$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa File: 323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa (raw, json) Hash identifier: np0pht6I6awyJtH3iD71bahJNTBootED1EaKcxVVUr0= Subject key identifier: C4:1E:EB:68:0E:3D:CA:C9:5F:02:3B:B3:D7:9A:C3:8C:0A:51:CE:0F Certificate issuer: /CN=B937F473A95655C5D7B945095573D217C3A1DC11 Certificate serial: 75545774397565F6F38B1CB0CDDCE424AF52B7AF Authority key identifier: B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject info access: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa Signing time: Tue 14 Oct 2025 10:56:41 +0000 ROA not before: Tue 14 Oct 2025 10:51:41 +0000 ROA not after: Tue 13 Oct 2026 10:56:41 +0000 asID: 273661 IP address blocks: 2804:8a50:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 08:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:54:57:74:39:75:65:f6:f3:8b:1c:b0:cd:dc:e4:24:af:52:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B937F473A95655C5D7B945095573D217C3A1DC11 Validity Not Before: Oct 14 10:51:41 2025 GMT Not After : Oct 13 10:56:41 2026 GMT Subject: CN=C41EEB680E3DCAC95F023BB3D79AC38C0A51CE0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:bd:df:76:fd:4c:ff:07:0f:0e:2b:a7:4a: 27:60:94:45:ca:da:9c:0e:5a:59:fb:30:cf:02:08: c7:74:cd:89:1e:63:14:37:da:2e:84:1d:80:9d:01: 6e:16:32:4e:49:7d:44:34:61:06:ac:05:08:0d:82: 8a:9c:56:5f:90:6f:87:9c:a9:86:b8:df:e5:94:3e: 0f:1e:1b:5f:d1:35:e4:52:8a:af:43:1f:ac:01:5a: cd:a9:ee:69:d8:e5:69:32:bb:04:ad:f7:f2:ce:77: 5d:10:61:fb:23:94:3b:e0:6b:88:ac:55:7f:78:d7: f5:69:a6:bb:07:1d:4e:ba:27:1d:63:be:f1:81:7c: ac:a8:50:d7:7f:2c:77:3a:34:90:57:2f:09:ec:13: 53:31:c2:20:08:07:96:6a:74:33:5c:5f:92:fe:25: 02:f1:a7:67:9f:86:3f:c3:c8:72:0d:b7:1f:a3:ad: 26:a6:70:54:d3:3e:18:86:fb:19:b7:18:3a:80:1e: 11:e4:4e:d4:8d:28:27:c0:e8:34:74:7f:5b:db:31: e4:b6:1a:52:b8:ec:3d:05:b8:34:00:3e:4e:7b:d7: 36:fa:15:db:80:d1:a0:a6:42:25:57:4d:58:1f:c1: 1c:0f:a0:17:41:62:35:26:9e:07:39:8f:d3:c2:a3: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:EB:68:0E:3D:CA:C9:5F:02:3B:B3:D7:9A:C3:8C:0A:51:CE:0F X509v3 Authority Key Identifier: keyid:B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a383030303a3a2f33332d3333203d3e20323733363631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8a50:8000::/33 Signature Algorithm: sha256WithRSAEncryption 65:f2:44:4a:c3:2a:58:45:fd:9d:5b:5b:52:42:d7:5b:52:34: fe:70:54:a1:f2:13:b5:66:4c:6f:cf:c4:5c:e9:bf:a4:5c:b2: 