$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa File: 323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa (raw, json) Hash identifier: nn+yqHz5EZR1eNECu8yrLDjez5WBJapVo3YhTF2wAgk= Subject key identifier: 72:20:CB:3E:66:8A:28:BC:03:F0:36:BF:2B:0A:42:25:9B:4D:00:30 Certificate issuer: /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8 Certificate serial: 6B96D55690FEA7F9DDE045FC6D7C8E8088E4D4FE Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa Signing time: Thu 25 Sep 2025 12:52:34 +0000 ROA not before: Thu 25 Sep 2025 12:47:34 +0000 ROA not after: Thu 24 Sep 2026 12:52:34 +0000 asID: 272554 IP address blocks: 2804:850c:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:96:d5:56:90:fe:a7:f9:dd:e0:45:fc:6d:7c:8e:80:88:e4:d4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8 Validity Not Before: Sep 25 12:47:34 2025 GMT Not After : Sep 24 12:52:34 2026 GMT Subject: CN=7220CB3E668A28BC03F036BF2B0A42259B4D0030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:31:d2:da:fa:c6:84:35:f0:0d:11:79:3a: 29:d2:82:2d:13:d8:82:52:d9:88:b0:72:d8:f4:75: ab:81:15:42:63:99:94:01:a9:9b:d1:f3:7f:98:d0: 98:d4:b8:e2:e4:61:2e:b7:21:ce:a7:9b:be:b2:45: 88:37:28:ab:d8:99:a4:79:e1:d4:86:97:9a:91:d1: 0c:07:8d:03:4b:98:ba:65:2e:aa:78:c1:e6:00:4f: 42:ec:f3:83:9d:98:82:86:26:2f:81:8b:9b:39:67: bd:d2:69:b3:2c:ce:39:94:2b:e7:7e:39:9d:f6:c5: 69:ad:25:ad:2d:92:13:5f:a7:ba:39:08:b3:3b:31: 8e:5d:f0:68:e0:02:10:fb:59:9e:7e:27:99:51:17: e2:f6:77:9e:2f:c5:78:1e:9d:24:5f:37:f3:78:33: 02:a7:e9:9c:81:fc:70:36:6d:68:1e:8f:82:61:c8: 37:61:f2:ee:fd:ab:a4:1b:8d:32:35:4a:90:4d:ce: 97:0d:3f:bd:9f:3f:8f:26:84:15:ca:75:6e:8b:c2: 99:6e:5d:6b:17:89:39:08:83:b7:a3:13:69:10:b8: 6c:4c:1d:6a:89:9a:a9:88:e8:41:b9:8b:0d:48:0e: 35:8c:81:e3:c4:65:bc:73:54:be:e5:d9:f2:60:42: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:20:CB:3E:66:8A:28:BC:03:F0:36:BF:2B:0A:42:25:9B:4D:00:30 X509v3 Authority Key Identifier: keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:850c:b000::/40 Signature Algorithm: sha256WithRSAEncryption 74:86:db:1f:8c:25:0b:36:88:6b:33:e5:e8:3b:00:51:72:e5: b2:31:04:51:90:23:f3:f7:e0:6b:8e:ff:d3:f1:63:79:e5:0f: b9:58:80:cd:1f:39:02:10:87:45:e5:c8:ea:dd:a1:79:89:25: 11:99:9d:e0:9d:86:4f:2e:a1:68:5e:95:9e:7a:9f:5c:7a:23: b2:0a:de:7e:28:5f:31:ef:05:35:52:29:1f:a8:35:1b:8b:cf: