$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a633030303a3a2f33362d3336203d3e20323632373937.roa File: 323830343a3233633a633030303a3a2f33362d3336203d3e20323632373937.roa (raw, json) Hash identifier: nVTJ3j9tySALzVgfgDh1830xaW1JPIlbsPdqclSl8gw= Subject key identifier: 27:95:AB:D6:22:75:B6:10:D5:86:08:73:AD:D2:8B:75:6F:93:EC:C8 Certificate issuer: /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Certificate serial: 3F56CFAE4E22784DB554860AFD48193131C5BDFD Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a633030303a3a2f33362d3336203d3e20323632373937.roa Signing time: Thu 23 Oct 2025 14:13:20 +0000 ROA not before: Thu 23 Oct 2025 14:08:20 +0000 ROA not after: Thu 22 Oct 2026 14:13:20 +0000 asID: 262797 IP address blocks: 2804:23c:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:56:cf:ae:4e:22:78:4d:b5:54:86:0a:fd:48:19:31:31:c5:bd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B Validity Not Before: Oct 23 14:08:20 2025 GMT Not After : Oct 22 14:13:20 2026 GMT Subject: CN=2795ABD62275B610D5860873ADD28B756F93ECC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:78:a8:c2:93:37:24:4d:3d:9b:64:db:f1: 66:dd:28:25:ef:8a:9f:75:ea:32:4d:95:a6:a2:4e: 76:b2:bd:29:23:38:9d:43:d6:d1:ab:84:11:0a:d6: 80:04:c0:d9:74:9f:e9:d3:22:67:c9:52:fe:d0:b2: 0e:b9:04:4c:10:34:3a:30:85:03:42:ad:58:5c:80: 9a:7d:24:f3:5e:3e:95:e5:52:ce:66:cb:0b:f9:c8: 4f:d2:d5:3e:f0:3e:20:71:0e:18:a8:a5:4b:62:8c: 18:be:b3:d7:b8:9f:f0:70:f0:f2:cf:d0:a9:9f:f4: 78:ca:04:8b:9d:ea:4c:73:a4:1a:90:dc:1c:fd:1b: eb:e6:7a:5d:7b:d3:54:9a:d7:55:b1:0a:5f:f9:c1: 0d:cb:7a:48:59:b1:4a:d6:3f:47:12:5f:77:7b:cf: 6e:a8:eb:06:21:95:3d:e1:2f:d7:f4:38:5d:ed:2f: 2e:45:24:a7:ca:03:f3:b6:96:de:09:60:6a:2a:a3: 20:37:8e:53:2d:58:79:77:7c:38:da:97:0a:e0:97: e3:51:4b:0b:ea:24:b9:55:af:e5:48:9b:c7:82:b3: b8:5e:77:6b:80:6a:4f:3c:3f:9a:b6:5a:b6:9d:61: 28:e2:34:78:14:d0:75:35:2f:cd:0f:2f:07:77:e0: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:AB:D6:22:75:B6:10:D5:86:08:73:AD:D2:8B:75:6F:93:EC:C8 X509v3 Authority Key Identifier: keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a633030303a3a2f33362d3336203d3e20323632373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:23c:c000::/36 Signature Algorithm: sha256WithRSAEncryption 5b:65:e3:fe:2b:e1:a5:1e:d4:f5:39:98:9d:20:f9:4a:51:f3: 22:47:e5:b1:39:bc:57:91:22:d9:d9:83:1d:5b:a6:3a:78:a2: c0:7d:92:19:62:57:4a:63:3a:d2:87:99:3a:8c:74:cf:8c:e7: 75:e9:c9:06:6f:09:94:bb:99:a8:b5:b7:18:29:1a:b7:be:27: a1:41:13:41:0f:53:a7:db:69:a5:e4:5b:02:11:4b:51:f6:19: ea:13:c7:b4:a0:4c:03:76:2e:78:a9:00:d1:7e:e8:bc:65:0e: 0a:5d:41:2a:53:dd:00:6e:f8:19:96:78:a0:d4:7e:14:f1:71: 79:7f:62:2a:56:46:05:ef:eb:f1:1d:79:8b:ad:e3:82:1e:6e: 3a:83:96:cf:f5:f9:a2:21:f6:e3:b7:72:0a:d3:b2:ee:67:b3: ad:22:f4:d3:29:15:16:82:8d:97:5f:fa:92:c5:1a:02:ba:83: 79:ab:81:79:98:96:52:d4:75:03:36:6a:33:c8:0d:0e:98:02: 3f:b4:c4:05:9d:4c:3f:4f:ae:e5:9d:f8:a7:44:7b:c3:ba:82: f0:fe:02:04:aa:5e:f3:9f:54:6f:37:c3:7c:90:85:e6:1f:ed: dc:3d:ab:2e:51:61:a1:4a:28:94:47:e8:10:b8:76:bc:e9:7f: 54:35:73:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP1bPrk4ieE21VIYK/UgZMTHFvf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC RTkwQzIwQjAeFw0yNTEwMjMxNDA4MjBaFw0yNjEwMjIxNDEzMjBaMDMxMTAvBgNV BAMTKDI3OTVBQkQ2MjI3NUI2MTBENTg2MDg3M0FERDI4Qjc1NkY5M0VDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlXiowpM3JE09m2Tb8WbdKCXv ip916jJNlaaiTnayvSkjOJ1D1tGrhBEK1oAEwNl0n+nTImfJUv7Qsg65BEwQNDow hQNCrVhcgJp9JPNePpXlUs5mywv5yE/S1T7wPiBxDhiopUtijBi+s9e4n/Bw8PLP 0Kmf9HjKBIud6kxzpBqQ3Bz9G+vmel1701Sa11WxCl/5wQ3LekhZsUrWP0cSX3d7 z26o6wYhlT3hL9f0OF3tLy5FJKfKA/O2lt4JYGoqoyA3jlMtWHl3fDjalwrgl+NR SwvqJLlVr+VIm8eCs7hed2uAak88P5q2WradYSjiNHgU0HU1L80PLwd34NihAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ5Wr1iJ1thDVhghzrdKLdW+T7MgwHwYDVR0j BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv MzIzODMwMzQzYTMyMzM2MzNhNjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAI8wDANBgkqhkiG9w0BAQsFAAOC AQEAW2Xj/ivhpR7U9TmYnSD5SlHzIkflsTm8V5Ei2dmDHVumOniiwH2SGWJXSmM6 0oeZOox0z4zndenJBm8JlLuZqLW3GCkat74noUETQQ9Tp9tppeRbAhFLUfYZ6hPH tKBMA3YueKkA0X7ovGUOCl1BKlPdAG74GZZ4oNR+FPFxeX9iKlZGBe/r8R15i63j gh5uOoOWz/X5oiH247dyCtOy7mezrSL00ykVFoKNl1/6ksUaArqDeauBeZiWUtR1 AzZqM8gNDpgCP7TEBZ1MP0+u5Z34p0R7w7qC8P4CBKpe859UbzfDfJCF5h/t3D2r LlFhoUoolEfoELh2vOl/VDVz4Q== -----END CERTIFICATE-----Generated at Tue Nov 4 01:37:33 2025 by rpki-client