$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa File: 323830343a61343a3a2f33322d313238203d3e203238363439.roa (raw, json) Hash identifier: 8+VpdtMt/Z8lZjKIaqn/U4f8p7gsSXcyWTs/uOXlg88= Subject key identifier: B4:75:6B:C4:01:3B:A0:EE:6B:44:BA:E7:E5:66:8E:C8:5C:48:64:00 Certificate issuer: /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Certificate serial: 7F174FFA51284854A8672F5B1B306425B3D88C26 Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa Signing time: Fri 15 Aug 2025 20:37:49 +0000 ROA not before: Fri 15 Aug 2025 20:32:49 +0000 ROA not after: Fri 14 Aug 2026 20:37:49 +0000 asID: 28649 IP address blocks: 2804:a4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:17:4f:fa:51:28:48:54:a8:67:2f:5b:1b:30:64:25:b3:d8:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652 Validity Not Before: Aug 15 20:32:49 2025 GMT Not After : Aug 14 20:37:49 2026 GMT Subject: CN=B4756BC4013BA0EE6B44BAE7E5668EC85C486400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:bb:9a:8c:fc:5c:e6:ac:7d:36:43:72:1e: 0c:02:ce:38:ce:e8:5d:60:62:5f:23:4b:81:77:66: bb:8a:09:0d:4d:94:89:69:a7:6a:6f:ba:4c:77:5a: 23:10:af:40:1c:7b:44:7f:4c:7e:50:21:a7:50:25: 4c:70:6e:62:42:d8:60:fa:c7:48:d6:e8:74:b4:b1: 4e:5e:77:d1:1b:49:b1:2d:61:39:33:18:96:89:02: 6c:93:b8:42:0a:49:b8:25:7c:2f:11:f9:45:6d:c9: df:10:7d:c8:b6:fc:fa:6e:f1:c0:c2:f5:21:b7:8d: 55:21:a5:b9:b6:c1:a6:a6:cf:13:ad:17:04:4c:1c: 75:5e:22:fd:4f:84:21:03:f6:f0:b1:a5:aa:e2:48: eb:fe:b5:c3:16:ec:c2:88:89:9f:22:3b:f1:2d:f3: 94:db:ea:4c:c3:9b:db:8f:69:97:fe:08:b6:8a:89: f5:51:63:09:0a:aa:28:5d:f0:bb:0a:1d:a3:4a:23: 6e:ba:7b:a7:a9:a2:b0:a6:48:c5:48:5d:8e:0d:d8: 14:43:ba:09:1f:8a:37:cc:b6:35:9a:04:d9:f3:8f: dc:1d:04:bc:9d:c4:e9:22:fc:1a:2e:67:6f:bf:27: 54:8b:c2:4f:0d:44:1e:78:2b:7a:8a:29:e4:0f:41: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:6B:C4:01:3B:A0:EE:6B:44:BA:E7:E5:66:8E:C8:5C:48:64:00 X509v3 Authority Key Identifier: keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:a4::/32 Signature Algorithm: sha256WithRSAEncryption 7a:ed:77:e4:51:c4:16:5e:68:10:b3:5b:85:62:e3:6b:b8:12: 05:43:e8:cd:39:34:8a:1c:bc:42:80:81:d7:a5:71:b2:ae:be: 1c:8e:86:e9:81:d5:8d:79:05:d9:d8:ab:be:c7:e0:1d:38:e5: ae:d1:bb:c7:d7:3e:49:bd:82:22:0c:cc:9f:d5:c3:7d:7c:d6: fe:a0:98:31:59:b9:f0:d8:d6:d2:62:6f:33:e2:f9:5e:b4:4a: 55:49:18:20:20:b8:56:ef:20:f8:d5:13:40:6d:d4:15:99:19: 66:c1:36:58:f2:37:c8:66:f0:17:9d:56:66:e3:c5:55:66:7a: 00:75:92:da:fc:ab:88:5b:95:0a:5b:90:a5:4e:65:d4:54:12: e0:cb:d6:57:f6:9d:f0:67:48:9c:31:4c:e6:ae:6f:92:90:f6: 48:c9:28:63:f7:9a:10:ff:0d:2b:c0:09:13:d0:2e:04:cc:75: bb:62:17:6c:d9:e7:d6:f8:09:47:51:46:20:03:53:a4:35:1e: 9e:f7:95:98:bc:70:37:83:11:f5:4b:e8:9d:f3:5c:99:38:da: c8:67:ea:a3:63:bd:16:e8:c2:e8:dc:e5:86:7f:6b:6a:3c:42: bc:28:72:c8:43:2e:da:72:e6:b3:a8:5b:3d:6a:95:29:a0:01: b3:a9:30:39 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUfxdP+lEoSFSoZy9bGzBkJbPYjCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG RjBDNTY1MjAeFw0yNTA4MTUyMDMyNDlaFw0yNjA4MTQyMDM3NDlaMDMxMTAvBgNV BAMTKEI0NzU2QkM0MDEzQkEwRUU2QjQ0QkFFN0U1NjY4RUM4NUM0ODY0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gLuajPxc5qx9NkNyHgwCzjjO 6F1gYl8jS4F3ZruKCQ1NlIlpp2pvukx3WiMQr0Ace0R/TH5QIadQJUxwbmJC2GD6 x0jW6HS0sU5ed9EbSbEtYTkzGJaJAmyTuEIKSbglfC8R+UVtyd8Qfci2/Ppu8cDC 9SG3jVUhpbm2waamzxOtFwRMHHVeIv1PhCED9vCxpariSOv+tcMW7MKIiZ8iO/Et 85Tb6kzDm9uPaZf+CLaKifVRYwkKqihd8LsKHaNKI266e6eporCmSMVIXY4N2BRD ugkfijfMtjWaBNnzj9wdBLydxOki/BouZ2+/J1SLwk8NRB54K3qKKeQPQTz7AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUtHVrxAE7oO5rRLrn5WaOyFxIZAAwHwYDVR0j BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv MzIzODMwMzQzYTYxMzQzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzgzNjM0 Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAoBACkMA0GCSqGSIb3DQEBCwUAA4IBAQB67XfkUcQWXmgQ s1uFYuNruBIFQ+jNOTSKHLxCgIHXpXGyrr4cjobpgdWNeQXZ2Ku+x+AdOOWu0bvH 1z5JvYIiDMyf1cN9fNb+oJgxWbnw2NbSYm8z4vletEpVSRggILhW7yD41RNAbdQV mRlmwTZY8jfIZvAXnVZm48VVZnoAdZLa/KuIW5UKW5ClTmXUVBLgy9ZX9p3wZ0ic MUzmrm+SkPZIyShj95oQ/w0rwAkT0C4EzHW7Yhds2efW+AlHUUYgA1OkNR6e95WY vHA3gxH1S+id81yZONrIZ+qjY70W6MLo3OWGf2tqPEK8KHLIQy7acuazqFs9apUp oAGzqTA5 -----END CERTIFICATE-----Generated at Wed Aug 20 19:57:19 2025 by rpki-client