$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa File: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (raw, json) Hash identifier: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA= Subject key identifier: 3E:D2:98:38:AA:CB:BB:A9:63:A7:87:A8:2F:86:E7:73:5E:C4:8D:7B Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F Certificate serial: 2D3625D8397203BA3FFA672A23701E2CB34E4E98 Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa Signing time: Wed 01 Oct 2025 16:15:59 +0000 ROA not before: Wed 01 Oct 2025 16:10:59 +0000 ROA not after: Wed 30 Sep 2026 16:15:59 +0000 asID: 270905 IP address blocks: 2804:7344:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:25:d8:39:72:03:ba:3f:fa:67:2a:23:70:1e:2c:b3:4e:4e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F Validity Not Before: Oct 1 16:10:59 2025 GMT Not After : Sep 30 16:15:59 2026 GMT Subject: CN=3ED29838AACBBBA963A787A82F86E7735EC48D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:da:5e:75:46:ae:1d:85:45:c9:42:3b:bd: d4:4b:33:ef:5e:79:1e:62:5a:48:62:a7:6e:5e:75: b5:b1:95:62:c2:31:a1:13:3a:dc:cc:e5:cc:e2:35: c5:ce:44:6a:31:61:56:55:81:f7:73:44:f1:e5:22: 2b:f5:b8:58:89:49:bf:b2:5a:1f:51:15:5d:d5:40: 9f:6a:5c:17:eb:2c:74:14:f6:4f:11:66:e2:8a:2c: 94:a3:cf:ec:fe:9e:f9:cd:0e:e3:70:ce:09:41:a2: 25:c3:01:97:81:54:45:23:18:d7:5a:8f:d5:79:7a: be:28:dc:3b:88:e5:92:fd:ea:98:a8:be:f3:7d:cb: f7:1e:2c:41:c2:70:9d:4a:a4:a1:4f:08:d2:64:d6: fd:1e:2e:a7:6a:b2:d2:f0:82:b1:70:a6:07:9e:a9: df:d2:7f:41:01:24:d9:de:ba:51:72:e9:b3:15:14: 72:72:e2:d0:6b:ae:e3:3d:8a:8e:fb:e4:c0:0b:a2: fe:21:ab:1a:13:d8:5a:ce:a4:95:2b:63:6e:93:85: b0:8e:03:8c:b8:33:e8:09:10:2d:c8:77:09:8d:d5: 55:8a:be:5c:7e:eb:36:50:d3:55:d8:83:65:01:a0: 52:6f:27:bf:fc:52:ad:64:19:50:8f:27:8a:8e:4b: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D2:98:38:AA:CB:BB:A9:63:A7:87:A8:2F:86:E7:73:5E:C4:8D:7B X509v3 Authority Key Identifier: keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:7344:c000::/34 Signature Algorithm: sha256WithRSAEncryption 63:3c:5a:01:05:3f:04:d4:f6:00:5c:08:27:fe:ec:8b:ea:2d: 9c:83:74:d0:16:d0:24:4e:97:12:f8:84:fb:79:cf:ea:ab:71: 79:08:0e:03:19:0d:84:c6:6e:f1:df:04:ad:39:34:61:60:3f: 43:99:41:bb:86:9e:50:63:ab:a2:d0:c1:6c:e1:81:2d:46:fb: 4b:1b:35:80:73:81:2e:af:7b:c8:a0:8d:25:4e:53:3c:01:f8: ca:76:61:42:4d:fe:0a:e7:e7:7d:87:2f:94:b2:33:0b:01:64: 5b:e9:ca:a0:9d:cd:81:5d:4b:f8:bd:62:88:f4:9a:cc:a7:0b: 0f:b2:8a:9d:8a:8b:4b:10:77:88:41:ca:2a:b2:1b:10:ce:dd: 3a:26:eb:06:ba:10:0b:02:05:8d:13:59:d0:17:00:28:12:99: 32:b8:91:43:9e:e8:3e:2d:a2:22:f6:15:d9:68:8b:b1:7f:d1: 56:c7:ad:cb:ac:73:35:eb:64:bf:ee:a1:aa:75:cf:e3:82:65: 2c:00:cf:78:30:d3:f2:cd:e2:82:ee:2d:d9:37:81:c6:d8:4d: 73:61:38:54:21:8c:45:49:15:65:ba:7b:00:e7:c1:88:23:9b: 08:0d:a8:eb:b3:4e:40:f7:2f:69:1f:c4:21:34:47:94:3b:51: 29:d2:f2:61 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIULTYl2DlyA7o/+mcqI3AeLLNOTpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhERDQ1N0FGRDg3NzU3NzI5RTY1Nzg4MTc4NjYwMUJG NTZFRDQ1RjAeFw0yNTEwMDExNjEwNTlaFw0yNjA5MzAxNjE1NTlaMDMxMTAvBgNV BAMTKDNFRDI5ODM4QUFDQkJCQTk2M0E3ODdBODJGODZFNzczNUVDNDhEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqdpedUauHYVFyUI7vdRLM+9e eR5iWkhip25edbWxlWLCMaETOtzM5cziNcXORGoxYVZVgfdzRPHlIiv1uFiJSb+y Wh9RFV3VQJ9qXBfrLHQU9k8RZuKKLJSjz+z+nvnNDuNwzglBoiXDAZeBVEUjGNda j9V5er4o3DuI5ZL96piovvN9y/ceLEHCcJ1KpKFPCNJk1v0eLqdqstLwgrFwpgee qd/Sf0EBJNneulFy6bMVFHJy4tBrruM9io775MALov4hqxoT2FrOpJUrY26ThbCO A4y4M+gJEC3IdwmN1VWKvlx+6zZQ01XYg2UBoFJvJ7/8Uq1kGVCPJ4qOS2OXAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUPtKYOKrLu6ljp4eoL4bnc17EjXswHwYDVR0j BBgwFoAUaN1Fev2HdXcp5leIF4ZgG/Vu1F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVlLUTRlcnZQbXlvcjZrbVN1TEtCUGs0amNyVlQ1ZkhZaTNncGV6aDRx aEYvMC82OERENDU3QUZEODc3NTc3MjlFNjU3ODgxNzg2NjAxQkY1NkVENDVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4REQ0NTdBRkQ4Nzc1Nzcy OUU2NTc4ODE3ODY2MDFCRjU2RUQ0NUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlZS1E0ZXJ2UG15b3I2a21TdUxLQlBrNGpjclZUNWZIWWkzZ3Blemg0cWhGLzAv MzIzODMwMzQzYTM3MzMzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMDM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEc0TAMA0GCSqGSIb3DQEBCwUA A4IBAQBjPFoBBT8E1PYAXAgn/uyL6i2cg3TQFtAkTpcS+IT7ec/qq3F5CA4DGQ2E xm7x3wStOTRhYD9DmUG7hp5QY6ui0MFs4YEtRvtLGzWAc4Eur3vIoI0lTlM8AfjK dmFCTf4K5+d9hy+UsjMLAWRb6cqgnc2BXUv4vWKI9JrMpwsPsoqdiotLEHeIQcoq shsQzt06JusGuhALAgWNE1nQFwAoEpkyuJFDnug+LaIi9hXZaIuxf9FWx63LrHM1 62S/7qGqdc/jgmUsAM94MNPyzeKC7i3ZN4HG2E1zYThUIYxFSRVlunsA58GII5sI Dajrs05A9y9pH8QhNEeUO1Ep0vJh -----END CERTIFICATE-----Generated at Tue Nov 4 05:07:44 2025 by rpki-client