$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa File: 323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (raw, json) Hash identifier: ULRdKFQGV72yhmWQycLKYIn9mgAvoK/DqNRCUVyrkfE= Subject key identifier: 58:9E:99:4D:7A:1F:1B:8B:D0:56:A4:47:97:AB:CB:B9:8D:49:ED:A8 Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Certificate serial: 4019BBF3D031C829390DB2A39E103FDE5A7FD6FC Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa Signing time: Wed 01 Oct 2025 22:07:08 +0000 ROA not before: Wed 01 Oct 2025 22:02:08 +0000 ROA not after: Wed 30 Sep 2026 22:07:08 +0000 asID: 264936 IP address blocks: 2804:3034:120::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 02:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:19:bb:f3:d0:31:c8:29:39:0d:b2:a3:9e:10:3f:de:5a:7f:d6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Validity Not Before: Oct 1 22:02:08 2025 GMT Not After : Sep 30 22:07:08 2026 GMT Subject: CN=589E994D7A1F1B8BD056A44797ABCBB98D49EDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:9f:63:e4:cc:c6:5e:9b:fa:c6:03:95:65: 94:ea:33:13:d3:53:53:43:2c:04:df:85:fc:96:91: 7b:4e:26:93:42:d0:1d:89:ff:06:4a:bf:92:02:1f: 9d:bf:e0:38:2a:fa:1e:4b:8b:0c:0b:ba:98:07:20: 74:16:54:01:12:8f:c9:12:33:37:ae:5f:af:93:1b: d7:d1:70:c2:d7:79:0c:d6:2a:a5:ce:e7:a4:c4:0a: f0:f5:32:d7:24:b6:99:9c:bb:5b:62:05:fc:f3:a3: 69:6f:89:71:ed:4d:3a:8e:36:9e:f6:54:23:9d:ed: 74:11:02:16:f6:80:8d:9e:6e:d5:9f:ea:d7:5b:6a: 45:55:af:95:1a:e4:c9:d3:3a:59:a3:1f:18:50:83: 27:8b:a3:40:4b:ef:b6:88:4e:78:40:54:a7:c7:94: 31:87:5f:04:09:0b:b4:72:97:9b:49:3f:c7:cf:62: 3c:41:1b:70:4a:5f:23:33:78:c4:fd:27:42:89:1d: ff:f5:dd:10:d2:26:b5:a2:62:9a:5b:ae:da:16:ee: 39:ec:49:ce:8d:ac:25:16:ea:7c:38:97:c3:51:86: 29:22:26:24:20:52:39:dd:e9:2e:b4:79:01:ba:9f: 83:1d:dd:ec:c8:ce:03:a9:53:0f:76:91:9f:67:23: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:99:4D:7A:1F:1B:8B:D0:56:A4:47:97:AB:CB:B9:8D:49:ED:A8 X509v3 Authority Key Identifier: keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3034:120::/43 Signature Algorithm: sha256WithRSAEncryption d0:a1:06:ac:aa:c0:af:17:be:15:f9:b0:4f:a0:79:25:4d:6c: 43:2e:ac:aa:bf:91:d1:00:fe:bd:fa:b3:94:1e:52:9c:ac:8e: 0d:4e:fa:63:81:49:32:5b:50:f9:4c:f1:02:13:d1:5f:b9:95: a2:c4:41:ab:02:8f:53:65:80:d1:9a:86:fe:51:8e:3b:21:ca: d7:7e:22:97:2e:66:e2:cc:14:13:19:1f:ce:8a:5f:55:88:0f: 9c:f4:4b:20:dc:95:c7:41:ff:06:c2:f3:a6:1f:b0:87:0b:7f: d3:b9:fd:2b:a9:cb:73:e0:7e:f4:1a:c1:a3:71:0d:a0:fe:30: 97:1c:54:c6:be:0b:3a:3d:5f:3b:f6:72:b5:98:24:ab:fd:a3: 34:57:8e:59:0c:22:d2:2d:ec:bb:68:fb:2b:b8:cd:0c:a9:2a: 2d:0f:1a:e2:86:5f:09:48:6f:13:c3:d7:b0:3b:16:f2:54:83: f4:9d:fd:4c:44:32:fd:34:c5:41:2b:9c:42:a2:a3:4b:9c:af: e0:f3:65:66:f1:93:89:77:a8:d0:87:de:88:bb:9b:e5:36:94: b8:cc:1b:8e:e6:23:4f:82:94:b9:9a:fc:9b:b7:f6:ec:cd:cd: 15:41:ff:50:48:2b:e2:ba:4a:95:d2:58:59:04:34:8b:19:79: bc:2f:07:ef -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIUQBm789AxyCk5DbKjnhA/3lp/1vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3 OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDhaFw0yNjA5MzAyMjA3MDhaMDMxMTAvBgNV BAMTKDU4OUU5OTREN0ExRjFCOEJEMDU2QTQ0Nzk3QUJDQkI5OEQ0OUVEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHaJ9j5MzGXpv6xgOVZZTqMxPT U1NDLATfhfyWkXtOJpNC0B2J/wZKv5ICH52/4Dgq+h5LiwwLupgHIHQWVAESj8kS MzeuX6+TG9fRcMLXeQzWKqXO56TECvD1Mtcktpmcu1tiBfzzo2lviXHtTTqONp72 VCOd7XQRAhb2gI2ebtWf6tdbakVVr5Ua5MnTOlmjHxhQgyeLo0BL77aITnhAVKfH lDGHXwQJC7Ryl5tJP8fPYjxBG3BKXyMzeMT9J0KJHf/13RDSJrWiYppbrtoW7jns Sc6NrCUW6nw4l8NRhikiJiQgUjnd6S60eQG6n4Md3ezIzgOpUw92kZ9nIy3DAgMB AAGjggJaMIICVjAdBgNVHQ4EFgQUWJ6ZTXofG4vQVqRHl6vLuY1J7agwHwYDVR0j BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMyMzAzYTNhMmYzNDMzMmQzNDMzMjAzZDNl MjAzMjM2MzQzOTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwUoBDA0ASAwDQYJKoZIhvcNAQELBQAD ggEBANChBqyqwK8XvhX5sE+geSVNbEMurKq/kdEA/r36s5QeUpysjg1O+mOBSTJb UPlM8QIT0V+5laLEQasCj1NlgNGahv5Rjjshytd+IpcuZuLMFBMZH86KX1WID5z0 SyDclcdB/wbC86YfsIcLf9O5/Supy3PgfvQawaNxDaD+MJccVMa+Czo9Xzv2crWY JKv9ozRXjlkMItIt7Lto+yu4zQypKi0PGuKGXwlIbxPD17A7FvJUg/Sd/UxEMv00 xUErnEKio0ucr+DzZWbxk4l3qNCH3oi7m+U2lLjMG47mI0+ClLma/Ju39uzNzRVB /1BIK+K6SpXSWFkENIsZebwvB+8= -----END CERTIFICATE-----Generated at Tue Oct 21 03:09:27 2025 by rpki-client