e9:c7:b0:e8:4e:43:88:f5:62:9f:61:a0:c6:48:ec:13:49:21: d9:bf:b4:0d:f4:58:ea:b3:4d:a8:cf:6d:2e:76:6e:10:c6:ec: c0:29:e1:85:c8:85:82:f3:9e:40:45:d9:ef:6f:3b:ba:7f:ae: 59:3d:e1:27:36:6d:3a:85:fa:e4:c4:28:af:22:30:8a:9c:0b: 34:a7:80:f9:a4:16:eb:80:af:af:a7:fe:1a:9c:83:e7:a1:b8: bd:73:64:4f:f4:7d:63:d8:3b:7d:09:36:2a:1b:23:d5:61:1b: a3:57:e2:05:89:df:e6:18:4e:9e:36:58:7b:50:53:d6:b9:0b: 87:d7:62:82:f0:32:42:ff:a7:4b:1d:2a:5b:53:6e:05:1f:0f: d8:73:00:b7:bc:c2:0d:cd:f3:47:f2:02:a5:3d:f2:82:cd:ce: ed:e4:c3:d9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUa5bVVpD+p/nd4EX8bXyOgIjk1P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDOUU5MzlGREUzRUNDQTIxNzA0ODcwOUU4N0NEQTlE NzZCMzZCODAeFw0yNTA5MjUxMjQ3MzRaFw0yNjA5MjQxMjUyMzRaMDMxMTAvBgNV BAMTKDcyMjBDQjNFNjY4QTI4QkMwM0YwMzZCRjJCMEE0MjI1OUI0RDAwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3THS2vrGhDXwDRF5OinSgi0T 2IJS2Yiwctj0dauBFUJjmZQBqZvR83+Y0JjUuOLkYS63Ic6nm76yRYg3KKvYmaR5 4dSGl5qR0QwHjQNLmLplLqp4weYAT0Ls84OdmIKGJi+Bi5s5Z73SabMszjmUK+d+ OZ32xWmtJa0tkhNfp7o5CLM7MY5d8GjgAhD7WZ5+J5lRF+L2d54vxXgenSRfN/N4 MwKn6ZyB/HA2bWgej4JhyDdh8u79q6QbjTI1SpBNzpcNP72fP48mhBXKdW6Lwplu XWsXiTkIg7ejE2kQuGxMHWqJmqmI6EG5iw1IDjWMgePEZbxzVL7l2fJgQsXbAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUciDLPmaKKLwD8Da/KwpCJZtNADAwHwYDVR0j BBgwFoAUGcnpOf3j7MohcEhwnofNqddrNrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm9WdmVTQ3FCWUoyRzM3TjNjbnQyUlcyYTdjckNrRldvSEhGSGZVWFly ZWYvMS8xOUM5RTkzOUZERTNFQ0NBMjE3MDQ4NzA5RTg3Q0RBOUQ3NkIzNkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5QzlFOTM5RkRFM0VDQ0Ey MTcwNDg3MDlFODdDREE5RDc2QjM2QjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzJvVnZlU0NxQllKMkczN04zY250MlJXMmE3Y3JDa0ZXb0hIRkhmVVhZcmVmLzEv MzIzODMwMzQzYTM4MzUzMDYzM2E2MjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk M2UyMDMyMzczMjM1MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEhQywMA0GCSqGSIb3DQEBCwUA A4IBAQB0htsfjCULNohrM+XoOwBRcuWyMQRRkCPz9+Brjv/T8WN55Q+5WIDNHzkC EIdF5cjq3aF5iSURmZ3gnYZPLqFoXpWeep9ceiOyCt5+KF8x7wU1UikfqDUbi8/p x7DoTkOI9WKfYaDGSOwTSSHZv7QN9Fjqs02oz20udm4QxuzAKeGFyIWC855ARdnv bzu6f65ZPeEnNm06hfrkxCivIjCKnAs0p4D5pBbrgK+vp/4anIPnobi9c2RP9H1j 2Dt9CTYqGyPVYRujV+IFid/mGE6eNlh7UFPWuQuH12KC8DJC/6dLHSpbU24FHw/Y cwC3vMINzfNH8gKlPfKCzc7t5MPZ -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:10 2025 by rpki-client