$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa File: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (raw, json) Hash identifier: rzjEzJEP2xmveWGSG0oA61qZcp0+V3ZAxRdMTyuUWKo= Subject key identifier: D5:F2:40:86:E1:C0:34:3E:51:43:E7:AC:69:C0:9D:C0:2E:4F:4C:8D Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Certificate serial: 5E575F26EB92C50F3CD25E9EE1FD11D71DACA572 Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa Signing time: Tue 28 Oct 2025 17:56:30 +0000 ROA not before: Tue 28 Oct 2025 17:51:30 +0000 ROA not after: Tue 27 Oct 2026 17:56:30 +0000 asID: 28327 IP address blocks: 2804:48dc::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:57:5f:26:eb:92:c5:0f:3c:d2:5e:9e:e1:fd:11:d7:1d:ac:a5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0 Validity Not Before: Oct 28 17:51:30 2025 GMT Not After : Oct 27 17:56:30 2026 GMT Subject: CN=D5F24086E1C0343E5143E7AC69C09DC02E4F4C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:7a:9f:cd:96:25:fe:d4:bc:b6:c2:85:94: 7c:d0:7c:a8:39:0b:f5:6f:15:00:23:ed:bc:07:e8: e4:a3:b3:9e:0a:33:37:59:53:dc:13:24:72:93:30: 64:32:f6:a9:b1:9d:05:8c:49:ed:5b:0f:b8:76:14: f1:54:14:2d:37:20:50:97:20:bc:ce:37:38:00:e4: 38:a3:e0:34:f0:66:83:39:a7:b4:4d:7a:35:bb:b4: 93:8a:8d:ca:46:87:7c:61:9f:b8:90:e4:b4:7d:80: 2f:fc:44:52:6e:33:be:b4:9d:90:92:d4:d7:b6:2c: c4:a8:67:42:65:0e:20:ab:2c:e1:30:7d:cc:f9:ae: a2:17:c5:6b:b8:6e:d2:43:ed:9c:be:cb:fa:7b:84: 66:de:8d:31:ba:b9:f4:ba:cd:a6:62:1e:90:db:17: 6a:98:fa:e3:5f:ae:f3:96:93:8d:38:d6:a7:25:59: 7d:86:6c:21:2e:36:7a:66:6f:2b:eb:bb:50:24:8f: c6:94:83:96:f8:4d:1c:8e:d1:00:20:86:bb:48:f0: e0:7e:49:bd:56:b8:f4:e9:04:47:b6:51:5f:fa:c2: c1:b3:99:3a:05:e3:3f:2c:06:39:c6:49:f4:17:eb: 17:0e:b0:a8:72:b7:66:e5:a5:18:49:83:38:d9:84: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:40:86:E1:C0:34:3E:51:43:E7:AC:69:C0:9D:C0:2E:4F:4C:8D X509v3 Authority Key Identifier: keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:48dc::/32 Signature Algorithm: sha256WithRSAEncryption 89:6b:d4:d1:de:c0:b3:04:8f:d1:ff:d2:d7:6b:94:00:32:3c: d4:26:d0:14:63:7c:26:c0:80:f9:2b:24:59:a3:24:be:6a:b2: 03:b7:a6:a3:6d:f5:ce:d3:02:66:94:72:9b:c4:50:ec:8f:02: b6:11:a3:7a:19:aa:e2:d9:4f:c2:5f:71:e0:7f:35:03:f0:b3: 9c:39:9f:cf:91:8c:21:e1:d5:c0:5c:c9:94:1e:e7:01:d6:a9: 