$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa File: 323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa (raw, json) Hash identifier: v850qNKD0KujsfrVucUFAOwwC34fXg2h11HTSDRpK8o= Subject key identifier: 3B:30:90:A6:19:51:6D:EC:B2:23:76:54:80:71:C0:F3:1B:F4:AA:3C Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Certificate serial: 61B09C887815AF471A60D8574BA5E1ECE5A86E27 Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa Signing time: Fri 24 Oct 2025 20:44:46 +0000 ROA not before: Fri 24 Oct 2025 20:39:46 +0000 ROA not after: Fri 23 Oct 2026 20:44:46 +0000 asID: 269375 IP address blocks: 2804:63a8:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b0:9c:88:78:15:af:47:1a:60:d8:57:4b:a5:e1:ec:e5:a8:6e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Validity Not Before: Oct 24 20:39:46 2025 GMT Not After : Oct 23 20:44:46 2026 GMT Subject: CN=3B3090A619516DECB22376548071C0F31BF4AA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:a9:6e:65:c4:50:11:68:06:7c:28:4b:9c: 98:42:0f:d0:50:f3:7e:e8:9b:22:16:d6:e3:22:37: 2b:cc:8e:15:11:d9:bd:af:00:4f:a0:8c:b4:2c:9d: c8:60:72:09:e7:41:75:1d:d2:8c:ad:9b:d8:ab:b0: 5b:6b:be:de:1c:e8:e3:a4:5c:c3:64:0e:37:64:f5: 79:8a:3f:75:a1:fa:aa:b2:d2:a8:4a:2d:9f:61:02: 12:a0:30:b5:9a:82:72:de:5a:a2:cc:73:39:5a:0c: 26:3a:cb:5e:a3:c7:43:6d:85:17:62:86:0b:97:d6: b7:01:26:4c:30:2c:4c:31:e2:30:b5:1b:3c:6d:9e: b0:bb:62:84:7a:a4:d9:09:a2:b6:20:fd:f5:0d:a0: e5:c4:bb:a6:9f:b2:19:cb:21:e1:f5:33:aa:e2:40: fb:c9:cd:e3:96:08:6b:97:ba:b6:1b:72:20:f4:62: ab:3c:05:c2:2b:bd:79:12:ae:89:18:5a:95:d7:1b: d0:98:0c:53:df:cd:2e:19:e5:ed:c4:36:5b:4e:f9: 85:15:74:d1:d0:71:06:5f:16:b4:f3:f5:48:37:aa: 77:5b:48:3d:7c:91:08:3c:ad:76:a6:ef:3f:c9:44: cd:05:92:13:59:2b:ea:34:f1:70:19:15:61:24:90: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:30:90:A6:19:51:6D:EC:B2:23:76:54:80:71:C0:F3:1B:F4:AA:3C X509v3 Authority Key Identifier: keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/323830343a363361383a663030303a3a2f34302d3430203d3e20323639333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:63a8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 71:7c:21:71:21:b6:70:62:b9:a2:2a:45:a2:9a:d5:b4:59:d9: ae:43:c9:cc:ac:71:17:5a:1c:88:1b:e5:c6:f1:4b:de:ec:8f: 7f:be:e9:0a:33:0d:78:6c:60:5d:d8:e8:bf:f5:47:30:53:d2: 38:4d:69:d0:54:6c:7d:a9:82:d0:dc:a1:73:33:b7:5e:c1:88: bd:e1:84:b1:ab:41:a6:6b:b3:43:b0:2d:b3:4b:fb:25:08:2f: 4b:91:67:d9:3e:75:ac:e4:b2:5d:8c:b2:db:5b:20:dc:4c:bc: e6:a6:51:e5:a4:f6:ba:da:7a:9e:9f:93:6c:90:de:85:8c:bc: 86:be:12:a1:9c:de:fe:df:67:a6:4d:2c:7b:29:3a:58:53:01: dd:79:d3:48:0c:59:85:f4:c4:39:b0:59:bc:76:6c:1c:b8:d7: a1:04:8a:6f:ac:2d:c3:e3:ed:d9:15:f3:b1:f2:1c:ed:48:98: 73:7e:84:95:da:38:83:0d:37:0b:e3:70:21:51:e7:a0:ed:6a: 3b:bb:5b:08:d7:e2:55:18:70:b0:eb:a1:6c:cc:d0:0a:5d:1d: 67:b8:83:c4:3c:52:94:f3:21:01:8a:fe:47:35:6a:93:74:e2: 09:65:c5:dc:c7:10:84:8d:be:aa:3a:ba:0e:7b:bf:5f:01:3e: b6:af:8c:53 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUYbCciHgVr0caYNhXS6Xh7OWobicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE MjVGOEQ4ODAeFw0yNTEwMjQyMDM5NDZaFw0yNjEwMjMyMDQ0NDZaMDMxMTAvBgNV BAMTKDNCMzA5MEE2MTk1MTZERUNCMjIzNzY1NDgwNzFDMEYzMUJGNEFBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OqluZcRQEWgGfChLnJhCD9BQ 837omyIW1uMiNyvMjhUR2b2vAE+gjLQsnchgcgnnQXUd0oytm9irsFtrvt4c6OOk XMNkDjdk9XmKP3Wh+qqy0qhKLZ9hAhKgMLWagnLeWqLMczlaDCY6y16jx0NthRdi hguX1rcBJkwwLEwx4jC1GzxtnrC7YoR6pNkJorYg/fUNoOXEu6afshnLIeH1M6ri QPvJzeOWCGuXurYbciD0Yqs8BcIrvXkSrokYWpXXG9CYDFPfzS4Z5e3ENltO+YUV dNHQcQZfFrTz9Ug3qndbSD18kQg8rXam7z/JRM0FkhNZK+o08XAZFWEkkGHlAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUOzCQphlRbeyyI3ZUgHHA8xv0qjwwHwYDVR0j BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRYWGc2eVdZRUJORWpxUGtxY3BvMUFXeFRBbVp6bkVwQ2RidVdrNXl6aGVELzAv MzIzODMwMzQzYTM2MzM2MTM4M2E2NjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzYzOTMzMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEY6jwMA0GCSqGSIb3DQEBCwUA A4IBAQBxfCFxIbZwYrmiKkWimtW0WdmuQ8nMrHEXWhyIG+XG8Uve7I9/vukKMw14 bGBd2Oi/9UcwU9I4TWnQVGx9qYLQ3KFzM7dewYi94YSxq0Gma7NDsC2zS/slCC9L kWfZPnWs5LJdjLLbWyDcTLzmplHlpPa62nqen5NskN6FjLyGvhKhnN7+32emTSx7 KTpYUwHdedNIDFmF9MQ5sFm8dmwcuNehBIpvrC3D4+3ZFfOx8hztSJhzfoSV2jiD DTcL43AhUeeg7Wo7u1sI1+JVGHCw66FszNAKXR1nuIPEPFKU8yEBiv5HNWqTdOIJ ZcXcxxCEjb6qOroOe79fAT62r4xT -----END CERTIFICATE-----Generated at Mon Nov 3 19:16:16 2025 by rpki-client