78:dd:a0:be:3a:d9:56:52:5f:17:a7:fb:0b:c3:c7:9a:1e:3f: bf:47:ee:d5:71:3f:d7:ba:6e:ea:b9:8f:7c:5f:7c:42:7e:bb: 5a:1a:59:37:af:7b:5d:08:a4:a4:6c:7b:5a:a4:20:00:13:e1: 0d:b4:0f:30:58:a3:b0:68:06:9f:b7:a9:af:bd:12:a4:9b:ad: b6:95:f6:26:77:66:4e:06:75:48:73:73:2d:82:d8:18:a2:c2: e9:bf:cd:21:58:a5:36:17:41:e6:35:79:b7:da:07:47:84:8a: 85:f1:fd:f3:37:4b:3d:a7:98:41:e2:1f:7e:93:13:7c:26:4e: b5:8a:da:df:7c:d2:38:0d:e3:f6:f1:98:68:13:10:87:0f:aa: a6:71:44:d2:5f:98:6a:fb:03:9e:9f:a5:cc:b2:66:41:7b:f3: 55:e5:db:1d:4f:5d:3d:8c:c7:cd:19:8f:d5:7e:c4:56:e1:c1: d0:ee:a8:6e:f7:81:aa:95:b1:03:fb:66:a3:8f:e1:a8:61:0b: b5:38:d8:08:91:9f:e9:b5:14:0b:b6:28:91:de:a2:cb:0d:ee: 0e:06:84:b3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUdVRXdDl1ZfbzixywzdzkJK9St68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzN0Y0NzNBOTU2NTVDNUQ3Qjk0NTA5NTU3M0QyMTdD M0ExREMxMTAeFw0yNTEwMTQxMDUxNDFaFw0yNjEwMTMxMDU2NDFaMDMxMTAvBgNV BAMTKEM0MUVFQjY4MEUzRENBQzk1RjAyM0JCM0Q3OUFDMzhDMEE1MUNFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPA73fdv1M/wcPDiunSidglEXK 2pwOWln7MM8CCMd0zYkeYxQ32i6EHYCdAW4WMk5JfUQ0YQasBQgNgoqcVl+Qb4ec qYa43+WUPg8eG1/RNeRSiq9DH6wBWs2p7mnY5WkyuwSt9/LOd10QYfsjlDvga4is VX941/VpprsHHU66Jx1jvvGBfKyoUNd/LHc6NJBXLwnsE1MxwiAIB5ZqdDNcX5L+ JQLxp2efhj/DyHINtx+jrSamcFTTPhiG+xm3GDqAHhHkTtSNKCfA6DR0f1vbMeS2 GlK47D0FuDQAPk571zb6FduA0aCmQiVXTVgfwRwPoBdBYjUmngc5j9PCo5hPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUxB7raA49yslfAjuz15rDjApRzg8wHwYDVR0j BBgwFoAUuTf0c6lWVcXXuUUJVXPSF8Oh3BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHZSNjVpRThzZmp3N3RVYmZnUlh3eUJkTFB4TTdydGFGNDRla2R3U3Rz MzMvMC9COTM3RjQ3M0E5NTY1NUM1RDdCOTQ1MDk1NTczRDIxN0MzQTFEQzExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MzdGNDczQTk1NjU1QzVE N0I5NDUwOTU1NzNEMjE3QzNBMURDMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzR2UjY1aUU4c2Zqdzd0VWJmZ1JYd3lCZExQeE03cnRhRjQ0ZWtkd1N0czMzLzAv MzIzODMwMzQzYTM4NjEzNTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEilCAMA0GCSqGSIb3DQEBCwUA A4IBAQBl8kRKwypYRf2dW1tSQtdbUjT+cFSh8hO1Zkxvz8Rc6b+kXLJ43aC+OtlW Ul8Xp/sLw8eaHj+/R+7VcT/Xum7quY98X3xCfrtaGlk3r3tdCKSkbHtapCAAE+EN tA8wWKOwaAaft6mvvRKkm622lfYmd2ZOBnVIc3MtgtgYosLpv80hWKU2F0HmNXm3 2gdHhIqF8f3zN0s9p5hB4h9+kxN8Jk61itrffNI4DeP28ZhoExCHD6qmcUTSX5hq +wOen6XMsmZBe/NV5dsdT109jMfNGY/VfsRW4cHQ7qhu94GqlbED+2ajj+GoYQu1 ONgIkZ/ptRQLtiiR3qLLDe4OBoSz -----END CERTIFICATE-----Generated at Tue Oct 21 09:38:19 2025 by rpki-client