$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa File: 323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa (raw, json) Hash identifier: u6Br5xfZvsknVXUknVn9b47QGzFA1qZXVZHocGqJ8IY= Subject key identifier: 8F:3C:4C:A0:AC:41:67:C6:B9:2D:04:0F:4A:E3:23:FC:F6:AB:08:83 Certificate issuer: /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Certificate serial: 1864F2F6BDAB272109EC09285474A0B89E48FE08 Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa Signing time: Wed 10 Sep 2025 12:34:59 +0000 ROA not before: Wed 10 Sep 2025 12:29:59 +0000 ROA not after: Wed 09 Sep 2026 12:34:59 +0000 asID: 271111 IP address blocks: 2804:766c:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 16:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:64:f2:f6:bd:ab:27:21:09:ec:09:28:54:74:a0:b8:9e:48:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Validity Not Before: Sep 10 12:29:59 2025 GMT Not After : Sep 9 12:34:59 2026 GMT Subject: CN=8F3C4CA0AC4167C6B92D040F4AE323FCF6AB0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:d9:42:67:58:59:ca:1c:84:36:64:2b:85: 62:d9:3d:93:32:e7:1e:e7:0d:bb:e3:37:d1:c1:54: 72:40:b0:3e:53:c2:94:2e:ed:8c:ce:e1:94:a4:d9: 39:4f:94:5c:4c:69:d9:54:d4:63:c5:fa:9d:25:4a: da:6f:4f:0c:1d:42:a6:53:b8:67:5d:f9:5f:68:32: a1:b2:98:8f:f5:16:e1:ee:6c:60:8b:75:45:63:d7: 71:bf:4e:ea:7a:1e:a2:fb:2d:a9:5f:c5:1b:af:6c: f0:fa:0c:13:32:86:d5:c7:eb:67:6c:59:f9:fb:47: f6:d5:34:b4:27:a0:14:8d:f3:82:d7:e4:be:ed:67: 58:86:d7:ab:7e:26:cb:5a:25:68:ef:5e:ad:b6:9a: 9a:dd:01:b0:f6:9f:93:ac:b3:6d:a0:e6:d5:b5:a3: c6:96:a5:c6:f6:2b:44:5d:5e:30:51:69:15:e6:33: 57:19:45:72:c8:3e:bf:9b:cb:01:6f:d9:a2:f1:4c: 62:25:ae:8a:63:23:49:60:b6:72:87:89:b9:20:3f: d8:24:44:65:46:3c:06:75:66:eb:84:8a:03:a5:4d: 70:9c:80:59:bb:23:4c:f7:d8:c6:bd:fc:ea:3e:b1: f7:ef:37:68:c1:8c:de:2f:6a:96:72:cb:91:d0:3b: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:4C:A0:AC:41:67:C6:B9:2D:04:0F:4A:E3:23:FC:F6:AB:08:83 X509v3 Authority Key Identifier: keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:766c:8000::/33 Signature Algorithm: sha256WithRSAEncryption 65:0f:0f:5b:8c:ba:d8:c9:01:84:5a:3b:f4:72:c8:ee:0b:9c: 67:f6:6c:8b:be:3b:a0:3f:8f:a9:b2:96:61:04:6f:ea:a2:ff: 60:43:32:74:e3:27:91:b3:8c:36:58:53:8b:a9:3d:60:bc:ad: a5:e5:e1:ae:ed:5d:ac:31:57:0f:f0:0c:69:94:8a:ad:44:57: 56:24:ab:d8:12:9b:8f:20:4c:ec:c8:4a:5a:7e:50:2e:47:f9: cc:10:fc:3f:70:31:5a:07:c6:b9:60:ab:10:30:de:e9:95:b1: 3c:78:97:ad:6c:1d:d7:e9:5c:53:82:89:8d:70:6b:26:fd:6a: 79:fc:8c:48:2c:f2:7b:13:7f:e2:f1:48:80:af:a4:94:77:f3: 5a:d7:74:4b:59:f0:e4:ae:f1:e8:52:97:a0:f6:a9:da:b9:9d: d7:13:27:8d:71:7b:d6:7e:2e:1c:3d:8f:49:fd:4e:c4:b3:8e: e0:f1:ac:1b:08:8e:08:68:9f:f8:99:51:9b:08:ef:82:88:7c: 7f:20:f6:99:57:91:fb:0d:45:81:4a:6d:1d:ee:a8:a5:a8:e2: 08:04:6a:22:c9:25:e0:42:38:e0:bb:f9:40:ba:9d:1e:c3:2e: c2:1a:f1:0b:bd:f1:75:07:cf:c9:1e:5f:1e:d4:35:ec:36:cb: 13:c4:91:cb -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGGTy9r2rJyEJ7AkoVHSguJ5I/ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE RkI5RThFMDAeFw0yNTA5MTAxMjI5NTlaFw0yNjA5MDkxMjM0NTlaMDMxMTAvBgNV BAMTKDhGM0M0Q0EwQUM0MTY3QzZCOTJEMDQwRjRBRTMyM0ZDRjZBQjA4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS6NlCZ1hZyhyENmQrhWLZPZMy 5x7nDbvjN9HBVHJAsD5TwpQu7YzO4ZSk2TlPlFxMadlU1GPF+p0lStpvTwwdQqZT uGdd+V9oMqGymI/1FuHubGCLdUVj13G/Tup6HqL7LalfxRuvbPD6DBMyhtXH62ds Wfn7R/bVNLQnoBSN84LX5L7tZ1iG16t+JstaJWjvXq22mprdAbD2n5Oss22g5tW1 o8aWpcb2K0RdXjBRaRXmM1cZRXLIPr+bywFv2aLxTGIlropjI0lgtnKHibkgP9gk RGVGPAZ1ZuuEigOlTXCcgFm7I0z32Ma9/Oo+sffvN2jBjN4vapZyy5HQO9W7AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUjzxMoKxBZ8a5LQQPSuMj/ParCIMwHwYDVR0j BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5 NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv MzIzODMwMzQzYTM3MzYzNjYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEdmyAMA0GCSqGSIb3DQEBCwUA A4IBAQBlDw9bjLrYyQGEWjv0csjuC5xn9myLvjugP4+pspZhBG/qov9gQzJ04yeR s4w2WFOLqT1gvK2l5eGu7V2sMVcP8AxplIqtRFdWJKvYEpuPIEzsyEpaflAuR/nM EPw/cDFaB8a5YKsQMN7plbE8eJetbB3X6VxTgomNcGsm/Wp5/IxILPJ7E3/i8UiA r6SUd/Na13RLWfDkrvHoUpeg9qnauZ3XEyeNcXvWfi4cPY9J/U7Es47g8awbCI4I aJ/4mVGbCO+CiHx/IPaZV5H7DUWBSm0d7qilqOIIBGoiySXgQjjgu/lAup0ewy7C GvELvfF1B8/JHl8e1DXsNssTxJHL -----END CERTIFICATE-----Generated at Fri Sep 19 08:16:25 2025 by rpki-client