$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa File: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (raw, json) Hash identifier: Jfp73BJ+v/xetbveN5mHCXdfPQOPKlBItCea9bLVPSQ= Subject key identifier: 36:F3:44:BE:E7:CE:98:21:30:88:C1:7B:25:94:53:EB:C3:B8:8C:3A Certificate issuer: /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Certificate serial: 0D8B171C8DBA5C01023E383D677F828F2FC7F0AC Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa Signing time: Tue 28 Oct 2025 11:05:08 +0000 ROA not before: Tue 28 Oct 2025 11:00:08 +0000 ROA not after: Tue 27 Oct 2026 11:05:08 +0000 asID: 272220 IP address blocks: 2804:1f54:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8b:17:1c:8d:ba:5c:01:02:3e:38:3d:67:7f:82:8f:2f:c7:f0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8 Validity Not Before: Oct 28 11:00:08 2025 GMT Not After : Oct 27 11:05:08 2026 GMT Subject: CN=36F344BEE7CE98213088C17B259453EBC3B88C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:a4:7f:68:f8:16:54:5b:f4:d3:1e:91:52: 0a:3b:00:40:97:58:21:5a:97:1b:03:e9:94:d2:d5: 0d:e4:de:eb:7e:09:8d:28:72:52:ee:9b:51:c8:50: 65:a3:d4:09:35:68:77:29:e9:c3:d8:41:a5:d7:90: 06:04:5f:7f:7d:b9:de:63:cd:3a:14:87:a6:8e:62: 64:c7:ce:aa:4e:c1:ab:14:e2:ea:3a:3e:1c:00:61: 44:fb:31:38:a0:db:53:b6:ef:60:68:83:e9:f5:ff: 05:e1:a4:91:e8:65:94:c0:92:62:7e:d7:e5:6f:8d: 74:1e:bf:35:9d:93:fe:82:3e:57:de:05:51:9d:75: 99:99:ca:fa:e7:28:94:83:4e:b3:68:7d:62:41:24: d3:5f:1b:ca:30:f7:3c:f1:40:ca:4e:2d:85:94:ac: 2e:00:bc:2e:6a:76:ea:90:c8:1a:ea:4a:9c:01:b5: 54:6e:74:db:58:a5:88:14:f0:e5:5b:c4:d5:ca:70: c7:0b:93:54:0e:1d:ef:0d:f9:9a:e2:86:b8:32:4c: 2b:11:b8:6f:b0:90:e9:66:0c:33:73:d4:fa:75:54: b8:05:f5:7d:64:19:21:8e:46:c3:a3:5f:f3:02:9e: e6:77:b0:ec:29:c5:f7:5e:4b:e6:b8:1a:78:2c:9d: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:44:BE:E7:CE:98:21:30:88:C1:7B:25:94:53:EB:C3:B8:8C:3A X509v3 Authority Key Identifier: keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1f54:f000::/40 Signature Algorithm: sha256WithRSAEncryption b7:38:d5:9c:e6:df:3f:44:0d:d3:70:53:7e:ac:3d:90:bc:d1: 52:16:8c:37:da:b0:b2:db:4e:86:64:f0:1a:f5:b7:a6:7f:87: f2:7a:b6:9c:a5:08:ee:b7:63:e3:80:98:7f:be:df:6a:5c:f3: be:74:70:ab:fe:07:c4:7e:eb:24:bd:50:47:52:5e:c4:fd:a7: 3d:66:d9:9a:80:ec:d2:a0:8d:19:3b:1b:de:63:90:9b:ff:4e: 23:05:82:e7:0d:7d:2f:35:78:ec:53:71:4f:14:5c:ef:c5:c2: b7:f6:22:55:d9:7a:1f:fb:37:40:44:12:ff:af:d3:ba:36:7f: 70:f5:7e:ef:9d:4a:d2:2f:13:83:ea:2e:e3:71:6b:5b:dc:2d: 5c:a9:f6:6f:df:28:71:e6:f6:8e:50:c0:bb:60:4c:57:10:bf: e4:37:f3:3b:f9:ad:91:c2:2d:9d:a0:08:b8:25:e1:dc:7a:f0: 07:dc:4a:65:5c:a4:93:89:47:93:7d:63:9b:6a:ad:2e:d2:fe: 4b:71:9f:95:47:23:6a:dc:e6:4c:19:d0:51:5a:ac:57:5a:dd: fe:26:55:fb:16:d7:f2:7d:00:5d:41:a1:86:31:a9:0a:f8:c8: c5:94:18:c9:75:4c:9f:22:ee:e5:fe:81:54:4b:3c:40:82:14: 72:d6:27:64 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUDYsXHI26XAECPjg9Z3+Cjy/H8KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4 NzY1NzlEODAeFw0yNTEwMjgxMTAwMDhaFw0yNjEwMjcxMTA1MDhaMDMxMTAvBgNV BAMTKDM2RjM0NEJFRTdDRTk4MjEzMDg4QzE3QjI1OTQ1M0VCQzNCODhDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATaR/aPgWVFv00x6RUgo7AECX WCFalxsD6ZTS1Q3k3ut+CY0oclLum1HIUGWj1Ak1aHcp6cPYQaXXkAYEX399ud5j zToUh6aOYmTHzqpOwasU4uo6PhwAYUT7MTig21O272Bog+n1/wXhpJHoZZTAkmJ+ 1+VvjXQevzWdk/6CPlfeBVGddZmZyvrnKJSDTrNofWJBJNNfG8ow9zzxQMpOLYWU rC4AvC5qduqQyBrqSpwBtVRudNtYpYgU8OVbxNXKcMcLk1QOHe8N+ZrihrgyTCsR uG+wkOlmDDNz1Pp1VLgF9X1kGSGORsOjX/MCnuZ3sOwpxfdeS+a4GngsnTL9AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUNvNEvufOmCEwiMF7JZRT68O4jDowHwYDVR0j BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv MzIzODMwMzQzYTMxNjYzNTM0M2E2NjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEH1TwMA0GCSqGSIb3DQEBCwUA A4IBAQC3ONWc5t8/RA3TcFN+rD2QvNFSFow32rCy206GZPAa9bemf4fyeracpQju t2PjgJh/vt9qXPO+dHCr/gfEfuskvVBHUl7E/ac9ZtmagOzSoI0ZOxveY5Cb/04j BYLnDX0vNXjsU3FPFFzvxcK39iJV2Xof+zdARBL/r9O6Nn9w9X7vnUrSLxOD6i7j cWtb3C1cqfZv3yhx5vaOUMC7YExXEL/kN/M7+a2Rwi2doAi4JeHcevAH3EplXKST iUeTfWObaq0u0v5LcZ+VRyNq3OZMGdBRWqxXWt3+JlX7FtfyfQBdQaGGMakK+MjF lBjJdUyfIu7l/oFUSzxAghRy1idk -----END CERTIFICATE-----Generated at Tue Nov 4 05:29:17 2025 by rpki-client