$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa File: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (raw, json) Hash identifier: 2qmrHaxk6Rv/luAiYpuIkARCcKBzgZsTcrcKH7VvjVM= Subject key identifier: F6:EA:1B:F8:4D:5F:65:2F:D2:FE:1D:D8:DF:F5:77:55:49:81:41:38 Certificate issuer: /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Certificate serial: 29BFFC3C5490C7581D480743A78F208B7676DF1E Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa Signing time: Fri 24 Oct 2025 16:52:06 +0000 ROA not before: Fri 24 Oct 2025 16:47:06 +0000 ROA not after: Fri 23 Oct 2026 16:52:06 +0000 asID: 263486 IP address blocks: 2804:1298:c000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bf:fc:3c:54:90:c7:58:1d:48:07:43:a7:8f:20:8b:76:76:df:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Validity Not Before: Oct 24 16:47:06 2025 GMT Not After : Oct 23 16:52:06 2026 GMT Subject: CN=F6EA1BF84D5F652FD2FE1DD8DFF5775549814138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:ef:50:36:53:b1:d3:50:b8:f2:96:ce:6f: 4f:ca:36:63:4f:ca:e5:c5:32:d6:04:e0:0a:8a:76: cc:dd:47:15:ab:97:6e:6b:33:95:d2:50:e3:93:bb: b3:1b:c4:85:20:a5:74:c0:9e:b1:94:8f:f1:75:d4: 0a:7f:89:2d:73:c9:e0:58:19:d3:cf:11:dd:9f:77: e2:c8:1f:79:28:db:2f:ba:48:2f:3c:53:39:a5:9f: a8:b7:76:e1:2a:0e:29:5d:00:76:21:59:99:35:51: 72:43:9d:a6:e5:59:77:9a:c0:9a:6f:0f:ad:28:e3: 78:fd:17:bd:ee:e7:9e:5f:94:c0:2a:f8:6c:46:52: 2c:bb:8d:48:a6:1f:26:6c:05:b3:ae:fe:cd:2d:06: 1f:30:22:26:15:8a:fb:8f:f3:d0:60:13:88:17:11: e2:0f:5a:23:9b:83:39:69:65:0a:98:40:de:3b:51: 93:0e:09:48:2f:2e:65:9c:77:7d:84:9c:7e:a0:2f: f4:27:e7:98:ff:b5:ee:05:39:87:70:08:bf:d9:37: 93:07:dc:ea:18:5a:cf:a2:dd:fe:02:25:32:2b:9a: 94:92:02:c1:0c:49:73:47:a0:d2:23:71:dc:f4:ce: dc:eb:90:6d:02:1b:00:34:e4:a1:52:8c:8b:47:4d: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EA:1B:F8:4D:5F:65:2F:D2:FE:1D:D8:DF:F5:77:55:49:81:41:38 X509v3 Authority Key Identifier: keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1298:c000::/34 Signature Algorithm: sha256WithRSAEncryption 5c:6e:2d:b6:81:18:70:98:5f:b0:46:b6:1f:67:fc:9c:62:81: 2b:18:0c:76:dd:fd:08:d8:d9:05:85:01:8c:c8:80:fd:42:ca: bf:ee:d6:46:8b:44:2b:90:b8:ae:c7:91:6e:c5:da:68:da:d7: 03:f8:2f:62:49:24:1f:c2:3b:d0:37:6a:7a:1b:03:bc:bc:7d: 43:3c:f9:c9:de:1b:5a:43:42:c2:02:00:bb:10:57:94:c0:66: c8:b9:2a:6f:35:9a:0d:82:92:3e:09:a4:b2:87:d1:6b:40:84: 4a:a9:d7:a9:41:e9:8c:23:4b:0a:d7:18:f2:78:88:b6:98:7f: e7:f8:a4:11:42:bd:3b:49:5f:c8:d2:df:d6:ba:a4:f8:ef:54: 0d:67:6f:a8:24:ce:2a:4c:8d:0c:67:9c:b6:80:23:70:89:7c: de:70:c0:d8:81:5f:6f:98:a9:2e:08:1d:10:78:ea:d4:c0:3d: 67:42:e4:2b:d6:77:92:ce:7b:cf:17:32:b1:8b:50:87:30:6b: f3:29:31:dd:85:94:40:81:3e:40:df:91:51:44:e4:73:a4:35: dd:e4:2d:9c:85:d6:3f:33:81:dc:e5:91:86:b5:d2:13:35:a5: 97:ad:da:cc:77:13:86:53:7f:ea:c9:2c:88:f2:2b:af:0a:18: 2b:f9:d8:de -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKb/8PFSQx1gdSAdDp48gi3Z23x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxNTdDRUZFRUJEMEM3RDhBMjlFQ0U0QTI0MzQzMjc3 MzJGRkRGNjAeFw0yNTEwMjQxNjQ3MDZaFw0yNjEwMjMxNjUyMDZaMDMxMTAvBgNV BAMTKEY2RUExQkY4NEQ1RjY1MkZEMkZFMUREOERGRjU3NzU1NDk4MTQxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTe9QNlOx01C48pbOb0/KNmNP yuXFMtYE4AqKdszdRxWrl25rM5XSUOOTu7MbxIUgpXTAnrGUj/F11Ap/iS1zyeBY GdPPEd2fd+LIH3ko2y+6SC88Uzmln6i3duEqDildAHYhWZk1UXJDnablWXeawJpv D60o43j9F73u555flMAq+GxGUiy7jUimHyZsBbOu/s0tBh8wIiYVivuP89BgE4gX EeIPWiObgzlpZQqYQN47UZMOCUgvLmWcd32EnH6gL/Qn55j/te4FOYdwCL/ZN5MH 3OoYWs+i3f4CJTIrmpSSAsEMSXNHoNIjcdz0ztzrkG0CGwA05KFSjItHTesNAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU9uob+E1fZS/S/h3Y3/V3VUmBQTgwHwYDVR0j BBgwFoAUMBV87+69DH2KKezkokNDJ3Mv/fYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz ZmEvMC8zMDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMTU3Q0VGRUVCRDBDN0Q4 QTI5RUNFNEEyNDM0MzI3NzMyRkZERjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZGVEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAv MzIzODMwMzQzYTMxMzIzOTM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNk M2UyMDMyMzYzMzM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEpjAMA0GCSqGSIb3DQEBCwUA A4IBAQBcbi22gRhwmF+wRrYfZ/ycYoErGAx23f0I2NkFhQGMyID9Qsq/7tZGi0Qr kLiux5Fuxdpo2tcD+C9iSSQfwjvQN2p6GwO8vH1DPPnJ3htaQ0LCAgC7EFeUwGbI uSpvNZoNgpI+CaSyh9FrQIRKqdepQemMI0sK1xjyeIi2mH/n+KQRQr07SV/I0t/W uqT471QNZ2+oJM4qTI0MZ5y2gCNwiXzecMDYgV9vmKkuCB0QeOrUwD1nQuQr1neS znvPFzKxi1CHMGvzKTHdhZRAgT5A35FRRORzpDXd5C2chdY/M4Hc5ZGGtdITNaWX rdrMdxOGU3/qySyI8iuvChgr+dje -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:00 2025 by rpki-client