$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa File: 323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa (raw, json) Hash identifier: aU61VC9hNg5U6yx4aaOiLDuwurPH364t+mV/ZbsHDGA= Subject key identifier: CD:D6:95:6C:B9:5E:34:9F:AC:1A:44:82:9A:A7:86:4D:48:00:71:B6 Certificate issuer: /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Certificate serial: 67A7F62264ADDB7B9CCAE2E7A8C0C12A54DD4278 Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa Signing time: Mon 07 Jul 2025 15:19:47 +0000 ROA not before: Mon 07 Jul 2025 15:14:47 +0000 ROA not after: Mon 06 Jul 2026 15:19:47 +0000 asID: 264425 IP address blocks: 2804:1e60:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a7:f6:22:64:ad:db:7b:9c:ca:e2:e7:a8:c0:c1:2a:54:dd:42:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F Validity Not Before: Jul 7 15:14:47 2025 GMT Not After : Jul 6 15:19:47 2026 GMT Subject: CN=CDD6956CB95E349FAC1A44829AA7864D480071B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:3f:be:8b:d4:e4:f1:04:38:a9:c2:09:dc: f5:60:5d:0e:4d:8e:39:e7:28:1d:0d:b3:07:30:90: 40:d3:e4:d7:2f:45:ca:c9:e4:36:1e:f5:63:d9:1c: b3:42:36:c7:67:88:50:07:d5:b1:f0:eb:01:6c:79: 6a:dd:cc:15:82:8b:ee:89:3c:ec:18:26:cd:2c:ff: cb:23:12:7c:e3:01:f5:a6:cc:1d:22:85:fd:62:c5: cf:09:1d:ce:4a:b1:ab:ae:7f:68:d4:bc:68:54:46: 6d:a6:b5:4f:ed:51:dc:1d:b1:9e:23:41:ba:08:46: 78:ad:5b:31:41:4a:a0:6a:d1:35:5a:27:79:c4:13: 5b:97:14:1a:42:1e:8a:f0:38:8c:b0:b9:2a:ee:e3: 29:91:17:e6:cb:9c:8a:52:b3:71:f2:c2:65:a2:fa: 67:22:44:18:72:85:31:e5:f9:03:d2:fe:4e:5b:be: dd:db:74:3a:7e:c0:37:1a:b1:08:81:76:97:65:cf: ca:f7:2a:c4:55:19:5e:a1:b2:00:a6:a1:60:cc:e7: b3:af:64:66:75:88:86:2e:ee:12:3f:7d:2c:b7:f8: 8f:2b:fb:ab:1c:95:cc:d6:f2:81:cf:c8:0a:a4:2b: 22:13:fb:0d:ac:c9:93:48:10:65:ba:fc:0a:5c:ba: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D6:95:6C:B9:5E:34:9F:AC:1A:44:82:9A:A7:86:4D:48:00:71:B6 X509v3 Authority Key Identifier: keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a633030303a3a2f33362d3336203d3e20323634343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1e60:c000::/36 Signature Algorithm: sha256WithRSAEncryption 8f:60:6b:96:43:d7:84:d4:55:46:13:42:67:24:24:eb:03:2d: 1a:b3:77:a2:41:e4:c3:77:82:6a:84:6b:e4:d3:5c:a5:ef:b4: 33:aa:12:aa:95:cb:cf:ac:3f:4b:b6:dd:4e:21:5d:04:ab:7f: 62:1f:5a:d7:d3:89:bc:59:ec:a7:1e:9e:10:58:22:c8:37:99: a7:42:b8:22:a6:5b:11:14:42:27:3a:0c:b3:d6:02:40:c3:57: ab:fb:98:b9:b6:54:92:7a:28:c2:5f:c7:57:fd:21:93:49:69: ac:cf:3b:d1:76:25:15:12:af:cf:db:e7:11:ad:2c:04:09:16: 0f:a7:e9:07:d8:9a:e7:b0:80:ee:71:e7:70:8f:c8:7f:d6:8e: be:91:8f:df:62:6b:d8:3e:62:0d:16:44:95:a8:fd:e2:7f:15: d6:6a:ee:14:e9:70:b0:3c:a4:ab:dc:18:06:a0:8a:0c:5d:5c: db:e9:71:bb:7d:9b:f5:67:60:b4:cd:8d:fe:8e:35:3b:02:e0: ca:57:11:c8:22:29:fa:5a:d2:72:16:b7:f0:e2:c6:21:ad:d3: 54:d5:a8:6f:57:5f:06:1f:88:e9:7a:b9:01:24:6e:81:82:d3: 5d:55:f8:33:50:0b:5c:ea:09:bd:01:3c:2d:8d:c5:f0:4b:d8: ee:4c:89:d4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUZ6f2ImSt23ucyuLnqMDBKlTdQngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4 REM5NEE5RjAeFw0yNTA3MDcxNTE0NDdaFw0yNjA3MDYxNTE5NDdaMDMxMTAvBgNV BAMTKENERDY5NTZDQjk1RTM0OUZBQzFBNDQ4MjlBQTc4NjRENDgwMDcxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatD++i9Tk8QQ4qcIJ3PVgXQ5N jjnnKB0NswcwkEDT5NcvRcrJ5DYe9WPZHLNCNsdniFAH1bHw6wFseWrdzBWCi+6J POwYJs0s/8sjEnzjAfWmzB0ihf1ixc8JHc5Ksauuf2jUvGhURm2mtU/tUdwdsZ4j QboIRnitWzFBSqBq0TVaJ3nEE1uXFBpCHorwOIywuSru4ymRF+bLnIpSs3HywmWi +mciRBhyhTHl+QPS/k5bvt3bdDp+wDcasQiBdpdlz8r3KsRVGV6hsgCmoWDM57Ov ZGZ1iIYu7hI/fSy3+I8r+6sclczW8oHPyAqkKyIT+w2syZNIEGW6/Apcup5ZAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUzdaVbLleNJ+sGkSCmqeGTUgAcbYwHwYDVR0j BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1 NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv MzIzODMwMzQzYTMxNjUzNjMwM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmDAMA0GCSqGSIb3DQEBCwUA A4IBAQCPYGuWQ9eE1FVGE0JnJCTrAy0as3eiQeTDd4JqhGvk01yl77QzqhKqlcvP rD9Ltt1OIV0Eq39iH1rX04m8WeynHp4QWCLIN5mnQrgiplsRFEInOgyz1gJAw1er +5i5tlSSeijCX8dX/SGTSWmszzvRdiUVEq/P2+cRrSwECRYPp+kH2JrnsIDucedw j8h/1o6+kY/fYmvYPmINFkSVqP3ifxXWau4U6XCwPKSr3BgGoIoMXVzb6XG7fZv1 Z2C0zY3+jjU7AuDKVxHIIin6WtJyFrfw4sYhrdNU1ahvV18GH4jperkBJG6BgtNd VfgzUAtc6gm9ATwtjcXwS9juTInU -----END CERTIFICATE-----Generated at Tue Nov 4 20:20:15 2025 by rpki-client