$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa File: 323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (raw, json) Hash identifier: 8j/HeLXTN7QABRvZKJ23boGelDdIGywzU154pnAFn8g= Subject key identifier: CA:BA:A9:68:72:68:82:AB:BB:12:15:E2:3B:C3:CD:86:91:62:FB:B7 Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Certificate serial: 78A33ABFF2484C9D37A040F516D9314502AA36E7 Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa Signing time: Wed 01 Oct 2025 22:07:08 +0000 ROA not before: Wed 01 Oct 2025 22:02:08 +0000 ROA not after: Wed 30 Sep 2026 22:07:08 +0000 asID: 264936 IP address blocks: 2804:3034:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 02:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a3:3a:bf:f2:48:4c:9d:37:a0:40:f5:16:d9:31:45:02:aa:36:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC Validity Not Before: Oct 1 22:02:08 2025 GMT Not After : Sep 30 22:07:08 2026 GMT Subject: CN=CABAA968726882ABBB1215E23BC3CD869162FBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ab:ad:59:2c:a3:28:f7:68:ac:9e:7d:ae:a1: c2:19:c6:83:39:72:f7:2d:f9:b4:f5:cf:eb:23:4f: 95:44:6e:52:ff:d1:c4:85:44:0c:47:83:55:28:e0: 44:78:1f:b6:b4:22:94:31:0e:8f:0c:95:9b:99:36: 50:05:18:73:f9:1b:7a:27:6e:42:f3:01:b9:bb:79: 2b:1d:1c:1a:61:2d:13:ff:69:c2:f1:1a:78:5b:2b: 5d:7f:b4:20:f6:fc:97:28:2d:97:d7:8d:39:19:42: 92:1c:53:0d:fe:a9:f8:94:5c:8d:4a:0f:cf:5a:df: 70:ec:0d:65:d8:ad:bf:ef:93:d3:30:46:45:57:a6: 19:4c:04:d5:8e:66:a5:1e:46:5c:77:e3:7e:29:8e: 90:56:04:ee:e7:48:18:10:ed:3b:6b:f0:07:ca:5e: 78:eb:d9:d9:4e:fb:8d:b2:02:9d:8d:83:67:52:c4: 43:3e:3a:1f:bd:74:2a:eb:71:3d:31:ce:d0:94:3c: 77:1c:dc:aa:99:70:b1:f1:78:57:94:fb:ab:b8:d8: c6:f2:9b:44:f3:b6:e4:57:de:21:d2:73:0a:d7:73: 46:71:a3:82:1c:39:39:81:92:4d:78:a0:d7:f0:42: 89:55:78:ad:b9:42:9b:de:c7:eb:92:76:21:6b:9e: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:A9:68:72:68:82:AB:BB:12:15:E2:3B:C3:CD:86:91:62:FB:B7 X509v3 Authority Key Identifier: keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:3034:60::/44 Signature Algorithm: sha256WithRSAEncryption 43:50:a5:5f:0d:f1:48:ad:ff:d7:b0:c7:be:f7:f3:9b:ae:c7: 08:e6:2f:fa:c2:b9:1c:d0:39:cc:36:2a:6a:80:86:db:1a:f6: 1b:3d:47:dc:92:58:e6:79:27:43:55:e9:be:b2:f1:f8:0b:85: 31:9d:dd:00:fa:51:74:f4:40:80:79:f7:f5:8d:82:29:c0:91: 4f:db:46:74:6c:14:49:15:e0:38:af:51:1b:d3:f9:86:94:cb: 69:ff:9c:25:7a:83:bc:27:f9:61:8f:c4:3b:7a:4d:06:ff:da: 4e:7a:56:40:1e:d4:88:62:59:dd:2f:17:d1:10:e8:9f:34:34: d8:3b:08:f0:ec:53:14:7a:e5:b1:06:79:5a:ec:2a:0c:a1:58: a8:ff:9b:86:69:86:eb:42:09:87:c7:30:58:1a:83:24:9d:c5: ab:4b:92:81:8c:54:71:a9:c7:d8:bd:04:38:8d:4b:e4:b1:92: 61:f7:f8:8c:fb:d6:0b:55:ce:0a:1e:80:aa:7e:0b:8a:5d:89: e2:d3:c0:82:54:f6:58:78:42:9c:da:d7:f1:52:17:9f:b6:d8: ef:32:38:c2:c5:95:90:f9:80:e3:9e:f2:25:fe:aa:b5:ae:37: 62:e2:48:91:96:1d:2c:09:1c:d8:97:8e:e8:20:b2:87:d3:22: e5:b2:ee:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIUeKM6v/JITJ03oED1FtkxRQKqNucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlBRUVFN0JDQjNEODFFQUFENjFGMDdGNjlBOUIwNTk3 OEY1ODBFQzAeFw0yNTEwMDEyMjAyMDhaFw0yNjA5MzAyMjA3MDhaMDMxMTAvBgNV BAMTKENBQkFBOTY4NzI2ODgyQUJCQjEyMTVFMjNCQzNDRDg2OTE2MkZCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUq61ZLKMo92isnn2uocIZxoM5 cvct+bT1z+sjT5VEblL/0cSFRAxHg1Uo4ER4H7a0IpQxDo8MlZuZNlAFGHP5G3on bkLzAbm7eSsdHBphLRP/acLxGnhbK11/tCD2/JcoLZfXjTkZQpIcUw3+qfiUXI1K D89a33DsDWXYrb/vk9MwRkVXphlMBNWOZqUeRlx3434pjpBWBO7nSBgQ7Ttr8AfK Xnjr2dlO+42yAp2Ng2dSxEM+Oh+9dCrrcT0xztCUPHcc3KqZcLHxeFeU+6u42Mby m0TztuRX3iHScwrXc0Zxo4IcOTmBkk14oNfwQolVeK25Qpvex+uSdiFrntIrAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUyrqpaHJogqu7EhXiO8PNhpFi+7cwHwYDVR0j BBgwFoAU2a7ue8s9geqtYfB/aamwWXj1gOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX UG4vMC9EOUFFRUU3QkNCM0Q4MUVBQUQ2MUYwN0Y2OUE5QjA1OTc4RjU4MEVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QUVFRTdCQ0IzRDgxRUFB RDYxRjA3RjY5QTlCMDU5NzhGNTgwRUMuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv MzIzODMwMzQzYTMzMzAzMzM0M2EzNjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw MzIzNjM0MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQwNABgMA0GCSqGSIb3DQEBCwUAA4IB AQBDUKVfDfFIrf/XsMe+9/ObrscI5i/6wrkc0DnMNipqgIbbGvYbPUfckljmeSdD Vem+svH4C4Uxnd0A+lF09ECAeff1jYIpwJFP20Z0bBRJFeA4r1Eb0/mGlMtp/5wl eoO8J/lhj8Q7ek0G/9pOelZAHtSIYlndLxfREOifNDTYOwjw7FMUeuWxBnla7CoM oVio/5uGaYbrQgmHxzBYGoMkncWrS5KBjFRxqcfYvQQ4jUvksZJh9/iM+9YLVc4K HoCqfguKXYni08CCVPZYeEKc2tfxUhefttjvMjjCxZWQ+YDjnvIl/qq1rjdi4kiR lh0sCRzYl47oILKH0yLlsu4I -----END CERTIFICATE-----Generated at Tue Oct 21 03:10:44 2025 by rpki-client