$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33342d3334203d3e20323731313639.roa File: 323830343a373734633a383030303a3a2f33342d3334203d3e20323731313639.roa (raw, json) Hash identifier: d4h6mgKNP/9azEd+Y1RvyBxt/s0tuw6qFAR9CEJFOt0= Subject key identifier: 84:08:68:A9:AA:94:B8:B0:72:DD:43:16:63:63:2A:FD:45:43:26:33 Certificate issuer: /CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB Certificate serial: 4703E3B6CEC35080A1031ADFFFB390937FAB0D96 Authority key identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33342d3334203d3e20323731313639.roa Signing time: Mon 20 Oct 2025 19:53:07 +0000 ROA not before: Mon 20 Oct 2025 19:48:07 +0000 ROA not after: Mon 19 Oct 2026 19:53:07 +0000 asID: 271169 IP address blocks: 2804:774c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 13:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:e3:b6:ce:c3:50:80:a1:03:1a:df:ff:b3:90:93:7f:ab:0d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB Validity Not Before: Oct 20 19:48:07 2025 GMT Not After : Oct 19 19:53:07 2026 GMT Subject: CN=840868A9AA94B8B072DD431663632AFD45432633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:32:b5:09:04:4b:4a:13:e3:fc:f6:ba:f4: 68:cc:57:39:76:0b:40:f9:5e:54:3f:79:d8:d1:31: 7a:af:6b:26:37:9d:d6:6d:6a:98:b8:29:c7:9a:f7: 1d:e5:be:f3:f1:8b:8e:21:fe:27:8a:dd:e7:ba:00: 47:51:49:57:96:a9:94:4a:c3:06:c8:d5:b8:1b:e4: 3b:43:b7:56:cb:13:7d:be:bc:c8:97:d0:35:df:fc: 90:3c:da:b5:d1:35:5b:e5:5a:90:dc:cb:ca:8a:93: ff:49:6a:0d:7c:b5:9c:85:c5:f0:01:da:11:ae:c9: a5:16:4c:f8:8f:0a:f7:f7:36:43:0d:3f:b2:1d:5b: 96:04:83:11:0f:fe:31:ea:1b:97:f0:4e:99:fc:aa: bb:28:ae:3b:2b:ab:1c:54:4b:97:4d:8f:1d:24:02: 95:51:0e:61:6d:4b:3f:23:3e:6a:c8:04:bc:08:20: 2f:63:06:58:f1:fd:65:8a:b4:d9:ce:e3:3e:de:4b: d0:94:b1:63:1e:3d:63:71:4a:e5:07:99:06:ed:f0: b7:6a:19:cf:0b:d5:dd:cd:fd:2d:38:8c:bf:8d:f0: bc:3b:26:22:5c:db:96:fc:46:d7:87:19:62:46:10: 2d:7e:da:8f:11:61:15:ff:6d:30:09:26:a4:f8:15: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:08:68:A9:AA:94:B8:B0:72:DD:43:16:63:63:2A:FD:45:43:26:33 X509v3 Authority Key Identifier: keyid:33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33342d3334203d3e20323731313639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:774c:8000::/34 Signature Algorithm: sha256WithRSAEncryption a9:c0:45:b9:81:ec:50:06:f8:49:8a:05:22:b8:40:12:e7:14: bf:13:9d:06:d6:f4:e2:1e:04:d3:a5:68:67:ee:27:76:94:f4: d3:93:01:ba:62:54:9a:68:a5:cf:e9:eb:1c:e2:c5:33:34:b2: 