$ rpki-client -vvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a323030303a3a2f33362d3336203d3e20323633333537.roa File: 323830343a313465343a323030303a3a2f33362d3336203d3e20323633333537.roa (raw, json) Hash identifier: Yst1Z4CXEYlwVhDWeDYxDrKUHRzDGYxB6tF/TzDGKis= Subject key identifier: 47:84:98:BC:C0:A7:6F:F8:A9:0D:D3:0C:53:04:57:5F:09:B6:55:70 Certificate issuer: /CN=666C4396BE3D615556D2074B0E613EAF065B2878 Certificate serial: 0A2E6EF2A0B21C972948B5F9DAE2CBFAB4AA1530 Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer Subject info access: rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a323030303a3a2f33362d3336203d3e20323633333537.roa Signing time: Thu 30 Oct 2025 12:08:13 +0000 ROA not before: Thu 30 Oct 2025 12:03:13 +0000 ROA not after: Thu 29 Oct 2026 12:08:13 +0000 asID: 263357 IP address blocks: 2804:14e4:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2e:6e:f2:a0:b2:1c:97:29:48:b5:f9:da:e2:cb:fa:b4:aa:15:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878 Validity Not Before: Oct 30 12:03:13 2025 GMT Not After : Oct 29 12:08:13 2026 GMT Subject: CN=478498BCC0A76FF8A90DD30C5304575F09B65570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:7c:99:6e:e1:1f:69:03:c8:c1:55:ca:fa: 3a:d9:78:b4:30:d2:e9:05:60:f1:5d:2b:75:f5:fe: d7:7d:be:3c:2d:da:66:71:1d:68:e4:92:68:c2:5e: a9:ce:ef:87:d8:11:3c:96:0c:59:d2:4f:fd:e9:f3: ab:ed:b6:53:32:8f:d4:8f:92:d5:9a:60:92:b8:90: bd:6b:fe:c1:e7:72:06:06:78:90:a8:02:5d:50:77: ca:7f:77:b4:c5:65:2d:4a:80:6a:9b:be:01:aa:37: 3f:39:b0:6c:00:2c:bb:91:3c:8c:32:42:1c:e4:d1: cb:3c:43:5d:56:07:64:53:ad:9e:d2:37:24:20:78: 9c:60:78:1c:f0:cc:9b:a3:7f:ec:6c:fe:d8:1b:5e: e8:93:63:41:bb:8b:54:a7:ae:7b:67:6e:a7:c3:7d: 27:74:26:fa:2d:26:04:fe:34:61:db:0b:03:cf:f5: 10:74:f7:16:44:77:ae:29:f9:e7:8b:47:6e:67:79: 43:b1:a0:26:ce:53:6a:52:91:97:15:d2:a8:9f:f3: 9c:1d:44:61:6b:63:c3:1d:12:ec:03:7c:bb:5f:cc: 28:3f:ae:ff:8e:fe:85:75:28:6a:88:06:f2:e3:55: 7b:89:0f:ac:d7:d4:b2:fb:cb:e6:34:e6:84:ed:b3: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:98:BC:C0:A7:6F:F8:A9:0D:D3:0C:53:04:57:5F:09:B6:55:70 X509v3 Authority Key Identifier: keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/323830343a313465343a323030303a3a2f33362d3336203d3e20323633333537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:14e4:2000::/36 Signature Algorithm: sha256WithRSAEncryption 13:70:b0:d3:28:2d:a1:d2:fa:2f:2b:5d:fb:f7:dd:ae:04:41: 95:48:11:dc:3c:fa:80:2d:6b:4e:e9:ea:d4:f6:2f:be:7c:59: