$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d313238203d3e20323639363237.roa File: 323830343a363736633a3a2f33322d313238203d3e20323639363237.roa (raw, json) Hash identifier: qYiZq4oZcM4m30/4A8bDDQKW7GHK6oMM8u6BJgQ1/cQ= Subject key identifier: 38:B0:AE:59:2C:38:D7:5F:9D:62:20:0B:47:D0:43:2F:32:7C:CC:B1 Certificate issuer: /CN=24C0476767C3C7C82C851EA372EA9F4876F63E37 Certificate serial: 457AFC2DCF3EC32C48A0FB13C04F4FABA49D1F32 Authority key identifier: 24:C0:47:67:67:C3:C7:C8:2C:85:1E:A3:72:EA:9F:48:76:F6:3E:37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer Subject info access: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d313238203d3e20323639363237.roa Signing time: Fri 11 Jul 2025 14:13:54 +0000 ROA not before: Fri 11 Jul 2025 14:08:54 +0000 ROA not after: Fri 10 Jul 2026 14:13:54 +0000 asID: 269627 IP address blocks: 2804:676c::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.crl rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7a:fc:2d:cf:3e:c3:2c:48:a0:fb:13:c0:4f:4f:ab:a4:9d:1f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24C0476767C3C7C82C851EA372EA9F4876F63E37 Validity Not Before: Jul 11 14:08:54 2025 GMT Not After : Jul 10 14:13:54 2026 GMT Subject: CN=38B0AE592C38D75F9D62200B47D0432F327CCCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:e9:82:e2:16:2d:fa:85:b8:65:44:01:ba: 34:67:07:b8:d1:f1:4a:2a:b8:87:6c:cf:d3:74:ed: 83:61:10:ba:f1:28:aa:83:c1:77:e3:a4:75:b5:b0: 8c:57:2d:18:f1:fa:c1:90:0c:41:2f:40:c9:15:a1: 48:07:d6:0b:1e:ad:48:2e:17:ef:21:e8:82:17:b9: f6:44:6f:0d:5b:6d:bf:19:7f:42:13:9f:e3:41:14: 67:45:01:0a:ab:e1:23:dc:b5:03:9e:88:32:60:90: 0b:ef:e2:b4:e8:97:cf:94:74:6c:0c:6a:a4:bb:89: c3:91:86:55:aa:83:4e:65:4c:b2:c8:08:e8:37:1f: 2d:d5:a2:4d:69:06:b6:56:75:d7:30:41:8d:47:5a: 6f:0d:85:cf:4b:5f:aa:17:21:f4:7a:16:67:e0:3f: 40:be:6a:d6:b5:c4:95:a0:81:17:9c:29:5a:21:37: 03:bf:f3:41:c5:11:6f:76:07:b4:67:8c:03:a2:98: 5e:41:78:c5:46:63:4d:b3:49:d5:c7:1a:19:ca:ba: 09:41:54:0b:e6:0e:57:8f:7a:0e:d9:35:12:a8:d3: 62:df:29:03:0c:71:70:70:f9:81:a8:f4:ea:1e:35: f2:ce:90:90:9a:d9:7f:b5:08:92:51:0a:63:a3:8c: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B0:AE:59:2C:38:D7:5F:9D:62:20:0B:47:D0:43:2F:32:7C:CC:B1 X509v3 Authority Key Identifier: keyid:24:C0:47:67:67:C3:C7:C8:2C:85:1E:A3:72:EA:9F:48:76:F6:3E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/323830343a363736633a3a2f33322d313238203d3e20323639363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:676c::/32 Signature Algorithm: sha256WithRSAEncryption 2b:06:c2:57:0e:45:01:b8:e2:25:f1:15:31:4f:87:df:06:34: 