$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa File: 323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa (raw, json) Hash identifier: OaeFm68iQt2fEHxg7k5wJaetpJeY8Oq9If0LtinjYXw= Subject key identifier: 1D:7C:E2:8C:32:85:6E:FC:6F:3D:39:4A:B6:10:EC:3A:08:4D:BA:49 Certificate issuer: /CN=171FB2622757FE5D9107ADC119D88C8439A742D9 Certificate serial: 1C60C105FDA2606CD9A46CCCB8368FD005D25040 Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa Signing time: Tue 02 Sep 2025 18:09:37 +0000 ROA not before: Tue 02 Sep 2025 18:04:37 +0000 ROA not after: Tue 01 Sep 2026 18:09:37 +0000 asID: 61721 IP address blocks: 2801:80:c30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 16:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:60:c1:05:fd:a2:60:6c:d9:a4:6c:cc:b8:36:8f:d0:05:d2:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9 Validity Not Before: Sep 2 18:04:37 2025 GMT Not After : Sep 1 18:09:37 2026 GMT Subject: CN=1D7CE28C32856EFC6F3D394AB610EC3A084DBA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:0f:b1:34:cd:54:48:77:6a:75:82:1f:44: e3:f6:5a:d2:d7:61:6c:93:29:82:b3:86:62:94:9b: aa:c0:b4:ac:fa:6b:fd:e0:99:e2:1b:ca:3e:1e:57: 5c:6f:0c:61:d8:fe:fa:a3:0e:42:f7:d1:bb:c9:97: 1b:ca:55:2f:2c:a3:44:de:3e:79:27:10:de:8e:42: d9:68:b3:a3:da:44:53:ec:60:c7:7e:6d:a2:25:a1: 78:1e:25:34:83:4d:1e:1c:ab:12:0a:24:54:3f:25: 1b:b7:f8:7f:be:ca:87:bd:77:de:9a:42:4a:05:b2: 98:c0:30:57:68:cc:58:77:aa:5a:71:5a:1a:4a:55: 3a:10:c5:a1:5e:b1:d9:d0:8b:6a:a1:34:6e:87:e4: f1:a2:ae:19:41:fb:04:bf:c7:43:42:07:1a:ec:9d: 0f:e1:fd:f9:0d:30:5a:14:ed:5f:7c:a3:ed:87:fe: c1:84:e0:94:d4:23:c3:48:e5:bb:b2:cc:c2:ca:59: 5d:0d:b6:16:1d:82:ff:c5:8e:82:4b:4e:f4:a7:03: 98:01:b2:b6:5d:21:e8:35:71:60:37:66:fc:17:d5: 19:9e:c5:11:37:4f:ee:44:67:ae:60:45:bf:80:80: 71:26:4a:a2:84:84:14:93:a6:e7:b2:3f:49:6a:9f: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7C:E2:8C:32:85:6E:FC:6F:3D:39:4A:B6:10:EC:3A:08:4D:BA:49 X509v3 Authority Key Identifier: keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:80:c30::/48 Signature Algorithm: sha256WithRSAEncryption 06:d6:07:d7:f2:a4:4d:0e:dd:f4:35:8a:98:fd:b8:a1:f8:e0: 82:ec:d3:25:cc:e0:cb:ae:29:ed:52:2a:0f:72:b5:97:f9:81: e3:72:d1:25:65:02:f5:c3:a9:08:61:a2:0a:d2:44:82:c0:a0: 22:7a:0d:c3:46:66:ef:28:14:79:da:8f:ed:2b:fc:b8:0e:5f: 41:42:d3:d8:03:55:29:78:d6:a0:09:9c:b3:d4:e9:d9:3c:86: 04:a0:67:85:70:df:89:ec:42:09:ee:ba:f3:24:fb:ae:9c:1d: ee:b0:9c:cc:a6:b1:4a:3e:6a:18:6f:f5:3d:15:39:c5:02:e7: 1f:04:34:6c:c3:9e:02:99:6d:1e:df:cf:b4:99:d2:ec:f4:e4: ca:f1:7d:f0:1f:73:27:55:0a:0a:4e:c9:3d:c4:22:61:70:8e: 30:75:69:64:7f:4b:1d:12:bb:42:ab:90:94:a2:27:7e:0b:84: 9f:31:c4:ff:b7:a1:d9:eb:9d:12:52:c7:fd:72:22:71:e8:fc: 18:a9:51:d1:13:fe:e3:a4:e5:a2:c8:56:2c:91:61:6a:eb:32: 90:17:e6:68:b5:31:7c:51:39:54:07:a7:26:fb:77:29:1e:d7: 8c:ac:e9:52:6a:0b:10:3b:f7:46:4b:e0:17:f5:8c:cf:b0:21: c1:b6:d1:29 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUHGDBBf2iYGzZpGzMuDaP0AXSUEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcxRkIyNjIyNzU3RkU1RDkxMDdBREMxMTlEODhDODQz OUE3NDJEOTAeFw0yNTA5MDIxODA0MzdaFw0yNjA5MDExODA5MzdaMDMxMTAvBgNV BAMTKDFEN0NFMjhDMzI4NTZFRkM2RjNEMzk0QUI2MTBFQzNBMDg0REJBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6A+xNM1USHdqdYIfROP2WtLX YWyTKYKzhmKUm6rAtKz6a/3gmeIbyj4eV1xvDGHY/vqjDkL30bvJlxvKVS8so0Te PnknEN6OQtlos6PaRFPsYMd+baIloXgeJTSDTR4cqxIKJFQ/JRu3+H++yoe9d96a QkoFspjAMFdozFh3qlpxWhpKVToQxaFesdnQi2qhNG6H5PGirhlB+wS/x0NCBxrs nQ/h/fkNMFoU7V98o+2H/sGE4JTUI8NI5buyzMLKWV0NthYdgv/FjoJLTvSnA5gB srZdIeg1cWA3ZvwX1RmexRE3T+5EZ65gRb+AgHEmSqKEhBSTpueyP0lqn/BzAgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUHXzijDKFbvxvPTlKthDsOghNukkwHwYDVR0j BBgwFoAUFx+yYidX/l2RB63BGdiMhDmnQtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn MVcvMC8xNzFGQjI2MjI3NTdGRTVEOTEwN0FEQzExOUQ4OEM4NDM5QTc0MkQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MUZCMjYyMjc1N0ZFNUQ5 MTA3QURDMTE5RDg4Qzg0MzlBNzQyRDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv MzIzODMwMzEzYTM4MzAzYTYzMzMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2 MzEzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAoAQCADDAwDQYJKoZIhvcNAQELBQADggEBAAbW B9fypE0O3fQ1ipj9uKH44ILs0yXM4MuuKe1SKg9ytZf5geNy0SVlAvXDqQhhogrS RILAoCJ6DcNGZu8oFHnaj+0r/LgOX0FC09gDVSl41qAJnLPU6dk8hgSgZ4Vw34ns QgnuuvMk+66cHe6wnMymsUo+ahhv9T0VOcUC5x8ENGzDngKZbR7fz7SZ0uz05Mrx ffAfcydVCgpOyT3EImFwjjB1aWR/Sx0Su0KrkJSiJ34LhJ8xxP+3odnrnRJSx/1y InHo/BipUdET/uOk5aLIViyRYWrrMpAX5mi1MXxROVQHpyb7dyke14ys6VJqCxA7 90ZL4Bf1jM+wIcG20Sk= -----END CERTIFICATE-----Generated at Mon Nov 3 19:40:26 2025 by rpki-client