$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa File: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (raw, json) Hash identifier: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs= Subject key identifier: 2D:13:43:D2:E3:80:F5:0E:2E:D0:B5:9E:B8:B3:1A:BC:B7:96:AD:55 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 22353DCC70728937BA8C835E0FE0B8EA217DD33E Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa Signing time: Thu 06 Mar 2025 07:52:47 +0000 ROA not before: Thu 06 Mar 2025 07:47:47 +0000 ROA not after: Thu 05 Mar 2026 07:52:47 +0000 asID: 265935 IP address blocks: 2804:401c:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:35:3d:cc:70:72:89:37:ba:8c:83:5e:0f:e0:b8:ea:21:7d:d3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Mar 6 07:47:47 2025 GMT Not After : Mar 5 07:52:47 2026 GMT Subject: CN=2D1343D2E380F50E2ED0B59EB8B31ABCB796AD55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:69:04:16:c0:25:0f:a0:0d:d1:be:d7:92: ae:87:f2:13:94:f7:5a:28:54:cd:eb:2c:07:14:da: 4f:ad:74:21:53:12:4a:a1:f0:00:54:34:a0:74:fc: 8b:ab:32:61:d6:ef:07:36:6a:df:21:7c:ad:8f:94: ea:13:c4:c7:78:e3:78:90:81:42:46:7b:e7:a3:ef: 01:09:b2:85:93:df:81:36:87:d1:0f:6e:43:3b:0e: 65:d6:50:ff:cb:c7:47:6b:5a:ec:18:fe:47:08:3f: 62:4c:4c:66:92:c9:b1:5b:68:5b:03:b0:1f:09:ec: 0b:0d:a5:03:30:ae:1f:d3:38:a8:13:bf:f3:87:c7: b4:ed:0d:e0:69:13:3a:59:6c:03:18:db:1e:0c:6a: 28:92:51:36:72:6f:3b:c7:fa:09:88:63:ce:cd:ce: 14:c5:51:30:2a:fa:4f:ba:e4:4b:8c:b6:f6:e2:40: 85:34:eb:7b:03:93:0d:09:2d:c1:a9:b7:4b:9b:3c: a9:6f:34:dd:98:b9:e4:10:4b:a3:34:2d:19:0b:a4: 0b:81:fb:05:c4:5e:a4:15:1d:37:da:d8:84:dc:bf: e6:b4:38:61:a5:ec:6b:58:1b:3d:d8:bd:c9:e4:9c: b3:13:ec:75:ca:1f:d4:11:8c:b5:3e:7b:f7:7d:a2: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:13:43:D2:E3:80:F5:0E:2E:D0:B5:9E:B8:B3:1A:BC:B7:96:AD:55 X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:401c:4000::/34 Signature Algorithm: sha256WithRSAEncryption 5d:2b:15:24:95:53:8a:24:af:57:65:82:04:0a:0d:f0:56:00: 88:18:c7:ab:33:c8:47:e1:22:c1:e8:16:a7:e0:02:01:4d:e0: f5:ff:f2:bf:fc:54:5a:eb:ad:a8:30:27:04:7a:61:5f:da:ee: 77:52:93:cf:f0:11:5f:59:27:bc:e2:e2:d0:67:45:83:39:70: 8b:94:b3:01:76:58:1d:4a:02:82:ca:d8:f0:8a:73:f5:53:93: e5:e0:0f:8b:cb:b4:48:c6:08:08:2c:38:0b:23:a4:c8:26:59: 0b:f9:6a:68:40:70:53:ab:6f:db:61:ef:f1:61:ee:02:58:d2: e0:88:18:55:5c:e6:87:96:1c:59:2b:38:f9:37:42:80:15:55: 04:2a:b7:6e:63:6e:b9:05:01:26:82:f9:d5:c1:1d:cf:d7:3c: 09:a1:28:57:b3:d8:42:a8:7f:d0:a0:72:4f:18:1b:0a:45:2f: b8:73:05:75:6d:5c:92:24:a6:bd:6e:06:ef:d9:b9:00:07:2f: 58:7b:32:b6:7d:31:1f:5e:6a:ae:cd:20:d5:49:3a:ab:d3:8d: bb:c5:cc:5c:92:da:1a:63:a5:83:22:9c:5a:f6:b6:ad:22:e5: 72:e6:d9:09:50:29:9f:fe:34:6b:2b:c8:72:29:1e:d1:2e:ab: 30:93:c0:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUIjU9zHByiTe6jINeD+C46iF90z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTAzMDYwNzQ3NDdaFw0yNjAzMDUwNzUyNDdaMDMxMTAvBgNV BAMTKDJEMTM0M0QyRTM4MEY1MEUyRUQwQjU5RUI4QjMxQUJDQjc5NkFENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93WkEFsAlD6AN0b7Xkq6H8hOU 91ooVM3rLAcU2k+tdCFTEkqh8ABUNKB0/IurMmHW7wc2at8hfK2PlOoTxMd443iQ gUJGe+ej7wEJsoWT34E2h9EPbkM7DmXWUP/Lx0drWuwY/kcIP2JMTGaSybFbaFsD sB8J7AsNpQMwrh/TOKgTv/OHx7TtDeBpEzpZbAMY2x4MaiiSUTZybzvH+gmIY87N zhTFUTAq+k+65EuMtvbiQIU063sDkw0JLcGpt0ubPKlvNN2YueQQS6M0LRkLpAuB +wXEXqQVHTfa2ITcv+a0OGGl7GtYGz3YvcnknLMT7HXKH9QRjLU+e/d9ogsbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULRND0uOA9Q4u0LWeuLMavLeWrVUwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv MzIzODMwMzQzYTM0MzAzMTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzNTM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQBxAMA0GCSqGSIb3DQEBCwUA A4IBAQBdKxUklVOKJK9XZYIECg3wVgCIGMerM8hH4SLB6Ban4AIBTeD1//K//FRa 662oMCcEemFf2u53UpPP8BFfWSe84uLQZ0WDOXCLlLMBdlgdSgKCytjwinP1U5Pl 4A+Ly7RIxggILDgLI6TIJlkL+WpoQHBTq2/bYe/xYe4CWNLgiBhVXOaHlhxZKzj5 N0KAFVUEKrduY265BQEmgvnVwR3P1zwJoShXs9hCqH/QoHJPGBsKRS+4cwV1bVyS JKa9bgbv2bkABy9YezK2fTEfXmquzSDVSTqr0427xcxcktoaY6WDIpxa9ratIuVy 5tkJUCmf/jRrK8hyKR7RLqswk8DE -----END CERTIFICATE-----Generated at Mon Nov 3 19:37:02 2025 by rpki-client