$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa File: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (raw, json) Hash identifier: IMbAQjtKNKCBxCPVMOT2Ftgk2dkbemX5qfuR0h3xEhI= Subject key identifier: FC:87:0E:85:C5:C4:72:E4:99:F9:1A:05:EC:36:F8:52:0E:48:73:D5 Certificate issuer: /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Certificate serial: 6FF2DA918C64504F02738862401159482A1AD67B Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject info access: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa Signing time: Mon 22 Sep 2025 13:51:11 +0000 ROA not before: Mon 22 Sep 2025 13:46:11 +0000 ROA not after: Mon 21 Sep 2026 13:51:11 +0000 asID: 266309 IP address blocks: 2804:35d4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 03:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f2:da:91:8c:64:50:4f:02:73:88:62:40:11:59:48:2a:1a:d6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Validity Not Before: Sep 22 13:46:11 2025 GMT Not After : Sep 21 13:51:11 2026 GMT Subject: CN=FC870E85C5C472E499F91A05EC36F8520E4873D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:84:08:a3:a9:82:3a:0e:fc:6a:60:aa:6e: 4c:e3:ca:4c:35:27:71:df:00:2d:a5:2d:51:55:a6: 59:2d:38:b4:9d:dc:d2:10:89:77:06:a3:da:97:df: 81:29:c0:66:0a:74:9d:8d:3e:3c:f6:5f:5b:72:33: 6c:ff:e4:f3:e4:21:c2:86:3c:28:3f:29:a9:f2:6b: 46:f4:a6:6c:e4:1a:e1:fe:b7:ca:2d:9b:5e:21:05: 73:15:5f:f1:68:de:aa:a8:54:da:19:9e:4a:4d:5e: 5e:e1:dd:4f:9f:0a:8f:ff:15:ad:08:3b:ad:02:03: 79:40:05:81:bc:ef:dc:be:a3:1f:a2:62:19:ec:99: 52:93:bc:3b:64:61:bb:14:ed:2f:f3:ca:b9:cc:cb: 74:8c:eb:70:5d:d5:af:e3:e8:df:b0:92:4b:a4:35: 3f:72:39:4a:e6:95:3b:3d:3a:13:f9:c3:55:eb:7e: 12:09:c6:97:39:a3:5e:c8:bd:a2:0e:b9:e8:db:0d: e0:39:13:f9:ea:49:6d:dd:15:76:ed:c3:30:40:9e: 91:cd:0f:80:b0:c6:88:57:c4:e2:94:15:f4:b5:c9: fd:22:43:b4:e2:aa:ff:07:55:cc:ef:08:c4:0a:67: 1e:57:9c:94:5e:a6:e2:91:3f:1c:91:23:f9:41:9f: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:0E:85:C5:C4:72:E4:99:F9:1A:05:EC:36:F8:52:0E:48:73:D5 X509v3 Authority Key Identifier: keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:35d4::/32 Signature Algorithm: sha256WithRSAEncryption 4e:25:e2:fc:bf:60:fb:3c:3b:9c:5b:4e:02:f7:8e:b0:9e:83: dc:81:59:90:9f:ef:62:cf:a8:4b:a7:ee:d4:f2:bf:8e:e3:5b: 6f:9e:77:3d:6a:72:a6:41:00:aa:f4:45:d6:d4:b5:52:b0:06: 0a:19:08:5b:0f:23:61:7e:e4:3d:2e:91:87:ff:fd:81:89:ae: ad:ee:09:ec:8b:ee:7d:5a:66:8a:69:d3:5b:25:29:67:e5:84: 6a:3b:00:0d:9c:c5:60:df:4d:bc:5c:b3:2d:46:d7:75:27:b5: c2:55:20:f0:e2:6e:d6:39:5a:50:63:c3:06:38:d8:2d:7b:bc: 40:e2:05:8b:d5:fa:0f:72:cc:d1:70:d7:56:5d:f0:35:db:aa: b6:f3:3b:23:d0:e1:0d:55:23:f9:5d:d3:14:73:81:c5:81:70: 5e:d0:c7:5e:1d:a5:2b:ff:70:7e:f6:b3:0f:15:42:2b:69:f9: 3f:26:eb:2b:17:5b:cc:9f:1f:7f:e0:3a:71:f6:97:43:90:28: e6:a5:6a:c8:5f:6e:26:f9:80:92:1c:5f:00:09:1d:af:83:59: f8:0b:f9:b2:2c:65:b8:02:97:bf:a7:7f:c6:0c:c6:9c:90:9b: 20:44:4c:a9:25:60:8b:56:3b:7a:b2:2a:48:0c:c5:ad:73:f1: ab:9f:04:67 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUb/LakYxkUE8Cc4hiQBFZSCoa1nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3 NzM0M0M3NjAeFw0yNTA5MjIxMzQ2MTFaFw0yNjA5MjExMzUxMTFaMDMxMTAvBgNV BAMTKEZDODcwRTg1QzVDNDcyRTQ5OUY5MUEwNUVDMzZGODUyMEU0ODczRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+YQIo6mCOg78amCqbkzjykw1 J3HfAC2lLVFVplktOLSd3NIQiXcGo9qX34EpwGYKdJ2NPjz2X1tyM2z/5PPkIcKG PCg/Kanya0b0pmzkGuH+t8otm14hBXMVX/Fo3qqoVNoZnkpNXl7h3U+fCo//Fa0I O60CA3lABYG879y+ox+iYhnsmVKTvDtkYbsU7S/zyrnMy3SM63Bd1a/j6N+wkkuk NT9yOUrmlTs9OhP5w1XrfhIJxpc5o17IvaIOuejbDeA5E/nqSW3dFXbtwzBAnpHN D4CwxohXxOKUFfS1yf0iQ7Tiqv8HVczvCMQKZx5XnJRepuKRPxyRI/lBn63VAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQU/IcOhcXEcuSZ+RoF7Db4Ug5Ic9UwHwYDVR0j BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVhRm84WWtWcTg1Rk5vNXo3dm9RQXJaMkx3RkNwN0d4ajYxM2VIOFBucXo5LzAv MzIzODMwMzQzYTMzMzU2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2 MzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKAQ11DANBgkqhkiG9w0BAQsFAAOCAQEATiXi/L9g +zw7nFtOAveOsJ6D3IFZkJ/vYs+oS6fu1PK/juNbb553PWpypkEAqvRF1tS1UrAG ChkIWw8jYX7kPS6Rh//9gYmure4J7IvufVpmimnTWyUpZ+WEajsADZzFYN9NvFyz LUbXdSe1wlUg8OJu1jlaUGPDBjjYLXu8QOIFi9X6D3LM0XDXVl3wNduqtvM7I9Dh DVUj+V3TFHOBxYFwXtDHXh2lK/9wfvazDxVCK2n5PybrKxdbzJ8ff+A6cfaXQ5Ao 5qVqyF9uJvmAkhxfAAkdr4NZ+Av5sixluAKXv6d/xgzGnJCbIERMqSVgi1Y7erIq SAzFrXPxq58EZw== -----END CERTIFICATE-----Generated at Tue Oct 21 11:38:15 2025 by rpki-client