$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa File: 323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json) Hash identifier: 1cGHWxaawvDe6HW1U9BbrQbgQNoAxNOOeJl8cBd/hn8= Subject key identifier: 33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29 Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Certificate serial: 2E1ABE2CBDD9C2039E00DC6437CA7E2105B0FE04 Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa Signing time: Wed 01 Oct 2025 22:07:09 +0000 ROA not before: Wed 01 Oct 2025 22:02:09 +0000 ROA not after: Wed 30 Sep 2026 22:07:09 +0000 asID: 264936 IP address blocks: 2804:3034:50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 04:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1a:be:2c:bd:d9:c2:03:9e:00:dc:64:37:ca:7e:21:05:b0:fe:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Validity Not Before: Oct 1 22:02:09 2025 GMT Not After : Sep 30 22:07:09 2026 GMT Subject: CN=33779A33F54C4D60C0D0BA944EC9935DF6C16F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:c8:a6:ce:12:75:40:4d:d5:e2:ac:f8:22: 2b:86:5b:2d:26:2c:5b:6c:2a:85:1e:6e:6f:8e:ad: b8:d5:08:1d:90:db:50:0d:50:9b:e8:d6:94:49:b2: 96:6a:0e:cc:de:41:0e:15:70:b5:a2:b8:ff:5f:a4: 23:7b:26:9a:09:d1:52:3d:94:a7:56:08:b0:41:72: c7:b9:bc:62:eb:6d:25:0e:b3:3f:a9:ee:e2:5d:cc: 0e:04:fc:ff:90:1c:08:32:1e:4d:58:41:78:4e:19: 62:f6:01:e6:6f:e4:01:cd:fb:b5:4d:2c:79:94:4f: a9:88:7d:db:6a:df:e3:e9:9a:f3:1c:cb:e8:60:9d: 3d:06:f4:f6:21:3f:d6:8f:40:44:ce:ce:31:4e:1b: e7:82:c9:d4:89:bf:8c:d8:d7:17:39:d6:77:61:8a: 80:58:37:54:0c:81:ce:a4:af:51:2d:c9:e0:50:db: a2:b1:ed:9d:37:a4:38:db:1f:b7:68:a4:0a:e1:1e: dd:aa:c3:b9:ec:c7:a8:86:2c:cf:5d:ff:5d:02:cf: be:71:a9:15:33:28:55:23:c8:96:a0:1e:b5:f8:5b: 27:4c:b7:c9:81:fe:8e:c7:19:ac:69:da:b0:a2:bb: 81:b0:a6:f8:b9:5c:87:a7:c6:d1:f3:a4:d0:bb:a8: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:9A:33:F5:4C:4D:60:C0:D0:BA:94:4E:C9:93:5D:F6:C1:6F:29 X509v3 Authority Key Identifier: keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3034:50::/44 Signature Algorithm: sha256WithRSAEncryption 94:b9:e0:09:a0:e1:8c:a1:7a:56:fd:a0:6f:5e:83:30:c9:03: d8:40:a4:65:d9:b4:9b:6e:8f:47:ab:17:89:6d:85:a5:4f:82: eb:3a:19:9d:cf:0a:b9:64:98:9e:75:06:31:1b:c0:42:36:c9: 25:ef:45:11:dc:e8:b0:d4:43:f8:43:b7:55:9c:fd:a5:c1:4d: 0b:96:f9:0a:ad:d0:11:d3:26:f3:b1:ff:67:16:e4:08:27:da: 35:c8:ff:2a:96:79:ed:cd:da:78:d1:f2:e7:48:a4:be:62:a2: 17:ed:10:54:5b:b3:d4:22:ff:2b:6d:8d:46:43:64:2a:f5:c7: 23:b6:73:04:38:b5:d7:9f:56:e6:ae:c4:e1:a6:28:d2:7d:71: 56:2e:f2:d0:c8:82:49:8f:87:b7:a2:9b:3d:63:3d:8f:6f:83: f7:78:51:9f:ba:5c:00:94:e3:e1:a7:13:fe:ec:c6:d2:8f:60: 7c:5e:af:70:2f:dd:31:cd:1e:6c:57:33:63:c2:4b:66:42:27: 5b:ae:b5:be:81:19:02:eb:87:47:a8:0d:b8:d6:21:b2:eb:4a: e4:39:71:ae:c5:80:92:e8:e7:7b:38:97:20:d7:41:b1:1b:ee: 81:c5:00:a0:26:1c:08:dd:79:37:e6:2c:2d:31:f9:3b:c0:cc: 4e:e4:48:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIULhq+LL3ZwgOeANxkN8p+IQWw/gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3 OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDlaFw0yNjA5MzAyMjA3MDlaMDMxMTAvBgNV BAMTKDMzNzc5QTMzRjU0QzRENjBDMEQwQkE5NDRFQzk5MzVERjZDMTZGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAMimzhJ1QE3V4qz4IiuGWy0m LFtsKoUebm+OrbjVCB2Q21ANUJvo1pRJspZqDszeQQ4VcLWiuP9fpCN7JpoJ0VI9 lKdWCLBBcse5vGLrbSUOsz+p7uJdzA4E/P+QHAgyHk1YQXhOGWL2AeZv5AHN+7VN LHmUT6mIfdtq3+PpmvMcy+hgnT0G9PYhP9aPQETOzjFOG+eCydSJv4zY1xc51ndh ioBYN1QMgc6kr1EtyeBQ26Kx7Z03pDjbH7dopArhHt2qw7nsx6iGLM9d/10Cz75x qRUzKFUjyJagHrX4WydMt8mB/o7HGaxp2rCiu4Gwpvi5XIenxtHzpNC7qC3lAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUM3eaM/VMTWDA0LqUTsmTXfbBbykwHwYDVR0j BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv MzIzODMwMzQzYTMzMzAzMzM0M2EzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw MzIzNjM0MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQwNABQMA0GCSqGSIb3DQEBCwUAA4IB AQCUueAJoOGMoXpW/aBvXoMwyQPYQKRl2bSbbo9HqxeJbYWlT4LrOhmdzwq5ZJie dQYxG8BCNskl70UR3Oiw1EP4Q7dVnP2lwU0LlvkKrdAR0ybzsf9nFuQIJ9o1yP8q lnntzdp40fLnSKS+YqIX7RBUW7PUIv8rbY1GQ2Qq9ccjtnMEOLXXn1bmrsThpijS fXFWLvLQyIJJj4e3ops9Yz2Pb4P3eFGfulwAlOPhpxP+7MbSj2B8Xq9wL90xzR5s VzNjwktmQidbrrW+gRkC64dHqA241iGy60rkOXGuxYCS6Od7OJcg10GxG+6BxQCg JhwI3Xk35iwtMfk7wMxO5EjU -----END CERTIFICATE-----Generated at Tue Oct 21 05:57:16 2025 by rpki-client