5e:eb:cf:3f:3f:16:73:39:c4:cb:f1:60:5d:dc:c7:dc:6d:fd: e1:c1:cf:01:7d:b2:5b:e8:e8:e4:de:a9:b5:38:03:d1:c5:52: c5:52:bc:ff:af:c7:09:eb:fc:31:b8:84:6e:18:c6:fa:7f:30: 36:24:ca:ec:16:d0:e8:a9:03:45:d1:bf:0f:87:4e:47:77:d8: 37:8f:07:a5:f5:99:58:e1:20:f2:67:87:76:6e:fd:a8:61:db: b2:fe:91:7d:bc:fb:a5:f1:09:7d:67:41:39:45:28:6a:2e:bf: 67:60:5c:7f:be:1b:4f:bc:4a:5d:f4:52:37:3f:f1:ed:e6:5a: 58:bf:e1:b2:4c:30:36:9f:4b:32:6e:88:be:62:11:ba:bf:b7: 25:d5:dd:1f:f6:1b:48:39:d3:57:f0:10:a5:d0:97:a6:f4:27: 12:64:b3:1b -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUXldfJuuSxQ880l6e4f0R1x2spXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY4NUM5RkVCRjgxNTE1NUM2RDQ0Nzk4NjY5RkIzQkZC OUZENDlFMDAeFw0yNTEwMjgxNzUxMzBaFw0yNjEwMjcxNzU2MzBaMDMxMTAvBgNV BAMTKEQ1RjI0MDg2RTFDMDM0M0U1MTQzRTdBQzY5QzA5REMwMkU0RjRDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R3qfzZYl/tS8tsKFlHzQfKg5 C/VvFQAj7bwH6OSjs54KMzdZU9wTJHKTMGQy9qmxnQWMSe1bD7h2FPFUFC03IFCX ILzONzgA5Dij4DTwZoM5p7RNejW7tJOKjcpGh3xhn7iQ5LR9gC/8RFJuM760nZCS 1Ne2LMSoZ0JlDiCrLOEwfcz5rqIXxWu4btJD7Zy+y/p7hGbejTG6ufS6zaZiHpDb F2qY+uNfrvOWk4041qclWX2GbCEuNnpmbyvru1Akj8aUg5b4TRyO0QAghrtI8OB+ Sb1WuPTpBEe2UV/6wsGzmToF4z8sBjnGSfQX6xcOsKhyt2blpRhJgzjZhIhVAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU1fJAhuHAND5RQ+esacCdwC5PTI0wHwYDVR0j BBgwFoAUn4XJ/r+BUVXG1EeYZp+zv7n9SeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQU53M0FpaXE4TG1DR1pHSnY0NDFZcHZqUjFkcGVmYVJqRWRjcllzVjd4 aEgvMC85Rjg1QzlGRUJGODE1MTU1QzZENDQ3OTg2NjlGQjNCRkI5RkQ0OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGODVDOUZFQkY4MTUxNTVD NkQ0NDc5ODY2OUZCM0JGQjlGRDQ5RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FOdzNBaWlxOExtQ0daR0p2NDQxWXB2alIxZHBlZmFSakVkY3JZc1Y3eGhILzAv MzIzODMwMzQzYTM0Mzg2NDYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzODMz MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgESNwwDQYJKoZIhvcNAQELBQADggEBAIlr1NHewLME j9H/0tdrlAAyPNQm0BRjfCbAgPkrJFmjJL5qsgO3pqNt9c7TAmaUcpvEUOyPArYR o3oZquLZT8JfceB/NQPws5w5n8+RjCHh1cBcyZQe5wHWqV7rzz8/FnM5xMvxYF3c x9xt/eHBzwF9slvo6OTeqbU4A9HFUsVSvP+vxwnr/DG4hG4Yxvp/MDYkyuwW0Oip A0XRvw+HTkd32DePB6X1mVjhIPJnh3Zu/ahh27L+kX28+6XxCX1nQTlFKGouv2dg XH++G0+8Sl30Ujc/8e3mWli/4bJMMDafSzJuiL5iEbq/tyXV3R/2G0g501fwEKXQ l6b0JxJksxs= -----END CERTIFICATE-----Generated at Tue Nov 4 05:23:50 2025 by rpki-client