$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a353030303a3a2f33362d3336203d3e20323632373635.roa File: 323830343a316466633a353030303a3a2f33362d3336203d3e20323632373635.roa (raw, json) Hash identifier: akWqgooGfUbSV+v/xhhEyVmayqwRFNPHCcDpjR2HJLs= Subject key identifier: 17:76:FD:F7:EB:4B:1A:79:1F:7B:DF:6B:14:AF:EF:52:B9:3F:E8:D8 Certificate issuer: /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Certificate serial: 5DCCD173A10749290782811833566841A75AFEB5 Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a353030303a3a2f33362d3336203d3e20323632373635.roa Signing time: Wed 22 Oct 2025 20:47:22 +0000 ROA not before: Wed 22 Oct 2025 20:42:22 +0000 ROA not after: Wed 21 Oct 2026 20:47:22 +0000 asID: 262765 IP address blocks: 2804:1dfc:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cc:d1:73:a1:07:49:29:07:82:81:18:33:56:68:41:a7:5a:fe:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Validity Not Before: Oct 22 20:42:22 2025 GMT Not After : Oct 21 20:47:22 2026 GMT Subject: CN=1776FDF7EB4B1A791F7BDF6B14AFEF52B93FE8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:39:82:cc:eb:ac:42:e0:72:30:58:65:4d: 7f:c6:eb:bd:0b:86:a8:03:96:c9:81:7c:16:f7:c3: ed:02:67:81:3f:22:05:69:49:19:62:4a:c9:0d:89: f2:69:93:f9:41:5a:54:50:8e:04:69:79:f6:e2:06: e4:db:ff:64:ce:d3:d9:f9:22:c7:39:25:7d:9b:dd: ea:86:6f:60:6e:24:c2:ae:15:3d:71:ef:ed:eb:80: dd:23:57:04:48:cc:93:52:aa:67:e4:24:a0:1d:94: bb:71:09:7f:c9:a1:77:a0:6c:0b:c1:86:06:ab:ad: 50:b6:98:1b:25:77:04:f3:d2:f9:f5:cd:9b:47:32: 18:dd:76:16:7a:dd:4a:27:1b:c3:04:bb:77:64:94: 3d:fb:34:6a:37:ac:ad:c4:c9:06:85:0b:4a:7f:c3: 1c:ab:41:3b:81:e5:f2:91:0d:c7:7d:99:33:b6:6a: 5e:cb:a4:88:7f:19:fa:c9:e8:dc:18:07:86:e5:a0: 08:c9:e9:de:57:82:0e:dc:b2:9b:1b:4c:e1:86:52: 63:14:52:21:e4:67:ef:1e:33:06:02:1a:07:97:4c: 1d:43:21:9b:bb:0b:15:eb:0f:09:1c:42:c1:a9:27: 85:d0:8e:c6:ed:24:b0:02:57:26:91:8e:e3:0a:19: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:76:FD:F7:EB:4B:1A:79:1F:7B:DF:6B:14:AF:EF:52:B9:3F:E8:D8 X509v3 Authority Key Identifier: keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a353030303a3a2f33362d3336203d3e20323632373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1dfc:5000::/36 Signature Algorithm: sha256WithRSAEncryption 29:2a:a9:3b:e8:53:ca:fc:f6:ff:44:63:32:1d:ce:86:a7:0b: 20:ac:4b:df:3e:12:14:b9:d8:c0:5c:e7:f3:52:ad:f8:76:a0: 94:43:c3:05:76:ec:f1:83:b1:d0:fb:28:3b:58:5c:62:43:76: 8e:19:09:6d:e1:f1:26:cd:01:4e:2d:5e:45:b0:d7:d4:eb:3b: c7:64:9c:24:17:36:0f:a2:0f:a7:bc:9b:a2:98:71:ca:d1:01: 9e:f1:f6:3a:89:69:17:da:24:c3:5c:1a:4d:74:1b:89:e0:9e: 66:30:ab:9d:56:3d:17:de:97:c8:ae:bb:aa:45:6a:83:ed:95: 24:e3:38:10:0d:8c:87:a4:3b:f0:0f:8b:82:4f:19:e5:5e:a9: ff:a6:99:be:58:1f:36:1e:8d:76:06:b5:73:55:26:9b:67:ee: bf:9f:6c:74:a4:36:e3:06:b6:1d:4c:6b:03:fe:2e:bc:d8:e9: 94:e0:a5:24:fb:19:65:e6:2e:d1:65:60:3f:b4:15:75:67:06: f1:20:bb:0a:1c:e8:2a:41:cd:26:6b:34:02:5e:b0:ed:24:3c: a8:99:ba:6d:0f:68:63:26:40:3c:5c:e5:4f:80:35:70:d5:04: a3:91:ef:c6:44:b5:cd:77:c7:e2:fc:1d:d5:5b:2c:ed:62:85: f8:05:f2:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUXczRc6EHSSkHgoEYM1ZoQada/rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1 N0ZFN0JBMDAeFw0yNTEwMjIyMDQyMjJaFw0yNjEwMjEyMDQ3MjJaMDMxMTAvBgNV BAMTKDE3NzZGREY3RUI0QjFBNzkxRjdCREY2QjE0QUZFRjUyQjkzRkU4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ADmCzOusQuByMFhlTX/G670L hqgDlsmBfBb3w+0CZ4E/IgVpSRliSskNifJpk/lBWlRQjgRpefbiBuTb/2TO09n5 Isc5JX2b3eqGb2BuJMKuFT1x7+3rgN0jVwRIzJNSqmfkJKAdlLtxCX/JoXegbAvB hgarrVC2mBsldwTz0vn1zZtHMhjddhZ63UonG8MEu3dklD37NGo3rK3EyQaFC0p/ wxyrQTuB5fKRDcd9mTO2al7LpIh/GfrJ6NwYB4bloAjJ6d5Xgg7cspsbTOGGUmMU UiHkZ+8eMwYCGgeXTB1DIZu7CxXrDwkcQsGpJ4XQjsbtJLACVyaRjuMKGUAZAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUF3b99+tLGnkfe99rFK/vUrk/6NgwHwYDVR0j BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzIz ODMwMzQzYTMxNjQ2NjYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy MDMyMzYzMjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHfxQMA0GCSqGSIb3DQEBCwUAA4IB AQApKqk76FPK/Pb/RGMyHc6GpwsgrEvfPhIUudjAXOfzUq34dqCUQ8MFduzxg7HQ +yg7WFxiQ3aOGQlt4fEmzQFOLV5FsNfU6zvHZJwkFzYPog+nvJuimHHK0QGe8fY6 iWkX2iTDXBpNdBuJ4J5mMKudVj0X3pfIrruqRWqD7ZUk4zgQDYyHpDvwD4uCTxnl Xqn/ppm+WB82Ho12BrVzVSabZ+6/n2x0pDbjBrYdTGsD/i682OmU4KUk+xll5i7R ZWA/tBV1ZwbxILsKHOgqQc0mazQCXrDtJDyombptD2hjJkA8XOVPgDVw1QSjke/G RLXNd8fi/B3VWyztYoX4BfJK -----END CERTIFICATE-----Generated at Tue Nov 4 01:35:32 2025 by rpki-client