$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa File: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (raw, json) Hash identifier: 4V+6bYZM6miTcjX4cUxwwTV04DPj178N71VFyeduAls= Subject key identifier: 2B:1F:57:52:94:92:FD:0F:AE:67:8B:0F:39:6A:A9:8D:E9:B6:D5:03 Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Certificate serial: 4714475151FFF23557FFB0C49C327EA407D1FB3F Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa Signing time: Tue 28 Oct 2025 11:05:03 +0000 ROA not before: Tue 28 Oct 2025 11:00:03 +0000 ROA not after: Tue 27 Oct 2026 11:05:03 +0000 asID: 272220 IP address blocks: 2804:1f54:c000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:14:47:51:51:ff:f2:35:57:ff:b0:c4:9c:32:7e:a4:07:d1:fb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Validity Not Before: Oct 28 11:00:03 2025 GMT Not After : Oct 27 11:05:03 2026 GMT Subject: CN=2B1F57529492FD0FAE678B0F396AA98DE9B6D503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:2b:34:bb:0f:ce:15:97:8e:cb:ab:ef:fa: d1:79:30:96:37:b3:5b:6c:12:68:78:77:58:9c:63: c8:31:32:3f:b2:06:1f:32:37:ea:9c:88:bd:eb:e3: 23:da:d3:46:75:97:e5:9b:d4:03:04:8e:f0:dc:41: 9c:b3:0a:ae:8d:dc:3d:02:f9:65:67:a1:4f:e9:5f: 49:14:54:88:4a:67:49:51:fe:ef:c7:b7:3f:38:21: f4:0e:3b:b6:69:85:64:de:3f:0d:50:ce:62:62:ca: c3:5d:33:49:7e:2e:d3:21:7d:e3:25:58:b6:a0:60: 89:3e:da:d4:d0:dc:88:22:e6:65:4c:8f:7b:be:94: 90:fa:e6:54:03:81:2f:85:79:f8:01:d1:07:b7:9f: 76:29:18:9d:bc:58:81:45:e6:9f:b4:92:b7:61:86: cc:2f:8c:96:35:72:9d:6f:a9:c1:43:a8:db:b6:be: 79:f9:7c:16:dd:71:12:11:d1:a0:23:d5:dd:18:ac: b6:4a:10:dd:e9:38:02:58:af:16:08:92:b1:2e:ab: d2:ca:57:e3:2a:c1:a2:d9:55:21:03:d9:d1:36:f3: ec:43:33:9d:4c:11:b9:24:7b:f4:f3:e8:9b:67:bf: 68:76:ee:a4:86:61:b7:cf:e6:a1:56:f8:62:91:fb: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1F:57:52:94:92:FD:0F:AE:67:8B:0F:39:6A:A9:8D:E9:B6:D5:03 X509v3 Authority Key Identifier: keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1f54:c000::/35 Signature Algorithm: sha256WithRSAEncryption d2:79:83:95:87:45:62:34:8d:1c:5b:4a:2d:a7:06:11:83:da: 5c:3a:dd:d5:2e:1e:fb:c4:5b:17:5d:1f:0c:22:4f:55:a5:f9: d1:bb:3a:db:03:d6:b3:d1:08:92:10:5e:31:38:9d:87:68:97: dd:70:c9:d6:1f:87:b9:5b:c7:a5:89:44:13:9e:0c:36:2b:c8: 4b:22:eb:9d:16:4c:8d:25:1b:81:08:6a:15:08:78:10:d5:5a: c0:21:20:9f:19:3a:a0:ac:7f:cc:fa:78:6b:38:e6:52:8d:d0: f5:df:bb:0d:43:ba:c8:31:89:bb:a0:02:75:f3:21:a3:1b:09: d3:10:6b:a7:38:ba:81:e7:0f:f2:46:30:50:05:87:e7:dc:01: d5:8c:ab:3e:03:60:09:bb:3b:0d:ea:a5:80:07:d3:a0:86:ed: ba:2e:f7:ed:a0:2d:74:80:58:32:cd:31:b2:de:12:de:53:05: a1:73:8a:46:ed:ab:34:72:74:04:af:8e:38:a8:95:ae:11:09: 59:f5:01:d9:57:c7:51:36:b8:14:cb:89:62:7e:1e:69:f2:c2: fe:b1:f3:ee:90:41:d3:c2:35:4d:b9:b5:bc:a7:20:7d:00:04: 3a:36:bc:fc:e2:d3:30:5f:11:35:00:d1:8f:ab:87:28:8e:d5: 3d:d2:7c:54 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIURxRHUVH/8jVX/7DEnDJ+pAfR+z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4 NzY1NzlEODAeFw0yNTEwMjgxMTAwMDNaFw0yNjEwMjcxMTA1MDNaMDMxMTAvBgNV BAMTKDJCMUY1NzUyOTQ5MkZEMEZBRTY3OEIwRjM5NkFBOThERTlCNkQ1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakSs0uw/OFZeOy6vv+tF5MJY3 s1tsEmh4d1icY8gxMj+yBh8yN+qciL3r4yPa00Z1l+Wb1AMEjvDcQZyzCq6N3D0C +WVnoU/pX0kUVIhKZ0lR/u/Htz84IfQOO7ZphWTePw1QzmJiysNdM0l+LtMhfeMl WLagYIk+2tTQ3Igi5mVMj3u+lJD65lQDgS+FefgB0Qe3n3YpGJ28WIFF5p+0krdh hswvjJY1cp1vqcFDqNu2vnn5fBbdcRIR0aAj1d0YrLZKEN3pOAJYrxYIkrEuq9LK V+MqwaLZVSED2dE28+xDM51MEbkke/Tz6Jtnv2h27qSGYbfP5qFW+GKR+yeHAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUKx9XUpSS/Q+uZ4sPOWqpjem21QMwHwYDVR0j BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv MzIzODMwMzQzYTMxNjYzNTM0M2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEH1TAMA0GCSqGSIb3DQEBCwUA A4IBAQDSeYOVh0ViNI0cW0otpwYRg9pcOt3VLh77xFsXXR8MIk9VpfnRuzrbA9az 0QiSEF4xOJ2HaJfdcMnWH4e5W8eliUQTngw2K8hLIuudFkyNJRuBCGoVCHgQ1VrA ISCfGTqgrH/M+nhrOOZSjdD137sNQ7rIMYm7oAJ18yGjGwnTEGunOLqB5w/yRjBQ BYfn3AHVjKs+A2AJuzsN6qWAB9Oghu26LvftoC10gFgyzTGy3hLeUwWhc4pG7as0 cnQEr444qJWuEQlZ9QHZV8dRNrgUy4lifh5p8sL+sfPukEHTwjVNubW8pyB9AAQ6 Nrz84tMwXxE1ANGPq4cojtU90nxU -----END CERTIFICATE-----Generated at Tue Nov 4 05:29:18 2025 by rpki-client