$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa File: 323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa (raw, json) Hash identifier: MxtZ9EJPkyF+YNXZieFUaLFM1OcwrqefDjv8/f86TUY= Subject key identifier: AF:85:88:72:6A:AF:FC:E2:97:12:65:FA:9B:D8:BF:9F:5B:66:C0:E0 Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29 Certificate serial: 7105F832D508C292CA900724A6167A133DA21C5C Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa Signing time: Tue 06 May 2025 20:00:45 +0000 ROA not before: Tue 06 May 2025 19:55:45 +0000 ROA not after: Tue 05 May 2026 20:00:45 +0000 asID: 268425 IP address blocks: 2804:5104:3900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:05:f8:32:d5:08:c2:92:ca:90:07:24:a6:16:7a:13:3d:a2:1c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29 Validity Not Before: May 6 19:55:45 2025 GMT Not After : May 5 20:00:45 2026 GMT Subject: CN=AF8588726AAFFCE2971265FA9BD8BF9F5B66C0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:87:71:fc:94:14:c1:93:7c:47:14:d5:b4: af:6f:f3:ba:5e:88:f6:12:68:fe:cc:e6:d4:de:91: f8:24:63:ed:6e:3f:98:ec:4d:81:f3:47:63:93:71: 78:71:47:d7:ab:f1:e5:d1:bc:dc:3f:f7:58:dd:aa: d8:aa:ea:8a:03:1e:79:9d:e2:35:af:00:20:52:5f: 71:6e:32:d5:e7:be:31:95:fd:39:f0:74:97:80:76: 5e:ea:74:af:63:81:f5:94:b5:34:05:85:99:59:6f: 26:00:23:99:11:35:12:e8:99:ae:bd:0a:78:e9:50: 35:12:fd:52:d1:79:6a:31:c1:d6:1a:5b:d6:4a:97: a1:55:49:6a:3d:53:e2:e5:cd:d0:a6:1f:d6:39:00: 81:1d:8a:a6:10:0f:e4:1d:2b:5c:a4:e7:9b:b8:49: 2f:9a:c9:91:07:34:95:25:d5:56:fe:db:29:20:45: 6b:6b:1d:20:47:f1:b2:6f:4a:ab:3d:51:5f:59:b5: 7e:b9:c9:b7:13:7f:26:51:c9:51:ae:a0:b7:45:2f: 3c:b5:41:8a:6a:8c:e2:27:c9:b4:42:62:d8:72:cf: b9:16:b5:79:64:36:82:27:98:71:7e:6c:e9:16:5b: 17:bf:c5:ac:24:e8:ff:09:48:36:55:70:83:ab:b4: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:88:72:6A:AF:FC:E2:97:12:65:FA:9B:D8:BF:9F:5B:66:C0:E0 X509v3 Authority Key Identifier: keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5104:3900::/40 Signature Algorithm: sha256WithRSAEncryption 1d:31:04:2b:20:9f:ee:3c:8d:52:3e:15:3b:8c:13:69:62:44: c4:ce:b3:4d:84:0d:58:7e:c5:1b:f1:3f:f6:c7:dc:ca:96:dd: 6e:19:94:5d:62:73:aa:c2:5d:f9:8d:39:bb:da:1a:f3:20:10: f6:2e:36:34:90:0b:26:87:f9:ee:bd:c1:bf:99:1b:1a:3f:81: 2e:39:91:da:24:fa:90:d3:0e:7d:ea:3a:7f:e8:16:1c:4c:a6: 7a:8e:e6:a0:1e:90:69:10:c7:b6:53:c4:d1:a7:f4:93:3c:cd: af:da:b4:ed:ed:5d:60:57:f9:90:39:e9:80:8d:ed:96:ce:f0: b8:b5:b9:75:d9:ad:f1:5c:dc:b2:30:25:94:76:a0:5e:91:39: bb:93:90:ff:cd:ad:fc:a3:1a:e2:b0:d4:f2:4e:83:7f:e1:25: 6a:a7:36:61:22:a7:df:dc:de:cd:75:a2:91:94:73:ad:b1:15: 00:37:26:4c:3c:1c:21:ac:ba:76:1c:bb:a8:8d:c4:7c:97:be: 52:a0:e2:0a:39:c6:7d:5e:cc:5d:54:9d:4d:68:e3:19:ed:09: 97:17:0b:53:bc:c7:c9:ec:0a:4c:55:9b:e2:af:f0:05:ea:b3: 24:fd:eb:99:bb:c9:7d:0f:24:7c:db:cd:74:ed:49:09:6a:25: 46:8e:07:c2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUcQX4MtUIwpLKkAckphZ6Ez2iHFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk2OEYwOEMzQkQwQTgyMTExMkJEQkQ4NjkxNEVENTk2 NEExRkYyOTAeFw0yNTA1MDYxOTU1NDVaFw0yNjA1MDUyMDAwNDVaMDMxMTAvBgNV BAMTKEFGODU4ODcyNkFBRkZDRTI5NzEyNjVGQTlCRDhCRjlGNUI2NkMwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfU4dx/JQUwZN8RxTVtK9v87pe iPYSaP7M5tTekfgkY+1uP5jsTYHzR2OTcXhxR9er8eXRvNw/91jdqtiq6ooDHnmd 4jWvACBSX3FuMtXnvjGV/TnwdJeAdl7qdK9jgfWUtTQFhZlZbyYAI5kRNRLoma69 CnjpUDUS/VLReWoxwdYaW9ZKl6FVSWo9U+LlzdCmH9Y5AIEdiqYQD+QdK1yk55u4 SS+ayZEHNJUl1Vb+2ykgRWtrHSBH8bJvSqs9UV9ZtX65ybcTfyZRyVGuoLdFLzy1 QYpqjOInybRCYthyz7kWtXlkNoInmHF+bOkWWxe/xawk6P8JSDZVcIOrtM5fAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUr4WIcmqv/OKXEmX6m9i/n1tmwOAwHwYDVR0j BBgwFoAU6WjwjDvQqCERK9vYaRTtWWSh/ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlAyVzVUR3liU0Y3QVdXSzlBS2tBZE5Ob0JTVnVmeWp5NjMydXZYU0NN Vk4vMC9FOTY4RjA4QzNCRDBBODIxMTEyQkRCRDg2OTE0RUQ1OTY0QTFGRjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5NjhGMDhDM0JEMEE4MjEx MTJCREJEODY5MTRFRDU5NjRBMUZGMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJQMlc1VEd5YlNGN0FXV0s5QUtrQWROTm9CU1Z1ZnlqeTYzMnV2WFNDTVZOLzAv MzIzODMwMzQzYTM1MzEzMDM0M2EzMzM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzODM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEUQQ5MA0GCSqGSIb3DQEBCwUA A4IBAQAdMQQrIJ/uPI1SPhU7jBNpYkTEzrNNhA1YfsUb8T/2x9zKlt1uGZRdYnOq wl35jTm72hrzIBD2LjY0kAsmh/nuvcG/mRsaP4EuOZHaJPqQ0w596jp/6BYcTKZ6 juagHpBpEMe2U8TRp/STPM2v2rTt7V1gV/mQOemAje2WzvC4tbl12a3xXNyyMCWU dqBekTm7k5D/za38oxrisNTyToN/4SVqpzZhIqff3N7NdaKRlHOtsRUANyZMPBwh rLp2HLuojcR8l75SoOIKOcZ9XsxdVJ1NaOMZ7QmXFwtTvMfJ7ApMVZvir/AF6rMk /euZu8l9DyR828107UkJaiVGjgfC -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:37 2025 by rpki-client