$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa File: 323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa (raw, json) Hash identifier: Ec/4xM1+cCmYj2LU70Mz6SKyBGF6OTDJ/xwAZZDe+/E= Subject key identifier: CA:3A:4C:0B:B0:CA:1B:FE:38:DE:0B:F5:5E:99:CE:E6:C4:1E:23:8B Certificate issuer: /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Certificate serial: 19D63CA65F8A453966F8CD8B3EDF3D7CED8018BA Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa Signing time: Wed 10 Sep 2025 12:35:02 +0000 ROA not before: Wed 10 Sep 2025 12:30:02 +0000 ROA not after: Wed 09 Sep 2026 12:35:02 +0000 asID: 271111 IP address blocks: 2804:766c:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 21:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d6:3c:a6:5f:8a:45:39:66:f8:cd:8b:3e:df:3d:7c:ed:80:18:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0 Validity Not Before: Sep 10 12:30:02 2025 GMT Not After : Sep 9 12:35:02 2026 GMT Subject: CN=CA3A4C0BB0CA1BFE38DE0BF55E99CEE6C41E238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:ad:ef:0a:9e:05:95:a1:42:ee:5d:a0:88: 68:77:f4:3c:9e:51:9e:22:8f:5a:51:e2:f6:8e:9b: 02:fc:9d:79:b3:32:c7:46:7f:bd:b9:ac:aa:4a:48: 9f:f6:91:51:91:8e:f1:b8:4e:d0:6b:90:bb:11:93: 10:81:9e:0d:76:39:ad:18:06:f2:54:ab:0a:28:92: 12:c1:82:01:87:16:e2:a3:a8:18:78:2a:d5:b6:65: 7a:b9:e2:d0:fd:61:b8:f9:3f:77:49:5b:9a:4f:5c: 1f:03:e3:04:53:25:3e:92:8e:6d:58:3c:ae:ff:81: 5e:cf:32:b3:a6:4c:7a:75:b3:72:df:43:e9:4e:9f: 9d:46:67:5d:a1:f2:5e:a6:34:93:25:be:dd:82:42: 56:5d:e4:66:a6:32:87:77:2b:1b:48:ed:f0:b0:34: 5b:14:f8:14:af:04:99:ad:d2:3f:a2:77:7b:48:aa: 82:e8:78:54:9b:6d:d4:0f:13:a4:a6:f3:c4:87:35: fb:ea:85:df:bc:9d:17:37:5d:e6:67:a8:d2:65:59: 37:aa:65:b6:e4:a9:c7:53:50:f9:b9:89:76:2b:9a: 01:dd:2f:05:c7:f7:e4:69:8a:20:7b:80:36:40:fa: b8:72:cd:9d:11:2f:f6:24:04:1c:6b:60:1d:4d:4e: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3A:4C:0B:B0:CA:1B:FE:38:DE:0B:F5:5E:99:CE:E6:C4:1E:23:8B X509v3 Authority Key Identifier: keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:766c:c000::/34 Signature Algorithm: sha256WithRSAEncryption 55:1a:81:0a:e6:2c:f8:fe:fc:6c:c8:2c:71:42:48:20:b3:0c: b5:97:7d:bc:7d:2e:8d:43:84:4f:78:08:9b:99:05:e8:be:54: eb:56:19:2d:f3:89:d2:40:d8:0a:6a:58:59:9b:5a:b8:40:10: fc:12:a6:ba:f0:a4:71:f8:4b:3c:b4:4f:6d:25:d2:8e:8a:d2: 48:63:2f:8a:6e:87:2a:a6:7b:c3:4a:1a:63:c2:06:09:8e:d0: 