$ rpki-client -vvf rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/323830343a343561633a3a2f33322d3336203d3e20323636393432.roa File: 323830343a343561633a3a2f33322d3336203d3e20323636393432.roa (raw, json) Hash identifier: epG5QJ/O6S8baFQ9Ujnb0MEBfx0ZAk3e+ISXfoAA8cI= Subject key identifier: 67:A3:4A:0E:79:58:F8:85:13:86:A6:AC:96:87:F7:75:EB:09:DE:56 Certificate issuer: /CN=FC4C5F42FBC04552E4E3C983BF541CA60DFFA440 Certificate serial: 5855AC8F747423AC59351AA0A437E8351C2F1B68 Authority key identifier: FC:4C:5F:42:FB:C0:45:52:E4:E3:C9:83:BF:54:1C:A6:0D:FF:A4:40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.cer Subject info access: rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/323830343a343561633a3a2f33322d3336203d3e20323636393432.roa Signing time: Thu 02 Oct 2025 18:09:42 +0000 ROA not before: Thu 02 Oct 2025 18:04:42 +0000 ROA not after: Thu 01 Oct 2026 18:09:42 +0000 asID: 266942 IP address blocks: 2804:45ac::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.crl rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:55:ac:8f:74:74:23:ac:59:35:1a:a0:a4:37:e8:35:1c:2f:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4C5F42FBC04552E4E3C983BF541CA60DFFA440 Validity Not Before: Oct 2 18:04:42 2025 GMT Not After : Oct 1 18:09:42 2026 GMT Subject: CN=67A34A0E7958F8851386A6AC9687F775EB09DE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:d1:ca:08:91:8e:b8:6e:d6:34:92:59:a9: 1e:fb:91:18:06:e4:85:6d:42:7a:29:6b:75:46:e9: ad:09:a4:ad:2d:bd:27:51:d0:e5:98:f5:28:10:df: 08:52:59:bc:a8:d7:1d:ec:73:1d:82:f7:57:16:c6: 1e:52:bf:36:e8:1d:f9:10:0b:e8:8c:a0:44:4a:96: 74:5e:30:51:9a:fe:64:8c:dc:11:fc:47:3e:ee:83: a6:cc:32:e8:e5:8c:ab:8c:ef:02:1e:7a:2b:57:1a: cf:40:5f:1c:8d:28:c2:83:c2:82:bc:3f:24:87:15: d2:01:f7:1a:52:54:09:8c:22:7d:b2:c7:d5:6d:9e: 53:32:45:38:c5:77:01:58:1d:35:88:ac:45:b2:c5: 65:6f:a5:29:e9:e2:2e:d5:06:26:a2:d3:46:a6:30: dc:dd:c5:72:4a:1a:9b:55:ec:7d:6c:d5:17:0c:ed: 3b:8b:9e:80:7d:f6:d7:19:6e:44:42:02:ed:76:17: 41:2e:da:9c:e6:f3:eb:77:37:b0:e4:e8:28:c1:b2: b9:f6:3d:59:c8:ac:c3:fb:8a:4f:a9:d2:60:83:2e: 93:ba:11:fd:05:6e:6c:64:48:d1:ea:49:ab:8e:ec: ef:cc:d3:77:9b:55:db:c3:f7:c6:7c:07:73:b4:c7: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A3:4A:0E:79:58:F8:85:13:86:A6:AC:96:87:F7:75:EB:09:DE:56 X509v3 Authority Key Identifier: keyid:FC:4C:5F:42:FB:C0:45:52:E4:E3:C9:83:BF:54:1C:A6:0D:FF:A4:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/323830343a343561633a3a2f33322d3336203d3e20323636393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:45ac::/32 Signature Algorithm: sha256WithRSAEncryption 