$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/323830343a313964633a3a2f33322d3634203d3e203631383233.roa File: 323830343a313964633a3a2f33322d3634203d3e203631383233.roa (raw, json) Hash identifier: 00rU6OQB5I9F9dXAHDpMSZ4PQLjKwVh8Q74BazgzVRo= Subject key identifier: A2:3C:FC:1B:E3:F3:58:8D:36:FB:CF:60:73:66:11:7D:AB:05:76:C0 Certificate issuer: /CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83 Certificate serial: 64DC5B497BFACC8AF7ABEFD76C4BEF992C962C7E Authority key identifier: DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer Subject info access: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/323830343a313964633a3a2f33322d3634203d3e203631383233.roa Signing time: Thu 06 Mar 2025 02:29:35 +0000 ROA not before: Thu 06 Mar 2025 02:24:35 +0000 ROA not after: Thu 05 Mar 2026 02:29:35 +0000 asID: 61823 IP address blocks: 2804:19dc::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dc:5b:49:7b:fa:cc:8a:f7:ab:ef:d7:6c:4b:ef:99:2c:96:2c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83 Validity Not Before: Mar 6 02:24:35 2025 GMT Not After : Mar 5 02:29:35 2026 GMT Subject: CN=A23CFC1BE3F3588D36FBCF607366117DAB0576C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:bb:5e:a5:ec:d1:c4:82:1b:bb:c0:bb:e0: 8e:1c:4b:35:e1:bf:8a:a8:4c:74:07:a2:fc:e1:69: a1:2a:fe:49:3d:90:f7:11:87:20:cd:33:7a:a8:37: 5f:af:4b:02:23:9e:0c:9b:dd:47:96:9a:6a:3f:95: 17:a6:0d:72:0b:70:47:ad:9f:a1:d2:68:61:79:c1: e3:59:08:ec:f0:d1:a7:0c:19:e9:a2:cd:85:88:0c: 1e:03:b0:e0:d5:03:60:13:e0:83:be:b3:a3:59:b6: 80:6b:0b:2b:6c:18:ea:92:ed:7f:e2:e9:9e:0b:7c: 64:e8:bb:67:02:1f:f0:d6:72:e3:b8:da:8c:63:3d: f0:ad:ee:12:9e:2b:3f:81:8a:2a:cf:cb:40:16:8b: 20:a0:18:28:41:10:12:e6:07:db:7a:62:1b:21:ea: 2d:4d:c4:b5:b4:28:bb:0a:53:2d:f2:ce:a9:97:ab: 40:05:82:40:fb:6b:39:cf:bb:88:36:0f:d3:68:87: 39:9c:8f:49:ed:9a:63:83:77:93:73:1f:c6:1f:94: d0:a1:d2:b9:5f:cf:6b:63:13:aa:53:05:62:05:7d: 9f:9f:71:40:4d:a7:62:c7:e6:e9:60:f3:29:65:17: 09:44:d3:83:dd:b8:a7:e2:e0:d4:57:5f:39:ec:2d: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:FC:1B:E3:F3:58:8D:36:FB:CF:60:73:66:11:7D:AB:05:76:C0 X509v3 Authority Key Identifier: keyid:DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/323830343a313964633a3a2f33322d3634203d3e203631383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:19dc::/32 Signature Algorithm: sha256WithRSAEncryption 24:c8:e9:22:09:39:9a:1e:8d:c7:bc:ba:29:8c:72:86:00:09: 26:f9:74:7e:28:68:69:4e:c8:51:87:0e:68:33:be:87:93:92: 