$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa File: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (raw, json) Hash identifier: oH0zhdTzdOCeBZCkbJRb+h1ytVO1ihmSo9HnvMwSx9c= Subject key identifier: B5:98:A7:3C:F8:FB:5D:12:03:A2:F6:D3:2F:61:04:47:06:9E:B9:99 Certificate issuer: /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Certificate serial: 2989F01DF2BAE07D458966C3088CCC06A8458608 Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject info access: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa Signing time: Mon 22 Sep 2025 13:51:12 +0000 ROA not before: Mon 22 Sep 2025 13:46:12 +0000 ROA not after: Mon 21 Sep 2026 13:51:12 +0000 asID: 266309 IP address blocks: 2804:35d4:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 03:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:89:f0:1d:f2:ba:e0:7d:45:89:66:c3:08:8c:cc:06:a8:45:86:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Validity Not Before: Sep 22 13:46:12 2025 GMT Not After : Sep 21 13:51:12 2026 GMT Subject: CN=B598A73CF8FB5D1203A2F6D32F610447069EB999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:83:ff:48:9b:d7:5b:19:b6:3a:89:ae:3c: 82:68:b6:fa:1c:d4:e8:53:39:7f:9c:05:da:19:a8: 1a:fd:17:c5:5e:50:5d:0c:94:5f:cd:04:d3:bd:03: 1b:98:19:6f:93:76:88:0f:4a:9c:b7:2b:0a:91:14: 91:1f:c2:a5:4b:39:c2:84:c2:b8:4d:72:87:5e:fa: 28:e0:f4:02:9a:8b:ba:c9:d7:b8:f5:74:74:5f:2e: ca:18:cf:fd:1a:69:61:ea:54:7f:c8:a3:63:43:17: 15:55:42:eb:85:7f:7c:f1:e7:d9:29:6f:b5:ea:a6: ef:9b:ab:a0:8a:a3:01:ce:19:78:b7:80:dc:c0:09: 92:7f:13:08:32:d4:ec:ea:d8:8a:e3:62:6c:a7:3c: 4e:fa:f4:f6:be:07:20:75:af:21:eb:c0:e7:f0:91: a1:17:89:60:85:4e:30:6e:f4:ff:09:40:4f:5c:d4: 9b:1d:d4:34:f0:73:23:dc:72:49:7c:fd:cf:62:5f: 02:67:58:2f:b7:51:7b:f7:c5:16:c1:71:15:74:c4: e6:45:ed:3d:a6:a7:70:0b:74:31:05:42:aa:8b:85: 89:75:13:c8:5b:34:43:45:8c:f4:52:b8:10:bd:d7: 7d:83:12:20:16:9f:a0:23:fe:df:91:35:e8:c9:ac: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:A7:3C:F8:FB:5D:12:03:A2:F6:D3:2F:61:04:47:06:9E:B9:99 X509v3 Authority Key Identifier: keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:35d4:8000::/33 Signature Algorithm: sha256WithRSAEncryption 32:2f:84:de:da:77:fb:2c:54:cb:f6:5c:55:64:2d:e2:ad:b8: 4c:d9:db:70:56:a0:ea:c4:6d:bf:49:9b:ea:bf:05:55:77:47: a1:53:75:32:29:30:ca:4a:f5:16:34:c1:75:16:fa:2a:8e:f2: 9d:25:12:2d:55:09:c1:20:29:01:3d:1f:f9:37:78:77:0c:67: cf:63:a6:70:c0:96:21:a9:51:82:2a:d3:a4:b2:b3:24:31:0d: 81:bf:ca:87:88:23:5e:c5:ae:0e:f7:c5:70:8e:ad:5e:14:b6: 88:d9:41:c0:ca:04:56:c2:0e:0d:79:e7:e2:75:dd:3e:17:ae: 76:3d:1b:fd:49:eb:a6:e7:1e:68:99:67:df:64:f0:15:a0:ad: ed:66:7c:15:81:82:d4:68:a9:d8:2e:dd:a4:d9:41:cf:81:47: 84:f4:a4:2a:3c:f2:7c:a0:bd:b3:ee:2f:22:dc:79:13:b6:be: 5e:4d:da:38:d7:e5:e4:61:da:58:e3:31:fa:b2:20:7b:82:f5: c1:5c:ff:c5:b5:87:d3:1c:c2:2c:df:8f:15:11:49:40:7b:94: 6e:5c:c6:04:ee:d4:49:23:ce:78:3a:5a:46:06:cb:32:29:be: 8a:60:e8:4c:a3:c6:c3:b6:e6:41:91:03:c7:9c:26:58:47:f2: ce:1d:cd:be -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKYnwHfK64H1FiWbDCIzMBqhFhggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3 NzM0M0M3NjAeFw0yNTA5MjIxMzQ2MTJaFw0yNjA5MjExMzUxMTJaMDMxMTAvBgNV BAMTKEI1OThBNzNDRjhGQjVEMTIwM0EyRjZEMzJGNjEwNDQ3MDY5RUI5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwYP/SJvXWxm2OomuPIJotvoc 1OhTOX+cBdoZqBr9F8VeUF0MlF/NBNO9AxuYGW+TdogPSpy3KwqRFJEfwqVLOcKE wrhNcode+ijg9AKai7rJ17j1dHRfLsoYz/0aaWHqVH/Io2NDFxVVQuuFf3zx59kp b7Xqpu+bq6CKowHOGXi3gNzACZJ/Ewgy1Ozq2IrjYmynPE769Pa+ByB1ryHrwOfw kaEXiWCFTjBu9P8JQE9c1Jsd1DTwcyPcckl8/c9iXwJnWC+3UXv3xRbBcRV0xOZF 7T2mp3ALdDEFQqqLhYl1E8hbNENFjPRSuBC9132DEiAWn6Aj/t+RNejJrBUrAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUtZinPPj7XRIDovbTL2EERwaeuZkwHwYDVR0j BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVhRm84WWtWcTg1Rk5vNXo3dm9RQXJaMkx3RkNwN0d4ajYxM2VIOFBucXo5LzAv MzIzODMwMzQzYTMzMzU2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzYzNjMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENdSAMA0GCSqGSIb3DQEBCwUA A4IBAQAyL4Te2nf7LFTL9lxVZC3irbhM2dtwVqDqxG2/SZvqvwVVd0ehU3UyKTDK SvUWNMF1FvoqjvKdJRItVQnBICkBPR/5N3h3DGfPY6ZwwJYhqVGCKtOksrMkMQ2B v8qHiCNexa4O98Vwjq1eFLaI2UHAygRWwg4Neefidd0+F652PRv9Seum5x5omWff ZPAVoK3tZnwVgYLUaKnYLt2k2UHPgUeE9KQqPPJ8oL2z7i8i3HkTtr5eTdo41+Xk YdpY4zH6siB7gvXBXP/FtYfTHMIs348VEUlAe5RuXMYE7tRJI854OlpGBssyKb6K YOhMo8bDtuZBkQPHnCZYR/LOHc2+ -----END CERTIFICATE-----Generated at Tue Oct 21 11:34:22 2025 by rpki-client