$ rpki-client -vvf rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a6230303a3a2f34302d3430203d3e20323639313439.roa File: 323830343a363032383a6230303a3a2f34302d3430203d3e20323639313439.roa (raw, json) Hash identifier: 4WId77nK6Mh78bnY7OuP392K+KlC+e+fZS+jmr2gUmg= Subject key identifier: AC:3B:40:BE:F7:4B:79:0A:C0:AA:6A:FF:BA:D0:61:F7:65:FF:9F:EC Certificate issuer: /CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1 Certificate serial: 24B34CBF8AEE7BB0BF5E93EE42B81097B3727F3F Authority key identifier: F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a6230303a3a2f34302d3430203d3e20323639313439.roa Signing time: Thu 25 Sep 2025 18:49:03 +0000 ROA not before: Thu 25 Sep 2025 18:44:03 +0000 ROA not after: Thu 24 Sep 2026 18:49:03 +0000 asID: 269149 IP address blocks: 2804:6028:b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 06:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b3:4c:bf:8a:ee:7b:b0:bf:5e:93:ee:42:b8:10:97:b3:72:7f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F82D21AF854C0D12899CF9E18B7205BCF75379D1 Validity Not Before: Sep 25 18:44:03 2025 GMT Not After : Sep 24 18:49:03 2026 GMT Subject: CN=AC3B40BEF74B790AC0AA6AFFBAD061F765FF9FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:ee:31:8c:29:be:a2:d6:fd:2d:ee:b6:c0: c7:8d:b3:9a:bd:c8:53:2d:27:c9:63:f5:7c:ab:2d: c6:89:00:92:76:ab:89:95:91:bd:c9:fb:c6:57:0f: de:40:28:18:df:04:41:08:b1:d8:b1:e0:32:b0:82: 1a:d1:6b:da:23:67:ad:25:22:85:26:22:f1:10:dc: ae:1e:4e:67:9b:cc:6b:12:57:f9:72:6c:c8:1b:6c: 0a:e8:d5:74:51:4c:ea:62:03:b3:05:55:c2:20:b7: 2a:27:63:65:21:63:02:db:cd:89:03:fc:7f:28:79: 0c:60:b7:b5:fa:86:fc:0a:e4:19:7f:7a:a7:5a:e9: 8e:00:b3:ef:e8:f7:de:0a:ff:91:b1:ab:0e:2b:46: b5:d8:c8:ef:b4:83:88:69:72:38:14:39:0c:f9:65: 98:3a:28:49:a9:13:97:a9:1d:f6:e4:a0:dd:f4:0c: 3c:99:d9:bd:41:e1:be:17:a3:1f:6f:2f:3b:1d:38: 28:41:64:91:31:9f:09:07:9e:12:ff:8c:60:42:d4: dc:a9:73:cd:9e:df:06:b4:33:79:1e:93:fa:2f:07: 8d:6e:7d:b2:88:0e:ce:1d:e4:10:23:62:fa:fd:40: 77:e4:c7:b1:c8:ef:ca:c4:88:bd:df:40:34:80:ea: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3B:40:BE:F7:4B:79:0A:C0:AA:6A:FF:BA:D0:61:F7:65:FF:9F:EC X509v3 Authority Key Identifier: keyid:F8:2D:21:AF:85:4C:0D:12:89:9C:F9:E1:8B:72:05:BC:F7:53:79:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/F82D21AF854C0D12899CF9E18B7205BCF75379D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D21AF854C0D12899CF9E18B7205BCF75379D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/323830343a363032383a6230303a3a2f34302d3430203d3e20323639313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:6028:b00::/40 Signature Algorithm: