$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa File: 323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (raw, json) Hash identifier: IF17TOnucz3eEhEG7pqk96MKlsI9afVTvw2Ilw7esBE= Subject key identifier: 69:0C:82:5A:53:27:18:5B:0A:DD:6E:34:A4:45:8D:A8:02:51:30:4B Certificate issuer: /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Certificate serial: 239216159B9B5E1EB6A18685DD43845A48EF876C Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa Signing time: Wed 23 Jul 2025 05:17:50 +0000 ROA not before: Wed 23 Jul 2025 05:12:50 +0000 ROA not after: Wed 22 Jul 2026 05:17:50 +0000 asID: 268791 IP address blocks: 2804:5ab8::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 11:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:92:16:15:9b:9b:5e:1e:b6:a1:86:85:dd:43:84:5a:48:ef:87:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Validity Not Before: Jul 23 05:12:50 2025 GMT Not After : Jul 22 05:17:50 2026 GMT Subject: CN=690C825A5327185B0ADD6E34A4458DA80251304B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:c9:5b:76:67:85:c6:46:f8:3d:42:c9:7a: 43:2a:7a:5e:1e:7e:64:df:98:6b:3c:d9:c7:b0:c2: ef:4f:43:7e:2d:d1:b8:a3:10:63:fd:15:f3:b8:d2: a9:45:25:32:c1:eb:51:db:b4:32:1f:17:62:76:37: 67:02:cf:70:1d:ac:e3:73:f5:73:66:3e:fb:49:94: ba:3c:ac:b9:0a:b7:d9:06:e1:bb:b1:a8:40:0b:d8: bb:b5:1a:7b:0e:39:c1:57:2e:18:7a:69:87:79:de: 02:a7:65:6f:96:8a:64:73:e0:0d:4a:1d:7a:40:9c: 13:d9:9e:c0:c9:64:82:bd:d0:8b:aa:c7:03:c7:d2: ac:5c:db:8d:75:a3:db:49:9e:45:bb:90:4f:e0:f0: 0f:46:8b:09:78:aa:aa:47:e8:fe:8d:d0:17:b1:9e: 3c:33:59:e0:04:e2:d3:f9:51:36:2f:b3:b3:e2:55: a2:7f:2d:c6:7e:78:1d:e1:6b:44:bc:4e:fe:be:42: 76:a7:79:44:d7:ba:92:ce:9f:39:3c:1d:86:4c:c3: 10:f0:a9:22:69:a8:57:54:f6:41:33:34:e5:3d:a5: 33:ac:cc:ea:63:cd:8d:33:97:79:9e:b2:d3:b5:8c: 13:6c:86:61:b7:15:8c:f4:97:69:b6:8b:86:7d:63: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:82:5A:53:27:18:5B:0A:DD:6E:34:A4:45:8D:A8:02:51:30:4B X509v3 Authority Key Identifier: keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/323830343a356162383a3a2f33322d3334203d3e20323638373931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:5ab8::/32 Signature Algorithm: sha256WithRSAEncryption 5c:a5:e7:0f:05:27:5d:29:a3:3c:b7:35:84:82:4a:9c:fd:81: d0:46:f2:b4:0e:ea:5a:0b:f2:af:01:43:c4:3b:e8:11:cc:10: a0:35:53:12:cc:36:19:ac:31:1f:d7:49:ba:52:78:f5:a0:d3: 54:c3:1f:38:81:e8:c4:39:2e:21:62:3f:65:9f:19:ef:cf:c6: 3a:7a:4c:49:76:46:ab:78:83:bd:19:59:4f:e0:aa:85:6e:2f: 82:53:72:87:ec:69:35:0b:f9:26:8f:dd:69:9f:01:09:03:68: e2:7a:17:f1:93:95:22:f8:a6:f1:56:cc:2b:a8:4d:c3:59:33: 3a:d1:11:4c:f0:39:a3:72:be:82:d1:11:45:bd:0d:35:27:e3: 7c:98:50:7a:2e:d5:48:7b:7b:f1:85:70:65:ca:12:82:57:35: c0:08:d8:18:e8:b2:b2:fb:8e:a6:75:2a:40:cb:07:e9:6c:2d: 8a:96:94:d4:a7:84:cd:ee:7c:0d:b3:fa:ad:5d:16:a8:07:22: 65:9a:b7:57:54:8e:de:4a:8e:06:36:6a:1e:1b:46:ab:58:4e: 74:fb:99:b5:4a:5e:8d:a4:a0:8c:c1:0e:8e:34:65:26:6b:cd: 5c:8e:e8:5d:88:c3:64:8e:ec:f8:dc:c9:14:3c:b4:e9:94:e8: 5e:b3:f8:ae -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUI5IWFZubXh62oYaF3UOEWkjvh2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBRjEzMjRBMjNGREM4N0I3MTJBREQyMTg0NkNCMUJG M0NGRURGMjAeFw0yNTA3MjMwNTEyNTBaFw0yNjA3MjIwNTE3NTBaMDMxMTAvBgNV BAMTKDY5MEM4MjVBNTMyNzE4NUIwQURENkUzNEE0NDU4REE4MDI1MTMwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJslbdmeFxkb4PULJekMqel4e fmTfmGs82cewwu9PQ34t0bijEGP9FfO40qlFJTLB61HbtDIfF2J2N2cCz3AdrONz 9XNmPvtJlLo8rLkKt9kG4buxqEAL2Lu1GnsOOcFXLhh6aYd53gKnZW+WimRz4A1K HXpAnBPZnsDJZIK90IuqxwPH0qxc2411o9tJnkW7kE/g8A9Giwl4qqpH6P6N0Bex njwzWeAE4tP5UTYvs7PiVaJ/LcZ+eB3ha0S8Tv6+QnaneUTXupLOnzk8HYZMwxDw qSJpqFdU9kEzNOU9pTOszOpjzY0zl3mestO1jBNshmG3FYz0l2m2i4Z9Y2wLAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUaQyCWlMnGFsK3W40pEWNqAJRMEswHwYDVR0j BBgwFoAUv68TJKI/3Ie3Eq3SGEbLG/PP7fIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g5c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpI SjcvMC9CRkFGMTMyNEEyM0ZEQzg3QjcxMkFERDIxODQ2Q0IxQkYzQ0ZFREYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQUYxMzI0QTIzRkRDODdC NzEyQUREMjE4NDZDQjFCRjNDRkVERjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNoOXN3THVpOHBaaFpTVk16MW1UWldDVWNndTU2RDFwTjg2NHlKOTV6SEo3LzAv MzIzODMwMzQzYTM1NjE2MjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4 MzczOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARauDANBgkqhkiG9w0BAQsFAAOCAQEAXKXnDwUn XSmjPLc1hIJKnP2B0EbytA7qWgvyrwFDxDvoEcwQoDVTEsw2GawxH9dJulJ49aDT VMMfOIHoxDkuIWI/ZZ8Z78/GOnpMSXZGq3iDvRlZT+CqhW4vglNyh+xpNQv5Jo/d aZ8BCQNo4noX8ZOVIvim8VbMK6hNw1kzOtERTPA5o3K+gtERRb0NNSfjfJhQei7V SHt78YVwZcoSglc1wAjYGOiysvuOpnUqQMsH6WwtipaU1KeEze58DbP6rV0WqAci ZZq3V1SO3kqOBjZqHhtGq1hOdPuZtUpejaSgjMEOjjRlJmvNXI7oXYjDZI7s+NzJ FDy06ZToXrP4rg== -----END CERTIFICATE-----Generated at Tue Jul 29 01:20:20 2025 by rpki-client