$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa File: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (raw, json) Hash identifier: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE= Subject key identifier: 5C:53:BE:12:34:2B:4D:58:05:9B:01:0A:5A:38:AE:DE:EC:B5:58:87 Certificate issuer: /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817 Certificate serial: 23FD37AF8B90EFEC725E1C5DAFFED920B6E99260 Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa Signing time: Sat 06 Sep 2025 13:07:44 +0000 ROA not before: Sat 06 Sep 2025 13:02:44 +0000 ROA not after: Sat 05 Sep 2026 13:07:44 +0000 asID: 267353 IP address blocks: 2804:4c28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fd:37:af:8b:90:ef:ec:72:5e:1c:5d:af:fe:d9:20:b6:e9:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817 Validity Not Before: Sep 6 13:02:44 2025 GMT Not After : Sep 5 13:07:44 2026 GMT Subject: CN=5C53BE12342B4D58059B010A5A38AEDEECB55887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:a6:a1:8c:c3:0f:4b:39:e2:bb:a9:0a:da: 2c:43:77:83:8d:de:17:d0:10:62:c3:59:33:86:92: e9:2c:af:45:f5:48:17:ff:fb:a7:13:44:3d:84:55: b8:53:8d:aa:94:e5:47:2d:dd:71:bf:8d:1e:07:66: 2d:1a:8d:2b:8e:04:f0:93:45:ea:04:b8:5f:6b:f4: b0:3c:46:09:fb:e2:03:00:02:64:de:38:5e:7a:3b: 5c:9f:9e:50:4e:cc:ce:a7:d7:72:8a:12:cf:91:a5: bb:7a:94:52:1b:ee:16:a3:c6:28:bb:54:3e:de:b0: 9e:da:a5:8a:28:0b:26:c9:47:79:50:97:1c:b3:13: b3:b3:12:be:7f:41:9a:54:ad:8c:1f:24:5e:b7:b7: fc:3f:23:10:4f:db:d4:ca:2d:96:41:ff:5e:c4:1d: 96:39:9f:93:a5:66:78:28:93:cc:e0:26:d9:36:65: ae:7d:e9:19:b7:a7:d1:9f:59:b0:bc:d7:84:9f:64: e2:77:be:f2:b0:b4:51:a0:82:f0:90:35:74:d6:d1: 03:49:76:e2:e2:4f:88:e3:db:5e:cb:a6:3a:08:5c: d1:f1:41:f8:9f:41:56:8f:b5:f7:41:c1:39:d7:87: f6:16:d8:64:b0:e1:74:3d:55:39:1e:f2:96:fd:74: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:BE:12:34:2B:4D:58:05:9B:01:0A:5A:38:AE:DE:EC:B5:58:87 X509v3 Authority Key Identifier: keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4c28::/32 Signature Algorithm: sha256WithRSAEncryption 47:f9:f8:5b:39:3a:d5:ed:88:4a:eb:dd:08:6c:64:d1:8d:5a: c7:1e:ec:79:41:fe:42:9b:cd:e0:8d:9a:e5:1f:ae:bc:17:35: 45:a0:30:2d:df:cb:3c:97:6b:16:19:92:e9:11:18:52:78:86: d0:83:38:5a:42:08:bc:43:2e:3b:6c:b2:dc:9c:a1:54:bf:d6: 7d:60:b2:b2:3a:b9:50:6a:bd:0a:45:b0:d5:82:af:9c:59:64: 04:17:58:73:75:d8:be:bd:13:23:f8:a6:62:05:37:3a:98:09: d5:78:73:8c:3d:00:a9:3d:8b:85:69:c4:d0:5d:44:3e:f6:75: 09:62:6d:7e:5d:e1:76:d2:ab:e5:ed:09:f3:93:63:e0:51:94: d6:85:2f:d3:42:65:dc:79:13:35:20:c5:30:df:06:5c:b4:e3: 85:8e:ad:44:1d:2e:a0:88:20:2f:db:2c:5f:f8:6d:1b:f2:34: bc:2d:89:4d:0e:e4:60:79:21:f3:e0:c8:48:3f:e4:c4:36:11: 66:ff:7b:c2:84:3f:1c:4c:29:5d:ee:1e:86:7b:85:a7:d2:c6: 62:84:a4:8c:92:e1:d1:89:20:ef:8f:c3:0a:f1:c9:05:0d:8c: 8d:5a:d5:60:2f:0f:67:d8:5e:32:e9:d4:a1:8a:c5:0d:8b:9e: 87:6a:0d:cd -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUI/03r4uQ7+xyXhxdr/7ZILbpkmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0NzIwN0VBNDNFOUNFRkRCQTc0QUQyQ0Q2NkY4OUNF NkFGOTgxNzAeFw0yNTA5MDYxMzAyNDRaFw0yNjA5MDUxMzA3NDRaMDMxMTAvBgNV BAMTKDVDNTNCRTEyMzQyQjRENTgwNTlCMDEwQTVBMzhBRURFRUNCNTU4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww6ahjMMPSzniu6kK2ixDd4ON 3hfQEGLDWTOGkuksr0X1SBf/+6cTRD2EVbhTjaqU5Uct3XG/jR4HZi0ajSuOBPCT ReoEuF9r9LA8Rgn74gMAAmTeOF56O1yfnlBOzM6n13KKEs+Rpbt6lFIb7hajxii7 VD7esJ7apYooCybJR3lQlxyzE7OzEr5/QZpUrYwfJF63t/w/IxBP29TKLZZB/17E HZY5n5OlZngok8zgJtk2Za596Rm3p9GfWbC814SfZOJ3vvKwtFGggvCQNXTW0QNJ duLiT4jj217LpjoIXNHxQfifQVaPtfdBwTnXh/YW2GSw4XQ9VTke8pb9dDzjAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUXFO+EjQrTVgFmwEKWjiu3uy1WIcwHwYDVR0j BBgwFoAUdEcgfqQ+nO/bp0rSzWb4nOavmBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj OUUvMC83NDQ3MjA3RUE0M0U5Q0VGREJBNzRBRDJDRDY2Rjg5Q0U2QUY5ODE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NDcyMDdFQTQzRTlDRUZE QkE3NEFEMkNENjZGODlDRTZBRjk4MTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJQem03TFI5YWFRYnpGNVlYdEhhd3ZhU25iRGZYdWhhdzlRRUx1dHN2YzlFLzAv MzIzODMwMzQzYTM0NjMzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3 MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARMKDANBgkqhkiG9w0BAQsFAAOCAQEAR/n4Wzk6 1e2ISuvdCGxk0Y1axx7seUH+QpvN4I2a5R+uvBc1RaAwLd/LPJdrFhmS6REYUniG 0IM4WkIIvEMuO2yy3JyhVL/WfWCysjq5UGq9CkWw1YKvnFlkBBdYc3XYvr0TI/im YgU3OpgJ1XhzjD0AqT2LhWnE0F1EPvZ1CWJtfl3hdtKr5e0J85Nj4FGU1oUv00Jl 3HkTNSDFMN8GXLTjhY6tRB0uoIggL9ssX/htG/I0vC2JTQ7kYHkh8+DISD/kxDYR Zv97woQ/HEwpXe4ehnuFp9LGYoSkjJLh0Ykg74/DCvHJBQ2MjVrVYC8PZ9heMunU oYrFDYueh2oNzQ== -----END CERTIFICATE-----Generated at Thu Sep 18 12:46:50 2025 by rpki-client