sha256WithRSAEncryption 1d:f9:77:dd:ef:78:8c:85:66:5c:61:1f:07:90:c2:20:e5:dd: eb:36:48:44:6e:db:7f:06:06:7f:26:bc:5d:d1:cc:69:73:bb: 92:4e:3e:1d:27:0e:8b:d5:78:af:67:ce:b5:80:7f:f9:64:94: 6c:f9:29:5e:c9:67:93:39:a0:93:48:c4:34:bd:c2:e2:cf:d1: 09:45:2f:b5:df:67:f3:ab:2e:60:fe:4c:ea:85:af:df:34:2c: 57:98:6f:a7:ba:2e:8f:49:bd:56:2d:ab:03:c2:5a:b3:c3:d3: c3:40:17:2c:4b:2a:93:99:ad:5c:6f:fc:81:f2:ea:0d:bb:d1: 7d:a7:27:e8:a9:ee:d4:04:0a:50:2d:ed:c3:4b:c2:e1:98:19: 60:7a:a7:a4:14:7c:72:54:e4:3e:92:4e:05:b6:30:ab:2b:76: b3:b8:51:5f:48:be:69:96:3f:a1:91:92:67:3c:99:03:ec:db: 12:f6:0a:3c:f4:a9:cd:16:f0:1a:40:f4:c2:e6:e2:56:41:0d: e9:c6:59:68:91:63:fa:af:88:0c:46:c1:bc:ce:c0:35:9f:c0: 17:eb:ad:2e:27:51:ec:70:03:eb:61:50:fe:f7:15:08:f7:f7: 4e:49:57:09:de:93:7e:1a:d0:49:64:7a:60:12:e2:9d:29:25: 5b:03:d2:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJLNMv4rue7C/XpPuQrgQl7Nyfz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyRDIxQUY4NTRDMEQxMjg5OUNGOUUxOEI3MjA1QkNG NzUzNzlEMTAeFw0yNTA5MjUxODQ0MDNaFw0yNjA5MjQxODQ5MDNaMDMxMTAvBgNV BAMTKEFDM0I0MEJFRjc0Qjc5MEFDMEFBNkFGRkJBRDA2MUY3NjVGRjlGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYe4xjCm+otb9Le62wMeNs5q9 yFMtJ8lj9XyrLcaJAJJ2q4mVkb3J+8ZXD95AKBjfBEEIsdix4DKwghrRa9ojZ60l IoUmIvEQ3K4eTmebzGsSV/lybMgbbAro1XRRTOpiA7MFVcIgtyonY2UhYwLbzYkD /H8oeQxgt7X6hvwK5Bl/eqda6Y4As+/o994K/5Gxqw4rRrXYyO+0g4hpcjgUOQz5 ZZg6KEmpE5epHfbkoN30DDyZ2b1B4b4Xox9vLzsdOChBZJExnwkHnhL/jGBC1Nyp c82e3wa0M3kek/ovB41ufbKIDs4d5BAjYvr9QHfkx7HI78rEiL3fQDSA6lohAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrDtAvvdLeQrAqmr/utBh92X/n+wwHwYDVR0j BBgwFoAU+C0hr4VMDRKJnPnhi3IFvPdTedEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhpRjFqUExCMlAyVW54aXN5bWZrakhITjdGVVZYQkJ3b0tLV0Q5U3h6 Z04vMC9GODJEMjFBRjg1NEMwRDEyODk5Q0Y5RTE4QjcyMDVCQ0Y3NTM3OUQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4MkQyMUFGODU0QzBEMTI4 OTlDRjlFMThCNzIwNUJDRjc1Mzc5RDEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0RYaUYxalBMQjJQMlVueGlzeW1ma2pISE43RlVWWEJCd29LS1dEOVN4emdOLzAv MzIzODMwMzQzYTM2MzAzMjM4M2E2MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl MjAzMjM2MzkzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBGAoCzANBgkqhkiG9w0BAQsFAAOC AQEAHfl33e94jIVmXGEfB5DCIOXd6zZIRG7bfwYGfya8XdHMaXO7kk4+HScOi9V4 r2fOtYB/+WSUbPkpXslnkzmgk0jENL3C4s/RCUUvtd9n86suYP5M6oWv3zQsV5hv p7ouj0m9Vi2rA8Jas8PTw0AXLEsqk5mtXG/8gfLqDbvRfacn6Knu1AQKUC3tw0vC 4ZgZYHqnpBR8clTkPpJOBbYwqyt2s7hRX0i+aZY/oZGSZzyZA+zbEvYKPPSpzRbw GkD0wubiVkEN6cZZaJFj+q+IDEbBvM7ANZ/AF+utLidR7HAD62FQ/vcVCPf3TklX Cd6TfhrQSWR6YBLinSklWwPSFQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:11:27 2025 by rpki-client