$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa File: 323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (raw, json) Hash identifier: du2RqbrUq8a6d9I0RbUhkw5MuzDLs85TgscUZ10vLUw= Subject key identifier: D3:80:14:BF:F7:CF:0F:CC:E5:B5:D9:F8:56:AA:C7:46:9C:FB:2C:62 Certificate issuer: /CN=870F31E28EB6835FE94CC62D908989A74790CB3E Certificate serial: 520182834AC0D3166256B87FA8D9103AAEC9347F Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa Signing time: Tue 12 Aug 2025 19:55:29 +0000 ROA not before: Tue 12 Aug 2025 19:50:29 +0000 ROA not after: Tue 11 Aug 2026 19:55:29 +0000 asID: 269175 IP address blocks: 2804:1f4c:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 Aug 2025 01:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:01:82:83:4a:c0:d3:16:62:56:b8:7f:a8:d9:10:3a:ae:c9:34:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E Validity Not Before: Aug 12 19:50:29 2025 GMT Not After : Aug 11 19:55:29 2026 GMT Subject: CN=D38014BFF7CF0FCCE5B5D9F856AAC7469CFB2C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:10:f6:0d:0c:ef:77:7f:c4:b9:9d:4b:e1:eb: b1:d2:65:0d:54:ad:2a:58:82:d3:f7:f9:cb:ea:e9: d0:a9:61:db:41:bf:ac:9c:9d:a6:05:c1:11:4a:5e: af:03:91:3a:5d:29:6c:26:e9:b4:3b:8f:aa:07:2a: 7b:c8:d1:7a:4c:38:90:4f:04:d8:83:2b:b3:69:c1: b0:41:9b:0d:7a:38:f9:d9:a8:42:15:2f:0c:ff:13: e2:dc:c3:e2:85:ed:db:aa:7a:a8:43:e8:32:63:66: ca:7b:7c:90:86:57:fe:37:be:b4:da:51:81:7a:00: ba:9f:31:6e:99:7a:d6:cf:58:32:92:2b:b6:73:89: e3:43:c9:d1:50:56:2a:80:c5:ee:5d:53:9d:08:66: 2d:d9:50:05:c0:b0:c1:c2:b6:ef:08:c1:bb:50:67: 74:c3:d1:82:be:26:d1:37:2b:e4:c5:4e:25:c2:49: f8:0e:a8:97:4b:0b:41:33:cf:dc:95:6a:db:c6:97: ab:6a:b5:f6:cd:4f:8b:7b:5f:b1:10:00:74:b2:c6: 98:a9:fe:e0:55:76:4b:10:d8:ff:df:1d:5d:6e:05: d1:d4:98:84:37:69:b2:64:ba:7e:54:d8:22:c9:35: de:9d:f6:9f:54:75:20:04:76:9e:05:5d:c6:48:51: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:14:BF:F7:CF:0F:CC:E5:B5:D9:F8:56:AA:C7:46:9C:FB:2C:62 X509v3 Authority Key Identifier: keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:1f4c:8000::/33 Signature Algorithm: sha256WithRSAEncryption 8f:00:46:4e:4c:f7:15:f5:ff:d4:67:6f:f1:22:12:ed:df:bb: 74:a1:cc:50:90:ca:87:f6:70:9b:c4:8d:ae:bb:c8:dd:9b:1a: a1:74:4d:05:d1:0c:d9:6e:54:c2:74:4d:15:46:d0:4d:7f:84: f2:05:49:8a:01:d8:23:99:86:8a:49:e5:42:4f:4e:fd:7b:46: f1:53:aa:d4:f0:59:a0:fb:52:92:73:62:27:76:f8:1e:3c:e9: 9e:fe:59:55:de:2b:5f:3a:e6:2a:1a:07:82:17:14:51:60:56: be:86:b3:79:32:02:c7:d5:e9:9b:df:f6:13:1f:89:cd:ce:05: f4:19:7c:50:26:14:8f:ec:c8:5c:ba:80:8d:4d:e1:7c:5c:71: e8:18:8c:23:16:5e:6a:87:37:0d:af:34:51:23:e2:ad:2b:11: bf:5b:d3:ba:6f:76:32:a5:dc:76:f4:c0:12:f7:be:33:3e:a4: 5f:75:1b:1b:49:48:da:f3:f5:ed:51:d6:50:ef:3a:21:18:ae: a0:15:3f:5c:38:f4:f1:cd:0e:fb:7a:10:db:ee:27:fd:2c:4a: c4:ef:2b:79:70:5c:75:c2:9c:a4:8f:f7:c6:10:d2:f8:d5:b0: 2f:6b:8d:68:87:3c:fa:64:e6:d4:57:54:30:ce:99:f1:ab:9a: 3c:d8:b5:e7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUUgGCg0rA0xZiVrh/qNkQOq7JNH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwRjMxRTI4RUI2ODM1RkU5NENDNjJEOTA4OTg5QTc0 NzkwQ0IzRTAeFw0yNTA4MTIxOTUwMjlaFw0yNjA4MTExOTU1MjlaMDMxMTAvBgNV BAMTKEQzODAxNEJGRjdDRjBGQ0NFNUI1RDlGODU2QUFDNzQ2OUNGQjJDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+EPYNDO93f8S5nUvh67HSZQ1U rSpYgtP3+cvq6dCpYdtBv6ycnaYFwRFKXq8DkTpdKWwm6bQ7j6oHKnvI0XpMOJBP BNiDK7NpwbBBmw16OPnZqEIVLwz/E+Lcw+KF7duqeqhD6DJjZsp7fJCGV/43vrTa UYF6ALqfMW6ZetbPWDKSK7ZzieNDydFQViqAxe5dU50IZi3ZUAXAsMHCtu8IwbtQ Z3TD0YK+JtE3K+TFTiXCSfgOqJdLC0Ezz9yVatvGl6tqtfbNT4t7X7EQAHSyxpip /uBVdksQ2P/fHV1uBdHUmIQ3abJkun5U2CLJNd6d9p9UdSAEdp4FXcZIUa8JAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU04AUv/fPD8zltdn4VqrHRpz7LGIwHwYDVR0j BBgwFoAUhw8x4o62g1/pTMYtkImJp0eQyz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq dEgvMC84NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEYzMUUyOEVCNjgzNUZF OTRDQzYyRDkwODk4OUE3NDc5MENCM0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv MzIzODMwMzQzYTMxNjYzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzOTMxMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEH0yAMA0GCSqGSIb3DQEBCwUA A4IBAQCPAEZOTPcV9f/UZ2/xIhLt37t0ocxQkMqH9nCbxI2uu8jdmxqhdE0F0QzZ blTCdE0VRtBNf4TyBUmKAdgjmYaKSeVCT079e0bxU6rU8Fmg+1KSc2IndvgePOme /llV3itfOuYqGgeCFxRRYFa+hrN5MgLH1emb3/YTH4nNzgX0GXxQJhSP7MhcuoCN TeF8XHHoGIwjFl5qhzcNrzRRI+KtKxG/W9O6b3Yypdx29MAS974zPqRfdRsbSUja 8/XtUdZQ7zohGK6gFT9cOPTxzQ77ehDb7if9LErE7yt5cFx1wpykj/fGENL41bAv a41ohzz6ZObUV1Qwzpnxq5o82LXn -----END CERTIFICATE-----Generated at Sun Aug 24 08:51:41 2025 by rpki-client