06:ec:02:10:0f:c1:6d:74:1b:4a:37:ef:a0:5a:42:e7:6e:e3: 96:68:d0:70:32:99:23:a0:c1:99:00:be:9d:74:db:b8:0b:10: 03:ba:14:c1:e6:f0:36:fe:04:c6:51:5e:01:1d:3f:09:7a:a1: 28:38:e6:c6:0a:56:8d:e1:3b:bd:07:ae:0e:24:0c:00:4d:ef: cd:f6:87:bc:f7:b7:91:25:ab:cc:13:1b:f2:f0:3d:78:57:fb: ed:11:f3:d7:8f:c7:e2:96:01:c6:c3:38:ad:c7:e7:25:e6:22: 79:f6:bc:06:fe:27:1e:7e:98:bd:4d:cb:d1:49:4e:53:d5:99: 30:42:a9:c3:1c:d4:3f:db:dc:0c:6a:3d:18:64:95:53:f8:24: 8e:fb:28:53:fc:e6:7a:82:72:75:b1:8e:d9:48:ba:ce:75:fe: 00:96:82:57 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGdY8pl+KRTlm+M2LPt89fO2AGLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyNUVFRjdFNkVFODk0QzE5N0RCRDc4MzdDQjNDMDVE RkI5RThFMDAeFw0yNTA5MTAxMjMwMDJaFw0yNjA5MDkxMjM1MDJaMDMxMTAvBgNV BAMTKENBM0E0QzBCQjBDQTFCRkUzOERFMEJGNTVFOTlDRUU2QzQxRTIzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaa3vCp4FlaFC7l2giGh39Dye UZ4ij1pR4vaOmwL8nXmzMsdGf725rKpKSJ/2kVGRjvG4TtBrkLsRkxCBng12Oa0Y BvJUqwookhLBggGHFuKjqBh4KtW2ZXq54tD9Ybj5P3dJW5pPXB8D4wRTJT6Sjm1Y PK7/gV7PMrOmTHp1s3LfQ+lOn51GZ12h8l6mNJMlvt2CQlZd5GamMod3KxtI7fCw NFsU+BSvBJmt0j+id3tIqoLoeFSbbdQPE6Sm88SHNfvqhd+8nRc3XeZnqNJlWTeq ZbbkqcdTUPm5iXYrmgHdLwXH9+RpiiB7gDZA+rhyzZ0RL/YkBBxrYB1NTgavAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUyjpMC7DKG/443gv1XpnO5sQeI4swHwYDVR0j BBgwFoAUriXu9+buiUwZfb14N8s8Bd+56OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkhrTGdjZ0JGVFdHU2NOYk0zb1NCNHRSakJVUm1xYUV5Y2lxRXlvRDJ5 NmIvMC9BRTI1RUVGN0U2RUU4OTRDMTk3REJENzgzN0NCM0MwNURGQjlFOEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMjVFRUY3RTZFRTg5NEMx OTdEQkQ3ODM3Q0IzQzA1REZCOUU4RTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZIa0xnY2dCRlRXR1NjTmJNM29TQjR0UmpCVVJtcWFFeWNpcUV5b0QyeTZiLzAv MzIzODMwMzQzYTM3MzYzNjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk M2UyMDMyMzczMTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdmzAMA0GCSqGSIb3DQEBCwUA A4IBAQBVGoEK5iz4/vxsyCxxQkggswy1l328fS6NQ4RPeAibmQXovlTrVhkt84nS QNgKalhZm1q4QBD8Eqa68KRx+Es8tE9tJdKOitJIYy+KbocqpnvDShpjwgYJjtAG 7AIQD8FtdBtKN++gWkLnbuOWaNBwMpkjoMGZAL6ddNu4CxADuhTB5vA2/gTGUV4B HT8JeqEoOObGClaN4Tu9B64OJAwATe/N9oe897eRJavMExvy8D14V/vtEfPXj8fi lgHGwzitx+cl5iJ59rwG/icefpi9TcvRSU5T1ZkwQqnDHNQ/29wMaj0YZJVT+CSO +yhT/OZ6gnJ1sY7ZSLrOdf4AloJX -----END CERTIFICATE-----Generated at Thu Sep 18 12:46:38 2025 by rpki-client