29:fb:82:da:61:be:39:b8:7c:36:61:c3:fb:ac:91:83:b6:2c: df:74:d4:61:ea:a1:67:ec:d6:d2:60:97:26:dd:90:0f:1a:4e: 9e:28:86:90:20:5a:f6:74:40:c1:e9:0a:47:55:ed:86:e5:9a: 11:6f:b3:84:27:52:58:47:c8:01:3d:30:28:33:a1:22:10:41: 83:98:a7:92:3a:18:55:75:d2:f5:b5:0c:c4:9b:e3:ab:64:01: a7:f5:19:40:76:1d:c2:b3:9c:9f:f4:42:57:6a:67:32:57:f0: 69:aa:ea:bd:9b:bc:c5:c9:a2:c2:57:93:01:e3:c6:40:4d:c0: b0:fd:a3:63:ae:08:5a:9b:04:2b:29:3b:98:09:a6:e6:05:ed: 21:cf:f0:82:10:4b:3f:ce:fa:a9:1f:27:ac:39:4f:a2:9b:6f: 74:32:27:76:9b:ec:60:17:53:34:66:52:dc:b6:62:e0:01:1f: 94:97:6d:05:0c:d3:c6:7c:f8:c4:f4:16:1b:38:41:cc:b5:ef: 3e:c3:19:89:3e:c6:78:7d:47:11:6f:8d:85:b9:d3:2f:48:5b: d2:57:f4:d2:00:d3:05:bc:d5:01:19:c1:1f:4c:c5:c2:64:bd: ba:4a:f9:3d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIURXr8Lc8+wyxIoPsTwE9Pq6SdHzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDMDQ3Njc2N0MzQzdDODJDODUxRUEzNzJFQTlGNDg3 NkY2M0UzNzAeFw0yNTA3MTExNDA4NTRaFw0yNjA3MTAxNDEzNTRaMDMxMTAvBgNV BAMTKDM4QjBBRTU5MkMzOEQ3NUY5RDYyMjAwQjQ3RDA0MzJGMzI3Q0NDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTemC4hYt+oW4ZUQBujRnB7jR 8UoquIdsz9N07YNhELrxKKqDwXfjpHW1sIxXLRjx+sGQDEEvQMkVoUgH1gserUgu F+8h6IIXufZEbw1bbb8Zf0ITn+NBFGdFAQqr4SPctQOeiDJgkAvv4rTol8+UdGwM aqS7icORhlWqg05lTLLICOg3Hy3Vok1pBrZWddcwQY1HWm8Nhc9LX6oXIfR6Fmfg P0C+ata1xJWggRecKVohNwO/80HFEW92B7RnjAOimF5BeMVGY02zSdXHGhnKuglB VAvmDlePeg7ZNRKo02LfKQMMcXBw+YGo9OoeNfLOkJCa2X+1CJJRCmOjjMqVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUOLCuWSw411+dYiALR9BDLzJ8zLEwHwYDVR0j BBgwFoAUJMBHZ2fDx8gshR6jcuqfSHb2PjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGczeGtpYnJDODdOTkY0aFNDSlZlS2lXaXVhbUhyTURIcFdlOHBVenBS em8vMC8yNEMwNDc2NzY3QzNDN0M4MkM4NTFFQTM3MkVBOUY0ODc2RjYzRTM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QzA0NzY3NjdDM0M3Qzgy Qzg1MUVBMzcyRUE5RjQ4NzZGNjNFMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzRnM3hraWJyQzg3Tk5GNGhTQ0pWZUtpV2l1YW1Ick1ESHBXZThwVXpwUnpvLzAv MzIzODMwMzQzYTM2MzczNjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzkzNjMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBGdsMA0GCSqGSIb3DQEBCwUAA4IBAQArBsJX DkUBuOIl8RUxT4ffBjQp+4LaYb45uHw2YcP7rJGDtizfdNRh6qFn7NbSYJcm3ZAP Gk6eKIaQIFr2dEDB6QpHVe2G5ZoRb7OEJ1JYR8gBPTAoM6EiEEGDmKeSOhhVddL1 tQzEm+OrZAGn9RlAdh3Cs5yf9EJXamcyV/Bpquq9m7zFyaLCV5MB48ZATcCw/aNj rghamwQrKTuYCabmBe0hz/CCEEs/zvqpHyesOU+im290Mid2m+xgF1M0ZlLctmLg AR+Ul20FDNPGfPjE9BYbOEHMte8+wxmJPsZ4fUcRb42FudMvSFvSV/TSANMFvNUB GcEfTMXCZL26Svk9 -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:45 2025 by rpki-client