3b:52:9e:a4:b4:39:ab:5b:44:99:17:e0:1b:ee:74:63:48:43: 3b:08:14:8b:a0:cf:4d:64:d8:64:24:c5:cc:f0:1e:46:9c:81: 36:ce:3b:87:89:01:61:13:50:a2:32:6c:1f:a4:ff:f3:ac:84: cc:3c:85:48:13:2e:9a:61:c1:6c:4e:f9:25:50:29:68:08:6f: c5:9b:af:38:ae:42:8e:55:ff:b7:9b:5f:5f:fa:cc:7f:f0:77: 28:71:6d:17:76:15:83:e3:36:66:89:c2:9e:53:c3:b9:3e:9b: 2b:c7:32:49:48:4f:70:8e:75:11:a3:b2:ab:d1:bf:61:9e:ab: 0e:47:df:a2:e4:5c:c7:a2:64:4c:d4:cb:c8:e4:6d:a2:60:7d: ac:b6:93:72:b1:91:16:3a:24:a0:d2:25:c3:01:df:9c:03:dd: bd:97:45:ad:d4:fc:e0:ec:82:3a:59:a4:6e:a0:ac:13:9e:56: 82:15:ef:d7:74:74:ea:64:11:15:b1:67:f3:71:ed:78:b7:c1: 9e:00:09:c7:04:9c:4a:fa:cd:68:04:00:30:0b:22:d9:83:24: fe:94:bf:c5 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUZNxbSXv6zIr3q+/XbEvvmSyWLH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxMTk1REEyQUEzODM1QUNFQjZDMDMxNDI0ODIxMkZE OTBBMEY4MzAeFw0yNTAzMDYwMjI0MzVaFw0yNjAzMDUwMjI5MzVaMDMxMTAvBgNV BAMTKEEyM0NGQzFCRTNGMzU4OEQzNkZCQ0Y2MDczNjYxMTdEQUIwNTc2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1h7tepezRxIIbu8C74I4cSzXh v4qoTHQHovzhaaEq/kk9kPcRhyDNM3qoN1+vSwIjngyb3UeWmmo/lRemDXILcEet n6HSaGF5weNZCOzw0acMGemizYWIDB4DsODVA2AT4IO+s6NZtoBrCytsGOqS7X/i 6Z4LfGTou2cCH/DWcuO42oxjPfCt7hKeKz+BiirPy0AWiyCgGChBEBLmB9t6Yhsh 6i1NxLW0KLsKUy3yzqmXq0AFgkD7aznPu4g2D9Nohzmcj0ntmmODd5NzH8YflNCh 0rlfz2tjE6pTBWIFfZ+fcUBNp2LH5ulg8yllFwlE04PduKfi4NRXXznsLTZhAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUojz8G+PzWI02+89gc2YRfasFdsAwHwYDVR0j BBgwFoAU3xGV2iqjg1rOtsAxQkghL9kKD4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNY alovMi9ERjExOTVEQTJBQTM4MzVBQ0VCNkMwMzE0MjQ4MjEyRkQ5MEEwRjgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMTE5NURBMkFBMzgzNUFD RUI2QzAzMTQyNDgyMTJGRDkwQTBGODMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hDNDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzIv MzIzODMwMzQzYTMxMzk2NDYzM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzYzMTM4 MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEGdwwDQYJKoZIhvcNAQELBQADggEBACTI6SIJOZoe jce8uimMcoYACSb5dH4oaGlOyFGHDmgzvoeTkjtSnqS0OatbRJkX4BvudGNIQzsI FIugz01k2GQkxczwHkacgTbOO4eJAWETUKIybB+k//OshMw8hUgTLpphwWxO+SVQ KWgIb8WbrziuQo5V/7ebX1/6zH/wdyhxbRd2FYPjNmaJwp5Tw7k+myvHMklIT3CO dRGjsqvRv2Geqw5H36LkXMeiZEzUy8jkbaJgfay2k3KxkRY6JKDSJcMB35wD3b2X Ra3U/ODsgjpZpG6grBOeVoIV79d0dOpkERWxZ/Nx7Xi3wZ4ACccEnEr6zWgEADAL ItmDJP6Uv8U= -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:49 2025 by rpki-client