$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa File: 323830343a313038383a3a2f33322d3438203d3e203532393133.roa (raw, json) Hash identifier: axgSkmUjtBcUJhDdxY50OAl2F65WCIR0kpE7OknSiOs= Subject key identifier: 0A:2A:9A:7E:BA:F1:9D:2C:7D:C6:7D:B8:A3:E9:A1:13:4D:BA:AD:83 Certificate issuer: /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE Certificate serial: 15C8E0B4AA7D009FEE7ABDB1F5560C529B43E39B Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa Signing time: Thu 11 Sep 2025 16:09:28 +0000 ROA not before: Thu 11 Sep 2025 16:04:28 +0000 ROA not after: Thu 10 Sep 2026 16:09:28 +0000 asID: 52913 IP address blocks: 2804:1088::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c8:e0:b4:aa:7d:00:9f:ee:7a:bd:b1:f5:56:0c:52:9b:43:e3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE Validity Not Before: Sep 11 16:04:28 2025 GMT Not After : Sep 10 16:09:28 2026 GMT Subject: CN=0A2A9A7EBAF19D2C7DC67DB8A3E9A1134DBAAD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:f0:a0:0a:c6:21:29:f7:b9:72:9c:c9:94: 5b:6a:aa:bc:a2:53:26:55:a4:6b:bc:ad:19:36:9d: 43:7a:74:30:71:8e:f9:eb:df:5f:ce:4a:0b:19:19: 0a:2f:68:40:83:0c:2f:e7:e4:fe:7f:25:41:8d:5b: f0:f3:25:8c:70:20:de:9d:43:15:4e:5d:2e:d0:8a: be:02:b9:b2:e2:c2:ad:e7:99:19:04:fc:be:a9:97: 82:a6:36:b6:57:63:93:68:e4:d6:0c:66:d5:d6:5d: 2f:cb:41:49:71:c7:48:dc:26:2b:49:75:5e:97:8f: b8:8a:c7:d8:e7:01:7c:c1:7c:26:78:c8:a6:d9:39: 71:a9:9f:00:3c:3e:eb:88:fc:5d:6d:71:8a:0f:87: 08:3f:3c:cc:e8:fd:94:d1:06:14:c1:8e:48:fd:4d: d3:27:29:0a:9a:e2:dc:14:91:74:3b:94:40:26:67: 12:00:c8:c4:cc:ac:f1:3d:61:31:49:20:88:1c:87: be:e2:5e:ac:10:7c:ae:31:fe:40:32:a6:d3:e7:ad: 02:85:15:e7:69:78:18:48:83:58:53:f0:e8:ff:42: 7f:f1:8f:cd:e1:0f:e0:d2:71:ce:0d:95:04:32:1c: 1d:b4:52:86:9f:c1:15:e8:a8:17:97:e7:5f:1b:86: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2A:9A:7E:BA:F1:9D:2C:7D:C6:7D:B8:A3:E9:A1:13:4D:BA:AD:83 X509v3 Authority Key Identifier: keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d3438203d3e203532393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1088::/32 Signature Algorithm: sha256WithRSAEncryption 91:bf:17:96:2d:68:69:61:33:70:00:27:4f:ce:31:3e:47:c1: f1:3e:44:65:79:a9:ed:2d:64:2d:65:b3:f5:55:4b:5c:72:08: e2:3c:68:93:40:99:d6:29:df:81:de:c0:9c:df:f1:f4:47:8a: 15:ec:e2:14:96:3c:ca:1f:48:f8:77:39:4d:a7:f8:28:f4:39: 4b:4d:4f:52:ce:40:0e:d3:f2:93:aa:e7:1f:ab:83:38:e6:10: 38:04:c4:6b:35:e5:82:25:ee:0d:5b:74:0e:2f:48:be:32:1d: 06:1c:5f:cf:06:3a:f3:bc:01:e4:34:10:11:00:e8:da:2e:37: 9d:c6:96:53:f3:c8:92:04:99:f7:00:b1:28:eb:57:9f:f0:f7: af:74:de:bf:78:49:a3:7e:5b:ae:87:e4:cc:66:27:de:bb:c2: 04:2a:3c:40:a9:83:51:d8:bb:ef:5a:93:f4:84:1f:3d:23:53: 0a:ef:5b:1a:f4:1d:74:e4:ba:ee:43:70:cd:09:a5:42:11:0a: 39:c9:24:5c:6f:01:78:83:80:c2:e7:06:2b:70:22:aa:02:25: cd:c1:0f:01:00:2c:6f:5e:b6:1d:3b:6a:8b:06:3a:31:ca:20: 8f:ff:24:07:09:1b:b3:c2:c1:05:13:b9:ae:81:87:e8:00:b9: a5:40:29:85 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUFcjgtKp9AJ/uer2x9VYMUptD45swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDQjFBOEZFQ0EzQkE3OTg0QUJEQzAyQURERjMyRTNE MEI5RkFDRTAeFw0yNTA5MTExNjA0MjhaFw0yNjA5MTAxNjA5MjhaMDMxMTAvBgNV BAMTKDBBMkE5QTdFQkFGMTlEMkM3REM2N0RCOEEzRTlBMTEzNERCQUFEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bfCgCsYhKfe5cpzJlFtqqryi UyZVpGu8rRk2nUN6dDBxjvnr31/OSgsZGQovaECDDC/n5P5/JUGNW/DzJYxwIN6d QxVOXS7Qir4CubLiwq3nmRkE/L6pl4KmNrZXY5No5NYMZtXWXS/LQUlxx0jcJitJ dV6Xj7iKx9jnAXzBfCZ4yKbZOXGpnwA8PuuI/F1tcYoPhwg/PMzo/ZTRBhTBjkj9 TdMnKQqa4twUkXQ7lEAmZxIAyMTMrPE9YTFJIIgch77iXqwQfK4x/kAyptPnrQKF FedpeBhIg1hT8Oj/Qn/xj83hD+DScc4NlQQyHB20UoafwRXoqBeX518bhp7hAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUCiqafrrxnSx9xn24o+mhE026rYMwHwYDVR0j BBgwFoAUYMsaj+yjunmEq9wCrd8y49C5+s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM TnIvMC82MENCMUE4RkVDQTNCQTc5ODRBQkRDMDJBRERGMzJFM0QwQjlGQUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQ0IxQThGRUNBM0JBNzk4 NEFCREMwMkFEREYzMkUzRDBCOUZBQ0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAv MzIzODMwMzQzYTMxMzAzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM5 MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACgEEIgwDQYJKoZIhvcNAQELBQADggEBAJG/F5YtaGlh M3AAJ0/OMT5HwfE+RGV5qe0tZC1ls/VVS1xyCOI8aJNAmdYp34HewJzf8fRHihXs 4hSWPMofSPh3OU2n+Cj0OUtNT1LOQA7T8pOq5x+rgzjmEDgExGs15YIl7g1bdA4v SL4yHQYcX88GOvO8AeQ0EBEA6NouN53GllPzyJIEmfcAsSjrV5/w96903r94SaN+ W66H5MxmJ967wgQqPECpg1HYu+9ak/SEHz0jUwrvWxr0HXTkuu5DcM0JpUIRCjnJ JFxvAXiDgMLnBitwIqoCJc3BDwEALG9eth07aosGOjHKII//JAcJG7PCwQUTua6B h+gAuaVAKYU= -----END CERTIFICATE-----Generated at Tue Oct 21 07:59:44 2025 by rpki-client