$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa File: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (raw, json) Hash identifier: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY= Subject key identifier: 66:D7:F0:34:1E:07:C2:EF:D9:6A:51:66:0C:07:A7:F6:E1:F4:E1:24 Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F Certificate serial: 11128F5A496E4317E1E81153A9874E3F37ABA5FF Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa Signing time: Wed 01 Oct 2025 16:15:53 +0000 ROA not before: Wed 01 Oct 2025 16:10:53 +0000 ROA not after: Wed 30 Sep 2026 16:15:53 +0000 asID: 270905 IP address blocks: 2804:7344:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:8f:5a:49:6e:43:17:e1:e8:11:53:a9:87:4e:3f:37:ab:a5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F Validity Not Before: Oct 1 16:10:53 2025 GMT Not After : Sep 30 16:15:53 2026 GMT Subject: CN=66D7F0341E07C2EFD96A51660C07A7F6E1F4E124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:d7:0f:04:4f:e6:52:d7:f9:e4:16:48:f6: d2:8b:69:d9:af:a9:21:14:c2:94:54:a1:01:7c:4c: 1e:f5:85:30:b3:a7:20:a8:a4:7a:10:58:c5:bb:74: 48:20:fe:3e:75:fd:56:e7:ea:45:75:4c:d2:91:73: ae:27:20:34:98:ee:03:6a:de:bf:5d:66:e4:d6:32: db:64:b8:ad:6d:57:b2:c2:b3:b9:b7:52:1d:72:45: 12:b7:8e:04:2d:ac:5f:b8:61:0b:0c:3b:fd:a7:ae: 39:12:0b:e6:3f:18:76:ec:76:20:9c:c4:74:3b:71: 65:6a:8b:f3:17:05:28:b0:20:22:92:19:d4:76:55: 5b:e4:9b:f4:d4:0b:b0:23:38:93:d8:44:a3:ce:ca: e4:d8:13:0e:6c:cd:d2:44:8b:7b:95:1c:a2:f9:d2: c4:7a:df:ad:5d:51:6e:53:1f:cd:eb:9a:9e:68:0e: 5f:89:68:97:18:58:d0:69:8b:61:14:84:55:38:17: 25:64:86:4c:ab:0e:b7:e4:6a:37:8c:e7:37:8b:a8: 86:c4:4f:f9:d6:b2:41:c0:a9:e1:fd:f3:56:ff:56: 23:32:b1:c8:70:4e:f2:31:b3:da:56:aa:dd:79:58: ad:7e:cb:d9:a2:86:11:d3:37:c5:c9:04:39:aa:db: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D7:F0:34:1E:07:C2:EF:D9:6A:51:66:0C:07:A7:F6:E1:F4:E1:24 X509v3 Authority Key Identifier: keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7344:8000::/33 Signature Algorithm: sha256WithRSAEncryption 50:43:5c:a7:dd:b9:d2:00:6b:83:4b:72:91:e0:76:b4:24:19: fc:ae:c0:e2:82:bc:8e:b1:10:b3:be:cd:45:c0:2a:b5:4e:a8: ea:e7:67:63:0b:c0:f0:c4:b8:c3:b1:f9:f4:81:65:04:cb:a9: 17:e9:55:d8:ba:37:d3:7a:1e:7b:fc:58:0e:ac:a4:fa:bb:e0: 4a:fc:71:94:9f:00:83:10:35:b3:fe:0d:6b:2a:dc:f8:a0:b6: 80:99:82:b4:4a:66:ad:fa:7d:f8:6a:48:a2:08:8a:75:23:b4: 4c:96:f6:71:97:53:4f:a1:01:fb:94:4a:97:46:8f:5d:a1:c5: 65:05:f5:17:99:6a:51:00:bb:7e:9d:b6:98:9f:2c:3f:f3:5a: bd:1f:fe:d8:50:af:55:1a:da:18:31:ba:8e:04:91:b4:be:d5: 1b:f6:bf:80:dc:35:b4:de:c7:3b:9e:64:fb:2e:36:75:61:4f: 0b:cf:f9:c5:ef:eb:2e:ef:00:a1:f3:e5:74:51:f2:b3:d5:f2: 64:85:f9:e6:b2:eb:1a:17:4d:00:7f:4f:db:63:20:7e:f9:1b: 7d:26:b3:a0:3c:10:9a:68:53:1e:d2:c7:f5:f9:07:f6:3d:8d: 6a:15:72:e3:65:27:ec:c3:e2:0f:87:d6:21:c3:f0:95:10:dd: f2:60:44:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUERKPWkluQxfh6BFTqYdOPzerpf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhERDQ1N0FGRDg3NzU3NzI5RTY1Nzg4MTc4NjYwMUJG NTZFRDQ1RjAeFw0yNTEwMDExNjEwNTNaFw0yNjA5MzAxNjE1NTNaMDMxMTAvBgNV BAMTKDY2RDdGMDM0MUUwN0MyRUZEOTZBNTE2NjBDMDdBN0Y2RTFGNEUxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNutcPBE/mUtf55BZI9tKLadmv qSEUwpRUoQF8TB71hTCzpyCopHoQWMW7dEgg/j51/Vbn6kV1TNKRc64nIDSY7gNq 3r9dZuTWMttkuK1tV7LCs7m3Uh1yRRK3jgQtrF+4YQsMO/2nrjkSC+Y/GHbsdiCc xHQ7cWVqi/MXBSiwICKSGdR2VVvkm/TUC7AjOJPYRKPOyuTYEw5szdJEi3uVHKL5 0sR6361dUW5TH83rmp5oDl+JaJcYWNBpi2EUhFU4FyVkhkyrDrfkajeM5zeLqIbE T/nWskHAqeH981b/ViMyschwTvIxs9pWqt15WK1+y9mihhHTN8XJBDmq2zRVAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUZtfwNB4Hwu/ZalFmDAen9uH04SQwHwYDVR0j BBgwFoAUaN1Fev2HdXcp5leIF4ZgG/Vu1F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVlLUTRlcnZQbXlvcjZrbVN1TEtCUGs0amNyVlQ1ZkhZaTNncGV6aDRx aEYvMC82OERENDU3QUZEODc3NTc3MjlFNjU3ODgxNzg2NjAxQkY1NkVENDVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4REQ0NTdBRkQ4Nzc1Nzcy OUU2NTc4ODE3ODY2MDFCRjU2RUQ0NUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlZS1E0ZXJ2UG15b3I2a21TdUxLQlBrNGpjclZUNWZIWWkzZ3Blemg0cWhGLzAv MzIzODMwMzQzYTM3MzMzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMDM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEc0SAMA0GCSqGSIb3DQEBCwUA A4IBAQBQQ1yn3bnSAGuDS3KR4Ha0JBn8rsDigryOsRCzvs1FwCq1Tqjq52djC8Dw xLjDsfn0gWUEy6kX6VXYujfTeh57/FgOrKT6u+BK/HGUnwCDEDWz/g1rKtz4oLaA mYK0Smat+n34akiiCIp1I7RMlvZxl1NPoQH7lEqXRo9docVlBfUXmWpRALt+nbaY nyw/81q9H/7YUK9VGtoYMbqOBJG0vtUb9r+A3DW03sc7nmT7LjZ1YU8Lz/nF7+su 7wCh8+V0UfKz1fJkhfnmsusaF00Af0/bYyB++Rt9JrOgPBCaaFMe0sf1+Qf2PY1q FXLjZSfsw+IPh9Yhw/CVEN3yYERO -----END CERTIFICATE-----Generated at Tue Nov 4 05:07:41 2025 by rpki-client