$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343138303a3a2f34312d3431203d3e20323637303437.roa File: 323830343a343735383a343138303a3a2f34312d3431203d3e20323637303437.roa (raw, json) Hash identifier: lJv2HtEeovFkLhF6J4F24ss1XHxyTSSGJcfbKX9pDVM= Subject key identifier: 9F:96:AE:44:65:04:00:BD:E0:C9:1A:79:88:B6:80:34:DA:D7:01:0B Certificate issuer: /CN=B0B7CC182286506A60C3582F880657A780AE1B77 Certificate serial: 386E2D49E2BA7A44360D1E2A074A88870453BDBB Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer Subject info access: rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343138303a3a2f34312d3431203d3e20323637303437.roa Signing time: Fri 10 Oct 2025 22:03:00 +0000 ROA not before: Fri 10 Oct 2025 21:58:00 +0000 ROA not after: Fri 09 Oct 2026 22:03:00 +0000 asID: 267047 IP address blocks: 2804:4758:4180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6e:2d:49:e2:ba:7a:44:36:0d:1e:2a:07:4a:88:87:04:53:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77 Validity Not Before: Oct 10 21:58:00 2025 GMT Not After : Oct 9 22:03:00 2026 GMT Subject: CN=9F96AE44650400BDE0C91A7988B68034DAD7010B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:60:45:23:4c:ae:e5:21:11:46:1b:1c:d9: c4:eb:15:6e:e4:41:ea:9d:4c:6c:a2:3d:00:6b:52: e3:2b:e2:ec:e7:a6:e6:93:63:51:ae:7e:16:cf:05: 80:a9:cf:1c:f1:e9:3c:b4:9e:77:51:dd:4e:aa:b8: c8:38:c1:4c:25:32:35:8f:ab:6f:69:88:76:ca:e1: b5:91:ef:1b:90:2d:f8:4b:59:62:83:1e:f8:aa:ed: cf:b3:50:d4:12:4f:2f:48:bc:36:0a:b2:71:e4:95: 2e:f8:4f:d4:1f:02:d3:20:05:8e:f5:9c:1f:ec:d7: 21:1e:f1:44:87:ff:86:5c:44:ed:ca:14:85:35:26: e0:d5:94:04:bc:08:a7:13:f5:56:63:b4:73:f8:52: bf:cc:84:34:5c:41:ee:c7:5d:56:ff:3d:72:bd:c2: 93:37:47:b0:c1:f7:1a:eb:8f:d0:9f:69:01:63:f1: 05:f5:27:2e:40:e3:6b:ce:98:ce:a8:fc:ac:f7:1a: 35:59:e8:02:9b:ca:88:82:1b:8c:3e:08:0a:91:a0: 30:8a:6c:06:8b:44:55:fb:dd:cd:f9:18:61:97:b6: f4:4d:ed:88:37:72:92:fd:99:8d:93:e3:67:ab:ea: d9:0a:33:1b:dd:8a:08:72:e2:48:5c:ac:69:04:c6: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:96:AE:44:65:04:00:BD:E0:C9:1A:79:88:B6:80:34:DA:D7:01:0B X509v3 Authority Key Identifier: keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343138303a3a2f34312d3431203d3e20323637303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4758:4180::/41 Signature Algorithm: sha256WithRSAEncryption 74:32:74:1c:3c:f3:ae:fd:fd:b1:ca:da:e6:3c:12:b6:9b:c4: 0b:dc:9c:75:36:2e:9a:9f:f1:9e:ed:0f:2e:1b:b6:7d:3c:ff: 65:1a:22:81:de:d2:ed:e3:9b:24:fe:eb:8e:ee:9b:cc:d4:0d: