$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa File: 323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (raw, json) Hash identifier: 3R8kQO/57ycbDe7iGhmerO4JStX3on1FfVvd3ujiDtk= Subject key identifier: 0C:A7:BA:E3:6A:BE:23:AA:53:B0:6E:19:1F:6C:C7:8A:E5:F8:77:36 Certificate issuer: /CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8 Certificate serial: 280B101A31DF093FBA424D2F2618898402A91FD8 Authority key identifier: D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa Signing time: Thu 28 Aug 2025 19:48:33 +0000 ROA not before: Thu 28 Aug 2025 19:43:33 +0000 ROA not after: Thu 27 Aug 2026 19:48:33 +0000 asID: 273713 IP address blocks: 2804:8b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.crl rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0b:10:1a:31:df:09:3f:ba:42:4d:2f:26:18:89:84:02:a9:1f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8 Validity Not Before: Aug 28 19:43:33 2025 GMT Not After : Aug 27 19:48:33 2026 GMT Subject: CN=0CA7BAE36ABE23AA53B06E191F6CC78AE5F87736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b5:38:8a:87:f1:9f:a3:98:9a:9c:c3:28:41: 02:c3:71:3f:d2:82:db:78:69:35:ca:30:06:a3:33: bf:3c:fe:4b:3c:8c:da:54:33:43:3d:46:d2:ef:9a: e9:8f:7e:0a:14:2f:c9:b4:3c:69:72:98:2a:b7:68: 1c:27:85:9e:81:aa:3f:54:80:6a:31:f0:f8:88:fd: b0:a4:14:a1:6e:79:bb:68:46:44:25:a5:c6:a0:4a: 07:0e:25:d8:40:60:b8:1d:56:a5:94:3a:6d:42:51: dd:89:53:c9:ad:31:df:06:10:8e:6f:9b:6e:17:62: 84:d2:5d:fc:e8:a7:df:ba:51:90:d1:23:24:a3:df: d3:16:10:2b:c0:02:a1:8e:6e:dc:4c:82:1a:9c:70: 85:b3:62:0e:e5:8d:5f:0b:99:d7:0a:bd:93:97:83: 38:1e:dc:ac:f1:9f:cb:de:76:31:b8:f3:f9:5a:9f: 74:54:d0:0c:e5:e4:f4:e8:0f:1c:7a:5f:29:a6:41: e2:8c:74:e7:77:cd:1f:db:d5:3f:3f:9d:40:07:75: e9:80:da:98:c2:a2:f9:25:c8:23:2c:d6:49:f0:b8: 31:32:b3:12:49:e2:9c:45:d8:22:5e:bb:ea:69:29: 83:27:f7:22:c1:d8:eb:76:7b:59:87:5d:e0:20:8d: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:BA:E3:6A:BE:23:AA:53:B0:6E:19:1F:6C:C7:8A:E5:F8:77:36 X509v3 Authority Key Identifier: keyid:D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8b20::/32 Signature Algorithm: sha256WithRSAEncryption 82:d8:02:a5:f0:9c:35:8c:d6:14:a1:62:7d:02:07:98:16:8e: 23:30:08:42:45:a3:2a:be:5e:0a:31:78:59:47:60:f4:9a:f6: c7:bf:76:1b:02:de:33:c8:7e:63:19:82:82:bb:2d:38:dc:0a: 25:25:2c:18:f2:8f:c1:6e:b8:0d:4a:c3:9a:f7:20:71:2d:56: 38:8f:0a:46:2f:87:ac:1b:23:15:4b:05:b5:e4:07:26:77:d9: 4a:9c:01:cb:ac:01:90:e5:43:11:fc:21:19:a6:d5:48:ba:2d: ce:72:59:b6:ac:bf:40:16:5c:b8:24:31:a2:77:48:40:86:42: 23:dd:39:a6:33:6e:16:42:08:e3:fb:27:d7:49:2e:3d:29:44: 91:09:09:60:ab:6d:63:80:ef:1c:08:37:2e:4f:3e:18:e1:61: 7b:28:78:e0:63:1d:6f:ed:d0:e4:f0:07:18:42:44:89:4f:e2: 20:71:a8:8c:36:52:38:0f:df:a5:08:dd:30:63:e0:a1:0c:74: dc:6f:9c:35:b2:0b:a0:f4:d5:c2:c6:89:83:d0:4b:bb:b2:98: 69:52:26:03:4f:65:0b:11:9a:24:6f:a4:36:83:5d:8c:fe:1e: 9c:eb:df:d2:8a:2e:20:50:80:56:bb:d0:b2:b6:5c:cb:ee:d7: a6:40:fb:70 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUKAsQGjHfCT+6Qk0vJhiJhAKpH9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2QzJCRTMyQzZFRTM1RDI1NTM1NURBNUFERjI1Nzk4 MkU0ODZGODAeFw0yNTA4MjgxOTQzMzNaFw0yNjA4MjcxOTQ4MzNaMDMxMTAvBgNV BAMTKDBDQTdCQUUzNkFCRTIzQUE1M0IwNkUxOTFGNkNDNzhBRTVGODc3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtTiKh/Gfo5ianMMoQQLDcT/S gtt4aTXKMAajM788/ks8jNpUM0M9RtLvmumPfgoUL8m0PGlymCq3aBwnhZ6Bqj9U gGox8PiI/bCkFKFuebtoRkQlpcagSgcOJdhAYLgdVqWUOm1CUd2JU8mtMd8GEI5v m24XYoTSXfzop9+6UZDRIySj39MWECvAAqGObtxMghqccIWzYg7ljV8LmdcKvZOX gzge3Kzxn8vedjG48/lan3RU0Azl5PToDxx6XymmQeKMdOd3zR/b1T8/nUAHdemA 2pjCovklyCMs1knwuDEysxJJ4pxF2CJeu+ppKYMn9yLB2Ot2e1mHXeAgjQsDAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUDKe642q+I6pTsG4ZH2zHiuX4dzYwHwYDVR0j BBgwFoAU1Gwr4yxu410lU1XaWt8leYLkhvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1 NlovMC9ENDZDMkJFMzJDNkVFMzVEMjU1MzU1REE1QURGMjU3OTgyRTQ4NkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NkMyQkUzMkM2RUUzNUQy NTUzNTVEQTVBREYyNTc5ODJFNDg2RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRjbVRTMUhjdVlSQmNkdmlKYng3WWFEckRxREE4VUFQRmp3UEs1RnVVdTZaLzAv MzIzODMwMzQzYTM4NjIzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASLIDANBgkqhkiG9w0BAQsFAAOCAQEAgtgCpfCc NYzWFKFifQIHmBaOIzAIQkWjKr5eCjF4WUdg9Jr2x792GwLeM8h+YxmCgrstONwK JSUsGPKPwW64DUrDmvcgcS1WOI8KRi+HrBsjFUsFteQHJnfZSpwBy6wBkOVDEfwh GabVSLotznJZtqy/QBZcuCQxondIQIZCI905pjNuFkII4/sn10kuPSlEkQkJYKtt Y4DvHAg3Lk8+GOFheyh44GMdb+3Q5PAHGEJEiU/iIHGojDZSOA/fpQjdMGPgoQx0 3G+cNbILoPTVwsaJg9BLu7KYaVImA09lCxGaJG+kNoNdjP4enOvf0oouIFCAVrvQ srZcy+7XpkD7cA== -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:52 2025 by rpki-client