QPwWa +vrbzRZ20mzlWzAHPfc/af/IqJPYlvlIyOwZGRZ7cvA+KJ4iEniKAuUw0xWJRY1Y zWTLgw9amSRWD+cQuUSc/LlK82VKMkLx1fSK1apyf7sjFmY34CTSn+ou0Oejenc3 JxUviXrdlNcr7n8soPHl/Zid0HerwYU8RE6tZ7CdDLQ3KTzyGxFXA36+kQ1hVRVo ST+KreuNFe44y6tClrRluZUJFfe7 -----END CERTIFICATE-----Generated at Thu Sep 18 21:22:06 2025 by rpki-client