8f:58:ec:41:61:f6:d3:76:7f:92:af:1d:14:1e:1d:fa:ba:72: 4a:e6:db:c3:54:30:3c:68:f3:38:da:8d:df:75:e4:ce:24:fc: 32:19:a6:87:d3:1a:f6:1e:59:4e:ef:8e:1a:ef:c3:0c:44:e7: 5c:9f:cb:cf:d6:eb:dc:85:54:31:fe:08:26:bc:e9:ae:e6:6a: 8b:b8:cd:3f:7e:91:32:e9:9e:5d:18:86:1e:a6:ef:54:fd:ef: 95:dc:34:ef:fc:0b:d2:e8:76:ea:88:af:2e:5e:1c:e2:9b:f2: ed:d2:5e:21:df:48:c0:09:c5:96:69:3b:0f:54:c3:25:22:74: 26:95:47:4f:43:cd:4d:ba:c9:8c:cb:77:42:e2:85:3d:46:79: c8:11:f0:b1:25:9f:e4:d6:2a:4e:60:20:9f:d5:37:57:ab:61: 06:76:b5:16:51:8c:ad:69:b2:c5:5f:f0:61:61:f3:da:63:6a: d4:e9:d6:26:11:ca:39:87:cb:fa:d3:d6:a5:f0:3e:a1:6c:ee: 8e:ec:40:b3:4e:ff:e0:77:61:50:fe:c3:f4:f4:5d:22:02:ff: 8d:6e:f5:61:4b:05:69:34:74:c2:6e:97:bd:1f:55:16:ee:b5: 50:8b:af:23:97:db:28:0e:8f:5a:35:62:fa:23:87:66:4f:e2: e3:3b:1d:49 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUWFWsj3R0I6xZNRqgpDfoNRwvG2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QzVGNDJGQkMwNDU1MkU0RTNDOTgzQkY1NDFDQTYw REZGQTQ0MDAeFw0yNTEwMDIxODA0NDJaFw0yNjEwMDExODA5NDJaMDMxMTAvBgNV BAMTKDY3QTM0QTBFNzk1OEY4ODUxMzg2QTZBQzk2ODdGNzc1RUIwOURFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOtHKCJGOuG7WNJJZqR77kRgG 5IVtQnopa3VG6a0JpK0tvSdR0OWY9SgQ3whSWbyo1x3scx2C91cWxh5SvzboHfkQ C+iMoERKlnReMFGa/mSM3BH8Rz7ug6bMMujljKuM7wIeeitXGs9AXxyNKMKDwoK8 PySHFdIB9xpSVAmMIn2yx9VtnlMyRTjFdwFYHTWIrEWyxWVvpSnp4i7VBiai00am MNzdxXJKGptV7H1s1RcM7TuLnoB99tcZbkRCAu12F0Eu2pzm8+t3N7Dk6CjBsrn2 PVnIrMP7ik+p0mCDLpO6Ef0FbmxkSNHqSauO7O/M03ebVdvD98Z8B3O0xz0jAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUZ6NKDnlY+IUThqaslof3desJ3lYwHwYDVR0j BBgwFoAU/ExfQvvARVLk48mDv1Qcpg3/pEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWJ2dDJzTkZHODZua0ZvYXZZOFNVekppY2RjYnNGQzlIUE5UR1R0ZzI3 ajEvMC9GQzRDNUY0MkZCQzA0NTUyRTRFM0M5ODNCRjU0MUNBNjBERkZBNDQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDNEM1RjQyRkJDMDQ1NTJF NEUzQzk4M0JGNTQxQ0E2MERGRkE0NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVidnQyc05GRzg2bmtGb2F2WThTVXpKaWNkY2JzRkM5SFBOVEdUdGcyN2oxLzAv MzIzODMwMzQzYTM0MzU2MTYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM2 MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARFrDANBgkqhkiG9w0BAQsFAAOCAQEAj1jsQWH2 03Z/kq8dFB4d+rpySubbw1QwPGjzONqN33XkziT8Mhmmh9Ma9h5ZTu+OGu/DDETn XJ/Lz9br3IVUMf4IJrzpruZqi7jNP36RMumeXRiGHqbvVP3vldw07/wL0uh26oiv Ll4c4pvy7dJeId9IwAnFlmk7D1TDJSJ0JpVHT0PNTbrJjMt3QuKFPUZ5yBHwsSWf 5NYqTmAgn9U3V6thBna1FlGMrWmyxV/wYWHz2mNq1OnWJhHKOYfL+tPWpfA+oWzu juxAs07/4HdhUP7D9PRdIgL/jW71YUsFaTR0wm6XvR9VFu61UIuvI5fbKA6PWjVi +iOHZk/i4zsdSQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:18:32 2025 by rpki-client