a2:46:f3:0c:47:b3:1d:2e:3b:35:1c:50:9d:b9:d9:cb:2f:5d: 9e:7f:50:8b:10:d8:93:43:d3:a5:b1:28:99:6d:b4:53:f1:6b: f9:ae:7a:8c:9a:33:56:c2:48:b9:89:2b:f2:a0:35:8f:81:02: 7d:02:8b:5c:0d:60:11:88:71:2d:a7:c2:9b:a8:e2:31:3d:0a: 24:9a:bf:4c:d5:cf:6e:41:33:48:f3:81:63:07:90:66:db:25: f1:0f:c6:f3:f3:00:8b:c2:d2:98:2b:a8:78:58:6a:76:6d:16: 9d:e8:fc:fc:51:cf:47:70:2f:4a:6c:82:6b:f2:e6:2e:6e:32: a1:cc:f9:64:19:ef:7f:da:00:96:65:40:3d:6d:af:54:9a:bd: af:98:94:0a:3d:d7:a4:13:5d:b0:37:66:56:24:1f:cd:42:4b: e6:46:2d:33:45:fc:01:89:a6:90:05:25:16:bc:3f:04:70:2e: 6a:1e:9c:4a:09:73:29:6a:14:40:ce:d8:41:bd:d3:2d:4e:1c: b1:9d:a4:e0:d7:a8:0c:47:1f:17:44:12:69:c8:72:d1:f2:d3: 96:8b:a1:b7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUCi5u8qCyHJcpSLX52uLL+rSqFTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY2QzQzOTZCRTNENjE1NTU2RDIwNzRCMEU2MTNFQUYw NjVCMjg3ODAeFw0yNTEwMzAxMjAzMTNaFw0yNjEwMjkxMjA4MTNaMDMxMTAvBgNV BAMTKDQ3ODQ5OEJDQzBBNzZGRjhBOTBERDMwQzUzMDQ1NzVGMDlCNjU1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQq3yZbuEfaQPIwVXK+jrZeLQw 0ukFYPFdK3X1/td9vjwt2mZxHWjkkmjCXqnO74fYETyWDFnST/3p86vttlMyj9SP ktWaYJK4kL1r/sHncgYGeJCoAl1Qd8p/d7TFZS1KgGqbvgGqNz85sGwALLuRPIwy Qhzk0cs8Q11WB2RTrZ7SNyQgeJxgeBzwzJujf+xs/tgbXuiTY0G7i1SnrntnbqfD fSd0JvotJgT+NGHbCwPP9RB09xZEd64p+eeLR25neUOxoCbOU2pSkZcV0qif85wd RGFrY8MdEuwDfLtfzCg/rv+O/oV1KGqIBvLjVXuJD6zX1LL7y+Y05oTts5EfAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUR4SYvMCnb/ipDdMMUwRXXwm2VXAwHwYDVR0j BBgwFoAUZmxDlr49YVVW0gdLDmE+rwZbKHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlpRYzRjbWt3WjRuMWtwa2VpVUNqb1NUN3hWWHo1d0ZEaFZUbkZ6SlBW RmkvMC82NjZDNDM5NkJFM0Q2MTU1NTZEMjA3NEIwRTYxM0VBRjA2NUIyODc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NkM0Mzk2QkUzRDYxNTU1 NkQyMDc0QjBFNjEzRUFGMDY1QjI4NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0ZaUWM0Y21rd1o0bjFrcGtlaVVDam9TVDd4Vlh6NXdGRGhWVG5GekpQVkZpLzAv MzIzODMwMzQzYTMxMzQ2NTM0M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk M2UyMDMyMzYzMzMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFOQgMA0GCSqGSIb3DQEBCwUA A4IBAQATcLDTKC2h0vovK137992uBEGVSBHcPPqALWtO6erU9i++fFmiRvMMR7Md Ljs1HFCdudnLL12ef1CLENiTQ9OlsSiZbbRT8Wv5rnqMmjNWwki5iSvyoDWPgQJ9 AotcDWARiHEtp8KbqOIxPQokmr9M1c9uQTNI84FjB5Bm2yXxD8bz8wCLwtKYK6h4 WGp2bRad6Pz8Uc9HcC9KbIJr8uYubjKhzPlkGe9/2gCWZUA9ba9Umr2vmJQKPdek E12wN2ZWJB/NQkvmRi0zRfwBiaaQBSUWvD8EcC5qHpxKCXMpahRAzthBvdMtThyx naTg16gMRx8XRBJpyHLR8tOWi6G3 -----END CERTIFICATE-----Generated at Mon Nov 3 19:10:46 2025 by rpki-client