$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a393030303a3a2f33362d3336203d3e20323632373937.roa File: 323830343a3233633a393030303a3a2f33362d3336203d3e20323632373937.roa (raw, json) Hash identifier: X6XdIxSWW0kAABtUJRmYCdNqk+ixoD3+Z+3isR/wsvw= Subject key identifier: 13:AA:91:DA:03:4F:C5:DD:C9:F2:A1:96:67:6D:7D:35:FD:3D:7B:F3 Certificate issuer: /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Certificate serial: 221B4EF6D8CD4DFA6D77B2325B7E1A24B19A1AF9 Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a393030303a3a2f33362d3336203d3e20323632373937.roa Signing time: Thu 23 Oct 2025 14:13:18 +0000 ROA not before: Thu 23 Oct 2025 14:08:18 +0000 ROA not after: Thu 22 Oct 2026 14:13:18 +0000 asID: 262797 IP address blocks: 2804:23c:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1b:4e:f6:d8:cd:4d:fa:6d:77:b2:32:5b:7e:1a:24:b1:9a:1a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Validity Not Before: Oct 23 14:08:18 2025 GMT Not After : Oct 22 14:13:18 2026 GMT Subject: CN=13AA91DA034FC5DDC9F2A196676D7D35FD3D7BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:ed:38:10:bf:68:bf:b0:28:76:54:c6:29: f1:f8:1b:94:c7:e4:4d:18:5b:98:a3:6f:cb:de:ab: 2c:ac:e3:10:b8:d6:41:91:ea:a3:2c:45:fa:f5:62: ba:76:af:6b:04:72:a3:91:c2:9e:13:99:8a:ff:a6: cf:62:25:9d:80:e6:6d:ea:ac:b9:d8:95:d3:43:5c: 99:a8:ec:3c:d0:9f:ac:51:36:bb:5d:6d:2f:3c:c8: d3:df:67:fc:60:b2:51:a8:ea:d3:e5:25:f1:a3:f0: c1:7c:66:11:21:f8:5f:3e:1c:63:72:57:5b:75:56: ca:fc:8d:1f:93:7a:d6:c6:8b:1e:e5:d7:e0:2d:8b: b6:20:9b:a1:20:76:55:81:1e:a9:04:4b:44:a7:a3: f4:4c:40:05:0a:87:8f:60:1a:e7:a9:d7:5d:71:3c: a3:63:fb:1f:c9:9d:bf:62:61:1e:91:35:fc:30:7a: 16:ab:c9:62:0d:89:9e:fb:71:fe:19:a3:9a:0b:d3: 07:be:be:64:fb:76:d0:3a:da:6d:b2:09:41:7c:3a: 32:18:a4:49:90:2d:a5:b1:11:bf:c0:7f:6d:31:ad: a2:c7:ba:ec:33:3b:f7:0e:81:d1:01:ab:0d:81:37: 6a:72:f7:d4:a3:c8:43:c9:de:45:b4:ab:33:2f:ba: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:91:DA:03:4F:C5:DD:C9:F2:A1:96:67:6D:7D:35:FD:3D:7B:F3 X509v3 Authority Key Identifier: keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a393030303a3a2f33362d3336203d3e20323632373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:23c:9000::/36 Signature Algorithm: sha256WithRSAEncryption b8:2d:45:66:d2:65:0a:f6:ec:81:79:95:71:16:7c:3a:45:d6: 61:4b:7d:4c:f6:22:d4:de:a8:e5:f8:cb:64:7e:f8:53:f7:8b: 1f:78:ca:2e:5e:fd:68:c3:49:c6:25:9a:00:6a:88:87:58:34: 9f:c3:d9:11:48:85:b8:4c:ec:47:23:0b:ff:5f:72:ea:dc:2b: 96:ef:a4:db:43:60:ea:6e:71:62:d5:c9:fe:20:75:c1:60:70: 8a:60:d1:01:6d:90:81:a2:72:c3:04:18:a0:1c:4e:76:c9:38: 23:e1:46:78:f9:58:5e:58:ad:86:98:53:12:07:12:22:8d:13: d3:04:b3:70:57:97:e2:1b:df:eb:e1:a6:2f:3a:c0:90:2d:56: f2:10:e6:c3:e8:a9:84:c2:dd:58:4d:21:6e:12:c3:96:22:38: 41:6c:13:eb:8b:6a:2b:f9:48:b5:97:98:60:d6:ed:4b:a0:f2: a9:1c:85:d8:cd:65:a4:82:26:a7:cf:85:6d:4c:5c:9f:df:67: 85:f3:9f:61:41:52:c9:e0:9e:25:e9:e7:ad:24:71:b9:a8:27: 10:09:c4:1a:c4:38:c0:eb:a0:0b:72:6c:3c:24:3c:11:9e:56: b0:36:18:4f:fb:f3:1f:62:84:c4:47:51:0e:29:b8:c0:55:ac: af:a2:b7:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIhtO9tjNTfptd7IyW34aJLGaGvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC RTkwQzIwQjAeFw0yNTEwMjMxNDA4MThaFw0yNjEwMjIxNDEzMThaMDMxMTAvBgNV BAMTKDEzQUE5MURBMDM0RkM1RERDOUYyQTE5NjY3NkQ3RDM1RkQzRDdCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuO04EL9ov7AodlTGKfH4G5TH 5E0YW5ijb8veqyys4xC41kGR6qMsRfr1Yrp2r2sEcqORwp4TmYr/ps9iJZ2A5m3q rLnYldNDXJmo7DzQn6xRNrtdbS88yNPfZ/xgslGo6tPlJfGj8MF8ZhEh+F8+HGNy V1t1Vsr8jR+TetbGix7l1+Ati7Ygm6EgdlWBHqkES0Sno/RMQAUKh49gGuep111x PKNj+x/Jnb9iYR6RNfwweharyWINiZ77cf4Zo5oL0we+vmT7dtA62m2yCUF8OjIY pEmQLaWxEb/Af20xraLHuuwzO/cOgdEBqw2BN2py99SjyEPJ3kW0qzMvunG9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE6qR2gNPxd3J8qGWZ219Nf09e/MwHwYDVR0j BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv MzIzODMwMzQzYTMyMzM2MzNhMzkzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAI8kDANBgkqhkiG9w0BAQsFAAOC AQEAuC1FZtJlCvbsgXmVcRZ8OkXWYUt9TPYi1N6o5fjLZH74U/eLH3jKLl79aMNJ xiWaAGqIh1g0n8PZEUiFuEzsRyML/19y6twrlu+k20Ng6m5xYtXJ/iB1wWBwimDR AW2QgaJywwQYoBxOdsk4I+FGePlYXlithphTEgcSIo0T0wSzcFeX4hvf6+GmLzrA kC1W8hDmw+iphMLdWE0hbhLDliI4QWwT64tqK/lItZeYYNbtS6DyqRyF2M1lpIIm p8+FbUxcn99nhfOfYUFSyeCeJennrSRxuagnEAnEGsQ4wOugC3JsPCQ8EZ5WsDYY T/vzH2KExEdRDim4wFWsr6K3+Q== -----END CERTIFICATE-----Generated at Tue Nov 4 01:37:26 2025 by rpki-client