$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa File: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (raw, json) Hash identifier: YFSp8DdFJz0DWkhR7AgaMYomEXIAeJ5yceKzekVZMBc= Subject key identifier: 70:20:28:B5:C3:EA:E6:7D:D5:3B:D2:53:B8:94:B5:71:B6:87:B5:9C Certificate issuer: /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C Certificate serial: 6CB0055B2275BAB2CB6B1E4E8832BB03A90DE29A Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa Signing time: Thu 08 May 2025 18:33:45 +0000 ROA not before: Thu 08 May 2025 18:28:45 +0000 ROA not after: Thu 07 May 2026 18:33:45 +0000 asID: 268091 IP address blocks: 2804:57dc:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 07:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b0:05:5b:22:75:ba:b2:cb:6b:1e:4e:88:32:bb:03:a9:0d:e2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C Validity Not Before: May 8 18:28:45 2025 GMT Not After : May 7 18:33:45 2026 GMT Subject: CN=702028B5C3EAE67DD53BD253B894B571B687B59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:11:92:13:ff:65:43:04:23:5f:00:df:ad: ad:72:44:5d:db:32:f2:01:ba:5d:bf:d2:3b:70:d9: 5d:bf:be:1c:7f:13:a7:3c:d2:66:e9:b2:f1:c9:11: f8:d9:06:7f:fd:3f:3c:3c:39:81:a6:43:c6:51:b1: 57:9b:29:d6:4e:02:b4:d8:ab:f1:47:52:26:26:f7: a8:3d:b6:c0:32:9a:3b:83:5e:56:28:71:bb:99:dd: 5f:2a:9a:3e:33:7e:2e:58:bd:ee:3b:90:d1:4c:fa: 01:22:13:b7:db:35:89:12:82:ed:12:03:69:d9:6c: e6:eb:08:30:df:ca:11:bb:89:18:9d:fb:3b:e6:ea: d5:58:65:8d:b8:74:45:1c:2e:0d:55:10:1f:e0:85: ad:3c:59:37:e7:11:1e:3c:35:e9:4e:23:f8:a2:49: d8:dc:9f:33:92:e2:eb:9e:4b:47:62:86:4c:bf:57: dc:e3:6d:7c:1f:08:26:85:f7:fa:90:0a:62:82:ef: 48:87:11:e7:2f:cc:8b:ad:f0:1b:6e:f8:6e:f1:f8: a9:d5:1f:2c:42:f4:2a:ea:0f:10:ad:82:4a:a2:91: 50:56:6c:3e:c7:f1:bd:f8:5d:21:3c:f8:b5:3d:00: 61:90:8e:1f:cc:fd:2d:40:fb:45:a1:b4:bc:c8:35: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:28:B5:C3:EA:E6:7D:D5:3B:D2:53:B8:94:B5:71:B6:87:B5:9C X509v3 Authority Key Identifier: keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:57dc:8000::/34 Signature Algorithm: sha256WithRSAEncryption 8f:d7:e2:2a:99:58:59:71:86:a9:24:36:7c:90:0e:23:b3:81: de:87:d8:59:41:7d:50:35:4c:ba:9b:e5:4f:61:17:23:3f:ac: f7:03:12:53:43:50:23:9f:53:b7:3f:62:26:a1:31:cb:16:9c: ce:37:4f:50:91:87:97:cb:1b:6e:ae:f7:0f:04:d8:63:48:68: c9:d0:52:58:09:94:f1:45:f5:cf:ba:56:7b:f0:30:e6:b0:20: 09:d4:3a:93:31:cb:87:53:ea:20:95:32:89:2f:ea:e3:8b:64: bb:14:9b:4c:2c:de:96:8d:18:6c:ab:27:63:e8:96:e4:19:bb: 8b:6b:67:94:8e:33:28:87:2c:d7:ea:5a:2a:6c:e1:44:78:a0: 0f:2b:4a:ee:fd:8e:ae:c6:92:40:b3:a1:7c:d7:e3:f5:53:6f: 91:2f:71:b3:67:74:bc:6b:45:1f:c3:d6:f4:60:82:00:b7:1f: 90:25:60:ed:77:8a:ec:b4:e5:b5:59:47:a7:91:89:83:52:6a: 64:57:65:b9:be:f1:bd:e8:55:fb:c7:a4:75:7e:f2:4d:58:1e: 05:ba:9b:b6:3c:69:db:35:a4:41:74:87:8c:1e:68:44:db:86: c8:3f:d8:26:4f:a8:94:03:2e:84:ec:47:c8:53:c3:a5:5c:12: 47:4d:81:41 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUbLAFWyJ1urLLax5OiDK7A6kN4powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0ODlBOEUyQ0FGMkVBMTZDMURBQTZFMDdGQjAwNDYz RjRGNzg4QzAeFw0yNTA1MDgxODI4NDVaFw0yNjA1MDcxODMzNDVaMDMxMTAvBgNV BAMTKDcwMjAyOEI1QzNFQUU2N0RENTNCRDI1M0I4OTRCNTcxQjY4N0I1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGhGSE/9lQwQjXwDfra1yRF3b MvIBul2/0jtw2V2/vhx/E6c80mbpsvHJEfjZBn/9Pzw8OYGmQ8ZRsVebKdZOArTY q/FHUiYm96g9tsAymjuDXlYocbuZ3V8qmj4zfi5Yve47kNFM+gEiE7fbNYkSgu0S A2nZbObrCDDfyhG7iRid+zvm6tVYZY24dEUcLg1VEB/gha08WTfnER48NelOI/ii SdjcnzOS4uueS0dihky/V9zjbXwfCCaF9/qQCmKC70iHEecvzIut8Btu+G7x+KnV HyxC9CrqDxCtgkqikVBWbD7H8b34XSE8+LU9AGGQjh/M/S1A+0WhtLzINfxhAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUcCAotcPq5n3VO9JTuJS1cbaHtZwwHwYDVR0j BBgwFoAUiUiajiyvLqFsHapuB/sARj9PeIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn RTgvMC84OTQ4OUE4RTJDQUYyRUExNkMxREFBNkUwN0ZCMDA0NjNGNEY3ODhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NDg5QThFMkNBRjJFQTE2 QzFEQUE2RTA3RkIwMDQ2M0Y0Rjc4OEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv MzIzODMwMzQzYTM1Mzc2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzYzODMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEV9yAMA0GCSqGSIb3DQEBCwUA A4IBAQCP1+IqmVhZcYapJDZ8kA4js4Heh9hZQX1QNUy6m+VPYRcjP6z3AxJTQ1Aj n1O3P2ImoTHLFpzON09QkYeXyxturvcPBNhjSGjJ0FJYCZTxRfXPulZ78DDmsCAJ 1DqTMcuHU+oglTKJL+rji2S7FJtMLN6WjRhsqydj6JbkGbuLa2eUjjMohyzX6loq bOFEeKAPK0ru/Y6uxpJAs6F81+P1U2+RL3GzZ3S8a0Ufw9b0YIIAtx+QJWDtd4rs tOW1WUenkYmDUmpkV2W5vvG96FX7x6R1fvJNWB4Fupu2PGnbNaRBdIeMHmhE24bI P9gmT6iUAy6E7EfIU8OlXBJHTYFB -----END CERTIFICATE-----Generated at Tue Nov 4 18:05:42 2025 by rpki-client