$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa File: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (raw, json) Hash identifier: C2gaAeMLJCaTjaTCRD9gXMgd6K9aiWuRcNiCGX7T9FM= Subject key identifier: 40:AE:26:CF:FF:D8:1C:82:05:31:CA:60:66:59:A9:CE:3E:BD:C9:27 Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C Certificate serial: 397930468B83D833F93F815D6E64E8D87DBE9E8B Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa Signing time: Wed 05 Mar 2025 19:00:01 +0000 ROA not before: Wed 05 Mar 2025 18:55:01 +0000 ROA not after: Wed 04 Mar 2026 19:00:01 +0000 asID: 268312 IP address blocks: 2804:4f38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:79:30:46:8b:83:d8:33:f9:3f:81:5d:6e:64:e8:d8:7d:be:9e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C Validity Not Before: Mar 5 18:55:01 2025 GMT Not After : Mar 4 19:00:01 2026 GMT Subject: CN=40AE26CFFFD81C820531CA606659A9CE3EBDC927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:65:78:d6:10:2a:69:fd:ec:78:23:bf:46: b3:de:a3:ae:e7:73:03:ef:9b:f0:15:cf:93:d3:79: c0:ba:f8:b9:34:7e:10:42:96:29:1c:8f:dc:4a:a4: ac:4b:4f:48:f2:ff:cf:c0:6c:6b:6c:72:fe:0f:a6: 93:f6:01:23:66:fa:f7:76:18:e7:48:3b:61:ae:f4: ba:f6:99:f6:c6:e3:1a:d6:19:83:e6:07:14:b1:98: 4e:13:5a:e0:2d:26:c1:cf:fd:83:ba:df:7b:49:55: db:6a:a8:fc:56:a5:68:c2:d4:12:b0:d7:60:e5:d8: a7:4e:00:5e:22:11:6a:89:00:75:cb:c2:38:5f:4b: 49:fc:fe:7f:1d:78:04:06:8f:14:6b:83:03:3a:e4: 0b:89:49:80:3e:68:82:d2:46:3f:82:23:1d:94:b7: bd:e2:23:ac:54:0d:3b:6b:99:9f:45:b7:d5:c3:71: 2f:e0:c4:91:73:ac:cc:66:6f:97:a1:b8:7b:a7:5f: 15:6e:6b:63:93:19:bc:01:44:9a:ba:c9:0e:f4:3f: 34:4c:af:c3:ba:32:f6:a1:0b:23:5d:83:07:71:f2: 76:bf:20:85:fc:50:f3:95:0e:5a:30:15:d3:bf:fd: e8:87:79:32:ec:cb:dd:1b:a4:df:e3:94:25:f5:9d: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:26:CF:FF:D8:1C:82:05:31:CA:60:66:59:A9:CE:3E:BD:C9:27 X509v3 Authority Key Identifier: keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/323830343a346633383a3a2f33322d3332203d3e20323638333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4f38::/32 Signature Algorithm: sha256WithRSAEncryption 0c:c4:2b:48:0c:f0:24:af:d4:83:fa:2b:8f:f4:6b:02:54:5e: 4e:0e:cf:41:18:70:e5:17:d0:f3:00:4a:fe:46:f7:41:12:90: be:69:5f:db:4e:f1:be:a8:54:b4:92:d2:8a:7b:df:68:20:9b: 5f:ef:44:2d:76:53:1f:b4:56:2e:01:0f:78:a1:70:f5:c9:19: 6b:ab:49:1b:e2:93:5f:48:1e:af:17:3b:ac:44:8d:49:a8:98: 4b:1e:45:a0:cc:6e:b8:5b:82:a7:8e:aa:81:91:35:e0:14:b6: ca:8e:ad:79:89:c4:77:77:8d:2f:a9:7d:e7:67:d8:04:a4:6c: 95:e1:b3:80:74:10:bd:0f:06:05:cb:be:37:99:3f:fc:f6:12: 11:cc:f5:82:e9:90:85:7e:96:96:62:da:93:4d:9d:f6:b2:58: fb:5a:76:63:8a:97:6e:fd:fe:ad:bb:16:90:4a:3d:84:28:aa: a4:62:2a:53:9f:d6:71:fc:64:33:2c:3a:fd:ea:0f:ed:26:23: 0e:59:10:8b:e7:f8:44:d2:18:c7:79:db:50:7c:a0:1e:57:fb: e2:43:e7:13:df:c2:e8:83:6f:39:f7:6e:31:d9:be:7d:ff:5b: 34:4e:fa:a6:eb:c6:c5:5a:9f:c7:51:8c:2b:6c:5d:6c:83:c3: 13:06:04:71 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUOXkwRouD2DP5P4FdbmTo2H2+noswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1 QzkyRDQwQzAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV BAMTKDQwQUUyNkNGRkZEODFDODIwNTMxQ0E2MDY2NTlBOUNFM0VCREM5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bmV41hAqaf3seCO/RrPeo67n cwPvm/AVz5PTecC6+Lk0fhBClikcj9xKpKxLT0jy/8/AbGtscv4PppP2ASNm+vd2 GOdIO2Gu9Lr2mfbG4xrWGYPmBxSxmE4TWuAtJsHP/YO633tJVdtqqPxWpWjC1BKw 12Dl2KdOAF4iEWqJAHXLwjhfS0n8/n8deAQGjxRrgwM65AuJSYA+aILSRj+CIx2U t73iI6xUDTtrmZ9Ft9XDcS/gxJFzrMxmb5ehuHunXxVua2OTGbwBRJq6yQ70PzRM r8O6MvahCyNdgwdx8na/IIX8UPOVDlowFdO//eiHeTLsy90bpN/jlCX1nd7rAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUQK4mz//YHIIFMcpgZlmpzj69yScwHwYDVR0j BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1 alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv MzIzODMwMzQzYTM0NjYzMzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4 MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARPODANBgkqhkiG9w0BAQsFAAOCAQEADMQrSAzw JK/Ug/orj/RrAlReTg7PQRhw5RfQ8wBK/kb3QRKQvmlf207xvqhUtJLSinvfaCCb X+9ELXZTH7RWLgEPeKFw9ckZa6tJG+KTX0gerxc7rESNSaiYSx5FoMxuuFuCp46q gZE14BS2yo6teYnEd3eNL6l952fYBKRsleGzgHQQvQ8GBcu+N5k//PYSEcz1gumQ hX6WlmLak02d9rJY+1p2Y4qXbv3+rbsWkEo9hCiqpGIqU5/WcfxkMyw6/eoP7SYj DlkQi+f4RNIYx3nbUHygHlf74kPnE9/C6INvOfduMdm+ff9bNE76puvGxVqfx1GM K2xdbIPDEwYEcQ== -----END CERTIFICATE-----Generated at Mon Nov 3 18:59:47 2025 by rpki-client