d0:a7:aa:df:4e:73:1d:29:9a:4d:d3:bc:0e:51:99:2f:eb:63: a9:4c:b9:21:87:d2:ff:25:fd:d6:82:7f:28:0e:67:a5:dd:79: 2c:ab:19:0e:b9:99:92:b9:a3:c6:23:1f:01:a3:02:cb:1f:cd: 43:fe:62:c3:48:2f:27:22:fd:1b:55:9e:b3:93:4f:21:c3:b7: dc:f4:69:d9:8c:bb:5e:72:27:d3:02:08:42:0b:46:04:10:50: d2:f2:4c:2d:2d:83:08:9f:a6:74:5b:6e:a3:2e:1e:e4:95:f0: bf:4a:04:11:0e:ce:98:a5:1f:8e:09:12:de:f7:b5:ba:5f:df: 2b:cf:b4:38:3b:62:e1:12:9e:90:c9:40:99:47:a5:42:bd:63: bf:79:3c:a3:d9:3e:00:f1:70:88:28:d1:f4:9a:83:98:1a:0e: 7b:62:3c:ca:88:f4:28:8d:d9:23:fc:7c:07:14:80:e5:c2:2c: 61:ae:53:f5:64:b2:3c:19:4c:ba:4e:db:c2:c7:9d:e0:15:0f: b9:ea:02:83 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUOG4tSeK6ekQ2DR4qB0qIhwRTvbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCN0NDMTgyMjg2NTA2QTYwQzM1ODJGODgwNjU3QTc4 MEFFMUI3NzAeFw0yNTEwMTAyMTU4MDBaFw0yNjEwMDkyMjAzMDBaMDMxMTAvBgNV BAMTKDlGOTZBRTQ0NjUwNDAwQkRFMEM5MUE3OTg4QjY4MDM0REFENzAxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30WBFI0yu5SERRhsc2cTrFW7k QeqdTGyiPQBrUuMr4uznpuaTY1GufhbPBYCpzxzx6Ty0nndR3U6quMg4wUwlMjWP q29piHbK4bWR7xuQLfhLWWKDHviq7c+zUNQSTy9IvDYKsnHklS74T9QfAtMgBY71 nB/s1yEe8USH/4ZcRO3KFIU1JuDVlAS8CKcT9VZjtHP4Ur/MhDRcQe7HXVb/PXK9 wpM3R7DB9xrrj9CfaQFj8QX1Jy5A42vOmM6o/Kz3GjVZ6AKbyoiCG4w+CAqRoDCK bAaLRFX73c35GGGXtvRN7Yg3cpL9mY2T42er6tkKMxvdighy4khcrGkExlctAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUn5auRGUEAL3gyRp5iLaANNrXAQswHwYDVR0j BBgwFoAUsLfMGCKGUGpgw1gviAZXp4CuG3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVhmUngyOGYyVnpkM0dZQkVpMUd5dUVoWTZrU1A5OEdKWmJockhlWnVU Q2EvMC9CMEI3Q0MxODIyODY1MDZBNjBDMzU4MkY4ODA2NTdBNzgwQUUxQjc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQjdDQzE4MjI4NjUwNkE2 MEMzNTgyRjg4MDY1N0E3ODBBRTFCNzcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FYZlJ4MjhmMlZ6ZDNHWUJFaTFHeXVFaFk2a1NQOThHSlpiaHJIZVp1VENhLzAv MzIzODMwMzQzYTM0MzczNTM4M2EzNDMxMzgzMDNhM2EyZjM0MzEyZDM0MzEyMDNk M2UyMDMyMzYzNzMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygER1hBgDANBgkqhkiG9w0BAQsF AAOCAQEAdDJ0HDzzrv39scra5jwStpvEC9ycdTYump/xnu0PLhu2fTz/ZRoigd7S 7eObJP7rju6bzNQN0Keq305zHSmaTdO8DlGZL+tjqUy5IYfS/yX91oJ/KA5npd15 LKsZDrmZkrmjxiMfAaMCyx/NQ/5iw0gvJyL9G1Wes5NPIcO33PRp2Yy7XnIn0wII QgtGBBBQ0vJMLS2DCJ+mdFtuoy4e5JXwv0oEEQ7OmKUfjgkS3ve1ul/fK8+0ODti 4RKekMlAmUelQr1jv3k8o9k+APFwiCjR9JqDmBoOe2I8yoj0KI3ZI/x8BxSA5cIs Ya5T9WSyPBlMuk7bwsed4BUPueoCgw== -----END CERTIFICATE-----Generated at Tue Nov 4 01:28:27 2025 by rpki-client