8e:9a:0f:1f:e7:cc:b8:f0:92:89:36:c0:bd:8b:97:7e:6f:de: 19:ad:8e:28:37:23:bc:b2:02:63:5e:fb:99:9f:fb:6f:32:04: 69:f6:a9:9d:ad:01:2b:8d:38:c9:05:1b:fe:86:31:73:47:06: 3a:13:76:50:65:5d:36:fe:3f:99:c7:49:98:ed:01:ef:68:6a: 99:c8:00:5b:1b:0e:b8:a6:7d:4d:99:95:50:27:90:f3:eb:7d: 55:7e:74:42:76:d4:e6:26:d2:58:2b:6e:36:7e:6c:50:a6:99: 96:08:c5:18:86:37:52:b2:c0:5c:ae:5d:b8:34:a8:2a:8f:43: ed:71:9c:03:64:43:2d:18:1c:81:58:e2:ac:93:7e:3a:ea:5f: 99:0b:91:f0:45:6a:72:95:bd:f5:76:3e:0c:cd:28:f3:e1:12: fd:09:14:83:ba:22:15:a6:b8:14:89:ae:8d:05:22:60:1b:81: 06:60:3a:93:c7:5c:35:b7:29:e1:cc:66:57:8c:ba:46:e5:c2: d7:3b:3b:50 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIURwPjts7DUIChAxrf/7OQk3+rDZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM2MUI4NTAwRTkyOUFGRUU1OEJEOUU1NzA4QUNFMDU2 RUVCNzNEQjAeFw0yNTEwMjAxOTQ4MDdaFw0yNjEwMTkxOTUzMDdaMDMxMTAvBgNV BAMTKDg0MDg2OEE5QUE5NEI4QjA3MkRENDMxNjYzNjMyQUZENDU0MzI2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZjK1CQRLShPj/Pa69GjMVzl2 C0D5XlQ/edjRMXqvayY3ndZtapi4Kcea9x3lvvPxi44h/ieK3ee6AEdRSVeWqZRK wwbI1bgb5DtDt1bLE32+vMiX0DXf/JA82rXRNVvlWpDcy8qKk/9Jag18tZyFxfAB 2hGuyaUWTPiPCvf3NkMNP7IdW5YEgxEP/jHqG5fwTpn8qrsorjsrqxxUS5dNjx0k ApVRDmFtSz8jPmrIBLwIIC9jBljx/WWKtNnO4z7eS9CUsWMePWNxSuUHmQbt8Ldq Gc8L1d3N/S04jL+N8Lw7JiJc25b8RteHGWJGEC1+2o8RYRX/bTAJJqT4Fc7zAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUhAhoqaqUuLBy3UMWY2Mq/UVDJjMwHwYDVR0j BBgwFoAUM2G4UA6Smv7li9nlcIrOBW7rc9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hwYWlnTFl6MnFDdlBkZVdReVBEVGlLMmZGVzFhQjhGNkVMWkRyUUU3 bXovMC8zMzYxQjg1MDBFOTI5QUZFRTU4QkQ5RTU3MDhBQ0UwNTZFRUI3M0RCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNjFCODUwMEU5MjlBRkVF NThCRDlFNTcwOEFDRTA1NkVFQjczREIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N4cGFpZ0xZejJxQ3ZQZGVXUXlQRFRpSzJmRlcxYUI4RjZFTFpEclFFN216LzAv MzIzODMwMzQzYTM3MzczNDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTMxMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEd0yAMA0GCSqGSIb3DQEBCwUA A4IBAQCpwEW5gexQBvhJigUiuEAS5xS/E50G1vTiHgTTpWhn7id2lPTTkwG6YlSa aKXP6esc4sUzNLKOmg8f58y48JKJNsC9i5d+b94ZrY4oNyO8sgJjXvuZn/tvMgRp 9qmdrQErjTjJBRv+hjFzRwY6E3ZQZV02/j+Zx0mY7QHvaGqZyABbGw64pn1NmZVQ J5Dz631VfnRCdtTmJtJYK242fmxQppmWCMUYhjdSssBcrl24NKgqj0PtcZwDZEMt GByBWOKsk3466l+ZC5HwRWpylb31dj4MzSjz4RL9CRSDuiIVprgUia6NBSJgG4EG YDqTx1w1tynhzGZXjLpG5cLXOztQ -----END CERTIFICATE-----Generated at Tue Nov 4 01:38:43 2025 by rpki-client