$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa File: 323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (raw, json) Hash identifier: 5CA3bhiL9G5EqssM79mQ2NXKJ4+iR7T1WwgYCJVhPkw= Subject key identifier: C6:69:12:92:7C:81:4E:4F:5F:66:2F:3C:84:B9:02:59:DA:D8:87:EA Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66 Certificate serial: 4CA1DA04ECAFE7535C5886BD934FD072D6351C26 Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa Signing time: Thu 06 Mar 2025 07:44:37 +0000 ROA not before: Thu 06 Mar 2025 07:39:37 +0000 ROA not after: Thu 05 Mar 2026 07:44:37 +0000 asID: 270910 IP address blocks: 2804:735c:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a1:da:04:ec:af:e7:53:5c:58:86:bd:93:4f:d0:72:d6:35:1c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66 Validity Not Before: Mar 6 07:39:37 2025 GMT Not After : Mar 5 07:44:37 2026 GMT Subject: CN=C66912927C814E4F5F662F3C84B90259DAD887EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:b6:83:35:60:06:52:c5:6e:09:9f:05:10: 62:fe:c5:53:c3:0a:ac:1d:23:da:cf:9f:13:e3:ab: 2d:11:ae:9c:60:e1:e5:66:69:3e:0d:dd:df:eb:21: ac:c2:a1:f2:e4:76:d2:bc:16:5a:90:15:bb:81:d8: 03:89:3e:a2:5b:ca:64:65:e8:44:88:f0:e8:5b:c1: b4:fc:1f:42:17:15:f9:a2:b8:cd:81:5a:2e:90:21: 2d:f1:b1:65:e0:fd:19:3f:69:05:0c:e5:dd:1c:89: 57:71:4e:11:0a:1e:84:ca:7f:9b:92:fd:4a:4c:e1: fe:18:74:a5:25:6f:b7:00:a1:93:c8:18:02:7d:4a: cc:75:d0:6e:8a:a6:ef:a5:a2:d6:ca:8e:98:6d:0f: 23:b5:fa:6b:c4:f7:d1:7e:63:fe:d8:f4:ab:23:01: c0:b0:f8:bd:bb:4a:df:2a:80:a5:3f:cd:d8:ee:71: 9c:a4:34:90:8f:0f:98:59:2b:d2:c9:bb:2c:5d:3f: b4:69:02:e0:3b:3e:78:52:8b:49:45:dc:e9:6f:28: 99:65:d4:59:d9:11:85:80:86:10:6a:0d:18:e0:73: 1a:d8:92:ff:07:d8:a3:3e:d8:9f:c5:8c:a6:03:1a: fd:0b:31:bd:1f:23:1c:78:c3:3d:a6:9e:3c:5c:67: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:69:12:92:7C:81:4E:4F:5F:66:2F:3C:84:B9:02:59:DA:D8:87:EA X509v3 Authority Key Identifier: keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:735c:8000::/34 Signature Algorithm: sha256WithRSAEncryption c1:ed:c5:99:b1:0b:c7:c7:3c:39:5e:e1:3d:22:f3:bb:2f:ca: a7:26:3c:0b:86:ae:04:c6:29:d3:71:13:9a:f8:fe:93:fd:0c: 71:79:29:5f:ad:23:d6:fc:c6:f1:12:ab:f8:7c:02:0d:84:41: 06:b6:50:aa:9e:a1:15:46:57:2f:c8:af:62:51:b3:6a:fe:bc: f5:02:8e:ef:8f:f1:12:c6:4f:74:4e:f7:3b:97:df:65:2f:d2: 1a:45:53:1b:61:01:2e:a9:b7:2f:ae:21:da:c6:39:d7:33:11: 8f:38:60:63:a9:bd:a0:5f:76:30:e6:54:70:ea:bd:1c:ba:eb: f6:18:c5:c0:64:a1:1e:0a:b4:a4:68:6a:bd:3a:78:9d:57:aa: 23:14:21:90:82:e7:63:58:94:09:8b:f7:23:72:72:7d:ca:5d: e0:91:f9:84:86:e2:57:9f:2b:d7:6a:e5:12:59:02:f5:1d:cc: fe:5a:d3:4d:f9:4a:0c:e7:68:a7:bc:00:b4:54:3e:0b:71:ce: 81:82:81:f4:db:c8:d7:cc:f1:cc:93:8e:b6:69:c7:f9:60:bf: 55:4d:a4:8c:20:88:22:b4:e4:3a:7d:21:c0:95:c8:a5:b7:1e: 09:c1:f8:ad:14:ea:62:a4:c8:cf:46:af:fc:1a:67:c9:ba:78: 7c:dc:33:6d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUTKHaBOyv51NcWIa9k0/QctY1HCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5 NENDM0I2NjAeFw0yNTAzMDYwNzM5MzdaFw0yNjAzMDUwNzQ0MzdaMDMxMTAvBgNV BAMTKEM2NjkxMjkyN0M4MTRFNEY1RjY2MkYzQzg0QjkwMjU5REFEODg3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRA7aDNWAGUsVuCZ8FEGL+xVPD CqwdI9rPnxPjqy0Rrpxg4eVmaT4N3d/rIazCofLkdtK8FlqQFbuB2AOJPqJbymRl 6ESI8OhbwbT8H0IXFfmiuM2BWi6QIS3xsWXg/Rk/aQUM5d0ciVdxThEKHoTKf5uS /UpM4f4YdKUlb7cAoZPIGAJ9Ssx10G6Kpu+lotbKjphtDyO1+mvE99F+Y/7Y9Ksj AcCw+L27St8qgKU/zdjucZykNJCPD5hZK9LJuyxdP7RpAuA7PnhSi0lF3OlvKJll 1FnZEYWAhhBqDRjgcxrYkv8H2KM+2J/FjKYDGv0LMb0fIxx4wz2mnjxcZ+ThAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUxmkSknyBTk9fZi88hLkCWdrYh+owHwYDVR0j BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0 MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv MzIzODMwMzQzYTM3MzMzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEc1yAMA0GCSqGSIb3DQEBCwUA A4IBAQDB7cWZsQvHxzw5XuE9IvO7L8qnJjwLhq4ExinTcROa+P6T/QxxeSlfrSPW /MbxEqv4fAINhEEGtlCqnqEVRlcvyK9iUbNq/rz1Ao7vj/ESxk90Tvc7l99lL9Ia RVMbYQEuqbcvriHaxjnXMxGPOGBjqb2gX3Yw5lRw6r0cuuv2GMXAZKEeCrSkaGq9 OnidV6ojFCGQgudjWJQJi/cjcnJ9yl3gkfmEhuJXnyvXauUSWQL1Hcz+WtNN+UoM 52invAC0VD4Lcc6BgoH028jXzPHMk462acf5YL9VTaSMIIgitOQ6fSHAlciltx4J wfitFOpipMjPRq/8GmfJunh83DNt -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:27 2025 by rpki-client