$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa File: 323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa (raw, json) Hash identifier: dqdT0Z2X2ujGOU5wllrriRCiSwGcK/M1ZPuIhoxu7I0= Subject key identifier: 53:4E:09:E7:A0:31:A6:6C:27:5B:F7:8A:94:C3:AD:59:F6:AA:3B:5B Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 40F6371DCC1E2F7D183A913CA9FFFAEEC5BE7695 Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa Signing time: Tue 02 Sep 2025 20:04:06 +0000 ROA not before: Tue 02 Sep 2025 19:59:06 +0000 ROA not after: Tue 01 Sep 2026 20:04:06 +0000 asID: 273457 IP address blocks: 2804:8ef0:2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 18:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f6:37:1d:cc:1e:2f:7d:18:3a:91:3c:a9:ff:fa:ee:c5:be:76:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Sep 2 19:59:06 2025 GMT Not After : Sep 1 20:04:06 2026 GMT Subject: CN=534E09E7A031A66C275BF78A94C3AD59F6AA3B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:e7:5f:d6:09:2d:24:4b:93:ba:38:04:41: d5:f3:75:c5:b1:64:78:bb:c4:0c:56:d0:e7:13:60: b8:e7:b6:17:41:95:67:f3:b3:cb:26:ce:83:53:7a: ec:37:75:d5:7b:c3:fd:8b:36:6f:c8:b2:41:be:46: 68:a5:d4:a8:16:28:e1:d0:8a:ba:6f:ca:09:0c:19: ea:29:e6:3b:b1:c3:23:1a:8e:d1:83:a9:41:eb:e2: 2c:4d:5e:bc:75:84:1d:dd:62:c2:95:ff:7c:a5:00: 43:64:be:2c:c4:3e:3e:f7:37:14:bb:f7:56:c4:ce: f3:c9:4d:7c:52:98:3b:04:de:02:6b:8b:20:9d:bf: 6b:8a:23:2e:61:97:74:b5:14:be:cd:4c:c5:59:66: 60:9c:28:7d:a9:18:1f:98:3f:88:0e:52:11:b3:42: a8:b1:77:51:fd:02:66:3d:0f:98:2c:82:6c:ef:88: 4b:96:e1:df:22:5a:f3:a0:0e:b5:fe:ce:3d:0e:f6: db:0f:c6:f1:ee:6c:55:39:a2:21:21:7c:98:f1:8f: be:64:2c:ef:19:54:89:4d:5c:91:0b:d3:4c:1a:50: bd:20:61:9d:97:42:63:9f:7f:02:13:8f:f9:5b:29: 94:d5:54:3a:62:b1:b9:e5:4a:c6:87:f5:9c:dc:5d: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:09:E7:A0:31:A6:6C:27:5B:F7:8A:94:C3:AD:59:F6:AA:3B:5B X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8ef0:2::/47 Signature Algorithm: sha256WithRSAEncryption 9e:d4:d0:83:a8:2d:60:04:e2:df:f7:07:96:32:ae:af:be:7b: c2:52:7d:11:dd:b9:c6:03:7f:05:24:90:01:c2:0e:a5:1c:36: 7f:88:3f:3c:8c:15:ff:8b:9c:f9:32:e5:e3:22:4a:ca:d5:f9: b4:b9:12:03:93:ad:98:d7:78:96:d0:fa:1a:ee:40:75:61:4b: f3:8e:56:9e:17:4c:55:0d:61:0f:d4:79:a6:11:46:ea:c3:92: d4:97:12:f2:2d:1e:5f:55:af:42:c9:07:f9:1b:cb:4e:60:17: 04:e9:0f:d4:34:01:32:b2:15:cb:81:2f:5f:e0:3d:8c:c2:36: c4:d7:f2:a3:56:07:d4:e7:d0:a2:aa:19:80:32:4e:49:0f:e2: 18:2a:9e:20:af:6e:49:f5:40:f0:00:42:99:69:8e:c6:ad:e2: 1e:ea:06:e7:ea:f9:92:f2:1f:7d:09:b5:84:fc:28:42:02:bd: 58:0f:c8:f2:35:b7:40:3c:62:5f:87:19:fd:c8:d4:97:ef:28: 8b:a4:e6:30:25:dd:95:1d:d8:8c:35:70:64:7d:66:d3:fa:6b: bb:58:6a:c3:ad:41:e2:8d:3a:b0:6e:9a:6c:9c:9c:a9:ba:58: 71:b4:0b:39:79:5d:98:07:dd:54:50:a6:55:43:43:2e:d5:a6: 0f:83:39:d2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUQPY3HcweL30YOpE8qf/67sW+dpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTA5MDIxOTU5MDZaFw0yNjA5MDEyMDA0MDZaMDMxMTAvBgNV BAMTKDUzNEUwOUU3QTAzMUE2NkMyNzVCRjc4QTk0QzNBRDU5RjZBQTNCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQ+df1gktJEuTujgEQdXzdcWx ZHi7xAxW0OcTYLjnthdBlWfzs8smzoNTeuw3ddV7w/2LNm/IskG+Rmil1KgWKOHQ irpvygkMGeop5juxwyMajtGDqUHr4ixNXrx1hB3dYsKV/3ylAENkvizEPj73NxS7 91bEzvPJTXxSmDsE3gJriyCdv2uKIy5hl3S1FL7NTMVZZmCcKH2pGB+YP4gOUhGz Qqixd1H9AmY9D5gsgmzviEuW4d8iWvOgDrX+zj0O9tsPxvHubFU5oiEhfJjxj75k LO8ZVIlNXJEL00waUL0gYZ2XQmOffwITj/lbKZTVVDpisbnlSsaH9ZzcXWQvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUU04J56AxpmwnW/eKlMOtWfaqO1swHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzVkUGZ1UkVQVEJ0dE1xUW9wVHl0cG5pS2hFM0xIZEZzemF2RFpNQmM1MlVtLzEv MzIzODMwMzQzYTM4NjU2NjMwM2EzMjNhM2EyZjM0MzcyZDM0MzcyMDNkM2UyMDMy MzczMzM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHASgEjvAAAjANBgkqhkiG9w0BAQsFAAOCAQEA ntTQg6gtYATi3/cHljKur757wlJ9Ed25xgN/BSSQAcIOpRw2f4g/PIwV/4uc+TLl 4yJKytX5tLkSA5OtmNd4ltD6Gu5AdWFL845WnhdMVQ1hD9R5phFG6sOS1JcS8i0e X1WvQskH+RvLTmAXBOkP1DQBMrIVy4EvX+A9jMI2xNfyo1YH1OfQoqoZgDJOSQ/i GCqeIK9uSfVA8ABCmWmOxq3iHuoG5+r5kvIffQm1hPwoQgK9WA/I8jW3QDxiX4cZ /cjUl+8oi6TmMCXdlR3YjDVwZH1m0/pru1hqw61B4o06sG6abJycqbpYcbQLOXld mAfdVFCmVUNDLtWmD4M50g== -----END CERTIFICATE-----Generated at Tue Oct 21 05:07:26 2025 by rpki-client